analyze: show pcrs also in sha384 bank
authorLennart Poettering <lennart@poettering.net>
Tue, 4 Jun 2024 09:02:34 +0000 (11:02 +0200)
committerLuca Boccassi <luca.boccassi@gmail.com>
Fri, 14 Jun 2024 11:39:40 +0000 (12:39 +0100)
SHA384 is pretty much the bank we actually *want* to use, since it's
faster to calculate than SHA256, hence at the very least, start
considering.

src/analyze/analyze-pcrs.c

index 43e415fc6df6e074020025ba99c881a434cf88f3..1c3da3fd8406a0e6e87530e731bd68ff7de071f2 100644 (file)
@@ -11,7 +11,7 @@
 static int get_pcr_alg(const char **ret) {
         assert(ret);
 
-        FOREACH_STRING(alg, "sha256", "sha1") {
+        FOREACH_STRING(alg, "sha256", "sha384", "sha1") {
                 _cleanup_free_ char *p = NULL;
 
                 if (asprintf(&p, "/sys/class/tpm/tpm0/pcr-%s/0", alg) < 0)