Re: custom Authentication module

[Andrey Borzenkov]

В Fri, 23 May 2014 16:32:57 +0000
"Buckeyne, Thomas" <address@hidden> пишет:

> I am creating for my company a custom Authentication module (required to meet 
> regulatory requirements)
>                 Generally it locates file(s) on an SSD; authenticates them 
> with ECDSA; determines if/where to boot from
> 
> I have most of the module complete but I need to access the
> 
> 1)      gcry_pk_verify in grub-core/lib/libgcrypt/ciper/pubkey.c
> 
> 2)      fill_in_curve in grub-core/lib/libgcrypt/cipher/ecc.c
> 
> However neither of these seem to be built when grub is compiled
> Nor have I been able to find an option to cause them to be built
> 

Those files are explicitly excluded when importing libgcrypt. See
util/import_gcry.py. I do not know the reason.


> Am I missing / overlooking a configuration option

No, you will need to patch util/import_gcry.py; you may need to extend
it to fix any build problems with these files in grub environment.

> Is there a patch or setup required to have these built

Not that I'm aware of.

> Are these supported for x86 32-bit computers

That's probably more for libgcrypt community. I do not see why not.

> Do I need to request a module to be included when I run grub-mkstandalone / 
> grub-mkimage

Not sure I understand this question. Do you mean - module that you are
going to build?