Re: [PATCH v4 1/4] KEYS: Insert incompressible bytes to reserve space in bzImage

2017-04-21 Thread Henrique de Moraes Holschuh
On Thu, 20 Apr 2017, Mehmet Kayaalp wrote: > > On Apr 20, 2017, at 7:13 PM, Henrique de Moraes Holschuh > > wrote: > > On Thu, 20 Apr 2017, Mehmet Kayaalp wrote: > >> Include a random filled binary in vmlinux at the space reserved with > >> CONFIG_SYSTEM_EXTRA_CERTIFICATE. This results in an unco

Re: [PATCH v4 1/4] KEYS: Insert incompressible bytes to reserve space in bzImage

2017-04-20 Thread Mehmet Kayaalp
> On Apr 20, 2017, at 7:13 PM, Henrique de Moraes Holschuh > wrote: > > On Thu, 20 Apr 2017, Mehmet Kayaalp wrote: >> Include a random filled binary in vmlinux at the space reserved with >> CONFIG_SYSTEM_EXTRA_CERTIFICATE. This results in an uncompressed reserved > > Random data is not always

Re: [PATCH v4 1/4] KEYS: Insert incompressible bytes to reserve space in bzImage

2017-04-20 Thread Henrique de Moraes Holschuh
On Thu, 20 Apr 2017, Mehmet Kayaalp wrote: > Include a random filled binary in vmlinux at the space reserved with > CONFIG_SYSTEM_EXTRA_CERTIFICATE. This results in an uncompressed reserved Random data is not always going to be completely incompressible. And just how much it could be compressed a

[PATCH v4 1/4] KEYS: Insert incompressible bytes to reserve space in bzImage

2017-04-20 Thread Mehmet Kayaalp
Include a random filled binary in vmlinux at the space reserved with CONFIG_SYSTEM_EXTRA_CERTIFICATE. This results in an uncompressed reserved area inside the bzImage as well, so that it can be replaced with an actual certificate later (after the bzImage is distributed). The bzImage contains a str