On Mon, Nov 11, 2013 at 12:07 PM, Ingo Molnar <mingo@xxxxxxxxxx> wrote: > > * H. Peter Anvin <hpa@xxxxxxxxx> wrote: > >> Of course, perhaps we could just hash struct boot_params as a starting >> point? > > Yeah, that would be a good first step, before trying to parse DMI or ACPI. > Anything that is reasonably system dependent and gives at least some > amount of unpredicability. Given the very limited nature of the early boot environment, what would you recommend for the hashing routine itself? There's nothing in boot/ that does any kind of "real" crypto hashing. Should I just XOR the entire contents of boot_params together? -Kees -- Kees Cook Chrome OS Security -- To unsubscribe from this list: send the line "unsubscribe linux-tip-commits" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
|