From 21176ddd5708beaef2d6a3aae032c307f65edaa1 Mon Sep 17 00:00:00 2001 From: Arthur Heymans Date: Wed, 17 Mar 2021 15:33:26 +0100 Subject: security/intel/cbnt: Prepare for KM/BPM generation Private and/or public keys will be provided as user input via Kconfig. As a private key also contains the public key, only ask what is required. Change-Id: I86d129bb1d13d833a26281defad2a1cb5bf86595 Signed-off-by: Arthur Heymans Reviewed-on: https://review.coreboot.org/c/coreboot/+/51576 Tested-by: build bot (Jenkins) Reviewed-by: Christian Walter --- src/security/intel/cbnt/Kconfig | 36 ++++++++++++++++++++++++++++++++++++ 1 file changed, 36 insertions(+) (limited to 'src/security/intel/cbnt/Kconfig') diff --git a/src/security/intel/cbnt/Kconfig b/src/security/intel/cbnt/Kconfig index 7289f7c514..11e09200f0 100644 --- a/src/security/intel/cbnt/Kconfig +++ b/src/security/intel/cbnt/Kconfig @@ -16,6 +16,42 @@ config INTEL_CBNT_SUPPORT if INTEL_CBNT_SUPPORT +config INTEL_CBNT_NEED_KM_PUB_KEY + bool + +config INTEL_CBNT_NEED_KM_PRIV_KEY + bool + +config INTEL_CBNT_KM_PUB_KEY_FILE + string "Key manifest (KM) public key" + depends on INTEL_CBNT_NEED_KM_PUB_KEY && !INTEL_CBNT_NEED_KM_PRIV_KEY + help + Location of the key manifest (KM) public key file in .pem format. + +config INTEL_CBNT_KM_PRIV_KEY_FILE + string "Key manifest (KM) private key" + depends on INTEL_CBNT_NEED_KM_PRIV_KEY + help + Location of the key manifest (KM) private key file in .pem format. + +config INTEL_CBNT_NEED_BPM_PUB_KEY + bool + +config INTEL_CBNT_NEED_BPM_PRIV_KEY + bool + +config INTEL_CBNT_BPM_PUB_KEY_FILE + string "Boot policy manifest (BPM) public key" + depends on INTEL_CBNT_NEED_BPM_PUB_KEY && !INTEL_CBNT_NEED_BPM_PRIV_KEY + help + Location of the boot policy manifest (BPM) public key file in .pem format. + +config INTEL_CBNT_BPM_PRIV_KEY_FILE + string "Boot policy manifest (BPM) private key" + depends on INTEL_CBNT_NEED_BPM_PRIV_KEY + help + Location of the boot policy manifest (BPM) private key file in .pem format. + config INTEL_CBNT_KEY_MANIFEST_BINARY string "KM (Key Manifest) binary location" help -- cgit v1.2.3