summaryrefslogtreecommitdiff
path: root/src/security
AgeCommit message (Expand)Author
2021-06-10security/vboot: Add support for ZTE spacesAseda Aboagye
2021-06-10security/tpm/tss/tcg-2.0: Add `tlcl_set_bits()`Aseda Aboagye
2021-06-10vboot: Assign 2 to EC_EFS_BOOT_MODE_TRUSTED_RODaisuke Nojiri
2021-06-073rdparty/intel-sec-tools: Update to support Boot GuardChristopher Meis
2021-06-04vboot: Add VB2_CONTEXT_EC_TRUSTEDDaisuke Nojiri
2021-05-30Apply more uses for Kconfig TPMKyösti Mälkki
2021-05-27tpm: Remove USER_TPMx options, make TPM1/TPM2 menuconfig visibleJulius Werner
2021-05-26Add Kconfig TPMKyösti Mälkki
2021-05-21security/tpm/tspi: Always measure the cache to pcrArthur Heymans
2021-05-21security/tpm/tspi/crtm: Fix FMAP TPM PCRArthur Heymans
2021-05-20security/intel/txt: Add weak function to skip TXT lockdownArthur Heymans
2021-05-18vboot/secdata_mock: Make v0 kernel secdata contextAseda Aboagye
2021-05-16vboot/secdata_tpm: Create FWMP space in corebootAseda Aboagye
2021-05-16vboot/secdata_tpm: Rename set_space()Aseda Aboagye
2021-05-14cbfs: Increase mcache size defaultsJulius Werner
2021-05-13src/security/tpm: Deal with zero length tlcl writesPatrick Georgi
2021-05-12src/security/intel/stm: Add warning for non-reproducible buildMartin Roth
2021-05-11security/intel/txt: Set up TPM in bootblock if using measured bootArthur Heymans
2021-05-11security/intel/cbnt: Allow to use an externally provided cbnt-prov binArthur Heymans
2021-05-11security/intel/cbnt/Makefile.inc: Use variables for hash algArthur Heymans
2021-05-103rdparty/intel-sec-tools: Update submodule pointerArthur Heymans
2021-05-10security/intel/cbnt: Rename bg-prov to cbnt-provArthur Heymans
2021-05-06security/tpm: Add option to init TPM in bootblockArthur Heymans
2021-05-05security/tpm/crtm: Measure FMAP into TPMArthur Heymans
2021-05-04security/vboot: Include fspt.bin in the RO region onlyArthur Heymans
2021-04-14vboot: ec_sync: Switch to new CBFS APIJulius Werner
2021-04-06verstage: Add debug print when returning from verstageJulius Werner
2021-04-06security/intel/cbnt: Fix ibbhash command lineChristian Walter
2021-03-30security: vboot: Clarify PCR extension algorithms/sizesJulius Werner
2021-03-30security/intel/cbnt: Add options to generate BPM from KconfigArthur Heymans
2021-03-30security/intel/cbnt: Add option to generate an unsigned BPMArthur Heymans
2021-03-30security/intel/cbnt: Add option to generate BPMArthur Heymans
2021-03-30security/intel/cbnt: Add an option to generate an unsigned KMArthur Heymans
2021-03-28security/intel/cbnt: Generate KM from Kconfig symbolsArthur Heymans
2021-03-28security/intel/cbnt: Add option to generate KMArthur Heymans
2021-03-28security/intel/cbnt: Prepare for KM/BPM generationArthur Heymans
2021-03-19security/intel/cbnt: Make CBNT compatible with CMOS option tableArthur Heymans
2021-03-19cpu/intel/fit: Add the FIT table as a separate CBFS fileArthur Heymans
2021-03-17cbfs: Replace more instances of cbfs_boot_locate() with newer APIsJulius Werner
2021-03-16cbfs: Remove prog_locate() for stages and rmodulesJulius Werner
2021-03-15security/intel/stm/Makefile.inc: Fix typoBenjamin Doron
2021-03-05security/tpm/tss/vendor/cr50: Introduce vendor sub-command to reset ECKarthikeyan Ramasubramanian
2021-02-27vboot: update GBB flags to use altfw terminologyJoel Kitching
2021-02-16src/{drivers,security}: Remove unused <string.h>Elyes HAOUAS
2021-02-15src/security: Remove unused <console/console.h>Elyes HAOUAS
2021-02-11security/intel/txt/Makefile.inc: Use tab for indentElyes HAOUAS
2021-02-09security/vboot/bootmode: Add weak fill_lb_gpiosRaul E Rangel
2021-02-09src: Add missing <cbmem.h>Elyes HAOUAS
2021-02-09security/tpm/tss/vendor/cr50/cr50.c: Fix typoElyes HAOUAS
2021-02-04coreboot_table: Move VBOOT_VBNV supportKyösti Mälkki
2021-02-03src: Remove unused <cbmem.h>Elyes HAOUAS
2021-02-01security/vboot: Add config for GBB_FLAG_ENABLE_UDCEric Lai
2021-02-01drivers/security/cbnt: Fix bootblock sizeArthur Heymans
2021-01-30soc/intel: Replace `SA_PCIEX_LENGTH` Kconfig optionsAngel Pons
2021-01-19security/tpm/tss/tcg-1.2/tss.c: Use __func__Elyes HAOUAS
2021-01-18security/intel/stm/StmPlatformSmm.c: Remove repeated wordElyes HAOUAS
2021-01-18security/vboot/secdata_tpm.c: Remove repeated wordElyes HAOUAS
2021-01-15build system: Always add coreboot.pre dependency to intermediatesPatrick Georgi
2021-01-14build system: Structure and serialize INTERMEDIATEPatrick Georgi
2021-01-08*/Makefile.inc: Add some INTERMEDIATE targets to .PHONYArthur Heymans
2021-01-07security/intel/txt: Don't run SCHECK on CBnTArthur Heymans
2021-01-04security/intel/txt/ramstage.c: Fix clearing secrets on CBNTArthur Heymans
2020-12-29sec/intel/txt/Kconfig: Make TXT HEAP and SINIT size configurableArthur Heymans
2020-12-03cbfs: Add verification for RO CBFS metadata hashJulius Werner
2020-12-02cbfs: Simplify load/map API names, remove type argumentsJulius Werner
2020-12-02cbfs: Move more stuff into cbfs_boot_lookup()Julius Werner
2020-11-21cbfs: Add metadata cacheJulius Werner
2020-11-18vboot: stop implementing VbExDisplayScreenJoel Kitching
2020-11-17src: Add missing 'include <console/console.h>'Elyes HAOUAS
2020-11-10sec/intel/cbnt: Stitch in ACMs in the coreboot imageArthur Heymans
2020-11-06security/vboot: Add Kconfig symbol to set hashing block sizeMartin Roth
2020-11-04haswell: Add Intel TXT support in romstageAngel Pons
2020-11-04sec/intel/txt: Add support for running SCLEAN in romstageAngel Pons
2020-10-28sec/intel/txt/Kconfig: Remove the menu for including ACMsArthur Heymans
2020-10-28sec/intel/txt/Makefile.inc: Include ACMs using Kconfig variablesArthur Heymans
2020-10-28security/vboot: fix policy digest for nvmem spacesAndrey Pronin
2020-10-26vboot: Disable vboot functions in SMMJulius Werner
2020-10-26security/tpm/tspi/crtm: Add line break to debug messagesFrans Hendriks
2020-10-22sec/intel/txt: Split MTRR setup ASM code into a macroAngel Pons
2020-10-22sec/intel/txt: Add `enable_getsec_or_reset` functionAngel Pons
2020-10-22sec/intel/txt: Extract BIOS ACM loading into a functionAngel Pons
2020-10-22sec/intel/txt: Only run LockConfig for LT-SXAngel Pons
2020-10-22sec/intel/txt: Always run SCHECK on regular bootsAngel Pons
2020-10-22sec/intel/txt: Allow skipping ACM NOP functionAngel Pons
2020-10-22sec/intel/txt/ramstage.c: Do not init the heap on S3 resumeAngel Pons
2020-10-22sec/intel/txt/ramstage.c: Extract heap init into a functionAngel Pons
2020-10-22sec/intel/txt: Add and fill in BIOS Specification infoAngel Pons
2020-10-22sec/intel/txt/common.c: Only log ACM error on failureAngel Pons
2020-10-22sec/intel/txt: Move DPR size to KconfigAngel Pons
2020-10-22security/vboot: Remove all tpm 1.2 functions for mrc hash in the tpmShelley Chen
2020-10-20mrc_cache: Add tpm_hash_index field to cache_region structShelley Chen
2020-10-20security/vboot: Add new TPM NVRAM index MRC_RW_HASH_NV_INDEXShelley Chen
2020-10-20security/vboot: Make mrc_cache hash functions genericShelley Chen
2020-10-20mrc_cache: Move mrc_cache_*_hash functions into mrc_cache driverShelley Chen
2020-10-20mrc_cache: Add config MRC_SAVE_HASH_IN_TPMShelley Chen
2020-10-19security/vboot: Rename mem_init.h to mrc_cache_hash_tpm.hShelley Chen
2020-10-17intel/txt: Add `txt_get_chipset_dpr` functionAngel Pons
2020-10-17security/intel/txt: Improve MTRR setup for GETSEC[ENTERACCS]Angel Pons
2020-10-17sec/intel/txt: Bail if var MTRRs cannot snugly cache the BIOS ACMAngel Pons
2020-10-15sec/intel/txt/getsec_enteraccs.S: Save and restore MTRR_DEF_TYPEArthur Heymans