Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support BIOS SINIT modules #1470

Open
wants to merge 2 commits into
base: master
Choose a base branch
from
Open

Support BIOS SINIT modules #1470

wants to merge 2 commits into from

Commits on Apr 5, 2023

  1. tboot: Add -C acm_caps to pcr-calc

    pcr-calc currently uses an ACM file to read out the SINIT capabilities
    to determine its calculations.  Add an option to just directly provide
    the SINIT capabilities.  This is useful for the case of a BIOS provided
    ACM when a file is unavailable.  Otherwise pcr-calc will be unable to
    run and you cannot forward seal.
    
    Signed-off-by: Jason Andryuk <[email protected]>
    jandryuk committed Apr 5, 2023
    Configuration menu
    Copy the full SHA
    335d463 View commit details
    Browse the repository at this point in the history

Commits on May 11, 2023

  1. measuredlaunch: Add txt-stat fallback for ACM caps

    You can have a machine do a measured launch from a BIOS-provided ACM
    when you don't have an SINIT ACM file.  In that case, you cannot forward
    seal because ml-functions fails when it cannot find a file.
    
    Add a fallback mode for when a file cannot be found to parse the SINIT
    capabilities out of the txt-stat output.  It's not pretty, but it may do
    the trick.  Then you can use the new -C option to pcr-calc for the
    forward seal.
    
    Signed-off-by: Jason Andryuk <[email protected]>
    jandryuk committed May 11, 2023
    Configuration menu
    Copy the full SHA
    1908d85 View commit details
    Browse the repository at this point in the history