~kzapalowicz/snappy-hwe-snaps/+git/tpm2:fix/v1.1.1-build-issue

Last commit made on 2017-08-01
Get this branch:
git clone -b fix/v1.1.1-build-issue https://git.launchpad.net/~kzapalowicz/snappy-hwe-snaps/+git/tpm2
Only Konrad Zapałowicz can upload to this branch. If you are Konrad Zapałowicz please log in for upload directions.

Branch merges

Branch information

Name:
fix/v1.1.1-build-issue
Repository:
lp:~kzapalowicz/snappy-hwe-snaps/+git/tpm2

Recent commits

542bade... by Alfonso Sanchez-Beato on 2017-03-03

Add script to force build by CI

71c8dd3... by Alfonso Sanchez-Beato on 2017-03-03

Fix linker error by making sure symbols are available

b214121... by William Roberts <email address hidden> on 2017-06-21

kdfa: use openssl for hmac not tpm

While not reachable in the current code base tools, a potential
security bug lurked in tpm_kdfa().

If using that routine for an hmac authorization, the hmac was
calculated using the tpm. A user of an object wishing to
authenticate via hmac, would expect that the password is never
sent to the tpm. However, since the hmac calculation relies on
password, and is performed by the tpm, the password ends up
being sent in plain text to the tpm.

The fix is to use openssl to generate the hmac on the host.

Fixes: CVE-2017-7524

Signed-off-by: William Roberts <email address hidden>

df72ea5... by William Roberts <email address hidden> on 2017-06-22

travis: use 1.0 of TSS for 1.x tools

tpm2.0-tools only builds against v1.0 of the TSS library.

Signed-off-by: William Roberts <email address hidden>

1e08ba6... by Gang Wei on 2016-11-04

Merge pull request #107 from gwei3/1.1-release

1.1 release

0edb6c1... by Gang Wei on 2016-11-04

Change version number from 1.1.0-beta_1 to 1.1.0

326e534... by Gang Wei on 2016-11-04

Rename ChangeLog to CHANGELOG

ac2d300... by Gang Wei on 2016-11-04

Add AUTHORS & MAINTAINERS files

53bd5a4... by Gang Wei on 2016-11-04

update doc to emphasis lookout auth needed for tpm2_takeownership -c

f36476e... by Gang Wei on 2016-10-17

Merge pull request #105 from gwei3/add-travis-ci-support=20161017

Add travis ci support