On Fri, 2020-05-15 at 18:13 +0300, Timo Lindfors wrote:
> Hi,
>
> On Fri, 15 May 2020, Lukasz Hawrylko wrote:
> > Done.
>
> Thanks, I'll do some testing and ask for further feedback. Would it be
> possible to release a new version after some time with all these
> changes so that they would be part of the eventual Debian upload?
1.9.12 was released recently, so I don't have right now plans for new
release timeline. There are few more changes that I am working on right
now and I want to include them in next release.
>
> Btw, can you recommend some tool for defining an NVRAM region that would
> allow me to specify the DRTM PCR values that need to match before it can
> be accessed? tpm_nvdefine -f works only with PCRs <= 15. I sent a patch
> last summer to fix this but the project does not seem to be very active
> and the patch appears to have been forgotten:
>
> https://www.mail-archive.com/tro...@li.../msg00684.html
>
>
> As far as I understand, the defindex tool in tboot does not let me specify
> PCR values either. I need this for forward-sealing of data across
> updates.
>
As you are using trousers I guess that you have TPM 1.2 am I right? It
is EOL now that's why nobody cares about trousers project, is it
possible in your platform to use TPM 2.0? I highly recommend to upgrade,
than you can use tpm2-tools.
Thanks,
Lukasz
|
