Skip to content

wiki: correct PCR 16 history (iteration 2 of N) #248

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
tlaurion wants to merge 1 commit into from
Closed

wiki: correct PCR 16 history (iteration 2 of N) #248

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 3 additions & 2 deletions About/Keys.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -193,8 +193,9 @@ cache and hwinfo.hex here (DIMM-swap detection), currently disabled.
7: Heads CBFS files and UEFI binaries. Extended by `cbfs-init.sh`,
`uefi-init.sh`.

(16): Used for TPM futurecalc of LUKS header when setting up a TPM disk
encryption key
(16): Not measured or read by Heads. Historically used as scratch PCR by
`calcfuturepcr` on TPM1 (TPM2 used PCR 23); now unused — `calcfuturepcr`
was rewritten to replay from the `cbmem -L` event log instead.

### Some history
Heads relied on coreboot patches until coreboot 4.8.1 for measured boot
Expand Down