summaryrefslogtreecommitdiff
path: root/src/security
AgeCommit message (Expand)Author
2022-09-03soc/intel: Add SI_DESC region to GSCVD rangesJulius Werner
2022-09-02cbfs/vboot: Adapt to new vb2_digest APIJulius Werner
2022-08-29drivers/i2c/tpm: Remove TI50_FIRMWARE_VERSION_NOT_SUPPORTEDReka Norman
2022-08-22Add SBOM (Software Bill of Materials) GenerationMaximilian Brune
2022-08-21tpm: Correct TI50_FIRMWARE_VERSION_NOT_SUPPORTED help textYu-Ping Wu
2022-07-30security/vboot: Simplify image signingJakub Czapiga
2022-07-20treewide: Remove unused <cpu/x86/msr.h>Elyes Haouas
2022-07-17security/intel/txt/common.c: Remove unuseful "else" after "return"Elyes HAOUAS
2022-07-13cpu/x86/mp_init: retype do_smm element in mp_state struct to boolFelix Held
2022-07-04treewide: Unify Google brandingJon Murphy
2022-06-22security/vboot: Deprecate VBOOT_VBNV_ECYu-Ping Wu
2022-06-21security/vboot: Add support for GSCVD (Google "RO verification")Julius Werner
2022-06-08drivers/tpm/cr50: Add TPM IRQ timeout Kconfig optionYu-Ping Wu
2022-06-01cbfs: Rename TYPE_FIT to TYPE_FIT_PAYLOADJulius Werner
2022-05-24security/tpm/crtm: Add a function to measure the bootblock on SoC levelWerner Zeh
2022-05-24security/tpm/crtm: Use bootblock from FMAP on non x86 platformsWerner Zeh
2022-05-24security/tpm/crtm.c: Fix !CONFIG_BOOTBLOCK_IN_CBFS measuringArthur Heymans
2022-05-20CBMEM: Change declarations for initialization hooksKyösti Mälkki
2022-05-16drivers/i2c/tpm: Work around missing firmware_version in Ti50 < 0.0.15Reka Norman
2022-05-16src: Remove unused <cf9_reset.h>Elyes Haouas
2022-05-12security/intel/cbnt/Makefile.inc: Improve build flowArthur Heymans
2022-05-12Makefile.inc: Generate master header and pointer as C structsArthur Heymans
2022-05-11sec/intel/txt: Use 'bios_acm_error' variableArthur Heymans
2022-05-11security/tpm/crtm.c: Remove set but unused variableArthur Heymans
2022-04-24{drivers,northbridge,security}: Remove unused <cpu/x86/lapic.h>Elyes HAOUAS
2022-04-24src: Remove unused <console/cbmem_console.h>Elyes HAOUAS
2022-04-21tpm: Refactor TPM Kconfig dimensionsJes B. Klinke
2022-03-09{drivers/security}: Replace `cb_err_t` with `enum cb_err`Subrata Banik
2022-03-09commonlib/bsd: Remove cb_err_tJulius Werner
2022-03-08timestamps: Rename timestamps to make names more consistentJakub Czapiga
2022-03-08device/mmio.h: Move readXp/writeXp helpers to device/mmio.hJianjun Wang
2022-03-07drivers/tpm/spi: Refactor out some cr50-specific logicTim Wawrzynczak
2022-03-01security/tpm: Add vendor-specific tis functions to read/write TPM regsTim Wawrzynczak
2022-02-24security/intel/stm: Make STM setup MP safeEugene Myers
2022-02-24security/intel/stm: Use correct SMBASE for SMM descriptor setupEugene Myers
2022-02-07treewide: Remove "ERROR: "/"WARN: " prefixes from log messagesJulius Werner
2022-01-13console/cbmem_console: Rename cbmem_dump_consoleRaul E Rangel
2022-01-12src: Remove redundant <rules.h> and <commonlib/bsd/compiler.h>Elyes HAOUAS
2022-01-04security/memory/memory.c: Include 'stdbool' instead of 'stdint'Elyes HAOUAS
2022-01-01src: Drop duplicated includesElyes HAOUAS
2021-12-16Revert "security/vboot: Add NVRAM counter for TPM 2.0"Tim Wawrzynczak
2021-12-06x86_64 assembly: Don't touch %gsPatrick Rudolph
2021-12-06security/intel: Use defines for segment registersPatrick Rudolph
2021-12-06cbfs: Remove deprecated APIsJulius Werner
2021-12-03cbfs | tspi: Join hash calculation for verification and measurementJulius Werner
2021-12-03src/security/vboot: Set up secure counter space in TPM NVRAMKarthikeyan Ramasubramanian
2021-12-02security/intel/txt: Fix HEAP_ACM format depending on number of ACMs in CBFSMichał Żygowski
2021-11-27security/intel/txt: Fix GETSEC checks in romstageMichał Żygowski
2021-11-27security/intel/txt: Allow platforms without FIT to use Intel TXTMichał Żygowski
2021-11-27security/intel/txt: Issue a global reset when TXT_RESET bit is setMichał Żygowski
2021-11-27security/intel/txt: Use set_global_reset in txt_reset_platform if possibleMichał Żygowski
2021-11-27security/intel/txt: Implement GETSEC PARAMETER dumpingMichał Żygowski
2021-11-27security/intel/txt: Remove unused region deviceMichał Żygowski
2021-11-27security/intel/txt: Correct reporting of chipset production fuse stateMichał Żygowski
2021-11-26security/intel/txt: Allow to set TXT BIOS Data Region versionMichał Żygowski
2021-11-19security/vboot: Add NVRAM counter for TPM 2.0Miriam Polzer
2021-11-17security/vboot: Use default kernel secdata sizeTim Wawrzynczak
2021-11-17security/tpm/tcg-2.0: Handle TPM_RC_NV_RANGE return codeKarthikeyan Ramasubramanian
2021-11-15Reland "vboot_logic: Set VB2_CONTEXT_EC_TRUSTED in verstage_main"Hsuan-ting Chen
2021-11-10Rename ECAM-specific MMCONF KconfigsShelley Chen
2021-11-01security/intel/txt: Get addr bits at runtimeArthur Heymans
2021-10-15Revert "vboot_logic: Set VB2_CONTEXT_EC_TRUSTED in verstage_main"Hsuan-ting Chen
2021-10-07security/vboot: Remove vb2ex_hwcrypto stubsYu-Ping Wu
2021-10-05src/mainboard to src/security: Fix spelling errorsMartin Roth
2021-09-17security/intel/txt/romstage: add missing arch/cpu.h includeFelix Held
2021-09-16vboot_logic: Set VB2_CONTEXT_EC_TRUSTED in verstage_mainHsuan Ting Chen
2021-09-15vboot: Call check_boot_mode before vb2api_fw_phase1Daisuke Nojiri
2021-07-26vboot/secdata_tpm: Add WRITE_STCLEAR attr to RW ARB spacesAseda Aboagye
2021-07-14include/cpu/x86/msr: introduce IA32_MC_*(x) macrosFelix Held
2021-07-12security/intel/txt: use mca_get_bank_count()Felix Held
2021-07-12security/intel/txt: add missing cpu/x86/msr.h includeFelix Held
2021-07-07Makefile.inc: Fix IFITTOOL dependenciesArthur Heymans
2021-07-01vboot: add VBOOT_X86_SHA256_ACCELERATION configSubrata Banik
2021-06-28security/intel/cbnt: Fix loggingArthur Heymans
2021-06-25security/intel/cbnt: Remove fixed size requirementArthur Heymans
2021-06-21security/intel: Add option to enable SMM flash access onlyAngel Pons
2021-06-21security/intel/cbnt: Add loggingArthur Heymans
2021-06-21security/intel/txt: Split off microcode error types string printingArthur Heymans
2021-06-21security/intel/txt: Always build logging.cArthur Heymans
2021-06-21security/intel/cbnt/Makefile.inc: Fix building cbnt-provArthur Heymans
2021-06-21security/tpm/tspi/crtm.c: Fix early initArthur Heymans
2021-06-16security/tpm/tspi: Reduce scope of tspi_init_crtmArthur Heymans
2021-06-15tpm/tss: Remove local variablePatrick Georgi
2021-06-14security/vboot: Add timestamps when loading verstageRaul E Rangel
2021-06-10security/vboot: Add support for ZTE spacesAseda Aboagye
2021-06-10security/tpm/tss/tcg-2.0: Add `tlcl_set_bits()`Aseda Aboagye
2021-06-10vboot: Assign 2 to EC_EFS_BOOT_MODE_TRUSTED_RODaisuke Nojiri
2021-06-073rdparty/intel-sec-tools: Update to support Boot GuardChristopher Meis
2021-06-04vboot: Add VB2_CONTEXT_EC_TRUSTEDDaisuke Nojiri
2021-05-30Apply more uses for Kconfig TPMKyösti Mälkki
2021-05-27tpm: Remove USER_TPMx options, make TPM1/TPM2 menuconfig visibleJulius Werner
2021-05-26Add Kconfig TPMKyösti Mälkki
2021-05-21security/tpm/tspi: Always measure the cache to pcrArthur Heymans
2021-05-21security/tpm/tspi/crtm: Fix FMAP TPM PCRArthur Heymans
2021-05-20security/intel/txt: Add weak function to skip TXT lockdownArthur Heymans
2021-05-18vboot/secdata_mock: Make v0 kernel secdata contextAseda Aboagye
2021-05-16vboot/secdata_tpm: Create FWMP space in corebootAseda Aboagye
2021-05-16vboot/secdata_tpm: Rename set_space()Aseda Aboagye
2021-05-14cbfs: Increase mcache size defaultsJulius Werner
2021-05-13src/security/tpm: Deal with zero length tlcl writesPatrick Georgi