Thierry Laurion 27c457f04b

TPM2 DUK and TOTP/HOTP reseal fix, refactoring and ifferenciating tpm_password into tpm_owner_password and reusing correctly ...

i
TODO: fix all TODO in PR prior of review + squash

Signed-off-by: Thierry Laurion <insurgo@riseup.net>

2023-11-01 10:07:27 -04:00

..

basic-autoboot.sh

Add PureBoot Basic Mode

2023-06-21 13:26:45 -04:00

cbfs-init

tpm2-tools: Change sense of CONFIG_TPM to mean any TPM, not just TPM1.

2023-03-08 12:45:46 -05:00

cbfs.sh

Add dual support for real bash and busybox's bash(ash)

2023-03-08 12:45:44 -05:00

config-gui.sh

config-gui.sh: Add option to toggle DEBUG and TRACE output from Configuration Settings menu

2023-08-25 14:27:51 -04:00

flash-gui.sh

Merge pull request #1485 from Nitrokey/nx-nitropad

2023-09-06 10:15:17 -04:00

flash.sh

initrd/bin/flash.sh: Improve speed and reliability

2023-09-05 16:04:30 -04:00

flashrom-kgpe-d16-openbmc.sh

TPM Disk Unlock Key sealing/renewal cleanup (Triggered automatically when resealing TOTP)

2023-08-30 18:06:29 -04:00

generic-init

io386: replace check for io386 to call lock_chip by a single common call from kexec-boot prior of real kexec

2023-06-12 13:51:20 -04:00

gpg-gui.sh

Change '16 60'-sized whiptail prompts to '0 80'

2023-06-30 14:21:11 -04:00

gpgv

Add dual support for real bash and busybox's bash(ash)

2023-03-08 12:45:44 -05:00

gui-init

TPM2 DUK and TOTP/HOTP reseal fix, refactoring and ifferenciating tpm_password into tpm_owner_password and reusing correctly

2023-11-01 10:07:27 -04:00

gui-init-basic

Add CONFIG_BRAND_NAME and allow overriding in Makefile with BRAND_NAME

2023-06-21 14:47:59 -04:00

inject_firmware.sh

Blob jail: Add zstd-decompress, decompress more complex archives

2023-06-21 13:26:50 -04:00

kexec-boot

TPM Disk Unlock Key sealing/renewal cleanup (Triggered automatically when resealing TOTP)

2023-08-30 18:06:29 -04:00

kexec-insert-key

TPM DISK Unlock Key : add cryptroot/crypttab to fix #1474

2023-08-30 18:07:21 -04:00

kexec-iso-init

kexec-iso-init: add TinyCore iso boot logic (Based on https://github.com/u-root/webboot/)

2023-04-17 16:18:22 -04:00

kexec-parse-bls

Add dual support for real bash and busybox's bash(ash)

2023-03-08 12:45:44 -05:00

kexec-parse-boot

kexec-parse-boot: fix isolinux iso booting

2023-04-17 16:19:08 -04:00

kexec-save-default

kexec-save-default: Fix multiple LUKS/LVM+LUKS suggestion + other working uniformization for DUK

2023-09-02 11:49:57 -04:00

kexec-save-key

kexec-seal/save-key /etc/functions : some more uniformisation of TPM DUK verbiage

2023-09-02 04:19:43 -04:00

kexec-seal-key

TPM2 DUK and TOTP/HOTP reseal fix, refactoring and ifferenciating tpm_password into tpm_owner_password and reusing correctly

2023-11-01 10:07:27 -04:00

kexec-select-boot

WiP to be squashed: we need to refactor prompt_tpm_password which is used both for TPM Owner Password prompt and caching reused for TPM disk unlock key passphrase which of course fails

2023-11-01 10:07:24 -04:00

kexec-sign-config

Add dual support for real bash and busybox's bash(ash)

2023-03-08 12:45:44 -05:00

kexec-unseal-key

TPM Disk Unlock Key sealing/renewal cleanup (Triggered automatically when resealing TOTP)

2023-08-30 18:06:29 -04:00

key-init

Add dual support for real bash and busybox's bash(ash)

2023-03-08 12:45:44 -05:00

lock_chip

lock_chip: parametrize locking in function of board config exported config option

2023-06-20 12:40:00 -04:00

media-scan

WiP

2023-11-01 10:06:45 -04:00

mount-usb

Wip: now supports both backup and copy to card and gpg_auth when backup exists. Might want to discuss that implementation. Some functions needed to be moved from functions to ash_functions so that gpg_auth can be called from recovery function. That might need to be discussed as well, recovery could be moved from ash_functions to functions instead.

2023-11-01 10:06:48 -04:00

network-init-recovery

Add dual support for real bash and busybox's bash(ash)

2023-03-08 12:45:44 -05:00

nitropad-shutdown.sh

add nitropad-shutdown.sh for EC based poweroff

2023-09-05 17:13:56 +02:00

oem-factory-reset

TPM2 DUK and TOTP/HOTP reseal fix, refactoring and ifferenciating tpm_password into tpm_owner_password and reusing correctly

2023-11-01 10:07:27 -04:00

oem-system-info-xx30

Add dual support for real bash and busybox's bash(ash)

2023-03-08 12:45:44 -05:00

poweroff

reboot/poweroff: run nitropad-shutdown.sh for required boards

2023-09-05 17:13:56 +02:00

qubes-measure-luks

scripts: unify luks in text/prompts/messages to LUKS

2023-11-01 10:07:01 -04:00

reboot

To Squash: changes to reboot were not ash compliant

2023-11-01 10:07:21 -04:00

root-hashes-gui.sh

Add external/usb disk encryption (adds exfatprogs and e2fsprogs)

2023-08-28 16:23:48 -04:00

seal-hotpkey

TPM Disk Unlock Key sealing/renewal cleanup (Triggered automatically when resealing TOTP)

2023-08-30 18:06:29 -04:00

seal-totp

TPM2 DUK and TOTP/HOTP reseal fix, refactoring and ifferenciating tpm_password into tpm_owner_password and reusing correctly

2023-11-01 10:07:27 -04:00

setconsolefont.sh

initrd/bin/setconsolefont.sh: Reduce threshold for 2x console to 1350

2023-08-11 14:40:11 -04:00

talos-init

initrd/bin/talos-init: remove alias for cbmem and bump coreboot revision

2023-07-12 14:50:54 +02:00

tpm-reset

TPM2 DUK and TOTP/HOTP reseal fix, refactoring and ifferenciating tpm_password into tpm_owner_password and reusing correctly

2023-11-01 10:07:27 -04:00

tpmr

TPM2 DUK and TOTP/HOTP reseal fix, refactoring and ifferenciating tpm_password into tpm_owner_password and reusing correctly

2023-11-01 10:07:27 -04:00

uefi-init

tpm2-tools: Change sense of CONFIG_TPM to mean any TPM, not just TPM1.

2023-03-08 12:45:46 -05:00

unpack_initramfs.sh

bin/unpack_initramfs.sh: Add TRACE and DEBUG traces

2023-09-02 01:51:50 -04:00

unseal-hotp

initrd/bin/unseal-hotp: Prevent script errors if unseal fails

2023-09-05 16:12:57 -04:00

unseal-totp

WiP: Clean cached /tmp/secret/tpm_password when sealing fails, otherwise reuse it on TPM Reset/TOTP+HOTP Sealing once for TPM1/TPM2+TPM Disk Unlock Key

2023-11-01 10:07:17 -04:00

usb-autoboot.sh

Add USB autoboot feature to PureBoot Basic

2023-06-21 13:26:46 -04:00

usb-init

media-scan/usb-init: add debugging info

2023-04-17 16:17:55 -04:00

wget-measure.sh

Add dual support for real bash and busybox's bash(ash)

2023-03-08 12:45:44 -05:00

wipe-totp

Implement Restricted Boot Mode

2023-06-21 13:26:45 -04:00

xx30-flash.init

Combine t430-flash.init, x23-flash.init, fix insmod

2023-03-13 13:23:29 -04:00