Re: [edk2-devel] [PATCH v2 10/11] OvmfPkg: add SevHashesBlobVerifierLib

2021-07-19 Thread Lendacky, Thomas via groups.io
On 7/19/21 2:47 PM, Dov Murik wrote: > On 19/07/2021 20:28, Tom Lendacky wrote: >> On 7/6/21 3:55 AM, Dov Murik wrote: > >>> +[Defines] >>> + INF_VERSION= 0x00010005 >>> + BASE_NAME = SevHashesBlobVerifierLib > > But is this BASE_NAME okay? > > Or

Re: [edk2-devel] [PATCH v2 10/11] OvmfPkg: add SevHashesBlobVerifierLib

2021-07-19 Thread Dov Murik
On 19/07/2021 20:28, Tom Lendacky wrote: > On 7/6/21 3:55 AM, Dov Murik wrote: >> Add an implementation for BlobVerifierLib that locates the SEV hashes >> table and verifies that the calculated hashes of the kernel, initrd, and >> cmdline blobs indeed match the expected hashes stated in the

Re: [edk2-devel] [PATCH v2 10/11] OvmfPkg: add SevHashesBlobVerifierLib

2021-07-19 Thread Lendacky, Thomas via groups.io
On 7/6/21 3:55 AM, Dov Murik wrote: > Add an implementation for BlobVerifierLib that locates the SEV hashes > table and verifies that the calculated hashes of the kernel, initrd, and > cmdline blobs indeed match the expected hashes stated in the hashes > table. > > If there's a missing hash or a

[edk2-devel] [PATCH v2 10/11] OvmfPkg: add SevHashesBlobVerifierLib

2021-07-06 Thread Dov Murik
Add an implementation for BlobVerifierLib that locates the SEV hashes table and verifies that the calculated hashes of the kernel, initrd, and cmdline blobs indeed match the expected hashes stated in the hashes table. If there's a missing hash or a hash mismatch then EFI_ACCESS_DENIED is returned