heads/initrd/etc
Jonathon Hall 0a35ef912f
Use 160 bits of ROM hash for TPM-less HOTP secret (up from 80)
HOTP/TOTP secrets don't have to be printable.  Use binary data to
include 160 bits of entropy instead of just 80.

The secret is still limited to 20 bytes.  Most keys now support up to
40 bytes, but tpmtotp is still limited to 20 bytes.

Move the truncation to 20 bytes a bit later, for future improvements to
detect the key's actual limit.

Signed-off-by: Jonathon Hall <jonathon.hall@puri.sm>
2023-07-05 10:18:06 -04:00
..
distro/keys Add PureOS signing key 2023-06-21 13:26:46 -04:00
ash_functions Merge remote-tracking branch 'github-heads/master' into pureboot-27-heads-upstream 2023-06-21 15:15:23 -04:00
fstab fstab, init: Remove securityfs mount 2023-03-13 14:11:02 -04:00
functions Use 160 bits of ROM hash for TPM-less HOTP secret (up from 80) 2023-07-05 10:18:06 -04:00
group Build the Heads/NERF firmware for the Dell R630 server. 2017-09-20 10:29:14 -04:00
gui_functions Change '16 60'-sized whiptail prompts to '0 80' 2023-06-30 14:21:11 -04:00
hosts localhost should be defined 2018-02-09 12:05:49 -05:00
luks-functions Add dual support for real bash and busybox's bash(ash) 2023-03-08 12:45:44 -05:00
motd restore /etc/motd 2018-03-08 01:14:41 -05:00
mtab add /etc/fstab and /etc/mtab to initrd image 2017-04-10 12:59:24 -04:00
passwd recovery, passwd: Use /bin/sh for interactive shells 2023-03-08 12:45:51 -05:00
shells Build the Heads/NERF firmware for the Dell R630 server. 2017-09-20 10:29:14 -04:00