u-boot.git/drivers/tpm, branch v2024.01

tpm: sandbox: Update for needed TPM2 capabilities

2023-10-27T10:08:25+00:00

The driver needs to support getting the PCRs in the capabilities
command. Fix various other things and support the max number
of PCRs for TPM2.
Remove the !SANDBOX dependency for EFI TCG2 as well.

Signed-off-by: Eddie James 
Reviewed-by: Simon Glass 
Acked-by: Ilias Apalodimas 
Signed-off-by: Ilias Apalodimas

common: Drop linux/printk.h from common header

2023-09-24T13:54:57+00:00

This old patch was marked as deferred. Bring it back to life, to continue
towards the removal of common.h

Move this out of the common header and include it only where needed.

Signed-off-by: Simon Glass

tpm: sandbox: Change the return code when device is already open

2023-02-28T07:44:25+00:00

All the TPM drivers as well as out TCG TIS API for a TPM2.0 device
return -EBUSY if the device has already been opened.  Adjust
the sandbox TPM do return the same error code.

Reviewed-by: Simon Glass 
Signed-off-by: Ilias Apalodimas

Correct SPL use of TPM_RNG

2023-02-10T12:41:40+00:00

This converts 1 usage of this option to the non-SPL form, since there is
no SPL_TPM_RNG defined in Kconfig

Signed-off-by: Simon Glass

tpm2: ftpm: add the device in the OP-TEE services list

2023-01-20T08:04:56+00:00

commit fe8a4ed0111073 ("tee: optee: discover services dependent on tee-supplicant")
is trying to automatically scan and add TAs that are presented on pseudo
bus from the secure world.
In order to be able to list and compare the scanned devices the available drivers
have to register themselves on the op-tee service list.

Acked-by: Etienne Carriere 
Reviewed-by: Jens Wiklander 
Signed-off-by: Ilias Apalodimas

tpm2: ftpm: open session with privileged ree login

2022-12-20T07:37:36+00:00

Opens the fTPM session with TEE_LOGIN_REE_KERNEL as fTPM may restrict
access to that login when Linux based OS is running as applications are
expected to got through the Linux TPMv2 driver.

Signed-off-by: Etienne Carriere 
Reviewed-by: Ilias Apalodimas 
Signed-off-by: Ilias Apalodimas

tpm: Implement state command for Cr50

2022-09-03T13:59:05+00:00

Add a vendor-specific TPM2 command for this and implement it for Cr50.
Note: This is not part of the TPM spec, but is a Cr50 extension.

Signed-off-by: Simon Glass 
Reviewed-by: Ilias Apalodimas 
Signed-off-by: Ilias Apalodimas

tpm: Allow reporting the internal state

2022-09-03T13:59:05+00:00

It is useful to read information about the current TPM state, where
supported, e.g. for debugging purposes when verified boot fails.

Add support for this to the TPM interface as well as Cr50. Add a simple
sandbox test.

Signed-off-by: Simon Glass 
Reviewed-by: Ilias Apalodimas 
Signed-off-by: Ilias Apalodimas

tpm: sandbox: Allow init of TPM in a different phase

2022-09-03T13:58:56+00:00

At present the emulator assumes that the TPM is inited in the same phase
where it is used. But in fact SPL may init the TPM, so we don't want to
complain when U-Boot proper later uses it. Remove this check.

It might be best to save this information into the device state for the
TPM, so that we can make sure the TPM was inited at some point. For now,
this seems good enough.

Signed-off-by: Simon Glass 
Reviewed-by: Ilias Apalodimas 
Signed-off-by: Ilias Apalodimas

common: Drop display_options.h from common header

2022-08-10T17:46:55+00:00

Move this out of the common header and include it only where needed.

Signed-off-by: Simon Glass