<p>Frans Hendriks <strong>uploaded patch set #5</strong> to this change.</p><p><a href="https://review.coreboot.org/c/coreboot/+/30218">View Change</a></p><pre style="font-family: monospace,monospace; white-space: pre-wrap;">{devices,lib,security} Add Eltan vendor code for measured and verified boot.<br><br>coreboot supports verfied boot based on ChromeOS verified boot.<br>No verified boot support without dependency on ChromeOS is available.<br><br>Create measured boot (vendorcode/eltan/mboot) and verified_boot<br>(vendorcode/eltan/verified_boot) directories. These features use the security/lib<br>which is a 'wrapper' using only sha1, sha256 and sha512 of<br>3rdparty/vboot/firmware.<br><br>prog_locate_hook() is added and used to start verified boot.<br>At board level can be specified with parts of SPI must be verified and/or<br>measured.<br><br>BUG=N/A<br>TEST=Created verified binary and verify logging on Portwell PQ-M107<br><br>Change-Id: Ic1d5a21d40b6a31886777e8e9fe7b28c860f1a80<br>Signed-off-by: Frans Hendriks <fhendriks@eltan.com><br>---<br>A Documentation/vendorcode/eltan/index.md<br>A Documentation/vendorcode/eltan/security.md<br>M Documentation/vendorcode/index.md<br>M src/device/pci_device.c<br>M src/include/device/pci_rom.h<br>M src/include/program_loading.h<br>M src/lib/prog_loaders.c<br>M src/security/tpm/tss.h<br>M src/security/tpm/tss/tcg-2.0/tss.c<br>M src/security/tpm/tss/tcg-2.0/tss_marshaling.c<br>M src/security/tpm/tss/tcg-2.0/tss_structures.h<br>M src/vendorcode/Makefile.inc<br>A src/vendorcode/eltan/Kconfig<br>A src/vendorcode/eltan/Makefile.inc<br>A src/vendorcode/eltan/security/Kconfig<br>A src/vendorcode/eltan/security/Makefile.inc<br>A src/vendorcode/eltan/security/include/cb_sha1.h<br>A src/vendorcode/eltan/security/include/cb_sha256.h<br>A src/vendorcode/eltan/security/include/cb_sha512.h<br>A src/vendorcode/eltan/security/include/cryptolib.h<br>A src/vendorcode/eltan/security/lib/Makefile.inc<br>A src/vendorcode/eltan/security/lib/cb_sha1.c<br>A src/vendorcode/eltan/security/lib/cb_sha256.c<br>A src/vendorcode/eltan/security/lib/cb_sha512.c<br>A src/vendorcode/eltan/security/mboot/Kconfig<br>A src/vendorcode/eltan/security/mboot/Makefile.inc<br>A src/vendorcode/eltan/security/mboot/mboot.c<br>A src/vendorcode/eltan/security/mboot/mboot.h<br>A src/vendorcode/eltan/security/mboot/mboot_func.c<br>A src/vendorcode/eltan/security/verified_boot/Kconfig<br>A src/vendorcode/eltan/security/verified_boot/Makefile.inc<br>A src/vendorcode/eltan/security/verified_boot/vboot_check.c<br>A src/vendorcode/eltan/security/verified_boot/vboot_check.h<br>33 files changed, 2,197 insertions(+), 20 deletions(-)<br><br></pre><pre style="font-family: monospace,monospace; white-space: pre-wrap;">git pull ssh://review.coreboot.org:29418/coreboot refs/changes/18/30218/5</pre><p>To view, visit <a href="https://review.coreboot.org/c/coreboot/+/30218">change 30218</a>. To unsubscribe, or for help writing mail filters, visit <a href="https://review.coreboot.org/settings">settings</a>.</p><div itemscope itemtype="http://schema.org/EmailMessage"><div itemscope itemprop="action" itemtype="http://schema.org/ViewAction"><link itemprop="url" href="https://review.coreboot.org/c/coreboot/+/30218"/><meta itemprop="name" content="View Change"/></div></div>

<div style="display:none"> Gerrit-Project: coreboot </div>
<div style="display:none"> Gerrit-Branch: master </div>
<div style="display:none"> Gerrit-Change-Id: Ic1d5a21d40b6a31886777e8e9fe7b28c860f1a80 </div>
<div style="display:none"> Gerrit-Change-Number: 30218 </div>
<div style="display:none"> Gerrit-PatchSet: 5 </div>
<div style="display:none"> Gerrit-Owner: Frans Hendriks <fhendriks@eltan.com> </div>
<div style="display:none"> Gerrit-Reviewer: Frans Hendriks <fhendriks@eltan.com> </div>
<div style="display:none"> Gerrit-Reviewer: Martin Roth <martinroth@google.com> </div>
<div style="display:none"> Gerrit-Reviewer: Patrick Georgi <pgeorgi@google.com> </div>
<div style="display:none"> Gerrit-Reviewer: Philipp Deppenwiese <zaolin.daisuki@gmail.com> </div>
<div style="display:none"> Gerrit-Reviewer: build bot (Jenkins) <no-reply@coreboot.org> </div>
<div style="display:none"> Gerrit-CC: Nico Huber <nico.h@gmx.de> </div>
<div style="display:none"> Gerrit-CC: Patrick Rudolph <siro@das-labor.org> </div>
<div style="display:none"> Gerrit-MessageType: newpatchset </div>