Authenticated variable tests, now time based auth variable only allow SHA256.

[Derek Lin]

We test failed on fwts UEFI test, uefirtauthvar: Authenticated variable tests
Test 1 of 12: Create authenticated variable test.
FAILED [HIGH] Failed to create authenticated variable with UEFI runtime service.
Return status: EFI_SECURITY_VIOLATION. The function was not performed due to a security violation.

This fail disappear after I revert an EDKII change.

---
Revision: c035e37335ae43229d7e68de74a65f2c01ebc0af
Author: Zhang Lubo <email address hidden>
Date: 1/5/2017 2:58:05 PM
Message:
SecurityPkg: enhance secure boot Config Dxe & Time Based AuthVariable.

V3: code clean up

prohibit Image SHA-1 hash option in SecureBootConfigDxe.
Timebased Auth Variable driver should ensure AuthAlgorithm
is SHA256 before further verification
---

The EDKII change of AuthService.c file is corresponding to UEFI spec 2.7 CH. 8.2.1 """Only a digest algorithm of SHA-256 is accepted."""

So, there might be something wrong in fwts set auth variable test.

[Ivan Hu (ivan.hu)]

This bug is due to the auth test data is follow the typical ASN.1 structure of PKCS7 Signature
  ContentInfo {

     contentType = 1.2.840.113549.1.7.2 //(signedData)

     content {

       SignedData {

         version = 1

         ...

       }

     }
  }

But in the UEFI spec defined only needs the SignedData as the certificate data.

[Ivan Hu (ivan.hu)]

fixed patch included in fwts V17.11.00

[Derek Lin (dereklin)]

Thanks Ivan for the fix.