From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail02.groups.io (mail02.groups.io [66.175.222.108]) by spool.mail.gandi.net (Postfix) with ESMTPS id 8D383940FBE for ; Wed, 6 Mar 2024 03:23:46 +0000 (UTC) DKIM-Signature: a=rsa-sha256; bh=RwMZG+Kt1hGnDFF129rEJVfAWvkb4DhiK6znipa46Zg=; c=relaxed/simple; d=groups.io; h=From:To:Cc:Subject:Date:Message-Id:In-Reply-To:References:MIME-Version:Precedence:List-Subscribe:List-Help:Sender:List-Id:Mailing-List:Delivered-To:Reply-To:List-Unsubscribe-Post:List-Unsubscribe:Content-Transfer-Encoding; s=20240206; t=1709695425; v=1; b=W4F5Lo9hpbIS//Q/eOnNCg1GFIJ8JuNuYwpkBdq38I+U9BWYofBeBBUNGKcq9nWSNbQu4RnB Qkch0oMC4HPW1NWGcbWP//G7JhcMEk6OOIv9YsPo0MRKmweeD1EkP6kpLntjOeA2H0TU3tYgLmK 3PTMIt/uf9c4/a0RQL2pnRwbEQQt9nYBI+dHwSQpSZcU/syYqjfFdPgE91+Sq84zXmn/R31usEm sDpuaeZdPfGRr4ODfM6ybU/6zZeZqzRasiL6YJhm3hG4bHPmC6CKxhXkIJG1XooBEph5HpJIkSa 9XOJ4sc8Qy988wR5J/fzDsgZl098nH5WakJfVyXiFkIWw== X-Received: by 127.0.0.2 with SMTP id 2tvRYY7687511xIe7a7azDsB; Tue, 05 Mar 2024 19:23:45 -0800 X-Received: from mgamail.intel.com (mgamail.intel.com [198.175.65.20]) by mx.groups.io with SMTP id smtpd.web11.3892.1709695424555817214 for ; Tue, 05 Mar 2024 19:23:44 -0800 X-IronPort-AV: E=McAfee;i="6600,9927,11004"; a="4171164" X-IronPort-AV: E=Sophos;i="6.06,207,1705392000"; d="scan'208";a="4171164" X-Received: from fmviesa003.fm.intel.com ([10.60.135.143]) by orvoesa112.jf.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 05 Mar 2024 19:23:23 -0800 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="6.06,207,1705392000"; d="scan'208";a="14168695" X-Received: from shwdejointd777.ccr.corp.intel.com ([10.239.58.116]) by fmviesa003.fm.intel.com with ESMTP; 05 Mar 2024 19:23:09 -0800 From: "Wenxing Hou" To: devel@edk2.groups.io Cc: Michael D Kinney , Liming Gao , Zhiguang Liu , Jiewen Yao Subject: [edk2-devel] [PATCH v2 1/2] MdePkg: Add UEFI 2.10 DeviceAuthentication Date: Tue, 05 Mar 2024 19:23:44 -0800 Message-Id: <20240306032305.10278-2-wenxing.hou@intel.com> In-Reply-To: <20240306032305.10278-1-wenxing.hou@intel.com> References: <20240306032305.10278-1-wenxing.hou@intel.com> MIME-Version: 1.0 Precedence: Bulk List-Subscribe: List-Help: Sender: devel@edk2.groups.io List-Id: Mailing-List: list devel@edk2.groups.io; contact devel+owner@edk2.groups.io Reply-To: devel@edk2.groups.io,wenxing.hou@intel.com List-Unsubscribe-Post: List-Unsubscribe=One-Click List-Unsubscribe: X-Gm-Message-State: t4solEJA6ck5zWoEZ7rpgH5gx7686176AA= Content-Transfer-Encoding: quoted-printable X-GND-Status: LEGIT Authentication-Results: spool.mail.gandi.net; dkim=pass header.d=groups.io header.s=20240206 header.b=W4F5Lo9h; dmarc=fail reason="SPF not aligned (relaxed), DKIM not aligned (relaxed)" header.from=intel.com (policy=none); spf=pass (spool.mail.gandi.net: domain of bounce@groups.io designates 66.175.222.108 as permitted sender) smtp.mailfrom=bounce@groups.io According to UEFI 2.10 spec 32.8.2 UEFI Device Signature Variable GUID and Variable Name section, add signature database for device authentication. Cc: Michael D Kinney Cc: Liming Gao Cc: Zhiguang Liu Cc: Jiewen Yao Signed-off-by: Wenxing Hou --- MdePkg/Include/Guid/DeviceAuthentication.h | 61 ++++++++++++++++++++++ 1 file changed, 61 insertions(+) create mode 100644 MdePkg/Include/Guid/DeviceAuthentication.h diff --git a/MdePkg/Include/Guid/DeviceAuthentication.h b/MdePkg/Include/Gu= id/DeviceAuthentication.h new file mode 100644 index 0000000000..65dea4273d --- /dev/null +++ b/MdePkg/Include/Guid/DeviceAuthentication.h @@ -0,0 +1,61 @@ +/** @file=0D + Guid & data structure used for Device Security.=0D +=0D + Copyright (c) 2024, Intel Corporation. All rights reserved.
=0D + SPDX-License-Identifier: BSD-2-Clause-Patent=0D +=0D +**/=0D +=0D +#ifndef EDKII_DEVICE_AUTHENTICATION_GUID_H_=0D +#define EDKII_DEVICE_AUTHENTICATION_GUID_H_=0D +=0D +/**=0D + This is a signature database for device authentication, instead of image= authentication.=0D +=0D + The content of the signature database is same as the one in db/dbx. (a l= ist of EFI_SIGNATURE_LIST)=0D +**/=0D +#define EFI_DEVICE_SIGNATURE_DATABASE_GUID \=0D + {0xb9c2b4f4, 0xbf5f, 0x462d, 0x8a, 0xdf, 0xc5, 0xc7, 0xa, 0xc3, 0x5d, 0x= ad}=0D +#define EFI_DEVICE_SECURITY_DATABASE L"devdb"=0D +=0D +extern EFI_GUID gEfiDeviceSignatureDatabaseGuid;=0D +=0D +/**=0D + Signature Database:=0D +=0D + +---------------------------------------+ <-----------------=0D + | SignatureType (GUID) | |=0D + +---------------------------------------+ |=0D + | SignatureListSize (UINT32) | |=0D + +---------------------------------------+ |=0D + | SignatureHeaderSize (UINT32) | |=0D + +---------------------------------------+ |=0D + | SignatureSize (UINT32) | |-EFI_SIGNATU= RE_LIST (1)=0D + +---------------------------------------+ |=0D + | SignatureHeader (SignatureHeaderSize) | |=0D + +---------------------------------------+ <-- |=0D + | SignatureOwner (GUID) | | |=0D + +---------------------------------------+ |-EFI_SIGNATURE_DATA (1)=0D + | SignatureData (SignatureSize - 16) | | |=0D + +---------------------------------------+ <-- |=0D + | SignatureOwner (GUID) | | |=0D + +---------------------------------------+ |-EFI_SIGNATURE_DATA (n)=0D + | SignatureData (SignatureSize - 16) | | |=0D + +---------------------------------------+ <-----------------=0D + | SignatureType (GUID) | |=0D + +---------------------------------------+ |=0D + | SignatureListSize (UINT32) | |-EFI_SIGNATU= RE_LIST (n)=0D + +---------------------------------------+ |=0D + | ... | |=0D + +---------------------------------------+ <-----------------=0D +=0D + SignatureType :=3D EFI_CERT_SHAxxx_GUID |=0D + EFI_CERT_RSA2048_GUID |=0D + EFI_CERT_RSA2048_SHAxxx_GUID |=0D + EFI_CERT_X509_GUID |=0D + EFI_CERT_X509_SHAxxx_GUID=0D + (xxx =3D 256, 384, 512)=0D +=0D +**/=0D +=0D +#endif=0D --=20 2.26.2.windows.1 -=-=-=-=-=-=-=-=-=-=-=- Groups.io Links: You receive all messages sent to this group. View/Reply Online (#116415): https://edk2.groups.io/g/devel/message/116415 Mute This Topic: https://groups.io/mt/104760005/7686176 Group Owner: devel+owner@edk2.groups.io Unsubscribe: https://edk2.groups.io/g/devel/unsub [rebecca@openfw.io] -=-=-=-=-=-=-=-=-=-=-=-