XOR and rotate is probably a good start. Kees Cook <keescook@xxxxxxxxxxxx> wrote: >On Mon, Nov 11, 2013 at 12:07 PM, Ingo Molnar <mingo@xxxxxxxxxx> wrote: >> >> * H. Peter Anvin <hpa@xxxxxxxxx> wrote: >> >>> Of course, perhaps we could just hash struct boot_params as a >starting >>> point? >> >> Yeah, that would be a good first step, before trying to parse DMI or >ACPI. >> Anything that is reasonably system dependent and gives at least some >> amount of unpredicability. > >Given the very limited nature of the early boot environment, what >would you recommend for the hashing routine itself? There's nothing in >boot/ that does any kind of "real" crypto hashing. Should I just XOR >the entire contents of boot_params together? > >-Kees -- Sent from my mobile phone. Please pardon brevity and lack of formatting. -- To unsubscribe from this list: send the line "unsubscribe linux-tip-commits" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
|