canonical / canonical/secboot

readAndValidateLockNVIndexPublic needs to attempt a TPM2_NV_Read command

Open
#31 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Go
Stars
23
Forks
29
Avg merge
2d 8h
Merged PRs (30d)
2

Description

readAndValidateLockNVIndexPublic is used to ensure that the supplied NV index is safe to use in an authorization policy during key sealing, but it isn't safe if the index has a non-empty authorization value even if the public area appears to be ok, as a non-empty authorization value will cause TPM2_NV_ReadLock to fail.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.