/* SPDX-License-Identifier: GPL-2.0-only */ #ifndef __SECURITY_TSPI_CRTM_H__ #define __SECURITY_TSPI_CRTM_H__ #include #include #include #include /* CRTM */ #define TPM_CRTM_PCR 2 /* PCR for measuring data which changes during runtime * e.g. CMOS, NVRAM... */ #define TPM_RUNTIME_DATA_PCR 3 #if CONFIG(TPM_LOG_CB) && CONFIG(TPM1) # define TPM_MEASURE_ALGO VB2_HASH_SHA1 #elif CONFIG(TPM_LOG_CB) && CONFIG(TPM2) # define TPM_MEASURE_ALGO VB2_HASH_SHA256 #endif #if !defined(TPM_MEASURE_ALGO) # if !CONFIG(TPM_MEASURED_BOOT) # define TPM_MEASURE_ALGO VB2_HASH_INVALID # else # error "Misconfiguration: failed to determine TPM hashing algorithm" # endif #endif /** * Measure digests cached in TCPA log entries into PCRs */ int tspi_measure_cache_to_pcr(void); /** * Extend a measurement hash taken for a CBFS file into the appropriate PCR. */ uint32_t tspi_cbfs_measurement(const char *name, uint32_t type, const struct vb2_hash *hash); /* * Provide a function on SoC level to measure the bootblock for cases where bootblock is * neither in FMAP nor in CBFS (e.g. in IFWI). */ int tspi_soc_measure_bootblock(int pcr_index); #endif /* __SECURITY_TSPI_CRTM_H__ */