From: Ard Biesheuvel <ardb+git@google.com>
To: linux-efi@vger.kernel.org
Cc: Ard Biesheuvel <ardb@kernel.org>,
Kuppuswamy Sathyanarayanan
<sathyanarayanan.kuppuswamy@linux.intel.com>,
Ilias Apalodimas <ilias.apalodimas@linaro.org>
Subject: [PATCH v3 0/5] efi/libstub: Fall back to CC proto for measurement
Date: Fri, 8 Mar 2024 09:57:55 +0100 [thread overview]
Message-ID: <20240308085754.476197-7-ardb+git@google.com> (raw)
From: Ard Biesheuvel <ardb@kernel.org>
This is a follow-up to Kuppuswamy's series [0] to add TDX based
measurement of the initrd and command line to the EFI stub.
Changes since v2 [1]:
- fix incorrect assertion that efi_tcg2_tagged_event is a local
invention; it comes from the TCG PC Client spec
- fix deviation from TCG PC Client spec in how the event size field is
populated
Changes since v1:
- add patch to switch to the TCG2 spec's symbolic GUID name for the
final events table
- omit flex array member in efi_cc_event_t
- avoid version confusion between CC and TCG2 both using version 2
Cc: Kuppuswamy Sathyanarayanan <sathyanarayanan.kuppuswamy@linux.intel.com>
Cc: Ilias Apalodimas <ilias.apalodimas@linaro.org>
[0] https://lore.kernel.org/all/20240215030002.281456-1-sathyanarayanan.kuppuswamy@linux.intel.com/
[1] https://lkml.kernel.org/r/20240307162214.272314-7-ardb%2Bgit%40google.com
Ard Biesheuvel (3):
efi/libstub: Use correct event size when measuring data into the TPM
efi/tpm: Use symbolic GUID name from spec for final events table
efi/libstub: Measure into CC protocol if TCG2 protocol is absent
Kuppuswamy Sathyanarayanan (2):
efi/libstub: Add Confidential Computing (CC) measurement typedefs
efi/libstub: Add get_event_log() support for CC platforms
drivers/firmware/efi/efi.c | 3 +-
drivers/firmware/efi/libstub/efi-stub-helper.c | 98 ++++++++++++++------
drivers/firmware/efi/libstub/efi-stub.c | 2 +-
drivers/firmware/efi/libstub/efistub.h | 95 +++++++++++++++++--
drivers/firmware/efi/libstub/tpm.c | 82 ++++++++++------
drivers/firmware/efi/libstub/x86-stub.c | 2 +-
include/linux/efi.h | 4 +-
7 files changed, 219 insertions(+), 67 deletions(-)
--
2.44.0.278.ge034bb2e1d-goog
next reply other threads:[~2024-03-08 8:58 UTC|newest]
Thread overview: 10+ messages / expand[flat|nested] mbox.gz Atom feed top
2024-03-08 8:57 Ard Biesheuvel [this message]
2024-03-08 8:57 ` [PATCH v3 1/5] efi/libstub: Use correct event size when measuring data into the TPM Ard Biesheuvel
2024-03-08 9:11 ` Ard Biesheuvel
2024-03-08 9:37 ` Ilias Apalodimas
2024-03-08 9:43 ` Ard Biesheuvel
2024-03-08 10:05 ` Ilias Apalodimas
2024-03-08 8:57 ` [PATCH v3 2/5] efi/tpm: Use symbolic GUID name from spec for final events table Ard Biesheuvel
2024-03-08 8:57 ` [PATCH v3 3/5] efi/libstub: Add Confidential Computing (CC) measurement typedefs Ard Biesheuvel
2024-03-08 8:57 ` [PATCH v3 4/5] efi/libstub: Measure into CC protocol if TCG2 protocol is absent Ard Biesheuvel
2024-03-08 8:58 ` [PATCH v3 5/5] efi/libstub: Add get_event_log() support for CC platforms Ard Biesheuvel
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20240308085754.476197-7-ardb+git@google.com \
--to=ardb+git@google.com \
--cc=ardb@kernel.org \
--cc=ilias.apalodimas@linaro.org \
--cc=linux-efi@vger.kernel.org \
--cc=sathyanarayanan.kuppuswamy@linux.intel.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).