From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail02.groups.io (mail02.groups.io [66.175.222.108]) by spool.mail.gandi.net (Postfix) with ESMTPS id 9B2347803CD for ; Mon, 4 Mar 2024 11:55:56 +0000 (UTC) DKIM-Signature: a=rsa-sha256; bh=ikXJDCGBPEuqTa6fdbJbjUVfhAKubUaTWP8RIENAcRU=; c=relaxed/simple; d=groups.io; h=From:To:Cc:Subject:Date:Message-Id:MIME-Version:Precedence:List-Subscribe:List-Help:Sender:List-Id:Mailing-List:Delivered-To:Reply-To:List-Unsubscribe-Post:List-Unsubscribe:Content-Transfer-Encoding; s=20140610; t=1709553355; v=1; b=MXv4FRZsacwlUf/0eR9xQvgxI+6RJzdDRhDh8nK+M4kcV0/puAgMznblnMJwLvczeBlOU389 Ffmfi7h/zgkuhDwH700u042qfIbi1xg/KYgiuJUm1FBIQb8QwXUGwuLQ6FQu7dDeTjeUySUbWbD m88ogMY/HCDQn0OKaZN/0kw4= X-Received: by 127.0.0.2 with SMTP id n5ErYY7687511xjDNXKztALh; Mon, 04 Mar 2024 03:55:55 -0800 X-Received: from mgamail.intel.com (mgamail.intel.com [192.198.163.11]) by mx.groups.io with SMTP id smtpd.web10.96454.1709553354692444563 for ; Mon, 04 Mar 2024 03:55:54 -0800 X-IronPort-AV: E=McAfee;i="6600,9927,11002"; a="14684463" X-IronPort-AV: E=Sophos;i="6.06,203,1705392000"; d="scan'208";a="14684463" X-Received: from orviesa002.jf.intel.com ([10.64.159.142]) by fmvoesa105.fm.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 04 Mar 2024 03:55:49 -0800 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="6.06,203,1705392000"; d="scan'208";a="39827106" X-Received: from shwdejointd777.ccr.corp.intel.com ([10.239.58.116]) by orviesa002.jf.intel.com with ESMTP; 04 Mar 2024 03:55:47 -0800 From: "Wenxing Hou" To: devel@edk2.groups.io Cc: Michael D Kinney , Liming Gao , Zhiguang Liu , Jiewen Yao Subject: [edk2-devel] [PATCH] MdePkg: Add UEFI 2.10 DeviceAuthentication Date: Mon, 4 Mar 2024 19:55:44 +0800 Message-Id: <20240304115545.9485-1-wenxing.hou@intel.com> MIME-Version: 1.0 Precedence: Bulk List-Subscribe: List-Help: Sender: devel@edk2.groups.io List-Id: Mailing-List: list devel@edk2.groups.io; contact devel+owner@edk2.groups.io Reply-To: devel@edk2.groups.io,wenxing.hou@intel.com List-Unsubscribe-Post: List-Unsubscribe=One-Click List-Unsubscribe: X-Gm-Message-State: L8ERKThfQmOqCzBmL7MwK9VAx7686176AA= Content-Transfer-Encoding: quoted-printable X-GND-Status: LEGIT Authentication-Results: spool.mail.gandi.net; dkim=pass header.d=groups.io header.s=20140610 header.b=MXv4FRZs; dmarc=fail reason="SPF not aligned (relaxed), DKIM not aligned (relaxed)" header.from=intel.com (policy=none); spf=pass (spool.mail.gandi.net: domain of bounce@groups.io designates 66.175.222.108 as permitted sender) smtp.mailfrom=bounce@groups.io According to UEFI 2.10 spec 32.8.2 UEFI Device Signature Variable GUID and Variable Name section, add signature database for device authentication. Cc: Michael D Kinney Cc: Liming Gao Cc: Zhiguang Liu Cc: Jiewen Yao Signed-off-by: Wenxing Hou --- MdePkg/Include/Guid/DeviceAuthentication.h | 61 ++++++++++++++++++++++ 1 file changed, 61 insertions(+) create mode 100644 MdePkg/Include/Guid/DeviceAuthentication.h diff --git a/MdePkg/Include/Guid/DeviceAuthentication.h b/MdePkg/Include/Gu= id/DeviceAuthentication.h new file mode 100644 index 0000000000..65dea4273d --- /dev/null +++ b/MdePkg/Include/Guid/DeviceAuthentication.h @@ -0,0 +1,61 @@ +/** @file=0D + Guid & data structure used for Device Security.=0D +=0D + Copyright (c) 2024, Intel Corporation. All rights reserved.
=0D + SPDX-License-Identifier: BSD-2-Clause-Patent=0D +=0D +**/=0D +=0D +#ifndef EDKII_DEVICE_AUTHENTICATION_GUID_H_=0D +#define EDKII_DEVICE_AUTHENTICATION_GUID_H_=0D +=0D +/**=0D + This is a signature database for device authentication, instead of image= authentication.=0D +=0D + The content of the signature database is same as the one in db/dbx. (a l= ist of EFI_SIGNATURE_LIST)=0D +**/=0D +#define EFI_DEVICE_SIGNATURE_DATABASE_GUID \=0D + {0xb9c2b4f4, 0xbf5f, 0x462d, 0x8a, 0xdf, 0xc5, 0xc7, 0xa, 0xc3, 0x5d, 0x= ad}=0D +#define EFI_DEVICE_SECURITY_DATABASE L"devdb"=0D +=0D +extern EFI_GUID gEfiDeviceSignatureDatabaseGuid;=0D +=0D +/**=0D + Signature Database:=0D +=0D + +---------------------------------------+ <-----------------=0D + | SignatureType (GUID) | |=0D + +---------------------------------------+ |=0D + | SignatureListSize (UINT32) | |=0D + +---------------------------------------+ |=0D + | SignatureHeaderSize (UINT32) | |=0D + +---------------------------------------+ |=0D + | SignatureSize (UINT32) | |-EFI_SIGNATU= RE_LIST (1)=0D + +---------------------------------------+ |=0D + | SignatureHeader (SignatureHeaderSize) | |=0D + +---------------------------------------+ <-- |=0D + | SignatureOwner (GUID) | | |=0D + +---------------------------------------+ |-EFI_SIGNATURE_DATA (1)=0D + | SignatureData (SignatureSize - 16) | | |=0D + +---------------------------------------+ <-- |=0D + | SignatureOwner (GUID) | | |=0D + +---------------------------------------+ |-EFI_SIGNATURE_DATA (n)=0D + | SignatureData (SignatureSize - 16) | | |=0D + +---------------------------------------+ <-----------------=0D + | SignatureType (GUID) | |=0D + +---------------------------------------+ |=0D + | SignatureListSize (UINT32) | |-EFI_SIGNATU= RE_LIST (n)=0D + +---------------------------------------+ |=0D + | ... | |=0D + +---------------------------------------+ <-----------------=0D +=0D + SignatureType :=3D EFI_CERT_SHAxxx_GUID |=0D + EFI_CERT_RSA2048_GUID |=0D + EFI_CERT_RSA2048_SHAxxx_GUID |=0D + EFI_CERT_X509_GUID |=0D + EFI_CERT_X509_SHAxxx_GUID=0D + (xxx =3D 256, 384, 512)=0D +=0D +**/=0D +=0D +#endif=0D --=20 2.26.2.windows.1 -=-=-=-=-=-=-=-=-=-=-=- Groups.io Links: You receive all messages sent to this group. View/Reply Online (#116312): https://edk2.groups.io/g/devel/message/116312 Mute This Topic: https://groups.io/mt/104720232/7686176 Group Owner: devel+owner@edk2.groups.io Unsubscribe: https://edk2.groups.io/g/devel/unsub [rebecca@openfw.io] -=-=-=-=-=-=-=-=-=-=-=-