I understand the approach of decopupling measured boot from vboot in order to support other use cases. What I don't understand is why we need to extend measurements from the TCPA log into the TPM. If the measurements are done before? BTW it took me months to get my stuff merged in the past. I went on a vacation for a week and we don't have time to wait for another?

View Change

1 comment:

• File src/security/tpm/tspi/log.c:

  • Patch Set #72, Line 115: int result = tlcl_extend(tce->pcr,

    Please explain me why we need to extend measurements which are already extended into a TPM again by using the unsafe and optional TCPA log?

To view, visit change 35077. To unsubscribe, or for help writing mail filters, visit settings.