Re: [PATCH 2/5] efi_loader: add secure boot variable measurement

2021-07-08 Thread Masahisa Kojima
On Fri, 9 Jul 2021 at 02:46, Heinrich Schuchardt wrote: > > On 7/7/21 3:36 PM, Masahisa Kojima wrote: > > TCG PC Client PFP spec requires to measure the secure > > boot policy before validating the UEFI image. > > This commit adds the secure boot variable measurement > > of "SecureBoot", "PK", "KE

Re: [PATCH 2/5] efi_loader: add secure boot variable measurement

2021-07-08 Thread Heinrich Schuchardt
On 7/7/21 3:36 PM, Masahisa Kojima wrote: TCG PC Client PFP spec requires to measure the secure boot policy before validating the UEFI image. This commit adds the secure boot variable measurement of "SecureBoot", "PK", "KEK", "db" and "dbx". Note that this implementation assumes that secure boot

Re: [PATCH 2/5] efi_loader: add secure boot variable measurement

2021-07-07 Thread Ilias Apalodimas
On Wed, Jul 07, 2021 at 11:49:33AM -0600, Simon Glass wrote: > Hi Ilias, > > On Wed, 7 Jul 2021 at 11:40, Ilias Apalodimas > wrote: > > > > Hi Simon, > > > > On Wed, Jul 07, 2021 at 11:37:01AM -0600, Simon Glass wrote: > > > Hi Masahisa, > > > > > > On Wed, 7 Jul 2021 at 07:36, Masahisa Kojima

Re: [PATCH 2/5] efi_loader: add secure boot variable measurement

2021-07-07 Thread Simon Glass
Hi Ilias, On Wed, 7 Jul 2021 at 11:40, Ilias Apalodimas wrote: > > Hi Simon, > > On Wed, Jul 07, 2021 at 11:37:01AM -0600, Simon Glass wrote: > > Hi Masahisa, > > > > On Wed, 7 Jul 2021 at 07:36, Masahisa Kojima > > wrote: > > > > > > TCG PC Client PFP spec requires to measure the secure > > >

Re: [PATCH 2/5] efi_loader: add secure boot variable measurement

2021-07-07 Thread Ilias Apalodimas
Hi Simon, On Wed, Jul 07, 2021 at 11:37:01AM -0600, Simon Glass wrote: > Hi Masahisa, > > On Wed, 7 Jul 2021 at 07:36, Masahisa Kojima > wrote: > > > > TCG PC Client PFP spec requires to measure the secure > > boot policy before validating the UEFI image. > > This commit adds the secure boot v

Re: [PATCH 2/5] efi_loader: add secure boot variable measurement

2021-07-07 Thread Simon Glass
Hi Masahisa, On Wed, 7 Jul 2021 at 07:36, Masahisa Kojima wrote: > > TCG PC Client PFP spec requires to measure the secure > boot policy before validating the UEFI image. > This commit adds the secure boot variable measurement > of "SecureBoot", "PK", "KEK", "db" and "dbx". > > Note that this imp

[PATCH 2/5] efi_loader: add secure boot variable measurement

2021-07-07 Thread Masahisa Kojima
TCG PC Client PFP spec requires to measure the secure boot policy before validating the UEFI image. This commit adds the secure boot variable measurement of "SecureBoot", "PK", "KEK", "db" and "dbx". Note that this implementation assumes that secure boot variables are pre-configured and not be set