[coreboot-gerrit] Change in ...coreboot[master]: security/vboot: Add measured boot mode

[Philipp Deppenwiese (Code Review)]

Hello Patrick Rudolph, Aaron Durbin, Piotr Król, Julius Werner, Krystian Hebel, Patrick Rudolph, Stefan Reinauer, Paul Menzel, build bot (Jenkins), Patrick Georgi, Werner Zeh, Huang Jin, York Yang, David Hendricks, Martin Roth, Michał Żygowski,

I'd like you to reexamine a change. Please visit

https://review.coreboot.org/c/coreboot/+/29547

to look at the new patch set (#61).

Change subject: security/vboot: Add measured boot mode
......................................................................

security/vboot: Add measured boot mode

* Introduce a measured boot mode into vboot.
* Add hook for stage measurements in prog_loader and cbfs.
* Implement and hook-up CRTM in vboot and check for suspend.

Change-Id: I339a2f1051e44f36aba9f99828f130592a09355e
Signed-off-by: Philipp Deppenwiese 
Signed-off-by: Werner Zeh 
---
M Documentation/index.md
A Documentation/security.md
A Documentation/security/index.md
A Documentation/security/vboot/measured_boot.md
A Documentation/security/vboot/srtm.png
M src/cpu/intel/haswell/Makefile.inc
M src/cpu/intel/model_2065x/Makefile.inc
M src/cpu/intel/model_206ax/Makefile.inc
M src/lib/cbfs.c
M src/lib/prog_loaders.c
M src/security/tpm/tspi/tspi.c
M src/security/vboot/Kconfig
M src/security/vboot/Makefile.inc
A src/security/vboot/vboot_crtm.c
A src/security/vboot/vboot_crtm.h
M src/security/vboot/vboot_logic.c
M src/soc/amd/stoneyridge/Makefile.inc
M src/soc/intel/baytrail/Makefile.inc
M src/soc/intel/braswell/Makefile.inc
M src/soc/intel/broadwell/Makefile.inc
M src/soc/intel/fsp_baytrail/Makefile.inc
M src/soc/intel/fsp_broadwell_de/Makefile.inc
M src/soc/mediatek/mt8183/include/soc/memlayout.ld
M src/soc/rockchip/rk3288/include/soc/memlayout.ld
M util/abuild/abuild
25 files changed, 347 insertions(+), 52 deletions(-)

git pull ssh://review.coreboot.org:29418/coreboot refs/changes/47/29547/61