From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from us-smtp-delivery-124.mimecast.com (us-smtp-delivery-124.mimecast.com [170.10.129.124]) by mx.groups.io with SMTP id smtpd.web08.29817.1652089515532899925 for ; Mon, 09 May 2022 02:45:16 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@redhat.com header.s=mimecast20190719 header.b=Cm82OjqL; spf=pass (domain: redhat.com, ip: 170.10.129.124, mailfrom: kraxel@redhat.com) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1652089514; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=DMl8QJhfdQhfmSIU/s2D9AL+F94PBQ+M2R32v/XGGN8=; b=Cm82OjqLVvCs1vFqqXPWuUFNoJ5R6ypKQpp8fTPGrkvOQ/ISmna8OUQTzNSCoxG4tiz56v zJ2Dr66JIBytfZHRWKnEP+ttS8vqWhhqrVWojEybibyqDMOXbg5G4rJNKJqGNk9mFAojSg da5fUEhVW4YrLNupWgZgMsbvgbIr2vQ= Received: from mimecast-mx02.redhat.com (mimecast-mx02.redhat.com [66.187.233.88]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id us-mta-423-f1ktdh_0OLCjbrTzu259mQ-1; Mon, 09 May 2022 05:45:13 -0400 X-MC-Unique: f1ktdh_0OLCjbrTzu259mQ-1 Received: from smtp.corp.redhat.com (int-mx02.intmail.prod.int.rdu2.redhat.com [10.11.54.2]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by mimecast-mx02.redhat.com (Postfix) with ESMTPS id 0B65085A5BC; Mon, 9 May 2022 09:45:13 +0000 (UTC) Received: from sirius.home.kraxel.org (unknown [10.39.192.13]) by smtp.corp.redhat.com (Postfix) with ESMTPS id B880F400E115; Mon, 9 May 2022 09:45:12 +0000 (UTC) Received: by sirius.home.kraxel.org (Postfix, from userid 1000) id 04926180062C; Mon, 9 May 2022 11:45:11 +0200 (CEST) Date: Mon, 9 May 2022 11:45:11 +0200 From: "Gerd Hoffmann" To: devel@edk2.groups.io, jiewen.yao@intel.com Cc: Pawel Polawski , "Li, Yi1" , Oliver Steffen , "Wang, Jian J" , Ard Biesheuvel , "Jiang, Guomin" , "Lu, Xiaoyu1" , "Justen, Jordan L" Subject: Re: [edk2-devel] [PATCH 0/5] CryptoPkg/openssl: enable EC unconditionally. Message-ID: <20220509094511.px6cl7jtjejr4y4x@sirius.home.kraxel.org> References: <20220502103436.3274412-1-kraxel@redhat.com> <20220505080638.rmrw3f773rkw3ljl@sirius.home.kraxel.org> <20220505091536.llguh4dzozqtiiob@sirius.home.kraxel.org> MIME-Version: 1.0 In-Reply-To: X-Scanned-By: MIMEDefang 2.84 on 10.11.54.2 Authentication-Results: relay.mimecast.com; auth=pass smtp.auth=CUSA124A263 smtp.mailfrom=kraxel@redhat.com X-Mimecast-Spam-Score: 0 X-Mimecast-Originator: redhat.com Content-Type: text/plain; charset=us-ascii Content-Disposition: inline On Mon, May 09, 2022 at 01:38:35AM +0000, Yao, Jiewen wrote: > Thank you Gerd. > > I collected feedback from Intel BIOS team, both client and server, both old platform and new platform. > > In general, the new platform will leave enough space for crypto improvement. Size is not a big issue. The delta is acceptable. > > However, the old launched platforms only has limited flash space. This patch will break the current build because of size increase. Option (1) is not acceptable. Hmm. Does that mean the old platform (what is "old" here btw?) wouldn't be able to do the switch to openssl3 either? take care, Gerd