7292c55...
by
Andreas Fuchs <email address hidden>
Esys: Require software random values
During pk_encrypt we will generate random values
for the key as well as the OAEP padding.
We need to ensure that we use a CPU-based random
function and don't load things from a TPM since
that would defeat the purpose of an encrypted
salt.
Signed-off-by: Andreas Fuchs <email address hidden>
afcfb0e...
by
Andreas Fuchs <email address hidden>
Release 2.1.4
Signed-off-by: Andreas Fuchs <email address hidden>
1608ab2...
by
Andreas Fuchs <email address hidden>
Prepare version 2.1.4_rc3
Signed-off-by: Andreas Fuchs <email address hidden>
esys_iutil.c: Update session attribute in cmdauths structure for policy sessions
esys-policy-password.int.c: Add flushing policy session explicitly to the integration test
iesys_gen_auths routine in esys_iutil.c can clear the continuesession flag in
the sessionAttributes. This commit addresses a scenario to continue the policy
session inorder to be able to flush the session at a later time so as to:
1. Chain further TPM operations that are intended to modify policy digest
2. Run additional TPM commands using the session with satisfied policy
Signed-off-by: Imran Desai <email address hidden>
4cb514c...
by
Andreas Fuchs <email address hidden>
Prepare version 2.1.4_rc1
Signed-off-by: Andreas Fuchs <email address hidden>
The previous configuration was a misguided attempt to get all build
output in a central location. Turns out VS doesn't like this since I
rolled the intermediate output directory into the same location. This
causes a race condition since there's no guarantee that the intermediate
build output (object files) will have unique names.
The right way to resolve this is to just remove the configuration and
use the VS defaults. We must however specify unique intermediate build
directories for the two TCTIs since the default values overlap.
Signed-off-by: Philip Tricca <email address hidden>
ed013d4...
by
Jonas Witschel <email address hidden>
esys: don't stringify ESYS_TCTI_DEFAULT_CONFIG
The macro (like all other strings in config.h) is already quoted, so
using stringification will lead to a configuration string like
"/dev/tpmrm0"
(including the double quotes). Just use the macro directly instead like
ESYS_TCTI_DEFAULT_MODULE.
Fixes: GH-1395
Signed-off-by: Jonas Witschel <email address hidden>
