[PATCH 0/3] Trusted Boot: Boot Policy Measurement. 
    Nayna Jain 
    nayna at linux.vnet.ibm.com
       
    Thu Jun  2 19:56:55 AEST 2016
    
    
  
Overview:
==========
* Adds boot policy configuration measurement in bootloader
to support Trusted Boot.
* Trusted Boot is implemented in compliance with TCG Specification
for TPM 2.0 family.
* TCG Specification describes about which PCRs to be used
for recording specific measurements.
* As per the spec, PCR 5 is used for recording boot policies.
* This patch measures all boot config parameters as consumed
by petitboot.
TBD:
====
Following items are still TBD and will be submitted as different patch.
* Handling of error paths - Currently, it just logs the error paths
and actual handling will be submitted as another patch.
* Extend to TPM - The implementation of this function is experimental
and is bound to change.
Nayna Jain (3):
  lib/types : Adds function to return struct config as string
  lib/security: New lib for security functions.
  discover/pb-discover.c:Initialize security context.
 discover/Makefile.am         |  4 ++-
 discover/pb-discover.c       |  9 ++++++
 discover/pb-secure.c         | 69 ++++++++++++++++++++++++++++++++++++++++
 discover/pb-secure.h         | 17 ++++++++++
 lib/Makefile.am              |  6 +++-
 lib/security/crypto.c        | 73 ++++++++++++++++++++++++++++++++++++++++++
 lib/security/crypto.h        | 22 +++++++++++++
 lib/security/tpmOperations.c | 72 ++++++++++++++++++++++++++++++++++++++++++
 lib/security/tpmOperations.h | 18 +++++++++++
 lib/types/types.c            | 75 ++++++++++++++++++++++++++++++++++++++++++++
 lib/types/types.h            |  3 ++
 11 files changed, 366 insertions(+), 2 deletions(-)
 create mode 100644 discover/pb-secure.c
 create mode 100644 discover/pb-secure.h
 create mode 100644 lib/security/crypto.c
 create mode 100644 lib/security/crypto.h
 create mode 100644 lib/security/tpmOperations.c
 create mode 100644 lib/security/tpmOperations.h
-- 
2.5.0
    
    
More information about the Petitboot
mailing list