Thanks for the PPT. It is helpful for me to understand the background. Some questions and suggestions: 1) The PPT jumps from current status (page 7~9) to proposed updates (page 10~12) directly. I am n

Please allow me to clarify my understanding: 1) You want to promote DrbgLib to MdePkg. -- That is a different topic. We should discuss that in other thread. Now, let’s assume it is OK. 2) You want to

I have two concern: 1) I am worried that this API might be misused. Usually, a crypto API should be secure enough to avoid misuse. For example, if a program wants to use AES encryption, it must NOT us

Merged - https://github.com/tianocore/edk2/pull/3038

Reviewed-by: Jiewen Yao <Jiewen.yao@...>

More question: Please educate me how you plan to include DrbgLib to openssl? Currently, it is using RngLib. https://github.com/tianocore/edk2/blob/master/CryptoPkg/Library/OpensslLib/OpensslLib.inf#L6

Hi 1) Would you please educate me, how this library be used in cryptolib? - https://github.com/tianocore/edk2/blob/master/CryptoPkg/Include/Library/BaseCryptLib.h#L1091 Currently, we have AES_CBC. We

Sounds great. 1) I assume that if it is accepted by project MU, then it must be reviewed and tested. Please add required tag in next patch set. 2) I suggest just use one of: a) all zero, b) initial da

Hi Kun Thank you to make the redesign. Overall the patch set looks good to me. Some questions: Is that from project MU? If so, I would like to see acked-by or tested-by from project MU owner. That can

Both are merged. https://github.com/tianocore/edk2/pull/2981

Reviewed-by: Jiewen Yao <Jiewen.yao@...>

Reviewed-by: Jiewen Yao <Jiewen.yao@...>

Thanks for the response. 1) Why we need "enable UEFI variable write before permanent memory is available"? 2) If the implementation is not ready, I do have concern to add it so early in EDKII. If I do

Hi I am curious why we need this interface. Why we need write variable capability in PEI phase? Where is the implementation of this? I prefer to see an implementation submitted together with header fi

OK. I will revert this at first. Let's figure out a right solution. Acked-by: Jiewen Yao <Jiewen.yao@...>

I remember a wait-for-SIPI CPU cannot response to SMI. We do want to let AP response SMI to perform some action, because some SMM code will rely on all APs in SMM. Thank you Yao Jiewen

Merged https://github.com/tianocore/edk2/pull/2956

Hey Gerd CI failed - https://github.com/tianocore/edk2/pull/2954 Have you run the CI before you submit the patch? Thank you Yao Jiewen

OK. Let's get it work at first. Acked-by: Jiewen Yao <Jiewen.yao@...>