Using public functions only might be an issue:
vb21_unpack_key -> vb2_unpack_key_buffer = NO API
vb21_verify_data -> vb2_verify_data = NO API

Would using vb2_init_hash() work to replace these?

vb2_digest_buffer NO API

security/vboot is using this function also. Will security/vboot be modified using API function only?

Hi Frans,

Actually, the functions vb2_digest_buffer, vb2_digest_init, vb2_digest_extend, vb2_digest_finalize etc. are all available through including the <vb2_sha.h> header file. They don't include the vb2api_ prefix, but they are still considered a public API.

We could open up APIs for vb2_unpack_key (vb2api_unpack_key), and for vb2_verify_digest (vb2api_verify_digest), the latter of which would allocate its own workbuf (an internal vboot structure).

Is Eltan still willing to move over to vboot 2 data structures at this point, or are you locked into vboot 2.1?

View Change

To view, visit change 37654. To unsubscribe, or for help writing mail filters, visit settings.