diff options
| author | Tom Rini <trini@konsulko.com> | 2025-01-29 08:12:21 -0600 |
|---|---|---|
| committer | Tom Rini <trini@konsulko.com> | 2025-01-29 08:12:21 -0600 |
| commit | 021baf7b08cceb58bb850859dba1614424e16a83 (patch) | |
| tree | 9f53a40366eea064bcafbe5b82a3f1245b2671bc /drivers | |
| parent | 75125f392de4e672127fe0b092d481e78ff8bdd0 (diff) | |
| parent | 8895ff8ae2186b53b4a073966ef16b09c12a69b8 (diff) | |
Merge tag 'tpm-master-28012025' of https://source.denx.de/u-boot/custodians/u-boot-tpm
CI: https://source.denx.de/u-boot/custodians/u-boot-tpm/-/pipelines/24375
We have use cases where a previous stage boot loader doesn't have any
TPM drivers. Instead of extending the hardware PCRs it produces an
EventLog that U-Boot later replays on the hardware.
The only real example we have is TF-A, which produces the EventLog using
hashing algorithms created at compile time. This creates a problem to the
TPM since measurements need to extend all active PCR banks. Up to now
we were exiting refusing the extend measurements.
TPMs can be instructed to change their active PCR banks, as long as the
device resets immediately after a reconfiguration. This PR is adding
that functionality. U-Boot can now scan the currently active TPM PCR
banks, the ones it was compiled to support and the ones present in an
EventLog. It the reconfigures the TPM on the fly with the correct algorithms.
Diffstat (limited to 'drivers')
| -rw-r--r-- | drivers/tpm/Kconfig | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/drivers/tpm/Kconfig b/drivers/tpm/Kconfig index d59102d9a6b..01bc686d367 100644 --- a/drivers/tpm/Kconfig +++ b/drivers/tpm/Kconfig @@ -209,6 +209,15 @@ config TPM2_MMIO to the device using the standard TPM Interface Specification (TIS) protocol. +config TPM2_EVENT_LOG_SIZE + int "EventLog size" + depends on TPM_V2 + default 65536 + help + Define the size of the EventLog. Note that this is going to be + allocated twice. One for the eventlog it self and one for the + configuration table that is required from the TCG2 spec + endif # TPM_V2 endmenu |