Re: [PATCH v11 11/20] key_protector: Add TPM2 Key Protector

2024-04-15 Thread Gary Lin via Grub-devel
On Fri, Apr 12, 2024 at 02:57:42PM -0400, Stefan Berger wrote: > > > On 4/12/24 04:39, Gary Lin via Grub-devel wrote: > > From: Hernan Gatta > > > > The TPM2 key protector is a module that enables the automatic retrieval > > of a fully-encrypted disk's unlocking key from a TPM 2.0. > > A few m

Re: [PATCH v11 11/20] key_protector: Add TPM2 Key Protector

2024-04-12 Thread Stefan Berger
On 4/12/24 04:39, Gary Lin via Grub-devel wrote: From: Hernan Gatta The TPM2 key protector is a module that enables the automatic retrieval of a fully-encrypted disk's unlocking key from a TPM 2.0. A few minor finds/comments below. The theory of operation is such that the module accepts

[PATCH v11 11/20] key_protector: Add TPM2 Key Protector

2024-04-12 Thread Gary Lin via Grub-devel
From: Hernan Gatta The TPM2 key protector is a module that enables the automatic retrieval of a fully-encrypted disk's unlocking key from a TPM 2.0. The theory of operation is such that the module accepts various arguments, most of which are optional and therefore possess reasonable defaults. On