Vadim Bendebury ae703f6819 tpm2: add nvram lock and hierarchy control commands ...

The firmware needs to lock the kernel rollback index before starting
up the kernel. The TPM2_NV_WriteLock command is used for that.

We also want to limit the amount of control the user space apps have
over TPM. With TPM1.2 it was achieved by deasserting physical
presence. TPM2 specification allows to achieve the same goal by
disabling Platform Hierarchy, which is active out of reset.

BRANCH=none
BUG=chrome-os-partner:50465
TEST=verified that all commands succeed and chrome OS boots up fine.

Change-Id: Ia5893460e0b29f1945cb2aae45a5f10b08fe1ed1
Reviewed-on: https://chromium-review.googlesource.com/358351
Commit-Ready: Vadim Bendebury <vbendeb@chromium.org>
Tested-by: Vadim Bendebury <vbendeb@chromium.org>
Reviewed-by: Darren Krahn <dkrahn@chromium.org>

2016-07-09 11:25:24 -07:00

..

cgptlib

cgptlib: Add support for IGNOREME GPT signature

2016-04-25 15:15:32 -07:00

cryptolib

vboot: fix name-collision with OpenSSL.

2015-04-02 00:54:07 +00:00

include

vboot: Add firmware management parameters

2016-05-08 21:16:02 -07:00

tpm2_lite

tpm2: add nvram lock and hierarchy control commands

2016-07-09 11:25:24 -07:00

tpm_lite

Workaround for failing tests when DEBUG=1

2014-05-31 01:47:51 +00:00

crc8.c

Massive refactoring of external header files.

2013-04-02 14:12:52 -07:00

gpt_misc.c

cgptlib: Add support for IGNOREME GPT signature

2016-04-25 15:15:32 -07:00

mocked_rollback_index.c

vboot: Fix FWMP link error if TPM is mocked

2016-05-11 02:38:15 +00:00

mocked_tpm_bootmode.c

mocked_tpm: Add back missing paren

2014-11-04 07:03:49 +00:00

region-fw.c

Implementation of Region API

2013-08-30 16:47:03 +00:00

region-init.c

Implementation of Region API

2013-08-30 16:47:03 +00:00

region-kernel.c

Fix error message for VbGbbReadBmpHeader

2015-12-03 02:21:22 -08:00

rollback_index.c

fix a compile flag typo

2016-07-07 01:10:19 -07:00

stateful_util.c

Massive refactoring of external header files.

2013-04-02 14:12:52 -07:00

tpm_bootmode.c

Extend HWID digest into PCR1 (GBB v1.2 only)

2014-10-31 20:55:28 +00:00

utility_string.c

Massive refactoring of external header files.

2013-04-02 14:12:52 -07:00

utility.c

Massive refactoring of external header files.

2013-04-02 14:12:52 -07:00

vboot_api_firmware.c

Extend HWID digest into PCR1 (GBB v1.2 only)

2014-10-31 20:55:28 +00:00

vboot_api_init.c

Add NV flag to default boot legacy OS

2015-10-13 14:02:26 -07:00

vboot_api_kernel.c

vboot_api_kernel: Remove assumptions about EC-RW hash type and size

2016-05-31 22:15:49 -07:00

vboot_audio.c

Increase MAX_CUSTOM_DELAY to 5 minutes

2016-01-26 14:56:29 -08:00

vboot_common_init.c

Enable vboot for sandbox and improve debugging/format strings

2013-08-24 09:37:48 -07:00

vboot_common.c

kernel flags: Add flags field to kernel preamble.

2015-02-12 04:40:35 +00:00

vboot_display.c

vboot: Save last screen ID

2016-04-25 12:56:42 -07:00

vboot_firmware.c

Provide a way to disable counting failed boots

2015-05-28 16:30:17 +00:00

vboot_kernel.c

vboot: Add firmware management parameters

2016-05-08 21:16:02 -07:00

vboot_nvstorage_rollback.c

Add NV flag to default boot legacy OS

2015-10-13 14:02:26 -07:00

vboot_nvstorage.c

Support doing battery cut-off in firmware stage.

2016-04-12 05:49:26 -07:00