1) Code First Process improvement

Mike is still working on it. Waiting for permission from UEFI Admin.

2) Old issue refresh

https://github.com/tianocore/edk2/issues/12561

*AR: Doug* will prepare the patch

3) About ImageVerificationLib

Jiewen posted feedback to 
https://github.com/microsoft/mu_basecore/pull/1809#issuecomment-4667351703. 2 
corner cases needs to be handled.

4) edk2-crypto redesign for OneCrypto

No update.

5) Open: Which OIDs we should support for PKCS7?

Current UEFI spec refer to Authenticode spec. Does it mean that UEFI firmware 
needs to support all listed algorithm?

This is current list supported by OpenSSL.
OID    Algorithm    Source
1    1.2.840.113549.1.1.4    md5WithRSA
2    1.2.840.113549.1.1.5    sha1WithRSA
3    1.2.840.113549.1.1.11    sha256WithRSA
4    1.2.840.113549.1.1.12    sha384WithRSA
5    1.2.840.113549.1.1.13    sha512WithRSA
6    1.2.840.113549.1.1.14    sha224WithRSA
7    1.2.840.10045.4.1    ecdsa-with-SHA1
8    1.2.840.10045.4.3.1    ecdsa-with-SHA224
9    1.2.840.10045.4.3.2    ecdsa-with-SHA256
10    1.2.840.10045.4.3.3    ecdsa-with-SHA384
11    1.2.840.10045.4.3.4    ecdsa-with-SHA512
12    2.16.840.1.101.3.4.3.17    ML-DSA-44
13    2.16.840.1.101.3.4.3.18    ML-DSA-65
14    2.16.840.1.101.3.4.3.19    ML-DSA-87

The new Microsoft PE/COFF Authenticode spec will describe a list of supported 
OID. It only means that Microsoft signing tool will guarantee to support the 
algorithm listed.
An new algorithm is allowed to be added by the implementation.
An existing algorithm (esp the deprecated legacy algo) is allowed to be 
disabled by the implementation.

It seems to be EDKII platform choice on how many of them will be supported by a 
platform firmware.
For example, an implementation may configure OpenSSL to disable some of them 
(SHA1, ECC), or put a filter in the EDK2 wrapper.
And we also need to consider how to support more algorithms later.

*AR: Doug* submit a new EDK2 issue. We can discuss there.


-=-=-=-=-=-=-=-=-=-=-=-
Groups.io Links: You receive all messages sent to this group.
View/Reply Online (#121993): https://edk2.groups.io/g/devel/message/121993
Mute This Topic: https://groups.io/mt/119751146/21656
Group Owner: [email protected]
Unsubscribe: https://edk2.groups.io/g/devel/unsub [[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-


Reply via email to