coreboot-kgpe-d16/src/soc/intel/common
Pratikkumar Prajapati 42f7dc7493 soc/intel/common: Add configs for TME exclusion range and new key gen
Add following config options.

1. TME_GENERATE_NEW_KEY_ON_WARM_BOOT
   Program Intel TME to generate a new key for each warm boot. TME
   always generates a new key on each cold boot. With this option
   enabled TME generates a new key even in warm boot. Without this
   option TME reuses the key for warm boot.

2. TME_EXCLUDE_CBMEM_ENCRYPTION
   This option allows to exclude the CBMEM region from being encrypted
   by Intel TME. When TME is enabled it encrypts whole DRAM. TME
   provides option to carve out a region of physical memory to get
   excluded from encryption. With this config enabled, CBMEM region
   does not get encrypted by TME. If TME is not programmed to generate
   a new key in warm boot, exclusion range does not need be programmed
   due to the fact that TME uses same key in warm boot if
   TME_GENERATE_NEW_KEY_ON_WARM_BOOT is not set. But if TME is
   programmed to generate a new key in warm boot, contents of the CBMEM
   get encrypted with a new key in each warm boot case hence, that leads
   to loss of CBMEM data from previous warm boot. So enabling this
   config allows CBMEM region to get excluded from being encrypted and
   can be accessible irrespective of the type of the platform reset.

Bug=b:276120526
TEST=Able to build rex

Signed-off-by: Pratikkumar Prajapati <pratikkumar.v.prajapati@intel.com>
Change-Id: Id5008fee07b97faadc7dd585f445295425173782
Reviewed-on: https://review.coreboot.org/c/coreboot/+/75625
Reviewed-by: Subrata Banik <subratabanik@google.com>
Tested-by: build bot (Jenkins) <no-reply@coreboot.org>
2023-06-16 14:14:25 +00:00
..
acpi treewide: Remove unuseful "_ART : Active Cooling Relationship Table" 2023-02-17 15:44:37 +00:00
basecode soc/intel/common: Make get_ramtop_addr non static 2023-06-07 22:00:47 +00:00
block soc/intel/common: Add configs for TME exclusion range and new key gen 2023-06-16 14:14:25 +00:00
pch
fsp_reset.c soc/intel: Extend fsp_get_pch_reset_status() to all FSP APIs 2023-05-19 08:23:42 +00:00
hda_verb.c
hda_verb.h
Kconfig.common soc/intel/common/crashlog: Add support for IOE die 2023-06-06 17:34:53 +00:00
Makefile.inc
mma.c
mma.h
nhlt.c
reset.c
reset.h soc/intel/common: Introduce API to get the FSP Reset Status 2023-05-02 10:51:01 +00:00
smbios.c soc/intel: Add max memory speed into dimm info 2023-06-15 15:08:12 +00:00
smbios.h soc/intel: Add max memory speed into dimm info 2023-06-15 15:08:12 +00:00
tpm_tis.c
vbt.c
vbt.h