diff options
author | Rodrigo Gonzalez del Cueto <rodrigo.gonzalez.del.cueto@intel.com> | 2021-12-17 10:47:36 +0800 |
---|---|---|
committer | mergify[bot] <37929162+mergify[bot]@users.noreply.github.com> | 2021-12-17 15:03:43 +0000 |
commit | 195f0119731dbc4b93b4d485998dac3bbf8629a3 (patch) | |
tree | 796c478dbce0037fb5ecf5c4b159ab1ce77af95e /EmbeddedPkg/Library/AcpiLib | |
parent | 8ed8568922be9b5f7111fc1297317106aba7ab52 (diff) | |
download | edk2-195f0119731dbc4b93b4d485998dac3bbf8629a3.zip edk2-195f0119731dbc4b93b4d485998dac3bbf8629a3.tar.gz edk2-195f0119731dbc4b93b4d485998dac3bbf8629a3.tar.bz2 |
SecurityPkg: Reallocate TPM Active PCRs based on platform support
REF: https://bugzilla.tianocore.org/show_bug.cgi?id=3515
In V4: Fixed patch format and uncrustify cleanup
In V3: Cleaned up comments, debug prints and updated patch to use the
new debug ENUM definitions.
- Replaced EFI_D_INFO with DEBUG_INFO.
- Replaced EFI_D_VERBOSE with DEBUG_VERBOSE.
In V2: Add case to RegisterHashInterfaceLib logic
RegisterHashInterfaceLib needs to correctly handle registering the HashLib
instance supported algorithm bitmap when PcdTpm2HashMask is set to zero.
The current implementation of SyncPcrAllocationsAndPcrMask() triggers
PCR bank reallocation only based on the intersection between
TpmActivePcrBanks and PcdTpm2HashMask.
When the software HashLibBaseCryptoRouter solution is used, no PCR bank
reallocation is occurring based on the supported hashing algorithms
registered by the HashLib instances.
Need to have an additional check for the intersection between the
TpmActivePcrBanks and the PcdTcg2HashAlgorithmBitmap populated by the
HashLib instances present on the platform's BIOS.
Signed-off-by: Rodrigo Gonzalez del Cueto <rodrigo.gonzalez.del.cueto@intel.com>
Cc: Jian J Wang <jian.j.wang@intel.com>
Cc: Jiewen Yao <jiewen.yao@intel.com>
Reviewed-by: Jiewen Yao <jiewen.yao@intel.com>
Diffstat (limited to 'EmbeddedPkg/Library/AcpiLib')
0 files changed, 0 insertions, 0 deletions