Hi Mimi, Reviewed-by: Petr Vorel <pvorel@xxxxxxx> > The original LTP ima_boot_aggregate.c test needed to be updated to > support TPM 2.0 before this change. For TPM 2.0, the PCRs are not > exported. With this change, the kernel could be reading PCRs from a > TPM bank other than SHA1 and calculating the boot_aggregate based on a > different hash algorithm as well. I'm not sure how a remote verifier > would know which TPM bank was read, when calculating the boot- > aggregate. Mimi, do you plan to do update LTP test? Kind regards, Petr
