summaryrefslogtreecommitdiff
path: root/src/security
AgeCommit message (Expand)Author
2020-11-04sec/intel/txt: Add support for running SCLEAN in romstageAngel Pons
2020-10-28sec/intel/txt/Kconfig: Remove the menu for including ACMsArthur Heymans
2020-10-28sec/intel/txt/Makefile.inc: Include ACMs using Kconfig variablesArthur Heymans
2020-10-28security/vboot: fix policy digest for nvmem spacesAndrey Pronin
2020-10-26vboot: Disable vboot functions in SMMJulius Werner
2020-10-26security/tpm/tspi/crtm: Add line break to debug messagesFrans Hendriks
2020-10-22sec/intel/txt: Split MTRR setup ASM code into a macroAngel Pons
2020-10-22sec/intel/txt: Add `enable_getsec_or_reset` functionAngel Pons
2020-10-22sec/intel/txt: Extract BIOS ACM loading into a functionAngel Pons
2020-10-22sec/intel/txt: Only run LockConfig for LT-SXAngel Pons
2020-10-22sec/intel/txt: Always run SCHECK on regular bootsAngel Pons
2020-10-22sec/intel/txt: Allow skipping ACM NOP functionAngel Pons
2020-10-22sec/intel/txt/ramstage.c: Do not init the heap on S3 resumeAngel Pons
2020-10-22sec/intel/txt/ramstage.c: Extract heap init into a functionAngel Pons
2020-10-22sec/intel/txt: Add and fill in BIOS Specification infoAngel Pons
2020-10-22sec/intel/txt/common.c: Only log ACM error on failureAngel Pons
2020-10-22sec/intel/txt: Move DPR size to KconfigAngel Pons
2020-10-22security/vboot: Remove all tpm 1.2 functions for mrc hash in the tpmShelley Chen
2020-10-20mrc_cache: Add tpm_hash_index field to cache_region structShelley Chen
2020-10-20security/vboot: Add new TPM NVRAM index MRC_RW_HASH_NV_INDEXShelley Chen
2020-10-20security/vboot: Make mrc_cache hash functions genericShelley Chen
2020-10-20mrc_cache: Move mrc_cache_*_hash functions into mrc_cache driverShelley Chen
2020-10-20mrc_cache: Add config MRC_SAVE_HASH_IN_TPMShelley Chen
2020-10-19security/vboot: Rename mem_init.h to mrc_cache_hash_tpm.hShelley Chen
2020-10-17intel/txt: Add `txt_get_chipset_dpr` functionAngel Pons
2020-10-17security/intel/txt: Improve MTRR setup for GETSEC[ENTERACCS]Angel Pons
2020-10-17sec/intel/txt: Bail if var MTRRs cannot snugly cache the BIOS ACMAngel Pons
2020-10-15sec/intel/txt/getsec_enteraccs.S: Save and restore MTRR_DEF_TYPEArthur Heymans
2020-10-15security/intel/txt: Use `smm_region()` to get TSEG baseAngel Pons
2020-10-12security/intel/txt: Add and use DPR register layoutAngel Pons
2020-10-12security/intel/txt: Clean up includesAngel Pons
2020-10-12security/intel/stm: Add options for STM buildEugene Myers
2020-10-08security/intel/txt: Print chipset as hex valueChristian Walter
2020-10-01security/intel/stm: Fix size_t printf format errorFelix Held
2020-09-30security/intel/stm: Fix size_t printf format errorEugene D Myers
2020-09-21src/security: Drop unneeded empty linesElyes HAOUAS
2020-09-21security/tpm/tss/tcg-2.0: add const to marshalling functionsCaveh Jalali
2020-08-30security/intel/txt/getsec.c: Do not check lock bitAngel Pons
2020-08-30security/intel/txt: Add missing definitionsAngel Pons
2020-08-20drivers/spi/tpm: Enable long cr50 ready pulses for Tiger Lake systemsJes Klinke
2020-08-18src: Remove unused 'include <lib.h>'Elyes HAOUAS
2020-08-18src: Remove unused 'include <boot_device.h>'Elyes HAOUAS
2020-08-13security/vboot/Makefile.inc: Update regions-for-file functionSridhar Siricilla
2020-08-07security/intel/txt: Fix variable MTRR handlingAngel Pons
2020-08-07security/intel/txt: Allow using CF9 reset, tooAngel Pons
2020-08-06security/intel/txt: Avoid shifting by a negative valueJohn Zhao
2020-07-31security/intel/txt: Add Intel TXT supportPhilipp Deppenwiese
2020-07-26src: Change BOOL CONFIG_ to CONFIG() in comments & stringsMartin Roth
2020-07-26src: Remove unused 'include <cbmem.h>'Elyes HAOUAS
2020-07-21security/intel/stm: Add missing <stdbool.h>Angel Pons
2020-07-15security/vboot: ensure that NVMEM is saved on every kernel space writeJett Rink
2020-07-14src: Remove unused 'include <cpu/x86/msr.h>'Elyes HAOUAS
2020-07-14src: Remove unused 'include <stdint.h>Elyes HAOUAS
2020-07-09security/vboot/secdata_tpm.c: Drop dead codeAngel Pons
2020-07-09security/tpm/tss/tcg-1.2/tss.c: Drop dead codeAngel Pons
2020-07-08security/vboot: Allow files to go into only RW-A or RW-B regionMartin Roth
2020-07-06arch/x86: Remove RELOCATABLE_RAMSTAGEKyösti Mälkki
2020-07-04drivers/pc80/tpm: Remove LPC_TPMKyösti Mälkki
2020-06-22lockdown: Add hint for how to check for lockdown support in boot logDaniel Gröber
2020-06-22lockdown: Add Kconfigs for SPI media protection modeDaniel Gröber
2020-06-19Kconfig: Escape variable to accommodate new Kconfig versionsPatrick Georgi
2020-06-17security/tpm: Change wording of variable namesDuncan Laurie
2020-06-17treewide: Replace CONFIG(ARCH_xx) testsKyösti Mälkki
2020-06-15security/vboot: Add option to run verstage before bootblockMartin Roth
2020-06-02src: Remove unused 'include <fmap.h>'Elyes HAOUAS
2020-06-02src: Remove redundant includesElyes HAOUAS
2020-06-02src: Remove unused 'include <symbols.h>'Elyes HAOUAS
2020-06-02lockdown: Fix missing spaces in boot logDaniel Gröber
2020-05-26Remove MAYBE_STATIC_BSS and ENV_STAGE_HAS_BSS_SECTIONKyösti Mälkki
2020-05-25security/tpm: Use SPDX identifiersJacob Garber
2020-05-19security/tpm/tspi: Fix handling of white space delimited listharshit
2020-05-18src: Remove unused 'include <string.h>'Elyes HAOUAS
2020-05-18src: Remove unused 'include <lib.h>'Elyes HAOUAS
2020-05-18src: Remove leading blank lines from SPDX headerElyes HAOUAS
2020-05-13src: Remove unused '#include <stddef.h>'Elyes HAOUAS
2020-05-13src: Remove unused '#include <stdint.h>'Elyes HAOUAS
2020-05-11treewide: Convert more license headers to SPDX stylePatrick Georgi
2020-05-11treewide: Remove "this file is part of" linesPatrick Georgi
2020-05-09src/: Replace GPL boilerplate with SPDX headersPatrick Georgi
2020-05-08security: tcg-2.0: Ignore data payload for errors, fix Cr50 boot modeJulius Werner
2020-05-08{security,soc}/*/Kconfig: Replace GPLv2 long form headers with SPDX headerElyes HAOUAS
2020-05-08vboot: Provide declaration for verstage_mainboard_early_init()Furquan Shaikh
2020-05-04security/vboot: Limit vboot verification code access to only verstageSridhar Siricilla
2020-05-02acpi: Move ACPI table support out of arch/x86 (3/5)Furquan Shaikh
2020-05-02intel/stm: Drop now unneeded `num_cpus` paramEugene D Myers
2020-05-02intel/stm: Place resource list right below MSEGEugene D Myers
2020-05-01security/vboot: Convert reboot-related errors to vboot2-styleYu-Ping Wu
2020-04-28vboot: Always build secdata functions for romstageJulius Werner
2020-04-28security/lockdown: Write-protect WP_ROPatrick Rudolph
2020-04-28security: Add common boot media write protectionPatrick Rudolph
2020-04-28drivers/spi/tpm: Add support for non CR50 SPI TPM2Patrick Rudolph
2020-04-23rules.h: Rename ENV_VERSTAGE to ENV_SEPARATE_VERSTAGEJulius Werner
2020-04-23vboot: Add permission check for kernel spaceDaisuke Nojiri
2020-04-20security/vboot, mb/google: Fix build errorsPatrick Georgi
2020-04-20vboot/secdata: remove retries, readback, and CRC checkJoel Kitching
2020-04-20vboot: remove leftover TPM_PCR_GBB constantsJoel Kitching
2020-04-17ec_sync: Run EFS2 in romstagednojiri
2020-04-17TPM: Add tlcl_cr50_get_boot_modednojiri
2020-04-15Do not select USE_BLOBSNico Huber
2020-04-10assert.h: Simplify dead_code()Nico Huber