Re: [PATCH v6] ima: add crypto agility support for template-hash algorithm

2024-04-10 Thread Mimi Zohar
On Wed, 2024-04-10 at 10:37 +0200, Enrico Bravi wrote: > > > +static struct dentry **ascii_securityfs_measurement_lists > > > __ro_after_init; > > > +static struct dentry **binary_securityfs_measurement_lists > > > __ro_after_init; > > > +static int securityfs_measurement_list_count __ro_after_init

Re: [PATCH v6] ima: add crypto agility support for template-hash algorithm

2024-04-10 Thread Enrico Bravi
On 09/04/24 14:43, Mimi Zohar wrote: > Hi Enrico, > > On Mon, 2024-04-08 at 23:28 +0200, Enrico Bravi wrote: >> The template hash showed by the ascii_runtime_measurements and >> binary_runtime_measurements is the one calculated using sha1 and there is >> no possibility to change this value, despit

Re: [PATCH v6] ima: add crypto agility support for template-hash algorithm

2024-04-09 Thread Mimi Zohar
Hi Enrico, On Mon, 2024-04-08 at 23:28 +0200, Enrico Bravi wrote: > The template hash showed by the ascii_runtime_measurements and > binary_runtime_measurements is the one calculated using sha1 and there is > no possibility to change this value, despite the fact that the template > hash is calcula

[PATCH v6] ima: add crypto agility support for template-hash algorithm

2024-04-08 Thread Enrico Bravi
The template hash showed by the ascii_runtime_measurements and binary_runtime_measurements is the one calculated using sha1 and there is no possibility to change this value, despite the fact that the template hash is calculated using the hash algorithms corresponding to all the PCR banks configured