Hello build bot (Jenkins), Patrick Georgi, Martin Roth, Aaron Durbin,
I'd like you to reexamine a change. Please visit
https://review.coreboot.org/c/coreboot/+/46434
to look at the new patch set (#6).
Change subject: mrc_cache: Add TPM Hash verification ......................................................................
mrc_cache: Add TPM Hash verification
As memory training data is stored in RW flash, so we need to add a hash check in TPM NVRAM space to ensure that the mrc_cache data is not modified when it shouldn't be. Added a config MRC_SAVE_MRC_HASH to enable/disable the saving of the TPM hash.
BUG=b:150502246 BRANCH=None TEST=Ensure memory training still works as expected
Change-Id: I7fa8c6a2e6e1a710a6b2b5e0c724cb53949c6337 Signed-off-by: Shelley Chen shchen@google.com --- M src/drivers/mrc_cache/Kconfig M src/drivers/mrc_cache/mrc_cache.c M src/security/vboot/Makefile.inc M src/security/vboot/mrc_cache_hash_tpm.c A src/security/vboot/mrc_cache_hash_tpm.h 5 files changed, 46 insertions(+), 1 deletion(-)
git pull ssh://review.coreboot.org:29418/coreboot refs/changes/34/46434/6