From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mga07.intel.com (mga07.intel.com [134.134.136.100]) by mx.groups.io with SMTP id smtpd.web11.12912.1597386729279274811 for ; Thu, 13 Aug 2020 23:32:09 -0700 Authentication-Results: mx.groups.io; dkim=missing; spf=pass (domain: intel.com, ip: 134.134.136.100, mailfrom: qi1.zhang@intel.com) IronPort-SDR: 9RHILdhMcxjHqNGgGyX+Z8FkjJ21BBpndHZS9AD35I9CRe2zYtIg2X+rc0KBYgwM6yxX4scQfp byEXhssoFBlQ== X-IronPort-AV: E=McAfee;i="6000,8403,9712"; a="218695789" X-IronPort-AV: E=Sophos;i="5.76,311,1592895600"; d="scan'208";a="218695789" X-Amp-Result: SKIPPED(no attachment in message) X-Amp-File-Uploaded: False Received: from orsmga005.jf.intel.com ([10.7.209.41]) by orsmga105.jf.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 13 Aug 2020 23:32:08 -0700 IronPort-SDR: Z8sJj6/PV5eoBN1WNniuOqooNGHOe8B/vIi8atPKSJgE77HeE0d+jQCzZPJPfkS9VOXfWE4eOb zrNRVtMZJNZQ== X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.76,311,1592895600"; d="scan'208";a="470494142" Received: from unknown (HELO shwdeSSSDDPDQI.ccr.corp.intel.com) ([10.239.158.153]) by orsmga005.jf.intel.com with ESMTP; 13 Aug 2020 23:32:06 -0700 From: "Qi Zhang" To: devel@edk2.groups.io Cc: Qi Zhang , Jiewen Yao , Jian J Wang , Hao A Wu , Chasel Chiu , Nate DeSimone , Star Zeng Subject: [PATCH v3 0/8] Need add a FSP binary measurement Date: Fri, 14 Aug 2020 14:31:51 +0800 Message-Id: <20200814063159.2477-1-qi1.zhang@intel.com> X-Mailer: git-send-email 2.26.2.windows.1 MIME-Version: 1.0 Content-Transfer-Encoding: 8bit v3 change: add a new lib FvEventLogRecordLib for gerneric code. REF: https://bugzilla.tianocore.org/show_bug.cgi?id=2376 The EDKII BIOS calls FSP API in FSP Wrapper Pkg. This FSP code need to be measured into TPM. We need add a generic module in FSP Wrapper Pkg code to measure: 1) FSP-T, FSP-M, FSP-S in API mode. 2) FSP-T in Dispatch-mode. The FSP-M and FSP-S will be reported as standard FV and they will be measured by TCG-PEI. Cc: Jiewen Yao Cc: Jian J Wang Cc: Hao A Wu Cc: Chasel Chiu Cc: Nate DeSimone Cc: Star Zeng Cc: Qi Zhang Jiewen Yao (4): IntelFsp2WrapperPkg/FspMeasurementLib: Add header file. IntelFsp2WrapperPkg/FspMeasurementLib: Add BaseFspMeasurementLib. IntelFsp2WraperPkg/Fsp{m|s}WrapperPeim: Add FspBin measurement. IntelFsp2Wrapper/dsc: Add FspTpmMeasurementLib and PcdFspMeasurementConfig. Qi Zhang (4): SecurityPkg/FvEventLogRecordLib: add new lib for firmware measurement SecurityPkg/dsc: add FvEventLogRecordLib SecurityPkg/Tcg2: handle PRE HASH and LOG ONLY IntelFsp2WrapperPkg/dsc: add HashLib, Tpm2CommandLib and Tpm2DeviceLib .../FspmWrapperPeim/FspmWrapperPeim.c | 90 ++++++- .../FspmWrapperPeim/FspmWrapperPeim.inf | 20 +- .../FspsWrapperPeim/FspsWrapperPeim.c | 86 +++++- .../FspsWrapperPeim/FspsWrapperPeim.inf | 27 +- .../Include/Library/FspMeasurementLib.h | 39 +++ IntelFsp2WrapperPkg/IntelFsp2WrapperPkg.dec | 17 ++ IntelFsp2WrapperPkg/IntelFsp2WrapperPkg.dsc | 10 +- .../BaseFspMeasurementLib.inf | 54 ++++ .../BaseFspMeasurementLib/FspMeasurementLib.c | 248 ++++++++++++++++++ .../Include/Library/FvEventLogRecordLib.h | 97 +++++++ SecurityPkg/Include/Ppi/Tcg.h | 5 + .../FvEventLogRecordLib/FvEventLogRecordLib.c | 197 ++++++++++++++ .../FvEventLogRecordLib.inf | 40 +++ .../FvEventLogRecordLib.uni | 17 ++ SecurityPkg/SecurityPkg.dec | 3 + SecurityPkg/SecurityPkg.dsc | 2 + SecurityPkg/Tcg/Tcg2Pei/Tcg2Pei.c | 12 +- 17 files changed, 939 insertions(+), 25 deletions(-) create mode 100644 IntelFsp2WrapperPkg/Include/Library/FspMeasurementLib.h create mode 100644 IntelFsp2WrapperPkg/Library/BaseFspMeasurementLib/BaseFspMeasurementLib.inf create mode 100644 IntelFsp2WrapperPkg/Library/BaseFspMeasurementLib/FspMeasurementLib.c create mode 100644 SecurityPkg/Include/Library/FvEventLogRecordLib.h create mode 100644 SecurityPkg/Library/FvEventLogRecordLib/FvEventLogRecordLib.c create mode 100644 SecurityPkg/Library/FvEventLogRecordLib/FvEventLogRecordLib.inf create mode 100644 SecurityPkg/Library/FvEventLogRecordLib/FvEventLogRecordLib.uni -- 2.26.2.windows.1