From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mga07.intel.com (mga07.intel.com [134.134.136.100]) by mx.groups.io with SMTP id smtpd.web08.16248.1628467346765380584 for ; Sun, 08 Aug 2021 17:02:27 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@intel.onmicrosoft.com header.s=selector2-intel-onmicrosoft-com header.b=GJuW6sK8; spf=pass (domain: intel.com, ip: 134.134.136.100, mailfrom: min.m.xu@intel.com) X-IronPort-AV: E=McAfee;i="6200,9189,10070"; a="278344254" X-IronPort-AV: E=Sophos;i="5.84,305,1620716400"; d="scan'208";a="278344254" Received: from fmsmga002.fm.intel.com ([10.253.24.26]) by orsmga105.jf.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 08 Aug 2021 17:02:25 -0700 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.84,305,1620716400"; d="scan'208";a="524930870" Received: from orsmsx605.amr.corp.intel.com ([10.22.229.18]) by fmsmga002.fm.intel.com with ESMTP; 08 Aug 2021 17:02:23 -0700 Received: from orsmsx611.amr.corp.intel.com (10.22.229.24) by ORSMSX605.amr.corp.intel.com (10.22.229.18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2242.4; Sun, 8 Aug 2021 17:02:21 -0700 Received: from orsmsx609.amr.corp.intel.com (10.22.229.22) by ORSMSX611.amr.corp.intel.com (10.22.229.24) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2242.10; Sun, 8 Aug 2021 17:02:20 -0700 Received: from orsedg603.ED.cps.intel.com (10.7.248.4) by orsmsx609.amr.corp.intel.com (10.22.229.22) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2242.10 via Frontend Transport; Sun, 8 Aug 2021 17:02:20 -0700 Received: from NAM11-BN8-obe.outbound.protection.outlook.com (104.47.58.168) by edgegateway.intel.com (134.134.137.100) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.1.2242.10; Sun, 8 Aug 2021 17:02:20 -0700 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=KiHeJuL61/3HR/Wh4veZGqojEXpiKiwP5KTqR6vqbkWiRZX/xVfkBpHBQZLFIJgQWXJnv2wSYZSF6IrcDcMLPXheljZbE5Gs75zLEUmSEOt0Dst38gGvokO98jbc5FOayfdj3ZhBnob8NT2Jx8PcdsMI2L6OQaJtTRwfC+K7YU/ZM0U1DI8I+sRMgCC1CuDK/IA8chAXwAUZqNgLzBlRRpDuKyzuwUZ/f9OgHawT0nvovNh9LmyoRWtjqbRlo3/zujNoKkTIhxAJVp6elUaQ9mY0OxF4ZXXMNzQOSYlq9q96OMOgiBMTOf2YF3utN0U2N9TkhuGeYut3t1HO/TeQcQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Z20TltHVExDW6NhucQxHd9vpXiLmnmyoZckwBy1iS/c=; b=WeuUePu2EHF8rzICWhXS70sZwEo6LI8mItCIiykvqgii0RAxY16KQ9Fc3CZBrb8jTSrcgkXaO/e64DYhPMgBOFIl+AsLA0MsYLKe6wG3hwF2z7ItxXPeTXgIDFQcnou6rJ1qaKpvDH1dlRAmiZbhaKyb5lut4Rxb7h/RY6Ju29kwKe+4XBQ1UrZ3msVOf/wDLmAXOV8LTSh9geBlXySqa0X1SjShN2eYwDB3cMDbT10h5OiOA0tOEzoghNVxXnMfZhQyfBiYnFb1fM0VZKWBWantTl1gx/rf+Lxc+NAnfDqJAu8Bce9ZhXYpOPzliTXIIcjp6U1MGbtQ9pyW6iHPxw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=intel.com; dmarc=pass action=none header.from=intel.com; dkim=pass header.d=intel.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=intel.onmicrosoft.com; s=selector2-intel-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Z20TltHVExDW6NhucQxHd9vpXiLmnmyoZckwBy1iS/c=; b=GJuW6sK8hBfkAH83cpScMKOxDEabUsCQDOHKtSs48W8CsldjhviACQFGqJ3urjGaFG8bHrWySymQjaT/cS9EhzKmFG2djNifNOMtxl9yne+iBUaOWDtd/2CfgLbSN4lRNg6/UdZjCVyUylTiYf7LUjMdhJ/acbscVArY5ROQMcs= Received: from PH0PR11MB5064.namprd11.prod.outlook.com (2603:10b6:510:3b::15) by PH0PR11MB4965.namprd11.prod.outlook.com (2603:10b6:510:34::7) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4394.22; Mon, 9 Aug 2021 00:02:19 +0000 Received: from PH0PR11MB5064.namprd11.prod.outlook.com ([fe80::c93:200e:5aeb:e11b]) by PH0PR11MB5064.namprd11.prod.outlook.com ([fe80::c93:200e:5aeb:e11b%3]) with mapi id 15.20.4394.022; Mon, 9 Aug 2021 00:02:19 +0000 From: "Min Xu" To: =?utf-8?B?TWFydmluIEjDpHVzZXI=?= , "devel@edk2.groups.io" CC: "Yao, Jiewen" , "Wang, Jian J" , Vitaly Cheptsov Subject: Re: [PATCH] SecurityPkg/DxeImageVerificationLib: Always lookup SHA-256 hash in dbx Thread-Topic: [PATCH] SecurityPkg/DxeImageVerificationLib: Always lookup SHA-256 hash in dbx Thread-Index: AQHXjI1Rw7oygLbr5EaOxvlmn0ODMKtqSMrw Date: Mon, 9 Aug 2021 00:02:19 +0000 Message-ID: References: <5df11a13422732b9c03c120775a2b4dd0a49182f.1628444003.git.mhaeuser@posteo.de> <6810bb96b0c7ef377680112f48bac9cd0a964a52.1628353537.git.mhaeuser@posteo.de> In-Reply-To: <6810bb96b0c7ef377680112f48bac9cd0a964a52.1628353537.git.mhaeuser@posteo.de> Accept-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: dlp-product: dlpe-windows dlp-reaction: no-action dlp-version: 11.5.1.3 authentication-results: posteo.de; dkim=none (message not signed) header.d=none;posteo.de; dmarc=none action=none header.from=intel.com; x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 60342264-8216-42e1-3abd-08d95ac8f4c4 x-ms-traffictypediagnostic: PH0PR11MB4965: x-ms-exchange-transport-forked: True x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:5797; x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:PH0PR11MB5064.namprd11.prod.outlook.com;PTR:;CAT:NONE;SFS:(4636009)(136003)(39860400002)(376002)(346002)(366004)(396003)(966005)(52536014)(5660300002)(66574015)(76116006)(54906003)(9686003)(110136005)(66446008)(64756008)(316002)(2906002)(66946007)(6506007)(55016002)(7696005)(83380400001)(26005)(122000001)(66556008)(66476007)(15650500001)(478600001)(86362001)(38070700005)(71200400001)(38100700002)(33656002)(8676002)(4326008)(8936002)(186003);DIR:OUT;SFP:1102; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?utf-8?B?QkdndExtNzlhZ0oyYTZBNkNud3YyS05oNHN6cU1PWHRiM1NHOCsyeFdKQnFU?= =?utf-8?B?L0ZZYWdJaFlOOGN0RG1zNVNsdEpkdEYyeGVPWEhabU9TUXg5blNYQlhkRlpS?= =?utf-8?B?WlQ0Q2pzN1AweXVYY0MwL25xb0xjZ2t0TFRaeDh1S1dDTVNRYTI2NUFIeUJu?= =?utf-8?B?U3NzQ3ZKUE9DUEZSMHh6VUQ3Z04vSmJBekpoMmdhNmloblk0S1RJQUswRTlO?= =?utf-8?B?R0tFQUt1ZTJWSFNmazUrVURTR1g5clFyWUs5NzVlK1JiY2U3OFN3a1J6dWlM?= =?utf-8?B?TEU0a0NPS0FkdDc2cTV5aC9EQlhuT0FMeXk1UGVBTFBmMkpSVFFuNWdSMGNW?= =?utf-8?B?bW5JNk94bjgzUWxJMkdWbS8zTU5mbittb2VRMGhxbXdjcnIxWGZNazR0OWhY?= =?utf-8?B?MW1JbjlwK1ZCa0QzQ2pJZjRPQ2J5L3ZlL3E4UW9yWmJBQzQxckpNblAzdnVZ?= =?utf-8?B?dzNvS3E1SFNhS0sxZ05xUGJLL2NTT1MrZ2UvdDY4MFdJdTNITHcrVm92a0tL?= =?utf-8?B?NlMrMEdhZ2VTdE5CWWxXQVp6Vkl5ZldpN1l2SGpZK3oyeTBTZDhXSkk3UHp2?= =?utf-8?B?RkFleGRWSEs1YWh5bWRpSlJJYlFPUjZjeCsxaDhFL2cvNkJVZHpvKzJDZXpH?= =?utf-8?B?dGFSUTlweUpzd0FBQjZrZGJDaktDa004clNlQUJ2NlR3cHlXU2Ryd3h0c3ZL?= =?utf-8?B?SzZ6WTVGTTBNaVlQdVdabm9NNGlIbCtzSVJiQnNuQlplbHdHdnJrc0diOTZp?= =?utf-8?B?WW9qQkh0UzJrbW1KMXpCMW1mQ25sRlYxQXdLM2t6U1NDMk4zcWJMQ3h1Nmhy?= =?utf-8?B?YjdhYk4zRDU2UEx0c3FNTXZHVkJFbDdnVWRyaWVPSzN5V2lYUmh5UXNLMlhr?= =?utf-8?B?cmptZEF1ei8zZUN4c3R5UFVNbTNaUVFicVZjVUozQlB1VUczOTQvdjEyV2lR?= =?utf-8?B?L2VBT3RDaFFLc1BPNjJycEhTRUJIVXRTTlN6Mm9KN0JHZ0dwejk3MnlmWXJ2?= =?utf-8?B?MmkveVlyMi9zekt0aTJhbmZFamZiREFnT0lZU2VLc3lsTlN2ZGx6RTZqcG5t?= =?utf-8?B?QWJaRlVTVTErUTF3RHZWY2NvUzh6dGplZDR1YS83dXFGTVU2aWlBUDJmVzZn?= =?utf-8?B?WVRVdmRzQWV5YXU1NmZXaXBSVGcrdVNrMU9YTlNUeVFJbEMvaVF5R1IyTW9u?= =?utf-8?B?WEhNN1pqNWNZa1lJYkY3c3BOTjNKbVA4K0lTcmJlOG8yVXhnU2ZaRmdYNk45?= =?utf-8?B?eFlhYW9RZmd1bjlrKzRWZkc1ekV5U2FMcEJQVGNUTFFKQU9hMlVLQTdmUDdI?= =?utf-8?B?c09vMXRsdkdxR1JIZnVmaElqcmFrMkpNWVlDZGtOOVZtdU94TEw1dHVIZUxu?= =?utf-8?B?R1FMZ0JaS1B6Y0RaQ0Q5MFpuYlpWUHhldTAzQmhiTkppcTNWMjJOM0VneEor?= =?utf-8?B?VCtDTzFBUDZWRFY2TXp2M29TMUpsWklKUkF2cE5XZVA0UERENFFUUVo0Z0hF?= =?utf-8?B?R3BBS2JnekRZQmdHU3BxVndKWVM2VzNuTksxMGpKOThiVkJQT1JwSTAxM3dG?= =?utf-8?B?Sk85WG1pUTdpWkVmK3Z6MkMwMUc1RVkyK0p2L1E3d2FQRnZ6aFZ3SjgwTnNS?= =?utf-8?B?TjdCbDNTMVVsOTVaakZwRDJqVUlLVDRhK2lpNFB2NXFkeUF2dVI0ZWxJaWpE?= =?utf-8?B?MmNsVDBKdTl3TGNqV1U2YTU3Mmo1Y1BETWlGZVB0SzZjU3pQL3hBTkY0Y2Uw?= =?utf-8?Q?7XNQTxW9Us08Ofzv1Iua2Oqsyt29IHg4iMt2YnH?= MIME-Version: 1.0 X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: PH0PR11MB5064.namprd11.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 60342264-8216-42e1-3abd-08d95ac8f4c4 X-MS-Exchange-CrossTenant-originalarrivaltime: 09 Aug 2021 00:02:19.5408 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 46c98d88-e344-4ed4-8496-4ed7712e255d X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: CQRzUGIAGViKPBN5MBbHwbxd3UleOPOoQYcEWeI4apvh6rKFaWjLyPG0LDs7nlzdaDlddXCpChS/2soE7lO8tw== X-MS-Exchange-Transport-CrossTenantHeadersStamped: PH0PR11MB4965 Return-Path: min.m.xu@intel.com X-OriginatorOrg: intel.com Content-Language: en-US Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 T24gQXVndXN0IDksIDIwMjEgMzo0MCBBTSwgTWFydmluIEjDpHVzZXIgd3JvdGU6DQo+IFN1Ympl Y3Q6IFtQQVRDSF0gU2VjdXJpdHlQa2cvRHhlSW1hZ2VWZXJpZmljYXRpb25MaWI6IEFsd2F5cyBs b29rdXAgU0hBLTI1Ng0KPiBoYXNoIGluIGRieA0KPiANCj4gUkVGOiBodHRwczovL2J1Z3ppbGxh LnRpYW5vY29yZS5vcmcvc2hvd19idWcuY2dpP2lkPTM0NjENCj4gDQo+IFRoZSBVRUZJIHNwZWNp ZmljYXRpb24gcHJvaGliaXRzIGxvYWRpbmcgYW55IFVFRkkgaW1hZ2Ugb2Ygd2hpY2ggYSBtYXRj aGluZw0KPiBTSEEtMjU2IGhhc2ggaXMgY29udGFpbmVkIGluICJkYngiIChVRUZJIDIuOSwgMzIu NS4zLjMgIkF1dGhvcml6YXRpb24gUHJvY2VzcyIsDQo+IDMuQSkuIEN1cnJlbnRseSwgdGhpcyBp cyBvbmx5IGV4cGxpY2l0bHkgY2hlY2tlZCB3aGVuIHRoZSBpbWFnZSBpcyB1bnNpZ25lZCBhbmQN Cj4gb3RoZXJ3aXNlIHRoZSBoYXNoIGFsZ29yaXRobXMgb2YgdGhlIGNlcnRpZmljYXRlcyBhcmUg dXNlZC4NCj4gDQo+IEFsaWduIHdpdGggdGhlIFVFRkkgc3BlY2lmaWNhdGlvbiBieSBzcGVjaWZp Y2FsbHkgbG9va2luZyB1cCB0aGUNCj4gU0hBLTI1NiBoYXNoIG9mIHRoZSBpbWFnZSBpbiAiZGJ4 Ii4NCj4gDQo+IENjOiBKaWV3ZW4gWWFvIDxqaWV3ZW4ueWFvQGludGVsLmNvbT4NCj4gQ2M6IEpp YW4gSiBXYW5nIDxqaWFuLmoud2FuZ0BpbnRlbC5jb20+DQo+IENjOiBNaW4gWHUgPG1pbi5tLnh1 QGludGVsLmNvbT4NCj4gQ2M6IFZpdGFseSBDaGVwdHNvdiA8dml0OTY5NkBwcm90b25tYWlsLmNv bT4NCj4gU2lnbmVkLW9mZi1ieTogTWFydmluIEjDpHVzZXIgPG1oYWV1c2VyQHBvc3Rlby5kZT4N Cj4gLS0tDQpJdCBzZWVtcyB0aGVyZSBhcmUgMyBwYXRjaGVzIHNlbnQgZnJvbSBNYXJ2aW4gSMOk dXNlciBhbmQgSSBzdXBwb3NlIHRoZXkncmUgaW4gb25lIHBhdGNoLXNldCwgcmlnaHQ/IFBsZWFz ZSBmb2xsb3cgdGhlIGxpbmsgYmVsb3cgdG8gc2VuZCBvdXQgcGF0Y2gtc2V0IGZvciByZXZpZXcu DQpodHRwczovL2dpdGh1Yi5jb20vdGlhbm9jb3JlL3RpYW5vY29yZS5naXRodWIuaW8vd2lraS9M YXN6bG8ncy11bmtlbXB0LWdpdC1ndWlkZS1mb3ItZWRrMi1jb250cmlidXRvcnMtYW5kLW1haW50 YWluZXJzDQpGb3IgZXhhbXBsZSwgaWYgdGhlcmUgYXJlIDMgY29tbWl0cyBpbiBvbmUgcGF0Y2gt c2V0LCB0aGVuIHRoZSBzdWJqZWN0IG9mIHRoZSBjb21taXRzIGxvb2tzIGxpa2U6DQpbUEFUQ0gg MC80XSBUaGlzIGlzIHRoZSBjb3ZlciBsZXR0ZXINCltQQVRDSCAxLzRdIFRoaXMgaXMgcGF0Y2gg MQ0KDQpPdGhlcndpc2UgdGhlIHJldmlld2VycyBhcmUgY29uZnVzZWQgYnkgdGhlIHBhdGNoZXMu DQoNClRoYW5rcyENClh1LCBNaW4NCg==