Re: [PATCH v7 12/21] tpm: Add NULL primary creation

2024-04-02 Thread Ken Goldman
On 3/31/2024 12:52 PM, Gabríel Arthúr Pétursson wrote: The TPM specifications have a standardized set of templates for the Endorsement Keys, and a recommendation on a template to create/provision the shared SRK. The original TCG guidance document for an SRK used arrays of zeros for the unique

Re: Issue with TPM2 Encrypt/Decrypt Functionality and TSS API Integration

2024-03-25 Thread Ken Goldman
This indicates that the TSS is trying to connect to a TPM over a socket interface. This is typical for a software TPM aka a TPM simulator. I suspect that you do not have a TPM simulator running. On 3/5/2024 5:31 PM, Samuel Lee wrote: # tsscreateprimary -hi p -st -opu primary.pub

Re: Issue with TPM2 Encrypt/Decrypt Functionality and TSS API Integration

2024-03-25 Thread Ken Goldman
The TPM 2.0 Library specification is a library of possible functions. A platform specific specification (e.g., PC Client) specifies which commands are mandatory. I assume that the TPM you are using does not implement TPM2 Encrypt/Decrypt. In general, check the platform specific specification

Re: [ima-evm-utils: PATCH v1 1/1] Change license to LGPL-2.0-or-later and GPL-2.0-or-later

2024-02-23 Thread Ken Goldman
licenses, in particular GPL3-only. To address this issue, change the project license to GPL-2.0-or-later and libimaevm to LGPL 2.0 or later. Signed-off-by: Dmitry Kasatkin Acked-by: Ken Goldman

Re: [RFC][PATCH] ima: add crypto agility support for template-hash algorithm

2023-12-26 Thread Ken Goldman
On 12/25/2023 8:00 AM, Guozihua (Scott) wrote: After thinking about this some more, I realized that we didn't discuss carrying the measurement list across kexec. How will the kexec'ed kernel be able to differentiate between the original and new measurement list? Neither the Kconfig nor

Re: Linux IMA documentation

2023-09-20 Thread Ken Goldman
On 9/13/2023 10:16 AM, Roberto Sassu wrote: I think your document is a good candidate for being put in Documentation/admin-guide/LSM/, once my patch set is upstreamed: https://lore.kernel.org/linux-integrity/20230904133415.1799503-1-roberto.sa...@huaweicloud.com/ Isn't the documentation