summaryrefslogtreecommitdiff
path: root/firmware
diff options
context:
space:
mode:
authorTudor Brindus <tbrindus@google.com>2018-08-02 16:36:19 -0700
committerchrome-bot <chrome-bot@chromium.org>2018-08-08 20:46:12 -0700
commit4a0352935ead9820955d39ac7b28396f8bd37271 (patch)
treebd9653e48b73a1a85c1ddfa185b4114556534899 /firmware
parent935d60e8374f0d73123a5dedf0f1c144c3249820 (diff)
downloadvboot-4a0352935ead9820955d39ac7b28396f8bd37271.tar.gz
vboot_reference: Change OOBE autoconfig TPM space to storing 32-byte hash
This commit switches from claiming 33 bytes of NVRAM for the compressed representation of a prime256v1 compressed public key to 32 bytes for its SHA256 hash. This makes it easier to process with the standard OpenSSL binary. BUG=chromium:845589 TEST=make runtests BRANCH=none Change-Id: Ic641b800bcbf2158d52ffbebbf143c47061e8cc3 Reviewed-on: https://chromium-review.googlesource.com/1161496 Commit-Ready: Tudor Brindus <tbrindus@chromium.org> Tested-by: Tudor Brindus <tbrindus@chromium.org> Reviewed-by: Randall Spangler <rspangler@chromium.org>
Diffstat (limited to 'firmware')
-rw-r--r--firmware/lib/include/rollback_index.h8
1 files changed, 4 insertions, 4 deletions
diff --git a/firmware/lib/include/rollback_index.h b/firmware/lib/include/rollback_index.h
index cf345614..f8905987 100644
--- a/firmware/lib/include/rollback_index.h
+++ b/firmware/lib/include/rollback_index.h
@@ -22,10 +22,10 @@
#define FWMP_NV_MAX_SIZE 128
#define REC_HASH_NV_INDEX 0x100b
#define REC_HASH_NV_SIZE VB2_SHA256_DIGEST_SIZE
-/* Space to hold a temporary key for USB autoconfig; see crbug.com/793878. */
-#define OOBE_USB_AUTOCONFIG_KEY_NV_INDEX 0x100c
-/* Size of a P256 elliptic curve public key in compressed format. */
-#define OOBE_USB_AUTOCONFIG_KEY_NV_SIZE 33
+/* Space to hold a temporary SHA256 digest of a public key for USB autoconfig;
+ * see crbug.com/845589. */
+#define OOBE_USB_AUTOCONFIG_KEY_DIGEST_NV_INDEX 0x100c
+#define OOBE_USB_AUTOCONFIG_KEY_DIGEST_NV_SIZE VB2_SHA256_DIGEST_SIZE
/* Structure definitions for TPM spaces */