Re: [Linux-ima-user] Compatibility of IMA with TPM 2.0

[Mimi Z. <zo...@li...>]

On Thu, 2017-02-02 at 19:19 +0000, Alfy . wrote:

> Hello, I want to know if IMA is compatible with TPM 2.0 (TSS 2.0 and
> tpm2-tools) on Ubuntu 16.04 LTS (kernel 4.6.0). Precisely I have to
> know if IMA is able to extend the PCR 10 of the TPM 2.0 with his
> measurements. This information is fundamental for my thesis work,
> thank you in advance for supporting my work.

The IMA measurements extend the TPM 2.0 sha1 bank.  With Nayna Jain's
patches that Jarkko is preparing to upstream for 4.11, the sha1 hash
will be padded with 0's and will be used to extend the other banks.

Mimi