]> git.ipfire.org Git - thirdparty/ipxe.git/commit
[build] Mark MS-CHAPv2 as permitted for UEFI Secure Boot
authorMichael Brown <mcb30@ipxe.org>
Tue, 3 Feb 2026 16:02:19 +0000 (16:02 +0000)
committerMichael Brown <mcb30@ipxe.org>
Tue, 3 Feb 2026 16:02:19 +0000 (16:02 +0000)
commit5abbcab9092bc7226995626a65aaa3f7a409459e
treedb014e1c56f29fb2c318a35b75666af0d1c3823c
parent9106130f62d3e5a51e8ac04d4965a2a424517dc9
[build] Mark MS-CHAPv2 as permitted for UEFI Secure Boot

MS-CHAPv2 and the underlying DES algorithm are cryptographically
obsolete, but still relatively widely used.  There is no impact to
UEFI Secure Boot from using these obsolete algorithms: the only
untrusted inputs are the username, password, and received network
packets, and all of these are thoroughly validated before use.

Review these files and mark them as permitted for UEFI Secure Boot.

Signed-off-by: Michael Brown <mcb30@ipxe.org>
src/crypto/des.c
src/crypto/mschapv2.c
src/include/ipxe/des.h
src/include/ipxe/mschapv2.h
src/net/eap_mschapv2.c