coreboot-kgpe-d16/src/security
Bill XIE bad08c2c29 security/tpm: Include mrc.bin in CRTM if present
mrc.bin, on platforms where it is present, is code executed on CPU, so
it should be considered a part of CRTM.

cbfs_locate_file_in_region() is hooked to measurement here too, since
mrc.bin is loaded with it, and CBFS_TYPE_MRC (the type of mrc.bin) is
measured to TPM_CRTM_PCR rather than TPM_RUNTIME_DATA_PCR.

TODO: I have heard that SMM is too resource-limited to link with vboot
library, so currently tspi_measure_cbfs_hook() is masked in SMM.
Please correct me if I am wrong.

Change-Id: Ib4c3cf47b919864056baf725001ca8a4aaafa110
Signed-off-by: Bill XIE <persmule@hardenedlinux.org>
Reviewed-on: https://review.coreboot.org/c/coreboot/+/38858
Tested-by: build bot (Jenkins) <no-reply@coreboot.org>
Reviewed-by: Julius Werner <jwerner@chromium.org>
2020-03-31 10:37:38 +00:00
..
intel src (minus soc and mainboard): Remove copyright notices 2020-03-17 18:26:34 +00:00
memory src (minus soc and mainboard): Remove copyright notices 2020-03-17 18:26:34 +00:00
tpm security/tpm: Include mrc.bin in CRTM if present 2020-03-31 10:37:38 +00:00
vboot security/vboot: Decouple measured boot from verified boot 2020-03-31 07:55:18 +00:00
Kconfig src (minus soc and mainboard): Remove copyright notices 2020-03-17 18:26:34 +00:00
Makefile.inc security/intel: Add TXT infrastructure 2019-09-02 04:52:04 +00:00