Re: [edk2-devel] [PATCH V3 0/4] Add SPDM device security

["Yao, Jiewen" <jiewen.yao@intel.com>]

Hi
I forget to mention that this patch is also pushed to git.

The EDKII repo update is at https://github.com/jyao1/edk2/tree/DeviceSecurityMasterV3
The EDKII platform repo update is at https://github.com/jyao1/edk2-platforms/tree/DeviceSecurityMasterV3

Thank you
Yao Jiewen

> -----Original Message-----
> From: devel@edk2.groups.io <devel@edk2.groups.io> On Behalf Of Yao, Jiewen
> Sent: Thursday, November 7, 2019 9:38 PM
> To: devel@edk2.groups.io
> Subject: [edk2-devel] [PATCH V3 0/4] Add SPDM device security
> 
> REF: https://bugzilla.tianocore.org/show_bug.cgi?id=2303
> 
> ========= v3 =============
> 
> The patch addresses the feedback below:
> Liming Gao:
> 1) specify the spec version in file header for SPDM.
> 
> Ray Ni:
> 1) create a standalone function like PciDeviceAuthenticate() and
> move the new code to that function then call it from CreatePciIoDevice
> 
> ========= v2 =============
> This patch series add support for device security based
> upon the DMTF SPDM specification.
> https://www.dmtf.org/sites/default/files/standards/documents/DSP0274_0.95a
> .zip
> 
> We did design review at 18 Oct, 2019.
> https://edk2.groups.io/g/devel/files/Designs/2019/1018
> And the feedback from the meeting is addressed.
> https://edk2.groups.io/g/devel/files/Designs/2019/1018/EDKII-
> Device%20Firmware%20Security%20v2.pdf
> 
> We add the Device security protocol in EDKII repo.
> PCI bus driver consumes the interface.
> If there is no producer, the PCI bus driver keeps current behavior.
> 
> So far, we only provide the producer what follows Intel
> PCI security spec.
> https://www.intel.com/content/www/us/en/io/pci-express/pcie-device-
> security-enhancements-spec.html
> The implementation is put to EDKII platform repo.
> 
> The EDKII repo update is at
> https://github.com/jyao1/edk2/tree/DeviceSecurityMasterV2
> The EDKII platform repo update is at https://github.com/jyao1/edk2-
> platforms/tree/DeviceSecurityMasterV2
> 
> The validation has been done on a Intel internal platform.
> The device measurement can be shown in TCG event log.
> 
> signed-off-by: Jiewen Yao <jiewen.yao@intel.com>
> 
> Jiewen Yao (4):
>   MdePkg/Include: Add DMTF SPDM definition.
>   MdeModulePkg/Include: Add DeviceSecurity.h
>   MdeModulePkg/dec: Add EdkiiDeviceSecurityProtocolGuid.
>   MdeModulePkg/Pci: Add DeviceSecurity support.
> 
>  MdeModulePkg/Bus/Pci/PciBusDxe/PciBus.c       |  12 +-
>  MdeModulePkg/Bus/Pci/PciBusDxe/PciBus.h       |   1 +
>  MdeModulePkg/Bus/Pci/PciBusDxe/PciBusDxe.inf  |   4 +-
>  .../Bus/Pci/PciBusDxe/PciEnumeratorSupport.c  |  77 +++++
>  MdeModulePkg/Bus/Pci/PciBusDxe/PciLib.c       |   4 +-
>  .../Include/Protocol/DeviceSecurity.h         | 162 +++++++++
>  MdeModulePkg/MdeModulePkg.dec                 |   5 +
>  MdePkg/Include/IndustryStandard/Spdm.h        | 320 ++++++++++++++++++
>  8 files changed, 581 insertions(+), 4 deletions(-)
>  create mode 100644 MdeModulePkg/Include/Protocol/DeviceSecurity.h
>  create mode 100644 MdePkg/Include/IndustryStandard/Spdm.h
> 
> --
> 2.19.2.windows.1
> 
> 
>