erebion/coreboot
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
coreboot/src/security/tpm
History
Ivan Kuzneczov b5581d556b drivers/mrc_cache: Measure MRC cache as runtime data 
MRC cache used to be measured as runtime data when it was resided in
CBFS before commit 82aa8338c7 ("drivers/mrc_cache: Always generate an
FMAP region"). This patch will restore this behavior for MRC cache
stored in FMAP region outside of CBFS.

Now, MRC cache will be measured at the end of
mrc_cache_load_current(), mrc_cache_current_mmap_leak() and
update_mrc_cache_by_type(), to guarantee that a tamper with the memory
(like https://badram.eu/ ) will be detected, controlled by Kconfig
option TPM_MEASURE_MRC_CACHE.

TEST=On Ivy Bridge platforms, Empty MRC cache is not measured.
     Changing DIMM causes both the old cache and new cache being
     measured, thus the runtime data measurement is changed, which
     could be used as an alarm for memory tampering. Starting from the
     second boot after changing DIMM, the runtime data measurement
     becomes stable.

Signed-off-by: Ivan Kuzneczov <ivan.kuzneczov@hardenedvault.net>
Change-Id: I0d82642c24de1b317851d0afd44985195e92c104
Reviewed-on: https://review.coreboot.org/c/coreboot/+/85605
Tested-by: build bot (Jenkins) <no-reply@coreboot.org>
Reviewed-by: Matt DeVillier <matt.devillier@gmail.com>
2025-05-10 22:50:41 +00:00
..
tspi tree: Use <stdio.h> for snprintf 2024-05-29 10:33:54 +00:00
tss cr50: Replace "cr50" to "GSC" in debug messages 2024-05-17 12:50:28 +00:00
Kconfig drivers/mrc_cache: Measure MRC cache as runtime data 2025-05-10 22:50:41 +00:00
Makefile.mk security/tpm: resolve conflicts in TSS implementations 2024-03-28 15:16:19 +00:00
tis.h security/tpm: support compiling in multiple TPM drivers 2024-04-16 13:52:14 +00:00
tpm1_log_serialized.h security/tpm/tpm{1,2}_log_serialized.h: Use C99 flexible arrays 2023-08-01 12:41:14 +00:00
tpm2_log_serialized.h security/tpm/tpm{1,2}_log_serialized.h: Use C99 flexible arrays 2023-08-01 12:41:14 +00:00
tspi.h treewide: convert to tpm_result_t 2023-09-28 16:54:37 +00:00
tss.h security/tpm: replace CONFIG(TPMx) checks with runtime check 2024-03-28 15:18:04 +00:00
tss1.h security/tpm: resolve conflicts in TSS implementations 2024-03-28 15:16:19 +00:00
tss2.h security/tpm: resolve conflicts in TSS implementations 2024-03-28 15:16:19 +00:00
tss_errors.h drivers/pc80/tpm: probe for TPM family of a device 2024-02-07 12:20:25 +00:00