u-boot.git/drivers/tpm, branch v2021.10

sandbox: tpm: Support extending a PCR multiple times

2021-08-01T15:05:24Z

It is fairly easy to handle this case and it makes the emulator more useful, since PCRs are commonly extended several times. Add support for this, using U-Boot's sha256 support. For now sandbox only supports a single PCR, but that is enough for the tests that currently exist. Signed-off-by: Simon Glass

sandbox: tpm: Correct handling of SANDBOX_TPM_PCR_NB

2021-08-01T15:05:24Z

This is the number of PCRs, so the current check is off by one. Also the map itself should not be checked, just the resulting pcr_index, to avoid confusing people who read the code. Fix these problems. Signed-off-by: Simon Glass

sandbox: tpm: Support storing device state in tpm2

2021-08-01T15:05:24Z

At present the tpm2 emulator does not support storing the device state. Add this so we can handle the normal vboot flow through the sandbox executables (VPL->SPL etc.) with the TPM contents staying in place. Note: sandbox has not yet been converted to use livetree for the state information, since livetree does not yet support writing to the tree. Signed-off-by: Simon Glass

sandbox: tpm: Support nvdata in TPM2

2021-08-01T15:05:24Z

Add support for this feature in the TPM2 emulator, to support Chromium OS vboot. Signed-off-by: Simon Glass

sandbox: tpm: Track whether the state is valid

2021-08-01T15:05:24Z

Add checking as to whether the current TPM state is valid, so we can implement reading/writing the state. Signed-off-by: Simon Glass

sandbox: tpm: Finish comments for struct sandbox_tpm2

2021-08-01T15:05:24Z

Tidy up the missing comments for this struct. Signed-off-by: Simon Glass

sandbox: tpm: Correct handling of get-capability

2021-08-01T15:05:24Z

This function current handles the kernel case incorrectly. Fix it, and use the shorter TPM_HDR_LEN while we are here. Signed-off-by: Simon Glass

sandbox: tpm: Support the define-space command

2021-08-01T15:05:24Z

Add support for this command, moving away from the previous approach of hard-coding the initial data in the driver, now that the kernel-space data has to be set up by the higher-level vboot code. Signed-off-by: Simon Glass

sandbox: tpm: Tidy up reading and writing of device state

2021-08-01T15:05:24Z

At present this code assumes that the TPM data has been read but this may not be the case. Refactor the code to use a separate pointer so we know the current state of the data. Add error checking for the data size. Signed-off-by: Simon Glass

sandbox: tpm: Split out common nvdata code

2021-08-01T15:05:24Z

We want to support nvdata in TPM2 as well. To avoid code duplicating the associated code, move it into a common file. Drop the special-case logic for the kernel space. This can be handled by the higher-level code now, i.e. in vboot itself. Signed-off-by: Simon Glass