Issue #421 has been updated by Sergii Dmytruk.

Julius Werner wrote in #note-10:
> I still feel strongly that we shouldn't overcomplicate APIs

It would actually simplify the API by making parameter lists shorter and input 
data better grouped.

> increase maintenance burden by implementing options that nobody has a use 
> case for right now and likely never will.

`skiboot` writes both SHA1 and SHA256 hashes to TPM2 log. I didn't count it as 
a use case because so far we were using TPM1.2, but it does show existence of 
logs with multiple hashes in the wild.

----------------------------------------
Cleanup #421: Change API of functions taking hash as an argument
https://ticket.coreboot.org/issues/421#change-1208

* Author: Krystian Hebel
* Status: New
* Priority: Normal
* Target version: none
* Start date: 2022-10-12
----------------------------------------
All existing functions that take a digest as an input assume that only one 
hashing algorithm is used at a time. Crypto agile format entry can (and should) 
log every used PCR bank in one entry for a given measurement. To make it work, 
some of the arguments must be changed, e.g.:

- pass number of algorithms used;
- instead of algorithm ID, pass a pointer to array of such IDs, with size equal 
to above;
- instead of hash, pass a pointer to array of hashes, with size and order as 
above.



-- 
You have received this notification because you have either subscribed to it, 
or are involved in it.
To change your notification preferences, please click here: 
https://ticket.coreboot.org/my/account
_______________________________________________
coreboot mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to