[edk2-devel] [PATCH] Bug 4648 - Password Salt uses default seed

2024-03-21 Thread V V, Pranav
argument. The RandomSeed function comes from CryptRandTsc.c. When NULL is used as the first argument, the default seed "UEFI Crypto Library default seed" is used this is concatenated with the TSC Added a logic to shuffle the default seed string characters Signed-off-by: V V Pranav --- .

[edk2-devel] [PATCH] REF: https://bugzilla.tianocore.org/show_bug.cgi?id=4649

2024-03-21 Thread V V, Pranav
The KeyLibGenerateSalt function fails to check the return value of RandomSeed and RandomBytes function calls. SavePasswordToVariable function also fails to check the status of calling function KeyLibGenerateSalt Added a status check for all the above mentioned function's Signed-off-by

[edk2-devel] [PATCH] REF: https://bugzilla.tianocore.org/show_bug.cgi?id=4650

2024-03-18 Thread V V, Pranav
password being entered matches the hash of the previous 5 passwords. Added a check for preventing each character repeat more than twice consecutively Signed-off-by: V V Pranav --- .../UserAuthenticationDxeStrings.uni | 4 ++-- .../UserAuthenticationDxeSmm