security/tpm: Add TCPA logging functionality

* TCG spec only applies to BIOS or UEFI.
* Therefore implement coreboot TCPA compliant log
in CBMEM.
* Write CBMEM log into the coreboot table for CBMEM tool access

Change-Id: I0a52494f647d21e2587231af26ed13d62b3a72f5
Signed-off-by: Philipp Deppenwiese <zaolin@das-labor.org>
Reviewed-on: https://review.coreboot.org/22867
Tested-by: build bot (Jenkins) <no-reply@coreboot.org>
Reviewed-by: Patrick Rudolph <siro@das-labor.org>
This commit is contained in:
Philipp Deppenwiese
2017-12-14 15:49:32 +01:00
committed by Philipp Deppenwiese
parent ef8c559e53
commit f18dc5c72c
6 changed files with 141 additions and 8 deletions

View File

@@ -18,6 +18,18 @@
#define TSPI_H_
#include <security/tpm/tss.h>
#include <commonlib/tcpa_log_serialized.h>
/**
* Setup TCPA cbmem log.
*/
void tcpa_log_init(void);
/**
* Add table entry for cbmem TCPA log.
*/
int tcpa_log_add_table_entry(const char *name, const uint32_t pcr,
const uint8_t *digest, const size_t digest_length);
/**
* Ask vboot for a digest and extend a TPM PCR with it.