Comment # 1 on bug 917427 from Andrei Borzenkov

Yes, secure boot is using statically built grub binary that disables module
loading and does not include crypto support. Do you have the possibility to
test updated version (you will need to enroll grub key from
/usr/lib64/efi/grub.der)?