On Thu May 23, 2024 at 4:39 PM EEST, David Howells wrote:

Jarkko Sakkinen [off-list ref] wrote:

quoted

There's no reason to encode OID_TPMSealedData at run-time, as it never
changes.

Replace it with the encoded version, which has exactly the same size:

	67 81 05 0A 01 05

Include OBJECT IDENTIFIER (0x06) tag and length as the epilogue so that
the OID can be simply copied to the blob.

Signed-off-by: Jarkko Sakkinen <jarkko@kernel.org>

Reviewed-by: David Howells <dhowells@redhat.com>

Thanks!

BR, Jarkko