u-boot.git/lib/tpm.c, branch v2018.05

SPDX: Convert all of our single license tags to Linux Kernel style

2018-05-07T13:34:12+00:00

When U-Boot started using SPDX tags we were among the early adopters and
there weren't a lot of other examples to borrow from.  So we picked the
area of the file that usually had a full license text and replaced it
with an appropriate SPDX-License-Identifier: entry.  Since then, the
Linux Kernel has adopted SPDX tags and they place it as the very first
line in a file (except where shebangs are used, then it's second line)
and with slightly different comment styles than us.

In part due to community overlap, in part due to better tag visibility
and in part for other minor reasons, switch over to that style.

This commit changes all instances where we have a single declared
license in the tag as both the before and after are identical in tag
contents.  There's also a few places where I found we did not have a tag
and have introduced one.

Signed-off-by: Tom Rini

tpm: add more missing va_end()

2017-11-17T14:15:52+00:00

While commit 36d35345b1f6 ("tpm: add missing va_end") added
some missing calls to va_end(), it missed a few places.

Signed-off-by: André Draszik 
Acked-by: Simon Glass

tpm: add tpm_get_random()

2017-11-17T14:15:40+00:00

Add a function to obtain random data from the TPM.

Signed-off-by: André Draszik 
Added commit message, add cast to min()
Signed-off-by: Simon Glass 
Acked-by: Simon Glass

tpm: fix reading of permanent flags

2017-11-17T02:10:29+00:00

The offset of the permanent flags structure is in a different
place in the response compared to what the code is doing,
which gives us a completely useless result.

Fix by replacing hand-crafted code with generic parser
infrastructure.

Signed-off-by: André Draszik 
Acked-by: Simon Glass

tpm: add missing va_end

2017-08-13T19:17:29+00:00

va_start must always be matched by va_end.

Signed-off-by: Heinrich Schuchardt 
Reviewed-by: Simon Glass

tpm: Fix comparison of unsigned expression warning

2017-05-12T12:37:40+00:00

The function tpm_xfer returns int so make 'err' be int rather than
uint32_t so that we can catch an error condition.  Reported by
clang-3.8.

Signed-off-by: Tom Rini

tpm: Add function to load keys via their parent's SHA1 hash

2017-03-26T19:22:58+00:00

If we want to load a key into a TPM, we need to know the designated parent
key's handle, so that the TPM is able to insert the key at the correct place in
the key hierarchy.

However, if we want to load a key whose designated parent key we also
previously loaded ourselves, we first need to memorize this parent key's handle
(since the handles for the key are chosen at random when they are inserted into
the TPM). If we are, however, unable to do so, for example if the parent key is
loaded into the TPM during production, and its child key during the actual
boot, we must find a different mechanism to identify the parent key.

To solve this problem, we add a function that allows U-Boot to load a key into
the TPM using their designated parent key's SHA1 hash, and the corresponding
auth data.

Signed-off-by: Mario Six 
Reviewed-by: Simon Glass

lib: tpm: Add command to flush resources

2017-02-01T08:02:57+00:00

This patch adds a function to the TPM library, which allows U-Boot to
flush resources, e.g. keys, from the TPM.

Signed-off-by: Mario Six 
Reviewed-by: Stefan Roese 
Reviewed-by: Simon Glass 
Signed-off-by: Stefan Roese

dm: Use uclass_first_device_err() where it is useful

2016-03-14T21:34:50+00:00

Use this new function in places where it simplifies the code.

Signed-off-by: Simon Glass

tpm: Fix fault in case CONFIG_DM_TPM is set without any TPM

2016-01-29T04:01:22+00:00

In case CONFIG_DM_TPM was set without any TPM chipset configured a fault
was generated (NULL pointer access).

Reviewed-by: Simon Glass 
Signed-off-by: Christophe Ricard