Re: [PATCH v12 11/20] key_protector: Add TPM2 Key Protector

2024-04-22 Thread Gary Lin via Grub-devel
On Fri, Apr 19, 2024 at 08:23:44AM -0400, James Bottomley wrote: > On Fri, 2024-04-19 at 16:30 +0800, Gary Lin wrote: > >    TPMKey ::= SEQUENCE { > > type    OBJECT IDENTIFIER > > emptyAuth   [0] EXPLICIT BOOLEAN OPTIONAL > > policy  [1] EXPLICIT SEQUENCE OF TPMPolicy OPTION

Re: [PATCH v12 11/20] key_protector: Add TPM2 Key Protector

2024-04-19 Thread James Bottomley
On Fri, 2024-04-19 at 16:30 +0800, Gary Lin wrote: >    TPMKey ::= SEQUENCE { > type    OBJECT IDENTIFIER > emptyAuth   [0] EXPLICIT BOOLEAN OPTIONAL > policy  [1] EXPLICIT SEQUENCE OF TPMPolicy OPTIONAL > secret  [2] EXPLICIT OCTET STRING OPTIONAL > authPolicy 

[PATCH v12 11/20] key_protector: Add TPM2 Key Protector

2024-04-19 Thread Gary Lin via Grub-devel
From: Hernan Gatta The TPM2 key protector is a module that enables the automatic retrieval of a fully-encrypted disk's unlocking key from a TPM 2.0. The theory of operation is such that the module accepts various arguments, most of which are optional and therefore possess reasonable defaults. On