search

okirch / pcr-oracle

Predict TPM PCR values for future boot
GNU General Public License v2.0
7 stars 8 forks source link

Unseal the data without calling __pcr_policy_make() #22

Closed lcp closed 1 year ago

lcp commented 1 year ago

To get the policy digest for Esys_VerifySignature(), it's not necessary to recalculate the digest with pcr_policy_make(). This commit reorganizes the TPM command sequence to fetch the policy digest right after PolicyPCR, so that we can remove pcr_policy_make() to simplify the whole unsealing process.

okirch commented 1 year ago

Resolved conflicts and merged as 16bb4578f93238a9909a55cd0a07536924b1111e