proxmox-mirrors/efi-boot-shim
1
0
Fork 0
mirror of https://git.proxmox.com/git/efi-boot-shim synced 2025-05-29 17:38:35 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

More tips for the MOK password

Browse Source
This commit is contained in:
Gary Ching-Pang Lin 2012-09-27 16:54:38 +08:00
parent 44423f01a4
commit aa8e90679d
1 changed files with 10 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
MokManager.c
View File

@ -4,7 +4,8 @@
#include <openssl/x509.h> #include <openssl/x509.h>
#include "shim.h" #include "shim.h"
#define PASSWORD_LENGTH 16 #define PASSWORD_MAX 16
#define PASSWORD_MIN 8
typedef struct { typedef struct {
UINT32 MokSize; UINT32 MokSize;
@ -471,13 +472,13 @@ static UINT8 mok_deletion_prompt () {
static UINT8 get_password (UINT32 *length, CHAR16 *password) static UINT8 get_password (UINT32 *length, CHAR16 *password)
{ {
EFI_INPUT_KEY key; EFI_INPUT_KEY key;
CHAR16 input[PASSWORD_LENGTH]; CHAR16 input[PASSWORD_MAX];
int count = 0; int count = 0;
do { do {
key = get_keystroke(); key = get_keystroke();
if ((count >= PASSWORD_LENGTH && if ((count >= PASSWORD_MAX &&
key.UnicodeChar != CHAR_BACKSPACE) || key.UnicodeChar != CHAR_BACKSPACE) ||
key.UnicodeChar == CHAR_NULL || key.UnicodeChar == CHAR_NULL ||
key.UnicodeChar == CHAR_TAB || key.UnicodeChar == CHAR_TAB ||
@ -569,7 +570,7 @@ static EFI_STATUS store_keys (void *MokNew, UINTN MokNewSize)
UINT8 auth[SHA256_DIGEST_SIZE]; UINT8 auth[SHA256_DIGEST_SIZE];
UINTN auth_size; UINTN auth_size;
UINT32 attributes; UINT32 attributes;
CHAR16 password[PASSWORD_LENGTH]; CHAR16 password[PASSWORD_MAX];
UINT32 pw_length; UINT32 pw_length;
UINT8 fail_count = 0; UINT8 fail_count = 0;
@ -585,11 +586,13 @@ static EFI_STATUS store_keys (void *MokNew, UINTN MokNewSize)
} }
while (fail_count < 3) { while (fail_count < 3) {
Print(L"Password: "); Print(L"Password(%d-%d characters): ",
PASSWORD_MIN, PASSWORD_MAX);
get_password(&pw_length, password); get_password(&pw_length, password);
if (pw_length < 8) { if (pw_length < 8) {
Print(L"At least 8 characters for the password\n"); Print(L"At least %d characters for the password\n",
PASSWORD_MIN);
} }
efi_status = compute_pw_hash(MokNew, MokNewSize, password, efi_status = compute_pw_hash(MokNew, MokNewSize, password,
@ -600,6 +603,7 @@ static EFI_STATUS store_keys (void *MokNew, UINTN MokNewSize)
} }
if (!compare_hash(auth, hash, SHA256_DIGEST_SIZE)) { if (!compare_hash(auth, hash, SHA256_DIGEST_SIZE)) {
Print(L"Password doesn't match\n");
fail_count++; fail_count++;
} else { } else {
break; break;