On Mon, Nov 11, 2013 at 12:07 PM, Ingo Molnar <[email protected]> wrote: > > * H. Peter Anvin <[email protected]> wrote: > >> Of course, perhaps we could just hash struct boot_params as a starting >> point? > > Yeah, that would be a good first step, before trying to parse DMI or ACPI. > Anything that is reasonably system dependent and gives at least some > amount of unpredicability.
Given the very limited nature of the early boot environment, what would you recommend for the hashing routine itself? There's nothing in boot/ that does any kind of "real" crypto hashing. Should I just XOR the entire contents of boot_params together? -Kees -- Kees Cook Chrome OS Security -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to [email protected] More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
