61a8db35d9
1. Add a new index for recovery hash space in TPM - 0x100b 2. Add helper functions to read/write/lock recovery hash space in TPM 3. Add Kconfig option that can be selected by mainboards that want to define this space. 4. Lock this new space while jumping from RO to RW. BUG=chrome-os-partner:59355 BRANCH=None TEST=Verified use of recovery hash space on reef. Signed-off-by: Furquan Shaikh <furquan@chromium.org> Reviewed-on: https://review.coreboot.org/17273 Tested-by: build bot (Jenkins) Reviewed-by: Aaron Durbin <adurbin@chromium.org> Change-Id: I1cacd54f0a896d0f2af32d4b7c9ae581a918f9bb Reviewed-on: https://chromium-review.googlesource.com/410114 Commit-Ready: Furquan Shaikh <furquan@chromium.org> Tested-by: Furquan Shaikh <furquan@chromium.org> Reviewed-by: Aaron Durbin <adurbin@chromium.org>
43 lines
889 B
C
43 lines
889 B
C
/* Copyright (c) 2015 The Chromium OS Authors. All rights reserved.
|
|
* Use of this source code is governed by a BSD-style license that can be
|
|
* found in the LICENSE file.
|
|
*
|
|
* Functions for querying, manipulating and locking rollback indices
|
|
* stored in the TPM NVRAM.
|
|
*/
|
|
|
|
#include <antirollback.h>
|
|
#include <stdlib.h>
|
|
#include <vb2_api.h>
|
|
|
|
uint32_t tpm_extend_pcr(struct vb2_context *ctx, int pcr,
|
|
enum vb2_pcr_digest which_digest)
|
|
{
|
|
return TPM_SUCCESS;
|
|
}
|
|
|
|
uint32_t tpm_clear_and_reenable(void)
|
|
{
|
|
return TPM_SUCCESS;
|
|
}
|
|
|
|
uint32_t antirollback_read_space_firmware(struct vb2_context *ctx)
|
|
{
|
|
vb2api_secdata_create(ctx);
|
|
return TPM_SUCCESS;
|
|
}
|
|
|
|
uint32_t antirollback_write_space_firmware(struct vb2_context *ctx)
|
|
{
|
|
return TPM_SUCCESS;
|
|
}
|
|
|
|
uint32_t antirollback_lock_space_firmware()
|
|
{
|
|
return TPM_SUCCESS;
|
|
}
|
|
|
|
uint32_t antirollback_lock_space_rec_hash(void)
|
|
{
|
|
return TPM_SUCCESS;
|
|
}
|