scripts: fix compute_authenticode_hash for unsigned PEs

When the PE has no attached certificate the security data directory
fields VirtualAddress and Size are both 0.  The previous unconditional
slicing:

    pe_data[certificate_table_offset + 0x08 : 0]   # -> empty
    + pe_data[0 + 0 :]                              # -> whole file re-appended

produced a wrong digest for unsigned images.

Add an explicit branch: when VirtualAddress == 0, hash only the bytes
that follow the 8-byte cert-dir data-directory entry, which is the
correct tail of an unsigned PE image.

Signed-off-by: Jeremy Compostella <jeremy.compostella@intel.com>

scripts: fix compute_authenticode_hash for unsigned PEs

When the PE has no attached certificate the security data directory
fields VirtualAddress and Size are both 0.  The previous unconditional
slicing:

    pe_data[certificate_table_offset + 0x08 : 0]   # -> empty
    + pe_data[0 + 0 :]                              # -> whole file re-appended

produced a wrong digest for unsigned images.

Add an explicit branch: when VirtualAddress == 0, hash only the bytes
that follow the 8-byte cert-dir data-directory entry, which is the
correct tail of an unsigned PE image.

Signed-off-by: Jeremy Compostella <jeremy.compostella@intel.com>

update kek_update_map.json

Run get_auth_var_signing_certificate script,
commit updated kek_update_map.json file.

Changes:
 - All entries are now sorted by filename.
 - Fix some paths from windows ('\\') to posix ('/') directory separator.
 - Remove duplicate RedHat entry.

Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>

update kek_update_map.json

Run get_auth_var_signing_certificate script,
commit updated kek_update_map.json file.

Changes:
 - All entries are now sorted by filename.
 - Fix some paths from windows ('\\') to posix ('/') directory separator.
 - Remove duplicate RedHat entry.

Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>

pip: bump ruff from 0.14.13 to 0.14.14

Bumps [ruff](https://github.com/astral-sh/ruff) from 0.14.13 to 0.14.14.
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.14.13...0.14.14)

---
updated-dependencies:
- dependency-name: ruff
  dependency-version: 0.14.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

pip: bump ruff from 0.14.13 to 0.14.14

Bumps [ruff](https://github.com/astral-sh/ruff) from 0.14.13 to 0.14.14.
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.14.13...0.14.14)

---
updated-dependencies:
- dependency-name: ruff
  dependency-version: 0.14.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Update KEKUpdate_ASUS_PKEABCB3D4

Update KEKUpdate_ASUS_PKEABCB3D4

Updating template files

Updating template files