[coreboot-gerrit] Change in coreboot[master]: security/vboot: Decouple measured boot from verified boot

[Patrick Rudolph (Code Review)]

Patrick Rudolph has posted comments on this change. ( https://review.coreboot.org/c/coreboot/+/35077 )

Change subject: security/vboot: Decouple measured boot from verified boot
......................................................................

Patch Set 63: Code-Review-1

That turns CONFIG_MEASURED_BOOT into something out of scope of TCG measured boot. You can no longer call it CRTM.
It doesn't even make sense to measure most stuff at runtime, you could calculate the hashes when generating the ROM, as you extend everything in ramstage anyway.
Please also add proper documentation of the this approach in Documentation/.