On Fri, May 22, 2015 at 3:15 PM, David Howells <dhowe...@redhat.com> wrote: > Linus Torvalds <torva...@linux-foundation.org> wrote: > >> I forget the exact details of the signature ..., but for the modules >> themselves, it's just appended to the module contents. > > Yes. > >> And because the size of the certificate list is variable, you can't just >> zero it out or anything like that to make things compare equal. > > Since it's discarded at the end of boot, it could be padded significantly.
If you use the hash tree approach, the size of the thing in bzImage is constant. --Andy -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majord...@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
