Philipp Deppenwiese has uploaded this change for review. ( https://review.coreboot.org/c/coreboot/+/48741 )
Change subject: security/vboot: Fix boot mode pcr hash type ......................................................................
security/vboot: Fix boot mode pcr hash type
* coreboot hardcodes hash algorithms for TPMs * input hash now shows the right event log hash type
Change-Id: I99f97d8a65084cac5ccdf39e860e77a9ed782323 Signed-off-by: Philipp Deppenwiese zaolin@das-labor.org --- M src/security/vboot/tpm_common.c 1 file changed, 1 insertion(+), 1 deletion(-)
git pull ssh://review.coreboot.org:29418/coreboot refs/changes/41/48741/1
diff --git a/src/security/vboot/tpm_common.c b/src/security/vboot/tpm_common.c index 0a211c5..1db7189 100644 --- a/src/security/vboot/tpm_common.c +++ b/src/security/vboot/tpm_common.c @@ -46,7 +46,7 @@ switch (which_digest) { /* SHA1 of (devmode|recmode|keyblock) bits */ case BOOT_MODE_PCR: - return tpm_extend_pcr(pcr, VB2_HASH_SHA256, buffer, size, + return tpm_extend_pcr(pcr, VB2_HASH_SHA1, buffer, size, TPM_PCR_BOOT_MODE); /* SHA256 of HWID */ case HWID_DIGEST_PCR:
Philipp Deppenwiese has abandoned this change. ( https://review.coreboot.org/c/coreboot/+/48741 )
Change subject: security/vboot: Fix boot mode pcr hash type ......................................................................
Abandoned