Thomas Way 336aee0fdb

fix: use tpm2 hash algorithm constants and allow non-SHA-256 PCRs ...

The conversion from TPM 2 hash algorithm to Go crypto algorithm will fail for
uncommon algorithms like SM3256. This can be avoided by checking the constants
directly, rather than converting them. It should also be fine to allow some non
SHA-256 PCRs.

Fixes: #7810

Signed-off-by: Thomas Way <thomas@6f.io>
Signed-off-by: Noel Georgi <git@frezbo.dev>

2023-10-04 01:02:20 +05:30

..

measure

fix: tpm2 encrypt/decrypt flow

2023-07-14 23:58:59 +05:30

pesign

refactor: move ukify into Talos code

2023-07-13 19:14:32 +04:00

tpm2

fix: use tpm2 hash algorithm constants and allow non-SHA-256 PCRs

2023-10-04 01:02:20 +05:30

uki

chore: update gen and COSI runtime

2023-09-22 12:13:13 +04:00

secureboot.go

fix: tpm2 encrypt/decrypt flow

2023-07-14 23:58:59 +05:30