[coreboot-gerrit] Patch merged into coreboot/master: 76e3303 chromeos: vboot2: Add TPM PCR extension support

gerrit at coreboot.org gerrit at coreboot.org
Mon Apr 20 17:06:30 CEST 2015


the following patch was just integrated into master:
commit 76e3303290f7f17d5318e87321567188f165cc2a
Author: Julius Werner <jwerner at chromium.org>
Date:   Fri Jan 30 18:45:27 2015 -0800

    chromeos: vboot2: Add TPM PCR extension support
    
    ChromeOS/vboot devices expect the TPM PCRs 0 and 1 to be extended with
    digests that attest the chosen boot mode (developer/recovery) and the
    HWID in a secure way. This patch uses the newly added vboot2 support
    functions to fetch these digests and store them in the TPM.
    
    CQ-DEPEND=CL:244542
    BRANCH=veyron
    BUG=chromium:451609
    TEST=Booted Jerry. Confirmed that PCR0 contains the same value as on my
    vboot1 Blaze and Falco (and PCR1 contains some non-zero hash).
    
    Original-Change-Id: I7037b8198c09fccee5440c4c85f0821166784cec
    Original-Signed-off-by: Julius Werner <jwerner at chromium.org>
    Original-Reviewed-on: https://chromium-review.googlesource.com/245119
    Original-Reviewed-by: Aaron Durbin <adurbin at chromium.org>
    Original-Reviewed-by: Daisuke Nojiri <dnojiri at chromium.org>
    
    (cherry picked from commit 8b44e13098cb7493091f2ce6c4ab423f2cbf0177)
    Signed-off-by: Aaron Durbin <adurbin at chromium.org>
    
    Change-Id: I549de8c07353683633fbf73e4ee62ba0ed72ff89
    Reviewed-on: http://review.coreboot.org/9706
    Tested-by: build bot (Jenkins)
    Reviewed-by: Stefan Reinauer <stefan.reinauer at coreboot.org>
    Reviewed-by: Paul Menzel <paulepanter at users.sourceforge.net>


See http://review.coreboot.org/9706 for details.

-gerrit



More information about the coreboot-gerrit mailing list