On Tue, 2020-07-21 at 11:47 -0400, Mimi Zohar wrote: > On Tue, 2020-07-21 at 08:06 -0700, James Bottomley wrote: > > On Tue, 2020-07-21 at 08:30 -0400, Mimi Zohar wrote: > > I think the sysfs output should be a pure hash to save having to > > massage it. However, if you want the 1.2 format, this is the > > script I > > use: > > > > a=0; while [ $a -lt 24 ]; do printf "PCR-%02d: " $a; cat > > /sys/class/tpm/tpm0/pcr-sha1/$a; a=$[$a+1]; done > > The TPM 1.2 format is a bit different, You mean the spaces between each byte? I can persuade the script to do that, but there didn't seem to be much point given that everything I've seen that uses the hashes has to remove it. > but this provides the PCRs and digests sequentially. Right. I've got the v2 that should work on TPM 1.2 if you can test it for me? My TPM 1.2 machine is somewhat infrastructure critical, so I have difficulty rebooting it. James
