<html><body><p><tt><font size="2">I understand wanting some margin, but a 1024-byte subject seems excessive.</font></tt><br><tt><font size="2">Don't we have control over the subject field? Can you find a safe but</font></tt><br><tt><font size="2">smaller value.</font></tt><br><br><tt><font size="2">The TPM is resource limited and NV is so useful for applications that</font></tt><br><tt><font size="2">every developer should try to minimize the amount used.<br><br>> From: Eric Richter <erichte@linux.ibm.com></font></tt><br><tt><font size="2">> To: skiboot@lists.ozlabs.org</font></tt><br><tt><font size="2">> Cc: klaus@linux.ibm.com, nayna@linux.ibm.com</font></tt><br><tt><font size="2">> Date: 09/28/2020 06:07 PM</font></tt><br><tt><font size="2">> Subject: [EXTERNAL] [Skiboot] [PATCH v6a 2/4] secboot_tpm.c: <br>> increase tpmnv vars index size</font></tt><br><tt><font size="2">> Sent by: "Skiboot" <skiboot-bounces+kgoldman=us.ibm.com@lists.ozlabs.org></font></tt><br><tt><font size="2">> <br>> The TPM NV index size for storing the PK was originally set to 1024,<br>> which was determined to be a "smallest maximum" size that we<br>> determined to be enough to store the PK. However with overhead, this<br>> only allowed for about ~912 bytes, which is far too small to store a<br>> certificate, as it only permits about ~10 characters in the x509<br>> subject field.<br>> <br>> This patch increases the TPM NV Vars index to 2048 bytes, which is the<br>> largest size a single NV index can be on the Nuvoton npct650 chip.<br><br><br></font></tt><BR>
</body></html>