david/ipxe
david/ipxe
Archived
1
0
Fork 0
Code
My fork of git://git.ipxe.org/ipxe.git, it is used for my netboot environment at home.
This repository has been archived on 2020-12-06. You can view files and clone it, but cannot push or open issues or pull requests.
3,969 Commits 1 Branch 0 Tags 14 MiB
C 95.2%
Objective-C 1.7%
Assembly 1.3%
Perl 0.7%
Makefile 0.4%
Other 0.6%
742e43be05
Go to file
Michael Brown 742e43be05 [rng] Use SHA-256 for Hash_df, and validate the hash function strength 
ANS X9.82 Part 4 (April 2011 Draft) Section 13.3.4.2 states that "When
using the derivation function based on a hash function, the output
length of the hash function shall meet or exceed the security strength
indicated by the min_entropy parameter in the Get_entropy_input call",
although this criteria is missing from the pseudocode provided in the
same section.

Add a test for this condition, and upgrade from SHA-1 to SHA-256 since
SHA-1 has an output length of 160 bits, which is insufficient for
generating the (128 * 3/2 = 192) bits required when instantiating the
128-bit strength DRBG.

Signed-off-by: Michael Brown <mcb30@ipxe.org>
2012-03-05 23:51:54 +00:00
contrib [contrib] Fix rom-o-matic 2012-02-12 13:35:43 +00:00
src [rng] Use SHA-256 for Hash_df, and validate the hash function strength 2012-03-05 23:51:54 +00:00
COPYING Initial revision 2005-05-17 16:44:57 +00:00
COPYRIGHTS [build] Rename gPXE to iPXE 2010-04-19 23:43:39 +01:00
README [doc] Re-add README file 2010-05-28 00:03:47 +01:00

README 

iPXE README File

Quick start guide:

   cd src
   make

For any more detailed instructions, see http://ipxe.org