Skip to content

EBBR Notes 2025.12.17

Jump to bottom Edit New page
Vincent Stehlé edited this page Dec 17, 2025 · 2 revisions

Attendees

  • Ilias Apalodimas (Linaro)
  • Heinrich Schuchardt (Canonical)
  • Vincent Stehlé (Arm)

Agenda

  • Future EBBR v2.4.0 planning discussion

Notes

  • Releasing EBBR v2.4.0 makes sense; let people review and plan for a release in January 2026.

Happy Christmas holidays to all EBBR contributors!

Raw notes

  • Future EBBR v2.4.0 planning discussion
    • Do we have enough to release 2.4?
    • TPM, MD5
      • MD5 should be disallowed
      • SHA1 support for TPM, U-Boot patches
        • For old TPMs
      • Must extend all algorithms, always
        • This makes a collision difficult
      • Event log with SHA256
        • Kind of PQ safe, SHA512 better
      • Heinrich concern: use of SHA1 (or even MD5) instead of SHA256
        • TCG2 is clear enough about that
    • -> Doing an EBBR 2.4 release soon is fine
      • RISC-V SBI is enough already
      • -> create candidate tag for review
      • -> if everything goes well, release 2.4 in January
  • Capsule on disk
    • Thought Boot Option must point to ESP
    • After re-reading: Boot Option pointing to the disk where the ESP is is enough
      • Also, removable drives...
    • This is figured out, patches in-flight for U-Boot
  • Is there a gap in testing?

Links

Add a custom footer
Add a custom sidebar

Clone this wiki locally