SecurityPkg: add DeviceSecurity support

This patch implement the SpdmSecurityLib,
which is the core of DeviceSecurity.
And the SpdmSecurityLib include Device Authentication and Measurement.
The other library is to support SpdmSecurityLib.

Cc: Jiewen Yao <jiewen.yao@intel.com>
Signed-off-by: Wenxing Hou <wenxing.hou@intel.com>
Reviewed-by: Jiewen Yao <jiewen.yao@intel.com>

1 files changed, 12 insertions, 1 deletions

diff --git a/SecurityPkg/SecurityPkg.dec b/SecurityPkg/SecurityPkg.dec
index 00c4ebd..a91e3ea 100644
--- a/SecurityPkg/SecurityPkg.dec
+++ b/SecurityPkg/SecurityPkg.dec
@@ -5,7 +5,7 @@
 #  It also provides the definitions(including PPIs/PROTOCOLs/GUIDs and library classes)

 #  and libraries instances, which are used for those features.

 #

-# Copyright (c) 2009 - 2020, Intel Corporation. All rights reserved.<BR>

+# Copyright (c) 2009 - 2024, Intel Corporation. All rights reserved.<BR>

 # (C) Copyright 2015 Hewlett Packard Enterprise Development LP <BR>

 # Copyright (c) Microsoft Corporation.<BR>

 # SPDX-License-Identifier: BSD-2-Clause-Patent

@@ -23,6 +23,10 @@
   Include

   Test/Mock/Include

 

+[Includes.Common.Private]

+  DeviceSecurity/SpdmLib/Include

+  DeviceSecurity/SpdmLib/libspdm/include

+

 [LibraryClasses]

   ##  @libraryclass  Provides hash interfaces from different implementations.

   #

@@ -97,6 +101,10 @@
   #

   PlatformPKProtectionLib|Include/Library/PlatformPKProtectionLib.h

 

+  ##  @libraryclass Perform SPDM (following SPDM spec) and measure data to TPM (following TCG PFP spec).

+  ##

+  SpdmSecurityLib|Include/Library/SpdmSecurityLib.h

+

 [Guids]

   ## Security package token space guid.

   # Include/Guid/SecurityPkgTokenSpace.h

@@ -219,6 +227,9 @@
   ## GUID used to specify section with default dbt content

   gDefaultdbtFileGuid                = { 0x36c513ee, 0xa338, 0x4976, { 0xa0, 0xfb, 0x6d, 0xdb, 0xa3, 0xda, 0xfe, 0x87 } }

 

+  ## GUID used to generate Spdm Uid

+  gEfiDeviceSecuritySpdmUidGuid = {0xe37b5665, 0x5ef9, 0x4e7e, {0xb4, 0x91, 0xd6, 0x78, 0xab, 0xff, 0xfb, 0xcb }}

+

 [Ppis]

   ## The PPI GUID for that TPM physical presence should be locked.

   # Include/Ppi/LockPhysicalPresence.h