From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mga02.intel.com (mga02.intel.com [134.134.136.20]) by mx.groups.io with SMTP id smtpd.web08.2889.1645584901156250866 for ; Tue, 22 Feb 2022 18:55:02 -0800 Authentication-Results: mx.groups.io; dkim=fail reason="unable to parse pub key" header.i=@intel.com header.s=intel header.b=a9CqA1AS; spf=pass (domain: intel.com, ip: 134.134.136.20, mailfrom: yi1.li@intel.com) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=intel.com; i=@intel.com; q=dns/txt; s=Intel; t=1645584901; x=1677120901; h=from:to:subject:date:message-id:references:in-reply-to: mime-version; bh=l8oL8pmJgm8tpd4kAnu76X0+OKT22NnVbqI46d7cirs=; b=a9CqA1ASRTndLWejHwFfrJ0gM/sFZNeOTisFhRJnN0co5nEAE8LBDtVS M3DpzXR3yJVa8fk5RI8Zut7Ia+UxjyeCkq5Yc1isjss+RMnMkYAmN7Lo+ MXqbUHtdYS3yPF6h7zZ4VXon+qei+w9RFCG4nY3eq8EkHxlFJyPjak1Kd 6hMqNlHezshA308DU8GzvO813rDtBs76vVWgYW9mdACab2F80svsakjMP XAY8R1AXwhk5LonyXKXxaL3Oo8MdyTDfOoqcWOWmYpiaHYz6atqMPFg1k m9RMDC7LmpatV/a5bf+/6DY1IYzu4pgnz+HpUiitdsB0aW26LyrXhB0hh A==; X-IronPort-AV: E=McAfee;i="6200,9189,10266"; a="239259509" X-IronPort-AV: E=Sophos;i="5.88,390,1635231600"; d="scan'208,217";a="239259509" Received: from fmsmga002.fm.intel.com ([10.253.24.26]) by orsmga101.jf.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 22 Feb 2022 18:55:00 -0800 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.88,390,1635231600"; d="scan'208,217";a="637253715" Received: from orsmsx603.amr.corp.intel.com ([10.22.229.16]) by fmsmga002.fm.intel.com with ESMTP; 22 Feb 2022 18:54:59 -0800 Received: from orsmsx608.amr.corp.intel.com (10.22.229.21) by ORSMSX603.amr.corp.intel.com (10.22.229.16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2308.21; Tue, 22 Feb 2022 18:54:59 -0800 Received: from orsmsx607.amr.corp.intel.com (10.22.229.20) by ORSMSX608.amr.corp.intel.com (10.22.229.21) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2308.20; Tue, 22 Feb 2022 18:54:58 -0800 Received: from orsedg603.ED.cps.intel.com (10.7.248.4) by orsmsx607.amr.corp.intel.com (10.22.229.20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2308.20 via Frontend Transport; Tue, 22 Feb 2022 18:54:58 -0800 Received: from NAM11-CO1-obe.outbound.protection.outlook.com (104.47.56.173) by edgegateway.intel.com (134.134.137.100) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.1.2308.20; Tue, 22 Feb 2022 18:54:58 -0800 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=d+CE2VO78mIMWE0XAgqGCgHRD+6le5nDjCRZw913wfsdqw4WSpmdZZmOHHIEGJU+0Qsmm20iFHoVDWDOYBHvweHcxUPBeJraKVYXWmQ1gy3xpVSUi0SJthNTQ+L8Isszp1/L1pk7FQq01DqprA174Sx4Ot6ORA43zyXyw0bYjNXeEbrtF4Yi6+PRy6+IIvhD7i/eJP0MLLzI2vqCV68czgLMZHoFbs9VBNzljGRjRJRcaBv8toyOCbGe3C0eyrklGcUOl+1iyGxnV4UbY5DeHWEmNi2L4XYFzvaowqxlAU2jjldY7rm4VRuV6OGttQfXW/lKkaf6nCk6lmlaMzJrqg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=OltkLBVwzYe+jB3oWNaOe3Qq4wEcogIPOBgUZWOksfg=; b=hG0fbfwZybUM4QbQKI9JHT5aIpIhMP6LPlXvHgg3IxdU517yZ3pqdQl00J1+o8QmHjacm3Jc7AEJVUKhQkQkFxAm/Sz8Eg4j/XLU9DuRmDbVbWMquqeyPbPRu3P2kTNHcop3zwQzhAL2v7ZbHOCgKulzyjDaXTjjNjsBKNkJVEK3H3Qaq+ZI4gbBLoDVlmCnfCeTwsp5p6s8CsKzthdhjamOfTp8z/4WZsJpYWhQqbxoBpa18TpW3b3Buhi2v3kryXltMYkmxDfUnxpbGnKvAEaABG08N6G/jWd3LIlZXgZHxkPGHYyNpIjNyOjoq8oh4SirgGyujPc5s2fNFry0tA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=intel.com; dmarc=pass action=none header.from=intel.com; dkim=pass header.d=intel.com; arc=none Received: from DM5PR11MB1595.namprd11.prod.outlook.com (2603:10b6:4:c::14) by DM6PR11MB3915.namprd11.prod.outlook.com (2603:10b6:5:19c::11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5017.21; Wed, 23 Feb 2022 02:54:55 +0000 Received: from DM5PR11MB1595.namprd11.prod.outlook.com ([fe80::4951:2628:ae6a:6c67]) by DM5PR11MB1595.namprd11.prod.outlook.com ([fe80::4951:2628:ae6a:6c67%10]) with mapi id 15.20.4995.027; Wed, 23 Feb 2022 02:54:55 +0000 From: "yi1 li" To: "Kovvuri, Vineel" , "devel@edk2.groups.io" , Vineel Kovvuri Subject: Re: [edk2-devel] [PATCH 1/2] Reconfigure OpensslLib to add elliptic curve chipher algorithms Thread-Topic: [EXTERNAL] Re: [edk2-devel] [PATCH 1/2] Reconfigure OpensslLib to add elliptic curve chipher algorithms Thread-Index: AQHYKF2pjR0t0O5h5EySvA9g5rvNb6ygbkWAgAACJSA= Date: Wed, 23 Feb 2022 02:54:55 +0000 Message-ID: References: <8041.1645583561523622243@groups.io> In-Reply-To: Accept-Language: zh-CN, en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=dd8286d3-021f-4bd8-9584-14356dc12597; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ContentBits=0; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=true; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Method=Standard; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=Internal; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2022-02-23T02:33:51Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47 authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=intel.com; x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 04f15ac0-10a8-4cc5-e1a1-08d9f677df2b x-ms-traffictypediagnostic: DM6PR11MB3915:EE_ x-ld-processed: 46c98d88-e344-4ed4-8496-4ed7712e255d,ExtAddr x-microsoft-antispam-prvs: x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:DM5PR11MB1595.namprd11.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230001)(366004)(38070700005)(55016003)(2906002)(5660300002)(52536014)(8936002)(76236003)(38100700002)(19627235002)(66446008)(64756008)(8676002)(66556008)(66946007)(76116006)(83380400001)(316002)(33656002)(82960400001)(66476007)(508600001)(186003)(122000001)(71200400001)(26005)(9686003)(166002)(53546011)(7696005)(6506007)(86362001)(110136005)(45080400002);DIR:OUT;SFP:1102; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?us-ascii?Q?EBuTgFo7KYfUjMgiRhNvohg1wA66KD9kwc477AqWSZAU0AB/P9J7gQxkMGvS?= =?us-ascii?Q?kbLk2One7oXHKUbO5MtGuDENMjU7JFcKAdD1MwSbC0SvgnLy1+XtWRWi4pkr?= =?us-ascii?Q?v5twnTB0dHq4CAO1NOtphDuy/OLnCWMxuyt1HAvGkNRsn1PEONqrhI5rzFcT?= =?us-ascii?Q?BBC6Lg2Aup/EurQEZGySjNBY4igoabcL9RNtoiGM3xbQ782BrrT+dDJYRB6A?= =?us-ascii?Q?dFBOdkxi4VeKLOP67A7IuuK0AAcnTDR8hiINxBeJtZ8N3SRglqP0BcyidyNY?= =?us-ascii?Q?Fk2PKw+mWraGIWL+08o6uohagy2wM7RsA43iD80i6yhRAxNWt006j9mjUDAS?= =?us-ascii?Q?VxdVKau5QSm7WNkwRslsxyKvU7m7MSP2hjCEkJ+c7tkkK+lAjLPTnJ4C2eYh?= =?us-ascii?Q?p5jKH+/VcgPTyY+ggQFZa3BeTKhqNnpC3VfnxyfwtABgLfrNzvEmfrRxASLv?= =?us-ascii?Q?kHK+YfEECwHqRUEh8zgZVHOmFh9xZrsUWg5v66Ae9uIwNdjw09dOCGltEF1k?= =?us-ascii?Q?v/nvdIt5nRiRWfwzKQ7laWP20wwu6yNOjYmUevCSRYr19OrkIdmyItW1qz8f?= =?us-ascii?Q?dMxxTK67pLjVsUNYyazmrQ+QFiFfYYUi9WtGj12uas2m8Htzexyxq1CMFQHi?= =?us-ascii?Q?AC8uUvaKpVpu9+jp0HLBz8T96lnhPw97fnHoxhnB4T97AULwTRBl5+oEitqD?= =?us-ascii?Q?h1BaQmcBgC5QS7NlqRfbhRpzXry403D3m/06VJk9Inqje4eHhBYOQyGJ9PTi?= =?us-ascii?Q?Mky0L4UQA/PA9hjPkkftVMAyUEf5Sb4Tv7ioji85hDxJecWtaayKz7+wEg2Z?= =?us-ascii?Q?/fAYAAEXvoiJy4uVvYbNd/BDeYS4T0gRUKkYzffj//Ky+eSbgmN5m5cww8t1?= =?us-ascii?Q?UO1hOg9Xe1Bfletm3Mrmi6yCqrYGJe5ElqaSOopD/Y9iYpRX3V76Pi8EZN1L?= =?us-ascii?Q?68e3zKXkSPX8DAYYoJGATIITev7bmGXWjUGU/S+dRhSzVROSg0N7lS9krO7j?= =?us-ascii?Q?UhpBvnFWc6FT2aUbHLt1wQYaxTHZkfEYVXy+S4OvNmAQ1xLDAJyKl3LFT8sS?= =?us-ascii?Q?h4QP4YxkVOkuWV83bAM5G6FqOnw1pcfzfr2biQ7Nj0tWFakR5bFwoLKf5UlB?= =?us-ascii?Q?oWzscMJDEZQrYJuEQDczfDARldPe7NFAj/P/9Bo2+3m216O2o5+g+xK6EYHt?= =?us-ascii?Q?aN5xmN1/hRwtPDT6ftuo5czuTeACjplKEfYFF5AffcBQR6JTCbpwZaSYEE/D?= =?us-ascii?Q?te3WsCFS9ZS8SmI2FmRhFSTGkYzSWwvY84/bR0UelYZSL7dNZIQ614GpIkUl?= =?us-ascii?Q?Gb29ma8CPaaSJPZkgzrfCX3dWICs/zybiJKztyW3a20UpByYaJgmvwHI0d5A?= =?us-ascii?Q?Q/hjWmtiOpCSjBelKeQhrvs/F1cgx5anBR+BFo7lyzz+2fqCD7RcAFfsdEWs?= =?us-ascii?Q?wvsxZJU7epFZu0I+Vu/vN6hlnekshjvH27UmDWZW7IbMnCr6z1zwtmKgc5Fe?= =?us-ascii?Q?Lbo/qXy4F2Mp76akul9xOVaocQjaI/KRfPj7zGAQV9lrLNFSh6JLrnjWzVeH?= =?us-ascii?Q?AGNusve5bgMlgMwWm3Odc3/ijaOyEoJ8HW984usg+04V+rqXmbhzsgAAgJDi?= =?us-ascii?Q?1mx9DuqkIhAClTvRmLWB25Q=3D?= MIME-Version: 1.0 X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: DM5PR11MB1595.namprd11.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 04f15ac0-10a8-4cc5-e1a1-08d9f677df2b X-MS-Exchange-CrossTenant-originalarrivaltime: 23 Feb 2022 02:54:55.4434 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 46c98d88-e344-4ed4-8496-4ed7712e255d X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: uWf5BNu8SRP++5iE8ItjYlcYj+jVShU/J/6y9jfXa2Bkxm3IiXnLVIFtjKaeSDsPArGFOEqwGMJJwNuZlUpCIw== X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM6PR11MB3915 Return-Path: yi1.li@intel.com X-OriginatorOrg: intel.com Content-Language: en-US Content-Type: multipart/alternative; boundary="_000_DM5PR11MB1595DB604A1431B2106BD71FC53C9DM5PR11MB1595namp_" --_000_DM5PR11MB1595DB604A1431B2106BD71FC53C9DM5PR11MB1595namp_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Good news, Thanks for your work. Thanks! Yi Li From: Vineel Kovvuri Sent: Wednesday, February 23, 2022 10:46 AM To: devel@edk2.groups.io; Li, Yi1 ; Vineel Kovvuri Subject: RE: [EXTERNAL] Re: [edk2-devel] [PATCH 1/2] Reconfigure OpensslLib= to add elliptic curve chipher algorithms Hi, Thanks for providing the inputs here. Really appreciated. I will try to resume the work(had to put it aside due to other priorities).= Please expect the patch by EOW. Thanks, Vineel From: devel@edk2.groups.io On Behalf Of yi1 li via g= roups.io Sent: Tuesday, February 22, 2022 6:33 PM To: Vineel Kovvuri ; devel@edk2.groups.io Subject: [EXTERNAL] Re: [edk2-devel] [PATCH 1/2] Reconfigure OpensslLib to = add elliptic curve chipher algorithms Hi Vineel, Are you still working on this issue? I'm glad to see that edk2 will enable = EC and other crypto features and would like some advice. I found from the previous discussion that there are only some issues with O= vmf binary size left, Have you tried enlarging the size of DXEFV in OvmfPkgIa32X64.fdf, I think t= his is the most direct way to solve this problem. Such like: diff --git a/OvmfPkg/OvmfPkgIa32X64.fdf b/OvmfPkg/OvmfPkgIa32X64.fdf index 097fd428d5..1de0aad9f4 100644 --- a/OvmfPkg/OvmfPkgIa32X64.fdf +++ b/OvmfPkg/OvmfPkgIa32X64.fdf @@ -62,10 +62,10 @@ FV =3D SECFV [FD.MEMFD] BaseAddress =3D $(MEMFD_BASE_ADDRESS) -Size =3D 0xD00000 +Size =3D 0xE00000 ErasePolarity =3D 1 BlockSize =3D 0x10000 -NumBlocks =3D 0xD0 +NumBlocks =3D 0xE0 0x000000|0x006000 gUefiOvmfPkgTokenSpaceGuid.PcdOvmfSecPageTablesBase|gUefiOvmfPkgTokenSpace= Guid.PcdOvmfSecPageTablesSize @@ -83,7 +83,7 @@ gUefiOvmfPkgTokenSpaceGuid.PcdOvmfSecPeiTempRamBase|gUefi= OvmfPkgTokenSpaceGuid.P gUefiOvmfPkgTokenSpaceGuid.PcdOvmfPeiMemFvBase|gUefiOvmfPkgTokenSpaceGuid.= PcdOvmfPeiMemFvSize FV =3D PEIFV -0x100000|0xC00000 +0x100000|0xD00000 gUefiOvmfPkgTokenSpaceGuid.PcdOvmfDxeMemFvBase|gUefiOvmfPkgTokenSpaceGuid.= PcdOvmfDxeMemFvSize FV =3D DXEFV Please cc me if there is any other progress, my team and I will provide sup= port as far as possible. Thanks! --_000_DM5PR11MB1595DB604A1431B2106BD71FC53C9DM5PR11MB1595namp_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Good news, Thanks for your work.

 

Thanks!=

Yi Li

From: Vineel Kovvuri <vineelko@microsoft.c= om>
Sent: Wednesday, February 23, 2022 10:46 AM
To: devel@edk2.groups.io; Li, Yi1 <yi1.li@intel.com>; Vineel K= ovvuri <vineel.kovvuri@gmail.com>
Subject: RE: [EXTERNAL] Re: [edk2-devel] [PATCH 1/2] Reconfigure Ope= nsslLib to add elliptic curve chipher algorithms

 

Hi,

 

Thanks for providing the inputs here. Really appreci= ated.

I will try to resume the work(had to put it aside du= e to other priorities). Please expect the patch by EOW.

 

Thanks,

Vineel

From: devel@edk2.groups.io <devel@edk2.gro= ups.io> On Behalf Of yi1 li via groups.io
Sent: Tuesday, February 22, 2022 6:33 PM
To: Vineel Kovvuri <vineel.kovvuri@gmail.com>; devel@edk2.grou= ps.io
Subject: [EXTERNAL] Re: [edk2-devel] [PATCH 1/2] Reconfigure Openssl= Lib to add elliptic curve chipher algorithms

 

Hi Vineel,

Are you still working on this issue? I'm glad to see that edk2 will enable = EC and other crypto features and would like some advice.

I found from the previous discussion that there are only some issues with O= vmf binary size left,
Have you tried enlarging the size of DXEFV in OvmfPkgIa32X64.fdf, I th= ink this is the most direct way to solve this problem.

Such like:

diff --git a/OvmfPkg/OvmfPkgIa32X64.fdf b/OvmfPkg/Ov= mfPkgIa32X64.fdf

index 097fd428d5..1de0aad9f4 100644

--- a/OvmfPkg/OvmfPkgIa32X64.fdf

+++ b/OvmfPkg/OvmfPkgIa32X64.fdf

@@ -62,10 +62,10 @@ FV =3D SECFV

 

 [FD.MEMFD]

 BaseAddress   =3D $(MEMFD_BASE_ADDRE= SS)

-Size          =3D 0xD00000=

+Size          =3D 0xE00000=

 ErasePolarity =3D 1

 BlockSize     =3D 0x10000<= /o:p>

-NumBlocks     =3D 0xD0

+NumBlocks     =3D 0xE0

 

 0x000000|0x006000

 gUefiOvmfPkgTokenSpaceGuid.PcdOvmfSecPageTable= sBase|gUefiOvmfPkgTokenSpaceGuid.PcdOvmfSecPageTablesSize

@@ -83,7 +83,7 @@ gUefiOvmfPkgTokenSpaceGuid.PcdOvmf= SecPeiTempRamBase|gUefiOvmfPkgTokenSpaceGuid.P

 gUefiOvmfPkgTokenSpaceGuid.PcdOvmfPeiMemFvBase= |gUefiOvmfPkgTokenSpaceGuid.PcdOvmfPeiMemFvSize

 FV =3D PEIFV

 

-0x100000|0xC00000

+0x100000|0xD00000

 gUefiOvmfPkgTokenSpaceGuid.PcdOvmfDxeMemFvBase= |gUefiOvmfPkgTokenSpaceGuid.PcdOvmfDxeMemFvSize

 FV =3D DXEFV

Please cc me if there is any other progress, my team and I will provide sup= port as far as possible.
Thanks!

--_000_DM5PR11MB1595DB604A1431B2106BD71FC53C9DM5PR11MB1595namp_--