Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Secdev driver #2

Open
wants to merge 10 commits into
base: master
Choose a base branch
from
Open

Secdev driver #2

wants to merge 10 commits into from

Commits on Jun 20, 2023

  1. lib: add hash library 

    This commit adds a hash library containing support for sha1 and sha2.

Signed-off-by: Daniel P. Smith <[email protected]>
    @dpsmith
    dpsmith committed Jun 20, 2023
    Configuration menu
    Copy the full SHA
    e25fff0 View commit details
    Browse the repository at this point in the history

  2. drivers: introduce kconfig for secdev framework 

    This commit adds the Kconfig for selecting the security hardware (secdev)
framework.

Signed-off-by: Daniel P. Smith <[email protected]>
    @dpsmith
    dpsmith committed Jun 20, 2023
    Configuration menu
    Copy the full SHA
    ff59e7e View commit details
    Browse the repository at this point in the history

  3. drivers: import of tpm driver into security hw drivers 

    This commit bring in the TPM driver code from tboot, commit 4a904a6, apply Xen
coding style, and integrates with Xen's build.

Signed-off-by: Daniel P. Smith <[email protected]>
    @dpsmith
    dpsmith committed Jun 20, 2023
    Configuration menu
    Copy the full SHA
    28db758 View commit details
    Browse the repository at this point in the history

  4. tpm: an initial abstractiong of hw interface 

    Tboot, from which the code came, is only concerned for x86 systems. Typically
on x86 systems, the TPM is accessed using the MMIO hardware interface for
which there are two ABIs, FIFO and CRB.

This commit looks to refactor the hardware interface logic to enable the
ability to support other hardware interfaces, such as the Mobile TPM interface
typically used on Arm.

Signed-off-by: Daniel P. Smith <[email protected]>
    @dpsmith
    dpsmith committed Jun 20, 2023
    Configuration menu
    Copy the full SHA
    ba0a1e2 View commit details
    Browse the repository at this point in the history

  5. tpm: fixing up the time out loops 

    The tboot environment did not have an accurate way of tracking time outs
on access to the TPM hardware. As such, it relied on counting loops and
using a multiplier factor to estimate amount of time a loop would take.
Now that the code is under Xen, it can use the time functions to
determine an accurate(ly) time out.

Signed-off-by: Daniel P. Smith <[email protected]>
    @dpsmith
    dpsmith committed Jun 20, 2023
    Configuration menu
    Copy the full SHA
    4d7b6e0 View commit details
    Browse the repository at this point in the history

  6. secdev: introduce security device interfaces 

    Adds secdev headers.

Signed-off-by: Daniel P. Smith <[email protected]>
    @dpsmith
    dpsmith committed Jun 20, 2023
    Configuration menu
    Copy the full SHA
    417be69 View commit details
    Browse the repository at this point in the history

  7. tpm: add driver interface 

    This commit adds a secdev interface callable by the secdev framework to detect
the tpm and extend a commandline selectable PCR with a domain's measurements.

Signed-off-by: Daniel P. Smith <[email protected]>
    @dpsmith
    dpsmith committed Jun 20, 2023
    Configuration menu
    Copy the full SHA
    fcd8948 View commit details
    Browse the repository at this point in the history

  8. tpm: move tpm2.0 primary logic 

    This commits move the initialization of a global primary into an commented out
function. This is to reserve the logic for later use to create per domain key
hierarchy.

Signed-off-by: Daniel P. Smith <[email protected]>
    @dpsmith
    dpsmith committed Jun 20, 2023
    Configuration menu
    Copy the full SHA
    ca5997f View commit details
    Browse the repository at this point in the history

  9. secdev: introduce the security device framework 

    Introduces the secdev framework with TPM being the first supported device.

Signed-off-by: Daniel P. Smith <[email protected]>
    @dpsmith
    dpsmith committed Jun 20, 2023
    Configuration menu
    Copy the full SHA
    0fdb127 View commit details
    Browse the repository at this point in the history

  10. x86: add support for measuring Dom0 at boot 

    This commit leverages the TPM driver to measure Dom0's kernel and initrd before
the domain is contstructed.

Signed-off-by: Daniel P. Smith <[email protected]>
    @dpsmith
    dpsmith committed Jun 20, 2023
    Configuration menu
    Copy the full SHA
    dbafab6 View commit details
    Browse the repository at this point in the history