There are two bugs when using the TPM PCR banks other than the default SHA256 PCR bank:
1) Key unsealing failure 2) Dumping the wrong PCR bank This patch set fixes the above two bugs and adds the tests for SHA384 PCR bank. Gary Lin (3): grub-protect: Fix the hash algorithm of PCR digest tpm2_key_protector: Dump the PCR bank for key unsealing tests/tpm2_key_protector_test: Add tests for SHA384 PCR bank .../commands/tpm2_key_protector/module.c | 11 ++++-- tests/tpm2_key_protector_test.in | 34 +++++++++++++++++-- util/grub-protect.c | 2 +- 3 files changed, 41 insertions(+), 6 deletions(-) -- 2.43.0 _______________________________________________ Grub-devel mailing list Grub-devel@gnu.org https://lists.gnu.org/mailman/listinfo/grub-devel
