Skip to content

Why is SHA1 the default hashing algorithm in tpm2-tools? #3340

@tomoveu

Description

@tomoveu

It looks like SHA1 is the default hashing algorithm for tpm2_hash. Could we change this to SHA256 or anything that is not deprecated?

root@9ac55cfa586b:~/lab/chapter_D# tpm2_hash -o hash.txt --hex random.bin
root@9ac55cfa586b:~/lab/chapter_D# cat hash.txt 
0d0cda9c13ececee74e8c61bf363233a906f6b84
root@9ac55cfa586b:~/lab/chapter_D# sha1sum random.bin 
0d0cda9c13ececee74e8c61bf363233a906f6b84  random.bin

where random.bin is just 64 bytes of random data as produced by tpm2_getrandom.

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions