Linux-EFI Archive mirror
 help / color / mirror / Atom feed
From: Kuppuswamy Sathyanarayanan <sathyanarayanan.kuppuswamy@linux.intel.com>
To: Ard Biesheuvel <ardb@kernel.org>
Cc: Ilias Apalodimas <ilias.apalodimas@linaro.org>,
	linux-kernel@vger.kernel.org, linux-efi@vger.kernel.org
Subject: [PATCH v2 0/2] Add measurement and event log support for CC platforms
Date: Thu, 15 Feb 2024 03:00:00 +0000	[thread overview]
Message-ID: <20240215030002.281456-1-sathyanarayanan.kuppuswamy@linux.intel.com> (raw)

In a Confidential Computing (CC) environment, not all platforms
implement TPM support. Instead, it may support measurement and event
logging based upon the hardware Trusted Execution Environment (TEE)
capability. For such cases, UEFI specification [1] defines an
alternative measurement protocol and interfaces. This patch set
enables this support in EFI bootstub.

https://uefi.org/specs/UEFI/2.10/38_Confidential_Computing.html#efi-cc-measurement-protocol [1]

Changes since v1:

* Add missing tagged event data.
* Add support for get_event_log().

Kuppuswamy Sathyanarayanan (2):
  efi/libstub: Add Confidential Computing (CC) measurement support
  efi/libstub: Add get_event_log() support for CC platforms

 .../firmware/efi/libstub/efi-stub-helper.c    | 127 ++++++++++++++----
 drivers/firmware/efi/libstub/efi-stub.c       |   2 +-
 drivers/firmware/efi/libstub/efistub.h        |  78 ++++++++++-
 drivers/firmware/efi/libstub/tpm.c            |  78 +++++++----
 drivers/firmware/efi/libstub/x86-stub.c       |   2 +-
 include/linux/efi.h                           |   4 +
 6 files changed, 235 insertions(+), 56 deletions(-)

-- 
2.25.1


             reply	other threads:[~2024-02-15  3:02 UTC|newest]

Thread overview: 13+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2024-02-15  3:00 Kuppuswamy Sathyanarayanan [this message]
2024-02-15  3:00 ` [PATCH v2 1/2] efi/libstub: Add Confidential Computing (CC) measurement support Kuppuswamy Sathyanarayanan
2024-02-19  6:38   ` Ilias Apalodimas
2024-02-24  7:37     ` Kuppuswamy Sathyanarayanan
2024-02-27 13:22       ` Ilias Apalodimas
2024-03-04 10:41         ` Ard Biesheuvel
2024-02-15  3:00 ` [PATCH v2 2/2] efi/libstub: Add get_event_log() support for CC platforms Kuppuswamy Sathyanarayanan
2024-02-19  7:03   ` Ilias Apalodimas
2024-02-19  7:34     ` Kuppuswamy Sathyanarayanan
2024-02-23 13:24       ` Ilias Apalodimas
2024-02-24  7:31         ` Kuppuswamy Sathyanarayanan
2024-02-27 13:19           ` Ilias Apalodimas
2024-02-29  3:23             ` Kuppuswamy Sathyanarayanan

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20240215030002.281456-1-sathyanarayanan.kuppuswamy@linux.intel.com \
    --to=sathyanarayanan.kuppuswamy@linux.intel.com \
    --cc=ardb@kernel.org \
    --cc=ilias.apalodimas@linaro.org \
    --cc=linux-efi@vger.kernel.org \
    --cc=linux-kernel@vger.kernel.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).