1) Backlog review https://github.com/orgs/tianocore/projects/10/views/1
No new issues. 2) Old issue refresh 2.1) https://github.com/tianocore/edk2/issues/12561 ( https://github.com/tianocore/edk2/issues/12561 ) Review https://github.com/Flickdm/UEFI-Specification-Release/pull/1 Changing "classic" to "traditional" seems good. Suggest to remove "pre-quantum" *AR: Doug* to remove "pre-quantum". 2.2) https://github.com/tianocore/edk2/issues/12706 Review https://github.com/jyao1/UEFI-Specification-Release/pull/19 Done. 2.3) https://github.com/tianocore/edk2/issues/12688 There is concern that old IEIT does not consider multiple signatures case well and it also brings ambiguity. We might want to update some data structure to make it clear. *Conclusion* : *AR: Doug* to remove existing IETT, together with AuditMode removal. *AR: Joey/ Doug* to introduce a new table (e.g. Image Execution Log Table) to meet EU-CRA requirement. 3) Some idea for image verification https://github.com/microsoft/mu_basecore/pull/1809 ( https://github.com/microsoft/mu_basecore/pull/1809 ) Joey update https://github.com/microsoft/mu_basecore/pull/1809#issuecomment-4937530999 It seems people has different idea on the DB based trust anchor, e.g. verification order (DBX first v.s. DB first), OpenSSL API for trust anchor, TBS-hash use case, etc. NOTE that current EDK2 implementation does NOT support DB based trust anchor. Joey shared test case for different scenario - https://github.com/Javagedes/mu_basecore/blob/personal/joeyvagedes/securitypkg-image-validation/SecurityPkg/Test/ShellTest/ImageValidationTestApp/Scenarios.c *Summary* : A. No clear consensus on now. B. DB Trust anchor is added to https://github.com/jyao1/UEFI-Specification-Release/pull/1/. We might need to revisit. C. We need to list all valid scenario and corner cases, to discuss what makes sense. D. Once we reach agreement, we should update UEFI spec with normative sentence as requirement, and informative examples from test cases. *AR: All* to review the test cases listed above, and bring feedback to the next meeting. 4) Update spec plan We hope to finish discussion in the next 2 meetings in July, then bring topic to USST/USWG in August. Thank you Yao, Jiewen -=-=-=-=-=-=-=-=-=-=-=- Groups.io Links: You receive all messages sent to this group. View/Reply Online (#122039): https://edk2.groups.io/g/devel/message/122039 Mute This Topic: https://groups.io/mt/120293685/21656 Group Owner: [email protected] Unsubscribe: https://edk2.groups.io/g/devel/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
