Re: [systemd-devel] Is tpm2-measure-pcr really an additional security?

2025-03-09 Thread Yann Diorcet
Thanks for you reply. My point is that defeating the PCR update in the measuring step of systemd-crypsetup could be not so hard to realize (see the two ways in my initial email) Le dim. 9 mars 2025 à 09:02, Andrei Borzenkov a écrit : > 08.03.2025 22:40, Andrei Borzenkov wrote: > > 08.03.2025 21:

Re: [systemd-devel] Is tpm2-measure-pcr really an additional security?

2025-03-10 Thread Yann Diorcet
Hi, Sorry for my english, i'm not english native. Le lun. 10 mars 2025 à 10:04, Lennart Poettering a écrit : > > On Sa, 08.03.25 19:52, Diorcet Yann (diorcet.y...@gmail.com) wrote: > > > Hello, > 61;7802;1c> > > I'm in the process of using SecureBoot, TPM2.0 and LUKS2 to protect an > > industrial