mirror of
https://github.com/linuxboot/heads.git
synced 2024-12-18 20:47:55 +00:00
a2e4392497
Don't hash password used to seal an object. This limits the password to 32-characters but avoids obfuscating the usage of the password. The 32-character limit is considered acceptable because password limits are lower already (GPG token limits to 25 chars). We may allow >32 char passwords in the future by hashing only if the password is >32 chars. Always pass passwords as hex to tpm2-tools to avoid possible ambiguity if the password begins with a control prefix like 'hex:' or 'file:'. Signed-off-by: Jonathon Hall <jonathon.hall@puri.sm> |
||
---|---|---|
.. | ||
.gnupg | ||
bin | ||
etc | ||
run/cryptsetup | ||
sbin | ||
.ash_history | ||
init | ||
mount-boot |