Re: [PATCH v11 00/20] Automatic Disk Unlock with TPM2

2024-04-15 Thread Gary Lin via Grub-devel
On Mon, Apr 15, 2024 at 10:26:32AM -0400, Stefan Berger wrote: > > > On 4/15/24 05:45, Gary Lin wrote: > > On Fri, Apr 12, 2024 at 12:24:36PM -0400, Stefan Berger wrote: > > > > > > > > > On 4/12/24 04:39, Gary Lin via Grub-devel wrote: > > > > GIT repo for v11: https://github.com/lcp/grub2/tre

Re: [PATCH v11 00/20] Automatic Disk Unlock with TPM2

2024-04-15 Thread Stefan Berger
On 4/15/24 05:45, Gary Lin wrote: On Fri, Apr 12, 2024 at 12:24:36PM -0400, Stefan Berger wrote: On 4/12/24 04:39, Gary Lin via Grub-devel wrote: GIT repo for v11: https://github.com/lcp/grub2/tree/tpm2-unlock-v11 This patch series is based on "Automatic TPM Disk Unlock"(*1) posted by Hern

Re: [PATCH v11 13/20] util/grub-protect: Add new tool

2024-04-15 Thread Gary Lin via Grub-devel
On Mon, Apr 15, 2024 at 05:40:53PM +0800, Gary Lin wrote: > On Fri, Apr 12, 2024 at 04:52:02PM -0400, Stefan Berger wrote: > > > > > > On 4/12/24 04:39, Gary Lin via Grub-devel wrote: > > > From: Hernan Gatta > > > > > > To utilize the key protectors framework, there must be a way to protect >

Re: [PATCH v11 00/20] Automatic Disk Unlock with TPM2

2024-04-15 Thread Gary Lin via Grub-devel
On Fri, Apr 12, 2024 at 12:24:36PM -0400, Stefan Berger wrote: > > > On 4/12/24 04:39, Gary Lin via Grub-devel wrote: > > GIT repo for v11: https://github.com/lcp/grub2/tree/tpm2-unlock-v11 > > > > This patch series is based on "Automatic TPM Disk Unlock"(*1) posted by > > Hernan Gatta to introd

Re: [PATCH v11 13/20] util/grub-protect: Add new tool

2024-04-15 Thread Gary Lin via Grub-devel
On Fri, Apr 12, 2024 at 04:52:02PM -0400, Stefan Berger wrote: > > > On 4/12/24 04:39, Gary Lin via Grub-devel wrote: > > From: Hernan Gatta > > > > To utilize the key protectors framework, there must be a way to protect > > full-disk encryption keys in the first place. The grub-protect tool >

Re: [PATCH v11 11/20] key_protector: Add TPM2 Key Protector

2024-04-15 Thread Gary Lin via Grub-devel
On Fri, Apr 12, 2024 at 02:57:42PM -0400, Stefan Berger wrote: > > > On 4/12/24 04:39, Gary Lin via Grub-devel wrote: > > From: Hernan Gatta > > > > The TPM2 key protector is a module that enables the automatic retrieval > > of a fully-encrypted disk's unlocking key from a TPM 2.0. > > A few m