audk/SecurityPkg
Jan Bobek 37d3eb026a SecurityPkg/AuthVariableLib: Check SHA-256 OID with ContentInfo present
REF: https://bugzilla.tianocore.org/show_bug.cgi?id=4305

Based on whether the DER-encoded ContentInfo structure is present in
authenticated SetVariable payload or not, the SHA-256 OID can be
located at different places.

UEFI specification explicitly states the driver shall support both
cases, but the old code assumed ContentInfo was not present and
incorrectly rejected authenticated variable updates when it were
present.

Cc: Jiewen Yao <jiewen.yao@intel.com>
Cc: Jian J Wang <jian.j.wang@intel.com>
Cc: Min Xu <min.m.xu@intel.com>
Signed-off-by: Jan Bobek <jbobek@nvidia.com>
Reviewed-by: Jiewen Yao <jiewen.yao@intel.com>
2023-01-23 06:03:31 +00:00
..
EnrollFromDefaultKeysApp
FvReportPei
Hash2DxeCrypto
HddPassword
Include
Library SecurityPkg/AuthVariableLib: Check SHA-256 OID with ContentInfo present 2023-01-23 06:03:31 +00:00
Pkcs7Verify/Pkcs7VerifyDxe
RandomNumberGenerator/RngDxe
Tcg SecurityPkg/TdTcg2Dxe: Extend EFI boot variable to PCR[1] 2023-01-18 04:29:14 +00:00
Test
VariableAuthenticated
SecurityPkg.ci.yaml
SecurityPkg.dec SecurityPkg: Move TdTcg2Dxe from OvmfPkg to SecurityPkg 2023-01-06 09:55:14 +00:00
SecurityPkg.dsc SecurityPkg: Move TdTcg2Dxe from OvmfPkg to SecurityPkg 2023-01-06 09:55:14 +00:00
SecurityPkg.uni
SecurityPkgExtra.uni