[coreboot-gerrit] Change in coreboot[master]: vboot: Fix wrong algorithm in TCPA log for BOOT_MODE

[Andrey Pronin (Code Review)]

Andrey Pronin has posted comments on this change. ( https://review.coreboot.org/c/coreboot/+/35645 )

Change subject: vboot: Fix wrong algorithm in TCPA log for BOOT_MODE
......................................................................

Patch Set 2:

(1 comment)

https://review.coreboot.org/c/coreboot/+/35645/2//COMMIT_MSG 
Commit Message:

https://review.coreboot.org/c/coreboot/+/35645/2//COMMIT_MSG@13 
PS2, Line 13: BOOT_MODE.
> The TCPA log should always log the thing that was actually sent to the TPM, and the algorithm in the log should match the actual TPM bank it was written to. So SHA256 for this.

I support this approach for TPM2.0. It looks though that with always-SHA256 we break TPM1.2 case. There TCPA log should contain SHA1 (there are no banks, and what we extend is a 20-byte SHA1 digest).