u-boot.git/include/tpm.h, branch v2018.01

tpm: add more useful NV storage permission flags

2017-11-17T14:15:52+00:00

TPM_NV_PER_PPREAD: physical presence needed for reading
TPM_NV_PER_WRITEDEFINE: persistent write lock by writing size 0
TPM_NV_PER_WRITEALL: write in one go

Signed-off-by: André Draszik 
Acked-by: Simon Glass

tpm: add tpm_get_random()

2017-11-17T14:15:40+00:00

Add a function to obtain random data from the TPM.

Signed-off-by: André Draszik 
Added commit message, add cast to min()
Signed-off-by: Simon Glass 
Acked-by: Simon Glass

tpm: Add function to load keys via their parent's SHA1 hash

2017-03-26T19:22:58+00:00

If we want to load a key into a TPM, we need to know the designated parent
key's handle, so that the TPM is able to insert the key at the correct place in
the key hierarchy.

However, if we want to load a key whose designated parent key we also
previously loaded ourselves, we first need to memorize this parent key's handle
(since the handles for the key are chosen at random when they are inserted into
the TPM). If we are, however, unable to do so, for example if the parent key is
loaded into the TPM during production, and its child key during the actual
boot, we must find a different mechanism to identify the parent key.

To solve this problem, we add a function that allows U-Boot to load a key into
the TPM using their designated parent key's SHA1 hash, and the corresponding
auth data.

Signed-off-by: Mario Six 
Reviewed-by: Simon Glass

lib: tpm: Add command to flush resources

2017-02-01T08:02:57+00:00

This patch adds a function to the TPM library, which allows U-Boot to
flush resources, e.g. keys, from the TPM.

Signed-off-by: Mario Six 
Reviewed-by: Stefan Roese 
Reviewed-by: Simon Glass 
Signed-off-by: Stefan Roese

dm: tpm: Remove every compilation switch for TPM driver model

2015-10-23T15:42:28+00:00

As every TPM drivers support UCLASS_TPM, we can only rely on DM_TPM
functions.

This simplify a bit the code.

Signed-off-by: Christophe Ricard 
Reviewed-by: Tom Rini 
Acked-by: Simon Glass

tpm: Add functions to access flags and permissions

2015-08-31T13:57:29+00:00

Add a few new functions which will be used by the test command in a future
patch.

Signed-off-by: Simon Glass 
Acked-by: Christophe Ricard
Reviewed-by: Heiko Schocher

dm: tpm: Convert the TPM command and library to driver model

2015-08-31T13:57:28+00:00

Add driver model support to the TPM command and the TPM library. Both
support only a single TPM at present.

Signed-off-by: Simon Glass 
Acked-by: Christophe Ricard
Reviewed-by: Heiko Schocher

dm: tpm: Add a uclass for Trusted Platform Modules

2015-08-31T13:57:28+00:00

Add a new uclass for TPMs which uses almost the same TIS (TPM Interface
Specification) as is currently implemented. Since init() is handled by the
normal driver model probe() method, we don't need to implement that. Also
rename the transfer method to xfer() which is a less clumbsy name.

Once all drivers and users are converted to driver model we can remove the
old code.

Signed-off-by: Simon Glass 
Acked-by: Christophe Ricard
Reviewed-by: Heiko Schocher

Add GPL-2.0+ SPDX-License-Identifier to source files

2013-07-24T13:44:38+00:00

Signed-off-by: Wolfgang Denk 
[trini: Fixup common/cmd_io.c]
Signed-off-by: Tom Rini

tpm: add AUTH1 cmds for LoadKey2 and GetPubKey

2013-07-16T22:44:29+00:00

Extend the tpm library with support for single authorized (AUTH1) commands
as specified in the TCG Main Specification 1.2. (The internally used helper
functions are implemented in a way that they could also be used for double
authorized commands if someone needs it.)

Provide enums with the return codes from the TCG Main specification.

For now only a single OIAP session is supported.

OIAP authorized version of the commands TPM_LoadKey2 and TPM_GetPubKey are
provided. Both features are available using the 'tpm' command, too.

Authorized commands are enabled with CONFIG_TPM_AUTH_SESSIONS. (Note that
this also requires CONFIG_SHA1 to be enabled.)

Signed-off-by: Reinhard Pfau 
Signed-off-by: Dirk Eibach 
Acked-by: Che-Liang Chiou 
Signed-off-by: Andy Fleming