summaryrefslogtreecommitdiff
path: root/src/security
AgeCommit message (Expand)Author
2022-03-07drivers/tpm/spi: Refactor out some cr50-specific logicTim Wawrzynczak
2022-03-01security/tpm: Add vendor-specific tis functions to read/write TPM regsTim Wawrzynczak
2022-02-24security/intel/stm: Make STM setup MP safeEugene Myers
2022-02-24security/intel/stm: Use correct SMBASE for SMM descriptor setupEugene Myers
2022-02-07treewide: Remove "ERROR: "/"WARN: " prefixes from log messagesJulius Werner
2022-01-13console/cbmem_console: Rename cbmem_dump_consoleRaul E Rangel
2022-01-12src: Remove redundant <rules.h> and <commonlib/bsd/compiler.h>Elyes HAOUAS
2022-01-04security/memory/memory.c: Include 'stdbool' instead of 'stdint'Elyes HAOUAS
2022-01-01src: Drop duplicated includesElyes HAOUAS
2021-12-16Revert "security/vboot: Add NVRAM counter for TPM 2.0"Tim Wawrzynczak
2021-12-06x86_64 assembly: Don't touch %gsPatrick Rudolph
2021-12-06security/intel: Use defines for segment registersPatrick Rudolph
2021-12-06cbfs: Remove deprecated APIsJulius Werner
2021-12-03cbfs | tspi: Join hash calculation for verification and measurementJulius Werner
2021-12-03src/security/vboot: Set up secure counter space in TPM NVRAMKarthikeyan Ramasubramanian
2021-12-02security/intel/txt: Fix HEAP_ACM format depending on number of ACMs in CBFSMichał Żygowski
2021-11-27security/intel/txt: Fix GETSEC checks in romstageMichał Żygowski
2021-11-27security/intel/txt: Allow platforms without FIT to use Intel TXTMichał Żygowski
2021-11-27security/intel/txt: Issue a global reset when TXT_RESET bit is setMichał Żygowski
2021-11-27security/intel/txt: Use set_global_reset in txt_reset_platform if possibleMichał Żygowski
2021-11-27security/intel/txt: Implement GETSEC PARAMETER dumpingMichał Żygowski
2021-11-27security/intel/txt: Remove unused region deviceMichał Żygowski
2021-11-27security/intel/txt: Correct reporting of chipset production fuse stateMichał Żygowski
2021-11-26security/intel/txt: Allow to set TXT BIOS Data Region versionMichał Żygowski
2021-11-19security/vboot: Add NVRAM counter for TPM 2.0Miriam Polzer
2021-11-17security/vboot: Use default kernel secdata sizeTim Wawrzynczak
2021-11-17security/tpm/tcg-2.0: Handle TPM_RC_NV_RANGE return codeKarthikeyan Ramasubramanian
2021-11-15Reland "vboot_logic: Set VB2_CONTEXT_EC_TRUSTED in verstage_main"Hsuan-ting Chen
2021-11-10Rename ECAM-specific MMCONF KconfigsShelley Chen
2021-11-01security/intel/txt: Get addr bits at runtimeArthur Heymans
2021-10-15Revert "vboot_logic: Set VB2_CONTEXT_EC_TRUSTED in verstage_main"Hsuan-ting Chen
2021-10-07security/vboot: Remove vb2ex_hwcrypto stubsYu-Ping Wu
2021-10-05src/mainboard to src/security: Fix spelling errorsMartin Roth
2021-09-17security/intel/txt/romstage: add missing arch/cpu.h includeFelix Held
2021-09-16vboot_logic: Set VB2_CONTEXT_EC_TRUSTED in verstage_mainHsuan Ting Chen
2021-09-15vboot: Call check_boot_mode before vb2api_fw_phase1Daisuke Nojiri
2021-07-26vboot/secdata_tpm: Add WRITE_STCLEAR attr to RW ARB spacesAseda Aboagye
2021-07-14include/cpu/x86/msr: introduce IA32_MC_*(x) macrosFelix Held
2021-07-12security/intel/txt: use mca_get_bank_count()Felix Held
2021-07-12security/intel/txt: add missing cpu/x86/msr.h includeFelix Held
2021-07-07Makefile.inc: Fix IFITTOOL dependenciesArthur Heymans
2021-07-01vboot: add VBOOT_X86_SHA256_ACCELERATION configSubrata Banik
2021-06-28security/intel/cbnt: Fix loggingArthur Heymans
2021-06-25security/intel/cbnt: Remove fixed size requirementArthur Heymans
2021-06-21security/intel: Add option to enable SMM flash access onlyAngel Pons
2021-06-21security/intel/cbnt: Add loggingArthur Heymans
2021-06-21security/intel/txt: Split off microcode error types string printingArthur Heymans
2021-06-21security/intel/txt: Always build logging.cArthur Heymans
2021-06-21security/intel/cbnt/Makefile.inc: Fix building cbnt-provArthur Heymans
2021-06-21security/tpm/tspi/crtm.c: Fix early initArthur Heymans
2021-06-16security/tpm/tspi: Reduce scope of tspi_init_crtmArthur Heymans
2021-06-15tpm/tss: Remove local variablePatrick Georgi
2021-06-14security/vboot: Add timestamps when loading verstageRaul E Rangel
2021-06-10security/vboot: Add support for ZTE spacesAseda Aboagye
2021-06-10security/tpm/tss/tcg-2.0: Add `tlcl_set_bits()`Aseda Aboagye
2021-06-10vboot: Assign 2 to EC_EFS_BOOT_MODE_TRUSTED_RODaisuke Nojiri
2021-06-073rdparty/intel-sec-tools: Update to support Boot GuardChristopher Meis
2021-06-04vboot: Add VB2_CONTEXT_EC_TRUSTEDDaisuke Nojiri
2021-05-30Apply more uses for Kconfig TPMKyösti Mälkki
2021-05-27tpm: Remove USER_TPMx options, make TPM1/TPM2 menuconfig visibleJulius Werner
2021-05-26Add Kconfig TPMKyösti Mälkki
2021-05-21security/tpm/tspi: Always measure the cache to pcrArthur Heymans
2021-05-21security/tpm/tspi/crtm: Fix FMAP TPM PCRArthur Heymans
2021-05-20security/intel/txt: Add weak function to skip TXT lockdownArthur Heymans
2021-05-18vboot/secdata_mock: Make v0 kernel secdata contextAseda Aboagye
2021-05-16vboot/secdata_tpm: Create FWMP space in corebootAseda Aboagye
2021-05-16vboot/secdata_tpm: Rename set_space()Aseda Aboagye
2021-05-14cbfs: Increase mcache size defaultsJulius Werner
2021-05-13src/security/tpm: Deal with zero length tlcl writesPatrick Georgi
2021-05-12src/security/intel/stm: Add warning for non-reproducible buildMartin Roth
2021-05-11security/intel/txt: Set up TPM in bootblock if using measured bootArthur Heymans
2021-05-11security/intel/cbnt: Allow to use an externally provided cbnt-prov binArthur Heymans
2021-05-11security/intel/cbnt/Makefile.inc: Use variables for hash algArthur Heymans
2021-05-103rdparty/intel-sec-tools: Update submodule pointerArthur Heymans
2021-05-10security/intel/cbnt: Rename bg-prov to cbnt-provArthur Heymans
2021-05-06security/tpm: Add option to init TPM in bootblockArthur Heymans
2021-05-05security/tpm/crtm: Measure FMAP into TPMArthur Heymans
2021-05-04security/vboot: Include fspt.bin in the RO region onlyArthur Heymans
2021-04-14vboot: ec_sync: Switch to new CBFS APIJulius Werner
2021-04-06verstage: Add debug print when returning from verstageJulius Werner
2021-04-06security/intel/cbnt: Fix ibbhash command lineChristian Walter
2021-03-30security: vboot: Clarify PCR extension algorithms/sizesJulius Werner
2021-03-30security/intel/cbnt: Add options to generate BPM from KconfigArthur Heymans
2021-03-30security/intel/cbnt: Add option to generate an unsigned BPMArthur Heymans
2021-03-30security/intel/cbnt: Add option to generate BPMArthur Heymans
2021-03-30security/intel/cbnt: Add an option to generate an unsigned KMArthur Heymans
2021-03-28security/intel/cbnt: Generate KM from Kconfig symbolsArthur Heymans
2021-03-28security/intel/cbnt: Add option to generate KMArthur Heymans
2021-03-28security/intel/cbnt: Prepare for KM/BPM generationArthur Heymans
2021-03-19security/intel/cbnt: Make CBNT compatible with CMOS option tableArthur Heymans
2021-03-19cpu/intel/fit: Add the FIT table as a separate CBFS fileArthur Heymans
2021-03-17cbfs: Replace more instances of cbfs_boot_locate() with newer APIsJulius Werner
2021-03-16cbfs: Remove prog_locate() for stages and rmodulesJulius Werner
2021-03-15security/intel/stm/Makefile.inc: Fix typoBenjamin Doron
2021-03-05security/tpm/tss/vendor/cr50: Introduce vendor sub-command to reset ECKarthikeyan Ramasubramanian
2021-02-27vboot: update GBB flags to use altfw terminologyJoel Kitching
2021-02-16src/{drivers,security}: Remove unused <string.h>Elyes HAOUAS
2021-02-15src/security: Remove unused <console/console.h>Elyes HAOUAS
2021-02-11security/intel/txt/Makefile.inc: Use tab for indentElyes HAOUAS
2021-02-09security/vboot/bootmode: Add weak fill_lb_gpiosRaul E Rangel