]> git.dujemihanovic.xyz Git - u-boot.git/commit
efi_loader: Extend PCR's for firmware measurements
authorRuchika Gupta <ruchika.gupta@linaro.org>
Mon, 29 Nov 2021 07:39:46 +0000 (13:09 +0530)
committerHeinrich Schuchardt <heinrich.schuchardt@canonical.com>
Tue, 30 Nov 2021 08:23:49 +0000 (09:23 +0100)
commitc0d9bb0b4a747a7ec481b2369391ca8f53e50bc9
treea6d0c08733eb50431342d440152754baf19fba2e
parent2957a1e22407a84a2cc7c4ea5a8136af1d0278d9
efi_loader: Extend PCR's for firmware measurements

Firmwares before U-Boot may be capable of doing tpm measurements
and passing them to U-Boot in the form of eventlog. However there
may be scenarios where the firmwares don't have TPM driver and
are not capable of extending the measurements in the PCRs.
Based on TCG spec, if previous firnware has extended PCR's, PCR0
would not be 0. So, read the PCR0 to determine if the PCR's need
to be extended as eventlog is parsed or not.

Signed-off-by: Ruchika Gupta <ruchika.gupta@linaro.org>
Reviewed-by: Ilias Apalodimas <ilias.apalodimas@linaro.org>
Tested-by: Ilias Apalodimas <ilias.apalodimas@linaro.org>
lib/efi_loader/efi_tcg2.c