1) Code First Process improvement Mike is still working on it. Waiting for permission from UEFI Admin.
2) Old issue refresh https://github.com/tianocore/edk2/issues/12561 *AR: Doug* will prepare the patch 3) About ImageVerificationLib Jiewen posted feedback to https://github.com/microsoft/mu_basecore/pull/1809#issuecomment-4667351703. 2 corner cases needs to be handled. 4) edk2-crypto redesign for OneCrypto No update. 5) Open: Which OIDs we should support for PKCS7? Current UEFI spec refer to Authenticode spec. Does it mean that UEFI firmware needs to support all listed algorithm? This is current list supported by OpenSSL. OID Algorithm Source 1 1.2.840.113549.1.1.4 md5WithRSA 2 1.2.840.113549.1.1.5 sha1WithRSA 3 1.2.840.113549.1.1.11 sha256WithRSA 4 1.2.840.113549.1.1.12 sha384WithRSA 5 1.2.840.113549.1.1.13 sha512WithRSA 6 1.2.840.113549.1.1.14 sha224WithRSA 7 1.2.840.10045.4.1 ecdsa-with-SHA1 8 1.2.840.10045.4.3.1 ecdsa-with-SHA224 9 1.2.840.10045.4.3.2 ecdsa-with-SHA256 10 1.2.840.10045.4.3.3 ecdsa-with-SHA384 11 1.2.840.10045.4.3.4 ecdsa-with-SHA512 12 2.16.840.1.101.3.4.3.17 ML-DSA-44 13 2.16.840.1.101.3.4.3.18 ML-DSA-65 14 2.16.840.1.101.3.4.3.19 ML-DSA-87 The new Microsoft PE/COFF Authenticode spec will describe a list of supported OID. It only means that Microsoft signing tool will guarantee to support the algorithm listed. An new algorithm is allowed to be added by the implementation. An existing algorithm (esp the deprecated legacy algo) is allowed to be disabled by the implementation. It seems to be EDKII platform choice on how many of them will be supported by a platform firmware. For example, an implementation may configure OpenSSL to disable some of them (SHA1, ECC), or put a filter in the EDK2 wrapper. And we also need to consider how to support more algorithms later. *AR: Doug* submit a new EDK2 issue. We can discuss there. -=-=-=-=-=-=-=-=-=-=-=- Groups.io Links: You receive all messages sent to this group. View/Reply Online (#121993): https://edk2.groups.io/g/devel/message/121993 Mute This Topic: https://groups.io/mt/119751146/21656 Group Owner: [email protected] Unsubscribe: https://edk2.groups.io/g/devel/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
