From: "Min Xu" <min.m.xu@intel.com>
To: devel@edk2.groups.io
Cc: Min Xu <min.m.xu@intel.com>,
Michael D Kinney <michael.d.kinney@intel.com>,
Liming Gao <gaoliming@byosoft.com.cn>,
Zhiguang Liu <zhiguang.liu@intel.com>,
Jiewen Yao <jiewen.yao@intel.com>,
Jian J Wang <jian.j.wang@intel.com>, Ken Lu <ken.lu@intel.com>,
Sami Mujawar <sami.mujawar@arm.com>
Subject: [PATCH V3 0/3] Introduce TeeMeasurementProtocol into EDK2
Date: Thu, 28 Oct 2021 12:59:26 +0800 [thread overview]
Message-ID: <cover.1635395810.git.min.m.xu@intel.com> (raw)
BZ: https://bugzilla.tianocore.org/show_bug.cgi?id=3625
If TEE-Guest firmware supports measurement and an event is created,
TEE-Guest firmware is designed to report the event log with the same data
structure in TCG-Platform-Firmware-Profile specification with
EFI_TCG2_EVENT_LOG_FORMAT_TCG_2 format.
The TEE-Guest firmware supports measurement. It is
designed to produce EFI_TEE_MEASUREMENT_PROTOCOL with new
GUID EFI_TEE_MEASUREMENT_PROTOCOL_GUID to report event log
and provides hash capability.
Patch #1:
Introduce the TEE Measurement Protocol definition into MdePkg.
Patch #2:
Update DxeTpm2MeasureBootLib to support TEE based measure boot.
Patch #3:
Update DxeTpmMeasurementLib to support TEE based measurement.
Code is at https://github.com/mxu9/edk2/tree/td_protocol.v3
v3 changes:
- Rename TdProtocol to TeeMeasurementProtocol which is a neutral name.
With this protocol, TEE based measure boot is supported.
TD based measure boot is one of the TEE based measure boot.
- The spec will be updated according to the changes later.
- Fix errors in DxeTpm2MeasureBootLib.
v2 changes:
- TD based measure boot is implemented in DxeTpm2MeasureBootLib.
This minimize the code changes.
- TD based measurement is added. It is implemented in
DxeTpmMeasurementLib.
- Fix the typo in comments.
Cc: Michael D Kinney <michael.d.kinney@intel.com>
Cc: Liming Gao <gaoliming@byosoft.com.cn>
Cc: Zhiguang Liu <zhiguang.liu@intel.com>
Cc: Jiewen Yao <jiewen.yao@intel.com>
Cc: Jian J Wang <jian.j.wang@intel.com>
Cc: Ken Lu <ken.lu@intel.com>
Cc: Sami Mujawar <sami.mujawar@arm.com>
Signed-off-by: Min Xu <min.m.xu@intel.com>
Min Xu (3):
MdePkg: Introduce TeeMeasurementProtocol for TEE Guest firmware
SecurityPkg: Support TeeMeasurementProtocol in DxeTpm2MeasureBootLib
SecurityPkg: Support TeeMeasurementProtocol in DxeTpmMeasurementLib
MdePkg/Include/Protocol/TdProtocol.h | 36 ++
MdePkg/Include/Protocol/TeeMeasurement.h | 296 ++++++++++++++
MdePkg/MdePkg.dec | 3 +
.../DxeTpm2MeasureBootLib.c | 364 ++++++++++++++----
.../DxeTpm2MeasureBootLib.inf | 1 +
.../DxeTpmMeasurementLib.c | 88 ++++-
.../DxeTpmMeasurementLib.inf | 5 +-
7 files changed, 720 insertions(+), 73 deletions(-)
create mode 100644 MdePkg/Include/Protocol/TdProtocol.h
create mode 100644 MdePkg/Include/Protocol/TeeMeasurement.h
--
2.29.2.windows.2
next reply other threads:[~2021-10-28 5:00 UTC|newest]
Thread overview: 6+ messages / expand[flat|nested] mbox.gz Atom feed top
2021-10-28 4:59 Min Xu [this message]
2021-10-28 4:59 ` [PATCH V3 1/3] MdePkg: Introduce TeeMeasurementProtocol for TEE Guest firmware Min Xu
2021-10-29 2:06 ` 回复: [edk2-devel] " gaoliming
2021-10-29 2:55 ` Min Xu
2021-10-28 4:59 ` [PATCH V3 2/3] SecurityPkg: Support TeeMeasurementProtocol in DxeTpm2MeasureBootLib Min Xu
2021-10-28 4:59 ` [PATCH V3 3/3] SecurityPkg: Support TeeMeasurementProtocol in DxeTpmMeasurementLib Min Xu
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-list from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=cover.1635395810.git.min.m.xu@intel.com \
--to=devel@edk2.groups.io \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox