heads/initrd/bin
Jonathon Hall a2e4392497
tpmr: Do not hash sealing passwords, always pass passwords as hex
Don't hash password used to seal an object.  This limits the password
to 32-characters but avoids obfuscating the usage of the password.  The
32-character limit is considered acceptable because password limits are
lower already (GPG token limits to 25 chars).  We may allow >32 char
passwords in the future by hashing only if the password is >32 chars.

Always pass passwords as hex to tpm2-tools to avoid possible ambiguity
if the password begins with a control prefix like 'hex:' or 'file:'.

Signed-off-by: Jonathon Hall <jonathon.hall@puri.sm>
2023-03-10 14:46:34 -05:00
..
cbfs-init tpm2-tools: Change sense of CONFIG_TPM to mean any TPM, not just TPM1. 2023-03-08 12:45:46 -05:00
cbfs.sh Add dual support for real bash and busybox's bash(ash) 2023-03-08 12:45:44 -05:00
config-gui.sh tpm2-tools: Change sense of CONFIG_TPM to mean any TPM, not just TPM1. 2023-03-08 12:45:46 -05:00
flash-gui.sh Add dual support for real bash and busybox's bash(ash) 2023-03-08 12:45:44 -05:00
flash.sh *-flash.init: Use busybox ash 2023-03-08 12:45:53 -05:00
flashrom-kgpe-d16-openbmc.sh Add dual support for real bash and busybox's bash(ash) 2023-03-08 12:45:44 -05:00
generic-init Add dual support for real bash and busybox's bash(ash) 2023-03-08 12:45:44 -05:00
gpg-gui.sh Add dual support for real bash and busybox's bash(ash) 2023-03-08 12:45:44 -05:00
gpgv Add dual support for real bash and busybox's bash(ash) 2023-03-08 12:45:44 -05:00
gui-init Small cosmetic/typo related changes, ccache enablement for coreboot and reduction of unseal attempts 2023-03-10 12:11:57 -05:00
kexec-boot tpmr: Add kexec_finalize command to finalize TPM before boot 2023-03-08 12:45:49 -05:00
kexec-insert-key Small cosmetic/typo related changes, ccache enablement for coreboot and reduction of unseal attempts 2023-03-10 12:11:57 -05:00
kexec-iso-init Add dual support for real bash and busybox's bash(ash) 2023-03-08 12:45:44 -05:00
kexec-parse-bls Add dual support for real bash and busybox's bash(ash) 2023-03-08 12:45:44 -05:00
kexec-parse-boot Add dual support for real bash and busybox's bash(ash) 2023-03-08 12:45:44 -05:00
kexec-save-default Small cosmetic/typo related changes, ccache enablement for coreboot and reduction of unseal attempts 2023-03-10 12:11:57 -05:00
kexec-save-key Add dual support for real bash and busybox's bash(ash) 2023-03-08 12:45:44 -05:00
kexec-seal-key Small cosmetic/typo related changes, ccache enablement for coreboot and reduction of unseal attempts 2023-03-10 12:11:57 -05:00
kexec-select-boot Small cosmetic/typo related changes, ccache enablement for coreboot and reduction of unseal attempts 2023-03-10 12:11:57 -05:00
kexec-sign-config Add dual support for real bash and busybox's bash(ash) 2023-03-08 12:45:44 -05:00
kexec-unseal-key seal-totp, kexec-seal-key: Use common logic for TPM1 and TPM2 2023-03-08 12:45:57 -05:00
key-init Add dual support for real bash and busybox's bash(ash) 2023-03-08 12:45:44 -05:00
media-scan Add dual support for real bash and busybox's bash(ash) 2023-03-08 12:45:44 -05:00
mount-usb Add dual support for real bash and busybox's bash(ash) 2023-03-08 12:45:44 -05:00
network-init-recovery Add dual support for real bash and busybox's bash(ash) 2023-03-08 12:45:44 -05:00
oem-factory-reset tpm2-tools: Change sense of CONFIG_TPM to mean any TPM, not just TPM1. 2023-03-08 12:45:46 -05:00
oem-system-info-xx30 Add dual support for real bash and busybox's bash(ash) 2023-03-08 12:45:44 -05:00
poweroff reboot, poweroff: Prepare TPM2 for shutdown 2023-03-08 16:20:21 -05:00
qubes-measure-luks Add dual support for real bash and busybox's bash(ash) 2023-03-08 12:45:44 -05:00
reboot reboot, poweroff: Prepare TPM2 for shutdown 2023-03-08 16:20:21 -05:00
seal-hotpkey Small cosmetic/typo related changes, ccache enablement for coreboot and reduction of unseal attempts 2023-03-10 12:11:57 -05:00
seal-totp Small cosmetic/typo related changes, ccache enablement for coreboot and reduction of unseal attempts 2023-03-10 12:11:57 -05:00
t430-flash.init *-flash.init: Use busybox ash 2023-03-08 12:45:53 -05:00
tpm-reset tpm2-tools: Change sense of CONFIG_TPM to mean any TPM, not just TPM1. 2023-03-08 12:45:46 -05:00
tpmr tpmr: Do not hash sealing passwords, always pass passwords as hex 2023-03-10 14:46:34 -05:00
uefi-init tpm2-tools: Change sense of CONFIG_TPM to mean any TPM, not just TPM1. 2023-03-08 12:45:46 -05:00
unseal-hotp Small cosmetic/typo related changes, ccache enablement for coreboot and reduction of unseal attempts 2023-03-10 12:11:57 -05:00
unseal-totp seal-totp, kexec-seal-key: Use common logic for TPM1 and TPM2 2023-03-08 12:45:57 -05:00
usb-init tpm2-tools: Change sense of CONFIG_TPM to mean any TPM, not just TPM1. 2023-03-08 12:45:46 -05:00
wget-measure.sh Add dual support for real bash and busybox's bash(ash) 2023-03-08 12:45:44 -05:00
x230-flash.init *-flash.init: Use busybox ash 2023-03-08 12:45:53 -05:00