heads/initrd
Jonathon Hall a2e4392497
tpmr: Do not hash sealing passwords, always pass passwords as hex
Don't hash password used to seal an object.  This limits the password
to 32-characters but avoids obfuscating the usage of the password.  The
32-character limit is considered acceptable because password limits are
lower already (GPG token limits to 25 chars).  We may allow >32 char
passwords in the future by hashing only if the password is >32 chars.

Always pass passwords as hex to tpm2-tools to avoid possible ambiguity
if the password begins with a control prefix like 'hex:' or 'file:'.

Signed-off-by: Jonathon Hall <jonathon.hall@puri.sm>
2023-03-10 14:46:34 -05:00
..
.gnupg instruct gpg to use gpg-agent. 2019-01-29 11:16:13 -05:00
bin tpmr: Do not hash sealing passwords, always pass passwords as hex 2023-03-10 14:46:34 -05:00
etc Small cosmetic/typo related changes, ccache enablement for coreboot and reduction of unseal attempts 2023-03-10 12:11:57 -05:00
run/cryptsetup [WIP] cross build json-c and cryptsetup 2020-10-28 15:28:05 +02:00
sbin Add dual support for real bash and busybox's bash(ash) 2023-03-08 12:45:44 -05:00
.ash_history GPG2 required changes for key and trustdb generation and inclusion in rom 2019-01-29 11:18:11 -05:00
init init: Always create symlinks for bash 2023-03-08 12:45:55 -05:00
mount-boot Add dual support for real bash and busybox's bash(ash) 2023-03-08 12:45:44 -05:00