diff options
| author | James Bottomley <James.Bottomley@HansenPartnership.com> | 2024-04-29 16:28:06 -0400 |
|---|---|---|
| committer | Jarkko Sakkinen <jarkko@kernel.org> | 2024-05-09 22:30:51 +0300 |
| commit | 6519fea6fd372b2247a48d72dcb23e14de70b4ea (patch) | |
| tree | 68f3d8b6e0bf56ea09cba6fc4b749c50d51a0038 /fs/btrfs/dev-replace.c | |
| parent | 1085b8276bb4239daa7008f0dcd5c973e4bd690f (diff) | |
tpm: add hmac checks to tpm2_pcr_extend()
tpm2_pcr_extend() is used by trusted keys to extend a PCR to prevent a
key from being re-loaded until the next reboot. To use this
functionality securely, that extend must be protected by a session
hmac. This patch adds HMAC protection so tampering with the
tpm2_pcr_extend() command in flight is detected.
Signed-off-by: James Bottomley <James.Bottomley@HansenPartnership.com>
Reviewed-by: Jarkko Sakkinen <jarkko@kernel.org>
Tested-by: Jarkko Sakkinen <jarkko@kernel.org>
Signed-off-by: Jarkko Sakkinen <jarkko@kernel.org>
Diffstat (limited to 'fs/btrfs/dev-replace.c')
0 files changed, 0 insertions, 0 deletions