13 Commits

Author SHA1 Message Date
наб
00703a1517
Upcast time_t to i64 2021-11-29 16:20:40 +01:00
наб
1937610e54
struct timespec::tv_nsec is the syscall long, not actual long! 2021-11-28 18:17:00 +01:00
наб
49f0a05c33
Add PCR binding. password => passphrase in manuals
All logically distinct modes are now:
  TPM1.X: passphraseless, PCRs, passphrase, passphrase & PCRs
  TPM2:   passphraseless, PCRs, passphrase, passphrase | PCRs

TPM2 sees a backward-incompatible ";pcr list" addition to its handle

Cf. https://twitter.com/nabijaczleweli/status/1463707170793562117
2021-11-28 01:33:58 +01:00
наб
303ea58c2f
Import parse_uint() from voreutils. Summarise all .sos. Fix systemd integration in README to match. Flatten hV adding 2021-11-25 16:33:26 +01:00
наб
12189bc0d5
Change TPM2 creation metadata to 'UNIX.ns dataset version' from 'dataset RFC3339 version' ‒ there's only 64 bytes to play with 2021-11-15 19:04:40 +01:00
наб
9c8ee8d68c
Add $TZPFMS_PASSPHRASE_HELPER. Always include the TPM back-end and/or dataset name in password what-fors 2021-11-15 18:59:07 +01:00
наб
c1ab9a5a1a
Fold print; return err; into return print, err; 2021-11-10 15:02:43 +01:00
наб
dc8bc7acb7
Use proper PRI* macros for foreign types 2021-11-10 14:48:07 +01:00
наб
15a2917902
Read in password for TPM2 if 'tpm2_changeauth -c owner' is in play 2020-10-27 20:36:59 +01:00
наб
201fdf2c0a
Allow for setting passphrases on TPM2 keys. Handle max passphrase lengths 2020-10-27 20:03:28 +01:00
наб
92f6927a08
Migrate some meaty zfs funxions out 2020-10-23 01:05:55 +02:00
наб
84c1385485
Unlocking works, too! Let's, as they say, go. 2020-10-17 23:14:08 +02:00
наб
f1ce88d4b7
Split out TPM2 ops, handle errors better, all that jazz 2020-10-17 21:32:03 +02:00