Allow gpg to select digest algo

EC signatures requre that the digest has the corresponding length. Removing the hardcoded sha2-256 hash function and adding support of sha2-384 and sha2-512 should allow using EC crypto.
linuxboot · Jul 22, 2022 · 34507ba · 34507ba
1 parent 2cfa940
commit 34507ba
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/config/linux-librem_common.config b/config/linux-librem_common.config
@@ -230,7 +230,8 @@ CONFIG_CRYPTO_RMD160=m
 CONFIG_CRYPTO_RMD256=m
 CONFIG_CRYPTO_RMD320=m
 CONFIG_CRYPTO_SHA1_SSSE3=y
-CONFIG_CRYPTO_SHA256=y
+CONFIG_CRYPTO_SHA256_SSSE3=y
+CONFIG_CRYPTO_SHA512_SSSE3=y
 CONFIG_CRYPTO_TGR192=m
 CONFIG_CRYPTO_WP512=m
 CONFIG_CRYPTO_GHASH_CLMUL_NI_INTEL=m

diff --git a/initrd/bin/kexec-sign-config b/initrd/bin/kexec-sign-config
@@ -67,7 +67,6 @@ fi
 
 for tries in 1 2 3; do
 	if sha256sum $param_files | gpg \
-		--digest-algo SHA256 \
 		--detach-sign \
 		-a \
 		> $paramsdir/kexec.sig \