erebion/coreboot
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

security/tpm: Add function to measure a region device

Browse source 
Add a new function which can hash a given region device and extend a PCR
in the TPM with the result. The needed SHA algorithms are included from
3rdparty/vboot and thus not duplicated in the coreboot tree.

For now VB2_LIB is not usable in postcar stage. Follow-up commits will
add the ability to use the lib in postcar as well. Once this feature is
ready, the library will be included in postcar stage to make this
function available in every stage.

Change-Id: I126cc3500fd039d63743db78002a04d201ab18aa
Signed-off-by: Werner Zeh <werner.zeh@siemens.com>
Reviewed-on: https://review.coreboot.org/29234
Tested-by: build bot (Jenkins) <no-reply@coreboot.org>
Reviewed-by: Philipp Deppenwiese <zaolin.daisuki@gmail.com>
This commit is contained in:
Werner Zeh 2018-10-23 07:40:08 +02:00 • committed by Philipp Deppenwiese
commit 30cf14ff3f
4 changed files with 86 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

4
src/security/vboot/Makefile.inc
View file

@ -107,7 +107,11 @@ $(1)-srcs += $$(VB2_LIB_$(1))
endef # vboot-for-stage
CFLAGS_common += -I3rdparty/vboot/firmware/2lib/include
$(eval $(call vboot-for-stage,verstage))
$(eval $(call vboot-for-stage,bootblock))
$(eval $(call vboot-for-stage,ramstage))
ifeq ($(CONFIG_VBOOT_SEPARATE_VERSTAGE),y)