u-boot.git/lib, branch v2022.10-rc4

Merge tag 'tpm-03092022' of https://source.denx.de/u-boot/custodians/u-boot-tpm

2022-09-03T18:55:37+00:00

TPM fixes and state reporting

tpm: Allow committing non-volatile data

2022-09-03T13:59:05+00:00

Add an option to tell the TPM to commit non-volatile data immediately it
is changed, rather than waiting until later. This is needed in some
situations, since if the device reboots it may not write the data.

Add definitions for the rest of the Cr50 commands while we are here.

Signed-off-by: Simon Glass 
Reviewed-by: Ilias Apalodimas 
Signed-off-by: Ilias Apalodimas

tpm: Implement state command for Cr50

2022-09-03T13:59:05+00:00

Add a vendor-specific TPM2 command for this and implement it for Cr50.
Note: This is not part of the TPM spec, but is a Cr50 extension.

Signed-off-by: Simon Glass 
Reviewed-by: Ilias Apalodimas 
Signed-off-by: Ilias Apalodimas

tpm: Correct the define-space command in TPMv2

2022-09-03T13:54:04+00:00

The message format is incorrect. Fix it.

Signed-off-by: Simon Glass 
Acked-by: Ilias Apalodimas 
Signed-off-by: Ilias Apalodimas

tpm: Correct the permissions command in TPMv1

2022-09-03T13:54:02+00:00

The offset here is incorrect. Fix it.

Signed-off-by: Simon Glass 
Acked-by: Ilias Apalodimas 
Signed-off-by: Ilias Apalodimas

tpm: Require a digest source when extending the PCR

2022-09-03T13:53:58+00:00

This feature is used for measured boot, so we can add a log entry to the
TCPA with some information about where the digest comes from. It is not
currently supported in the TPM drivers, but add it to the API so that
code which expects it can signal its request.

Signed-off-by: Simon Glass 
Reviewed-by: Ilias Apalodimas 
Signed-off-by: Ilias Apalodimas

efi_loader: fix display of NVMe EUI-64

2022-09-03T08:49:17+00:00

UEFI specification 2.9A requires to display the EUI-64 "in hexadecimal
format with byte 7 first (i.e., on the left) and byte 0 last".

This is in contrast to what the NVMe specification wants.
But it is what EDK II has been implementing.

Here is an example with the patch applied:

    qemu-system-aarch64 -machine virt -cpu cortex-a72 -nographic \
    -bios denx/u-boot.bin \
    -device nvme,id=nvme1,serial=9ff81223 \
    -device nvme-ns,bus=nvme1,drive=nvme1n0,eui64=0x123456789ABCDEF0 \
    -drive file=arm64.img,if=none,format=raw,id=nvme1n0

    => nvme scan
    => efidebug devices
    Device Path
    ====================
    /VenHw(…)/NVMe(0x1,f0-de-bc-9a-78-56-34-12)

Signed-off-by: Heinrich Schuchardt

efi: ECPT add EBBRv2.0 conformance profile

2022-09-03T08:13:26+00:00

Display the EBBRv2.0 conformance in the ECPT table.

The EBBRv2.0 conformance profile is set in the ECPT if
CONFIG_EFI_EBBR_2_0_CONFORMANCE=y.

Signed-off-by: Jose Marinho 

Add dependencies for CONFIG_EFI_EBBR_2_0_CONFORMANCE.
Enable the setting by default.
Reviewed-by: Heinrich Schuchardt

efi: Create ECPT table

2022-09-03T07:35:48+00:00

The ECPT table will be included in the UEFI specification 2.9+.
The ECPT table was introduced in UEFI following the code-first path. The
acceptance ticket can be viewed at:
	https://bugzilla.tianocore.org/show_bug.cgi?id=3591

The Conformance Profiles table is a UEFI configuration table that contains
GUID of the UEFI profiles that the UEFI implementation conforms with.

The ECPT table is created when CONFIG_EFI_ECPT=y.
The config is set by default.

Signed-off-by: Jose Marinho 
Reviewed-by: Heinrich Schuchardt

efi_selftest: on sandbox use host specific assembly

2022-09-03T06:16:09+00:00

The selftest checking the handling of exceptions in UEFI binaries is using
assembly to provide an undefined instruction. On the sandbox the correct
form of the instruction depends on the host architecture.

Signed-off-by: Heinrich Schuchardt 
Reviewed-by: Ilias Apalodimas