GPG User Authentication: In-memory gpg keygen + keytocard and GPG key material backup enabling (plus a lot of code cleanup and UX improvements) - #1515

Merged

tlaurion merged 69 commits into

linuxboot:masterfrom

tlaurion:inmemory_keygen-gpg_backup_usable_for_RSA_only-copy_to_card_working_for_RSA_only-gpg_auth_for_recovery_and_sub_boot

Nov 13, 2023

Commits on Nov 1, 2023

WiP
tlaurion
committed
b1e5c63
Wip: now supports both backup and copy to card and gpg_auth when backup exists. Might want to discuss that implementation. Some functions needed to be moved from functions to ash_functions so that …
tlaurion
committed
2c55338
WiP: provide proper info/warn/die messages explaining causes of errors linked to detach signing errors
tlaurion
committed
eceb97a
WiP: adapt dmesg in function of CONFIG_DEBUG_OUTPUT being enabled or not so and adapt further troubleshooting notes in code when keys cannot be accessed on media for whatever cause so user can unde…
tlaurion
committed
1f28c71
WiP: further removal of unecessary debug messages
tlaurion
committed
2697a6a
scripts: unify luks in text/prompts/messages to LUKS
tlaurion
committed
88d00df
WiP: add export CONFIG_HAVE_GPG_KEY_BACKUP=y so whiptail-tpm2 can be used with GPG key material thumb drive backup
tlaurion
committed
2ae9440
/etc/functions: add missing TRACE traces to get where TPM passphrase should be written to file and reused since not all in same functions/files for TPM2
tlaurion
committed
2ea62ff
bin/reboot: intercept reboot call when in DEBUG mode to type 'r' to go to recovery shell instead of rebooting
tlaurion
committed
754e3c9
TPM1/TPM2: unify wording for TPM Owner Password and cache it externally to /tmp/secret/tpm_password to be reused in a boot session until recovery shell access or reboot
tlaurion
committed
911eb07
WiP: Clean cached /tmp/secret/tpm_password when sealing fails, otherwise reuse it on TPM Reset/TOTP+HOTP Sealing once for TPM1/TPM2+TPM Disk Unlock Key
tlaurion
committed
3fb84f0
To Squash: changes to reboot were not ash compliant
tlaurion
committed
15f1d0b
WiP to be squashed: we need to refactor prompt_tpm_password which is used both for TPM Owner Password prompt and caching reused for TPM disk unlock key passphrase which of course fails
tlaurion
committed
729f2b1
TPM2 DUK and TOTP/HOTP reseal fix, refactoring and ifferenciating tpm_password into tpm_owner_password and reusing correctly
tlaurion
committed
27c457f
bin/reboot: fix parameter order so that we pause when in DEBUG before rebooting
tlaurion
committed
cf065ee
.ash_history: add history command for manual detached signed integrity validation
tlaurion
committed
b2cb9b4
qemu doc: add modify list/mount instructions to use losetup to map partitions to loop0pX and mount them to get public key
tlaurion
committed
2b21623
WiP: NK3 with p256 ECC algo supported for in-memory keygen and key-to-card op. With this commit, one can provision NK3 with thumb drive backup which enables authenticated recovery shell and USB boot.
tlaurion
committed
56b6029
oem-factory-reset: make passphrases variables able to contain strings and validate things more solidly
tlaurion
committed
9e838ad
PCR extend ops inform users on what happens, otherwise we tpm commands output on screen without context
tlaurion
committed
05fc4c1
gpg_auth function was not failing properly on failing, die instead
tlaurion
committed
7f5d970
initrd/bin/reboot: BugFix in nv41/ns50 condition check to call nitropad-shutdown.sh (otherwise output error on console for improper condition in ash
tlaurion
committed
9c3fb35
oem-factory-reset: further cleaning of code for proper validation and consistency checks for passphrases. Also skip flashing code on qemu boards with short explanation
tlaurion
committed
7cd44b6
oem-factory-reset seal-hotpkey: unify prompts and vocabulary
tlaurion
committed
8a8634f
Squash: remove DEBUG that were TODO for removal
tlaurion
committed
c3a5359
oem-factory-reset: simplify provisioned secret output at end of wizard, including GPG key material output passphrase (uses strings+=string)
tlaurion
committed
e6eeb57
RSA keygen adaptation testing with rsa 2048 in memory keygen and key to card missing pieces
tlaurion
committed
867fb8d
Squash: revert testing changes for RSA and unify once more USB Security dongle's usage
tlaurion
committed
38fc097
oem-factory-reset: make initial questionnaire more concise
tlaurion
committed
ad1bff6
Remove TODO in code that were not relevant prior of first review
tlaurion
committed
a3086e9
oem-factory-reset: RSA default should be 3072, not 3076. squash
tlaurion
committed
2a04fb5
oem-factory-reset: typo correction past tense
tlaurion
committed
4d72eb3
luks-functions: cleanup code of luks containers reported
tlaurion
committed
2aa9cfa
oem-factory-reset: now permits to generate in-memory key, backuped to encrypted disk without copy to card from questionnaire. Can be tested out of the box on Qemu without modification from end of w…
tlaurion
committed
584c964
qemu boards: Put back DEBUG and TRACE on
tlaurion
committed
f5dc5ef
ash_functions: have gpg_auth calls to confirm_gpg_card in subshell loop to force successful authentication
tlaurion
committed
c2c32c4
oem-factory-reset: prmompt only for GPG User PIN when needed, warn users when no backup/when having only in-memory keygen backup without smartcard.
tlaurion
committed
2942d66
luks_functions: fix width of whiptail messages with newlines so its not cut in the middle
tlaurion
committed
af3287c

Commits on Nov 2, 2023

Commits on Nov 3, 2023

Commits on Nov 6, 2023

Commits on Nov 7, 2023

oem-factory-reset: unify booleen y/n variable usage and double check logic. Also move USB Security dongle capability detection under code already checking for USB Security Dongle's smartcard presence.
tlaurion
committed
3787293

Commits on Nov 9, 2023

Commits on Nov 13, 2023