34ec32d54b
If LP_VBOOT_CBFS_INTEGRATION is enabled, then libcbfs will reboot with vboot failure in non-recovery mode on CBFS file hash mismatch. BUg=b:197114807 TEST=Build with VBOOT_CBFS_INTEGRATION enabled and boot on google/ovis4es device Change-Id: Ic0f62212b7217b384e8c4cbd9535fe4243301f8c Signed-off-by: Jakub Czapiga <jacz@semihalf.com> Reviewed-on: https://review.coreboot.org/c/coreboot/+/77726 Reviewed-by: Eric Lai <eric_lai@quanta.corp-partner.google.com> Reviewed-by: Yu-Ping Wu <yupingso@google.com> Tested-by: build bot (Jenkins) <no-reply@coreboot.org>
43 lines
1.0 KiB
Plaintext
43 lines
1.0 KiB
Plaintext
# SPDX-License-Identifier: BSD-3-Clause
|
|
|
|
config VBOOT_LIB
|
|
bool "Compile verified boot (vboot) library"
|
|
default y if CHROMEOS
|
|
default n
|
|
help
|
|
This option enables compiling and building vboot libraries vboot_fw and tlcl.
|
|
|
|
if VBOOT_LIB
|
|
|
|
config VBOOT_CBFS_INTEGRATION
|
|
bool "Enable vboot and CBFS integration"
|
|
default n
|
|
depends on CBFS_VERIFICATION
|
|
help
|
|
Say yes to request reboot on CBFS file hash mismatch in non-recovery mode.
|
|
|
|
config VBOOT_TPM2_MODE
|
|
bool "TPM2 Mode"
|
|
default y
|
|
help
|
|
This option enables TPM 2.0 support in vboot. Disabling it allows using TPM 1.2.
|
|
|
|
config VBOOT_X86_SHA_EXT
|
|
bool "x86 SHA Extension"
|
|
default y if CHROMEOS
|
|
default n
|
|
depends on ARCH_X86
|
|
help
|
|
This option enables SHA256 implementation using x86 SHA processor extension
|
|
instructions: sha256msg1, sha256msg2, sha256rnds2.
|
|
|
|
config VBOOT_SHA_ARMV8_CE
|
|
bool "SHA256 implementation using ARMv8 Crypto Extension"
|
|
default y if CHROMEOS
|
|
default n
|
|
depends on ARCH_ARM64
|
|
help
|
|
This option enables SHA256 implementation using ARMv8 Crypto Extension.
|
|
|
|
endif
|