Ilias Apalodimas b436cc6a57 efi_loader: add sha384/512 on certificate revocation
Currently we don't support sha384/512 for the X.509 certificate
in dbx.  Moreover if we come across such a hash we skip the check
and approve the image,  although the image might needs to be rejected.

Rework the code a bit and fix it by adding an array of structs with the
supported GUIDs, len and literal used in the U-Boot crypto APIs instead
of hardcoding the GUID types.

It's worth noting here that efi_hash_regions() can now be reused from
efi_signature_lookup_digest() and add sha348/512 support there as well

Signed-off-by: Ilias Apalodimas <ilias.apalodimas@linaro.org>
2022-05-07 23:17:26 +02:00
..
2022-01-18 08:31:02 -05:00
2022-05-03 21:39:22 +02:00
2022-04-06 14:01:42 -04:00
2022-01-19 18:11:34 +01:00
2021-01-16 19:17:11 -05:00
2020-05-18 21:19:18 -04:00
2022-01-19 18:11:34 +01:00
2019-12-02 18:23:07 -05:00
2019-10-31 07:22:53 -04:00
2022-04-25 16:04:05 -04:00
2020-10-30 10:56:11 -04:00
2021-10-08 15:53:26 -04:00
2021-09-04 12:26:01 -04:00
2022-05-03 21:39:22 +02:00
2022-03-15 16:19:29 -04:00
2021-09-16 10:29:40 -04:00
2022-01-19 18:11:34 +01:00
2019-12-06 16:44:20 -05:00
2020-05-18 21:19:18 -04:00
2021-07-14 16:57:35 -04:00
2020-05-18 21:19:18 -04:00
2020-08-24 14:11:31 -04:00
2021-10-08 15:53:26 -04:00
2021-03-02 15:53:37 -05:00
2021-07-15 18:42:05 -04:00
2022-01-19 18:11:34 +01:00
2019-05-05 08:48:50 -04:00