Dimitris Karakasilis 62fb8f6cce Reuse a secret then it's there and ignore missing PCRs ...

This allows the operator to re-use an existing passphrase but let the
sealed volume be re-created automatically (so decryption can still
happen, we don't loose the original passphrase).

Also allows the operator to skip a PCR (e.g. 11) if they want to by
simply removing it after the initial enrollement or by manuall creating
the initial sealed volume but only with the PCRs they are interested in
by setting those to empty strings. This is useful if a PCR is expected
to change often, e.g. PCR 11 because of kernel upgrades.

Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>

2025-09-25 15:16:54 +03:00

..

challenger_test.go

Refactor wall-of-text method to one with better narrative

2025-09-25 13:16:15 +03:00

challenger.go

Reuse a secret then it's there and ignore missing PCRs

2025-09-25 15:16:54 +03:00

suite_test.go

Introduce a test suite and an earthly target to run it

2022-11-17 12:57:09 +02:00