On Thu, Jun 7, 2018 at 7:02 AM Mimi Zohar <zohar@xxxxxxxxxxxxxxxxxx> wrote: > > Hi Matthew, > > On Wed, 2018-06-06 at 14:57 -0700, Matthew Garrett wrote: > > SHA1 is reasonable in HMAC constructs, but it's desirable to be able to > > use stronger hashes in digital signatures. Modify the EVM crypto code so > > the hash type is imported from the digital signature and passed down to > > the hash calculation code, and return the digest size to higher layers > > for validation. > > > > Signed-off-by: Matthew Garrett <mjg59@xxxxxxxxxx> > > This patch applies using "quilt push", but not with "git am". Did you > post the associated ima-evm-utils patch? That's strange - I sent it with git send-email. I can resend the userspace patch (the original one allowed non-SHA1 HMACs, but that doesn't seem helpful, so I'll drop that part)
