mirror of
https://github.com/stefanberger/libtpms
synced 2025-12-31 11:12:04 +00:00
tpm2: Allow to runtime-disable RSA by key sizes
Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
This commit is contained in:
parent
83a18c67e7
commit
289611fada
@ -3750,15 +3750,24 @@ TPMI_RSA_KEY_BITS_Unmarshal(TPMI_RSA_KEY_BITS *target, BYTE **buffer, INT32 *siz
|
||||
case 1024:
|
||||
case 2048:
|
||||
case 3072:
|
||||
#if RSA_4096 // libtpms added begin
|
||||
#if RSA_4096 // libtpms added begin
|
||||
case 4096:
|
||||
#endif // libtpms added end
|
||||
#endif
|
||||
if (!RuntimeAlgorithmKeySizeCheckEnabled(&g_RuntimeProfile.RuntimeAlgorithm,
|
||||
TPM_ALG_RSA,
|
||||
*target,
|
||||
TPM_ECC_NONE,
|
||||
g_RuntimeProfile.stateFormatLevel)) {
|
||||
rc = TPM_RC_VALUE;
|
||||
} // libtpms added end
|
||||
break;
|
||||
default:
|
||||
rc = TPM_RC_VALUE;
|
||||
*target = orig_target; // libtpms added
|
||||
}
|
||||
}
|
||||
if (rc != TPM_RC_SUCCESS) { // libtpms added begin
|
||||
*target = orig_target;
|
||||
} // libtpms added end
|
||||
return rc;
|
||||
}
|
||||
|
||||
|
||||
Loading…
Reference in New Issue
Block a user