[coreboot-gerrit] Change in coreboot[master]: security/vboot: Decouple measured boot from verified boot

[Joel Kitching (Code Review)]

Joel Kitching has posted comments on this change. ( https://review.coreboot.org/c/coreboot/+/35077 )

Change subject: security/vboot: Decouple measured boot from verified boot
......................................................................

Patch Set 33:

(1 comment)

https://review.coreboot.org/c/coreboot/+/35077/27/src/security/vboot/vboot_l... 
File src/security/vboot/vboot_logic.c:

https://review.coreboot.org/c/coreboot/+/35077/27/src/security/vboot/vboot_l... 
PS27, Line 329: 	if (CONFIG(TSPI_MEASURED_BOOT) &&
              : 		!(ctx->flags & VB2_CONTEXT_S3_RESUME)) {
              : 		if (tspi_init_crtm() != VB2_SUCCESS)
> It seems that we cannot, for some platform has limited bootblock size, see https://qa.coreboot. […]

So what if you are using a SIEMENS_MC_APL2 board and want to enable TSPI_MEASURED_BOOT?