Re: [PATCH v4 08/16] efi_loader: image_loader: support image authentication

2020-01-26 Thread AKASHI Takahiro
On Thu, Jan 23, 2020 at 06:41:53PM +0100, Heinrich Schuchardt wrote: > On 1/22/20 8:42 AM, AKASHI Takahiro wrote: > >Heinrich, > > > >On Wed, Jan 22, 2020 at 10:13:48AM +0900, AKASHI Takahiro wrote: > >>On Tue, Jan 21, 2020 at 08:15:06AM +0100, Heinrich Schuchardt wrote: > >>>On 1/21/20 7:12 AM, AK

Re: [PATCH v4 08/16] efi_loader: image_loader: support image authentication

2020-01-23 Thread Heinrich Schuchardt
On 1/22/20 8:42 AM, AKASHI Takahiro wrote: Heinrich, On Wed, Jan 22, 2020 at 10:13:48AM +0900, AKASHI Takahiro wrote: On Tue, Jan 21, 2020 at 08:15:06AM +0100, Heinrich Schuchardt wrote: On 1/21/20 7:12 AM, AKASHI Takahiro wrote: On Fri, Jan 17, 2020 at 06:51:50AM +0100, Heinrich Schuchardt w

Re: [PATCH v4 08/16] efi_loader: image_loader: support image authentication

2020-01-21 Thread AKASHI Takahiro
Heinrich, On Wed, Jan 22, 2020 at 10:13:48AM +0900, AKASHI Takahiro wrote: > On Tue, Jan 21, 2020 at 08:15:06AM +0100, Heinrich Schuchardt wrote: > > On 1/21/20 7:12 AM, AKASHI Takahiro wrote: > > >On Fri, Jan 17, 2020 at 06:51:50AM +0100, Heinrich Schuchardt wrote: > > >>On 1/17/20 6:11 AM, AKASH

Re: [PATCH v4 08/16] efi_loader: image_loader: support image authentication

2020-01-21 Thread AKASHI Takahiro
On Tue, Jan 21, 2020 at 08:15:06AM +0100, Heinrich Schuchardt wrote: > On 1/21/20 7:12 AM, AKASHI Takahiro wrote: > >On Fri, Jan 17, 2020 at 06:51:50AM +0100, Heinrich Schuchardt wrote: > >>On 1/17/20 6:11 AM, AKASHI Takahiro wrote: > >>>On Thu, Jan 09, 2020 at 12:55:17AM +0100, Heinrich Schuchardt

Re: [PATCH v4 08/16] efi_loader: image_loader: support image authentication

2020-01-20 Thread Heinrich Schuchardt
On 1/21/20 7:12 AM, AKASHI Takahiro wrote: On Fri, Jan 17, 2020 at 06:51:50AM +0100, Heinrich Schuchardt wrote: On 1/17/20 6:11 AM, AKASHI Takahiro wrote: On Thu, Jan 09, 2020 at 12:55:17AM +0100, Heinrich Schuchardt wrote: On 12/18/19 1:45 AM, AKASHI Takahiro wrote: With this commit, image v

Re: [PATCH v4 08/16] efi_loader: image_loader: support image authentication

2020-01-20 Thread AKASHI Takahiro
On Fri, Jan 17, 2020 at 06:51:50AM +0100, Heinrich Schuchardt wrote: > On 1/17/20 6:11 AM, AKASHI Takahiro wrote: > >On Thu, Jan 09, 2020 at 12:55:17AM +0100, Heinrich Schuchardt wrote: > >>On 12/18/19 1:45 AM, AKASHI Takahiro wrote: > >>>With this commit, image validation can be enforced, as UEFI

Re: [PATCH v4 08/16] efi_loader: image_loader: support image authentication

2020-01-16 Thread Heinrich Schuchardt
On 1/17/20 6:11 AM, AKASHI Takahiro wrote: On Thu, Jan 09, 2020 at 12:55:17AM +0100, Heinrich Schuchardt wrote: On 12/18/19 1:45 AM, AKASHI Takahiro wrote: With this commit, image validation can be enforced, as UEFI specification section 32.5 describes, if CONFIG_EFI_SECURE_BOOT is enabled. Cu

Re: [PATCH v4 08/16] efi_loader: image_loader: support image authentication

2020-01-16 Thread AKASHI Takahiro
On Thu, Jan 09, 2020 at 12:55:17AM +0100, Heinrich Schuchardt wrote: > On 12/18/19 1:45 AM, AKASHI Takahiro wrote: > >With this commit, image validation can be enforced, as UEFI specification > >section 32.5 describes, if CONFIG_EFI_SECURE_BOOT is enabled. > > > >Currently we support > >* authentic

Re: [PATCH v4 08/16] efi_loader: image_loader: support image authentication

2020-01-08 Thread Heinrich Schuchardt
On 12/18/19 1:45 AM, AKASHI Takahiro wrote: With this commit, image validation can be enforced, as UEFI specification section 32.5 describes, if CONFIG_EFI_SECURE_BOOT is enabled. Currently we support * authentication based on db and dbx, so dbx-validated image will always be rejected. * foll

[PATCH v4 08/16] efi_loader: image_loader: support image authentication

2019-12-17 Thread AKASHI Takahiro
With this commit, image validation can be enforced, as UEFI specification section 32.5 describes, if CONFIG_EFI_SECURE_BOOT is enabled. Currently we support * authentication based on db and dbx, so dbx-validated image will always be rejected. * following signature types: EFI_CERT_SHA256_GUID