[coreboot-gerrit] [M] Change in coreboot[master]: security/vboot: Add store/validate methods for AMD VBIOS FMAP cache

[Matt DeVillier (Code Review)]

Attention is currently required from: Andrey Pronin, Raul Rangel, Martin L Roth, Julius Werner, Martin Roth, Yu-Ping Wu, Karthik Ramasubramanian.

Hello build bot (Jenkins), Raul Rangel, Julius Werner, Martin Roth, Yu-Ping Wu,

I'd like you to reexamine a change. Please visit

https://review.coreboot.org/c/coreboot/+/72401

to look at the new patch set (#5).

Change subject: security/vboot: Add store/validate methods for AMD VBIOS FMAP cache
......................................................................

security/vboot: Add store/validate methods for AMD VBIOS FMAP cache

Add methods to store and retrieve the hash of the data stored in the
VBIOS cache FMAP region. Add a dedicated index in TPM NVRAM to store
the hash, and methods to calculate/read/write it.

Modeled after mrc_cache_hash_tpm.{c,h}

BUG=b:255812886
TEST=tested with rest of patch train

Change-Id: I030017d3bf956b8593bc09073ad6545b80a5b52b
Signed-off-by: Matt DeVillier 
---
M src/security/vboot/Makefile.inc
M src/security/vboot/antirollback.h
M src/security/vboot/secdata_mock.c
M src/security/vboot/secdata_tpm.c
A src/security/vboot/vbios_cache_hash_tpm.c
A src/security/vboot/vbios_cache_hash_tpm.h
6 files changed, 184 insertions(+), 0 deletions(-)

git pull ssh://review.coreboot.org:29418/coreboot refs/changes/01/72401/5