u-boot.git/drivers/tpm, branch v2023.01

tpm2: ftpm: open session with privileged ree login

2022-12-20T07:37:36+00:00

Opens the fTPM session with TEE_LOGIN_REE_KERNEL as fTPM may restrict
access to that login when Linux based OS is running as applications are
expected to got through the Linux TPMv2 driver.

Signed-off-by: Etienne Carriere 
Reviewed-by: Ilias Apalodimas 
Signed-off-by: Ilias Apalodimas

tpm: Implement state command for Cr50

2022-09-03T13:59:05+00:00

Add a vendor-specific TPM2 command for this and implement it for Cr50.
Note: This is not part of the TPM spec, but is a Cr50 extension.

Signed-off-by: Simon Glass 
Reviewed-by: Ilias Apalodimas 
Signed-off-by: Ilias Apalodimas

tpm: Allow reporting the internal state

2022-09-03T13:59:05+00:00

It is useful to read information about the current TPM state, where
supported, e.g. for debugging purposes when verified boot fails.

Add support for this to the TPM interface as well as Cr50. Add a simple
sandbox test.

Signed-off-by: Simon Glass 
Reviewed-by: Ilias Apalodimas 
Signed-off-by: Ilias Apalodimas

tpm: sandbox: Allow init of TPM in a different phase

2022-09-03T13:58:56+00:00

At present the emulator assumes that the TPM is inited in the same phase
where it is used. But in fact SPL may init the TPM, so we don't want to
complain when U-Boot proper later uses it. Remove this check.

It might be best to save this information into the device state for the
TPM, so that we can make sure the TPM was inited at some point. For now,
this seems good enough.

Signed-off-by: Simon Glass 
Reviewed-by: Ilias Apalodimas 
Signed-off-by: Ilias Apalodimas

common: Drop display_options.h from common header

2022-08-10T17:46:55+00:00

Move this out of the common header and include it only where needed.

Signed-off-by: Simon Glass

tpm: Add the RNG child device

2022-08-02T20:50:02+00:00

The TPM device comes with the random number generator(RNG)
functionality which is built into the TPM device. Add logic to add the
RNG child device in the TPM uclass post probe callback.

The RNG device can then be used to pass a set of random bytes to the
linux kernel, need for address space randomisation through the
EFI_RNG_PROTOCOL interface.

No compatible string is provided because this is not available in
the binding defined by Linux. If multiple rand devices are in the
system, then some method of selecting them (other than device tree)
will need to be used, or a binding will need to be added.

Signed-off-by: Sughosh Ganu 
Reviewed-by: Ilias Apalodimas 
Signed-off-by: Ilias Apalodimas

tpm: add support for TPMv2.x I2C chips

2022-05-23T13:33:58+00:00

Add the tpm2_tis_i2c driver that should support any TPMv2 compliant
I2C chips, such as the NPCT75X chip.

[Ilias rename priv_auto_alloc_size to priv_auto]
Signed-off-by: Eddie James 
Reviewed-by: Joel Stanley 
Reviewed-by: Ilias Apalodimas 
Signed-off-by: Ilias Apalodimas

tpm: core: Set timeouts before requesting locality

2022-05-23T13:32:55+00:00

Requesting the locality uses the timeout values, so they need
to be set beforehand.

Signed-off-by: Eddie James 
Reviewed-by: Ilias Apalodimas 
Reviewed-by: Joel Stanley 
Signed-off-by: Ilias Apalodimas

vpl: Add Kconfig options for VPL

2022-05-02T13:58:13+00:00

Add VPL versions of commonly used Kconfig options.

Signed-off-by: Simon Glass

doc: replace @return by Return:

2022-01-19T17:11:34+00:00

Sphinx expects Return: and not @return to indicate a return value.

find . -name '*.c' -exec \
sed -i 's/^\(\s\)\*\(\s*\)@return\(\s\)/\1*\2Return:\3/' {} \;

find . -name '*.h' -exec \
sed -i 's/^\(\s\)\*\(\s*\)@return\(\s\)/\1*\2Return:\3/' {} \;

Signed-off-by: Heinrich Schuchardt