lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date:	Thu, 15 May 2008 20:46:18 -0300
From:	Henrique de Moraes Holschuh <hmh@....eng.br>
To:	Theodore Tso <tytso@....edu>, Jeff Garzik <jeff@...zik.org>,
	Chris Peterson <cpeterso@...terso.com>,
	"Kok, Auke" <auke-jan.h.kok@...el.com>,
	Rick Jones <rick.jones2@...com>,
	"Brandeburg, Jesse" <jesse.brandeburg@...el.com>,
	Alan Cox <alan@...rguk.ukuu.org.uk>, netdev@...r.kernel.org,
	linux-kernel@...r.kernel.org
Subject: Re: [PATCH] drivers/net: remove network drivers' last few uses of
	IRQF_SAMPLE_RANDOM

On Thu, 15 May 2008, Theodore Tso wrote:
> On Thu, May 15, 2008 at 08:02:21PM -0300, Henrique de Moraes Holschuh wrote:
> > I will tell you what.  If someone manages to get trousers to actually
> > *work* for data binding and sealing to the TPM in a ThinkPad T43 with an
> > NSC/Winbond TPM (their "sup3r s3kr1t TPM-inside-the-SuperIO 8394T" crap
> > one needs a NDA to get the documentation for), and I manage to duplicate
> > it (i.e. make it work here too), I will write the rng-tools trousers
> > interface code (at least for the Debian version) :-)
> > 
> > The kernel TPM driver works, the BIOS works, and I have the PCRs updated
> > properly during boot, but trousers get the tpm pubek key wrong for some
> > reason (the kernel driver can read it just fine).  The chip is good,
> > IBM's stuff worked just fine with it.
> 
> There were some web pages on this subject that seemed imply that IBM
> used a non-standard string-to-key algorithm, and that caused the

None of that, I cleared the TPM.  In fact, it took a while to find a
non-black-magic way to get the IBM BIOS to unhide the "Clear the TPM"
prompt...

Anyway, the TPM is clean, and I have tried with and without passphrases
(owner and operator), etc.  It is either a userspace to kernel
communications bug, or a trousers bug.  The PUBEK is there, the kernel
exports it nicely through sysfs, but trousers gets crap instead of the
PUBEK if I ask it to get the PUBEK (and therefore, nothing useful in
trousers works).

-- 
  "One disk to rule them all, One disk to find them. One disk to bring
  them all and in the darkness grind them. In the Land of Redmond
  where the shadows lie." -- The Silicon Valley Tarot
  Henrique Holschuh
--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ