aboutsummaryrefslogtreecommitdiff
path: root/libstb/secureboot.h
diff options
context:
space:
mode:
authorClaudio Carvalho <cclaudio@linux.vnet.ibm.com>2017-12-09 02:52:16 -0200
committerStewart Smith <stewart@linux.vnet.ibm.com>2017-12-18 21:30:57 -0600
commit594c7a6ae3cccd4a7eeb5ce2c31d2f958672325c (patch)
treef710a3d8ac4bef339eb8cc23734a92f1a162a1ed /libstb/secureboot.h
parent4fb528b394115ff8dd832b980032d7656aece099 (diff)
downloadskiboot-594c7a6ae3cccd4a7eeb5ce2c31d2f958672325c.zip
skiboot-594c7a6ae3cccd4a7eeb5ce2c31d2f958672325c.tar.gz
skiboot-594c7a6ae3cccd4a7eeb5ce2c31d2f958672325c.tar.bz2
libstb: import stb_init() breaking it into multiple files
This imports stb_init() from stb.c, but breaking it into multiple files in order to make the code easier to read and to maintain. New files created: secureboot.c, trustedboot.c and cvc.c. The secureboot_init() in secureboot.c also initializes the hardware key hash and the hardware key hash size, which are used to call the CVC verify wrapper. These variables were initialized in the romcode_probe() function, libstb/drivers/romcode.c. The cvc_init() in cvc.c is slightly modified from what exists in stb_init(). Now it calls cvc_register() and cvc_service_register(). Signed-off-by: Claudio Carvalho <cclaudio@linux.vnet.ibm.com> Signed-off-by: Stewart Smith <stewart@linux.vnet.ibm.com>
Diffstat (limited to 'libstb/secureboot.h')
-rw-r--r--libstb/secureboot.h31
1 files changed, 31 insertions, 0 deletions
diff --git a/libstb/secureboot.h b/libstb/secureboot.h
new file mode 100644
index 0000000..6643160
--- /dev/null
+++ b/libstb/secureboot.h
@@ -0,0 +1,31 @@
+/* Copyright 2013-2017 IBM Corp.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+ * implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+#ifndef __SECUREBOOT_H
+#define __SECUREBOOT_H
+
+#include <device.h>
+#include "container.h"
+#include "cvc.h"
+
+enum secureboot_version {
+ IBM_SECUREBOOT_V1,
+};
+
+bool secureboot_is_compatible(struct dt_node *node, int *version, const char **compat);
+void secureboot_init(void);
+
+#endif /* __SECUREBOOT_H */