mirror of https://github.com/acidanthera/audk.git
SecurityPkg/TrEEPei: remove TrEE.
TrEE is deprecated. We need use Tcg2. Cc: Chao B Zhang <chao.b.zhang@intel.com> Contributed-under: TianoCore Contribution Agreement 1.1 Signed-off-by: Jiewen Yao <jiewen.yao@intel.com> Reviewed-by: Chao B Zhang <chao.b.zhang@intel.com>
This commit is contained in:
Jiewen Yao
parent
9aeebd913e
commit
e1b3759079
|
|
@ -1,690 +0,0 @@
|
||||||
/** @file
|
|
||||||
Initialize TPM2 device and measure FVs before handing off control to DXE.
|
|
||||||
|
|
||||||
Copyright (c) 2013 - 2017, Intel Corporation. All rights reserved.<BR>
|
|
||||||
This program and the accompanying materials
|
|
||||||
are licensed and made available under the terms and conditions of the BSD License
|
|
||||||
which accompanies this distribution. The full text of the license may be found at
|
|
||||||
http://opensource.org/licenses/bsd-license.php
|
|
||||||
|
|
||||||
THE PROGRAM IS DISTRIBUTED UNDER THE BSD LICENSE ON AN "AS IS" BASIS,
|
|
||||||
WITHOUT WARRANTIES OR REPRESENTATIONS OF ANY KIND, EITHER EXPRESS OR IMPLIED.
|
|
||||||
|
|
||||||
**/
|
|
||||||
|
|
||||||
#include <PiPei.h>
|
|
||||||
|
|
||||||
#include <IndustryStandard/UefiTcgPlatform.h>
|
|
||||||
#include <Ppi/FirmwareVolumeInfo.h>
|
|
||||||
#include <Ppi/FirmwareVolumeInfo2.h>
|
|
||||||
#include <Ppi/LockPhysicalPresence.h>
|
|
||||||
#include <Ppi/TpmInitialized.h>
|
|
||||||
#include <Ppi/FirmwareVolume.h>
|
|
||||||
#include <Ppi/EndOfPeiPhase.h>
|
|
||||||
#include <Ppi/FirmwareVolumeInfoMeasurementExcluded.h>
|
|
||||||
|
|
||||||
#include <Guid/TcgEventHob.h>
|
|
||||||
#include <Guid/MeasuredFvHob.h>
|
|
||||||
#include <Guid/TpmInstance.h>
|
|
||||||
|
|
||||||
#include <Library/DebugLib.h>
|
|
||||||
#include <Library/BaseMemoryLib.h>
|
|
||||||
#include <Library/PeiServicesLib.h>
|
|
||||||
#include <Library/PeimEntryPoint.h>
|
|
||||||
#include <Library/Tpm2CommandLib.h>
|
|
||||||
#include <Library/Tpm2DeviceLib.h>
|
|
||||||
#include <Library/HashLib.h>
|
|
||||||
#include <Library/HobLib.h>
|
|
||||||
#include <Library/PcdLib.h>
|
|
||||||
#include <Library/PeiServicesTablePointerLib.h>
|
|
||||||
#include <Protocol/TrEEProtocol.h>
|
|
||||||
#include <Library/PerformanceLib.h>
|
|
||||||
#include <Library/MemoryAllocationLib.h>
|
|
||||||
#include <Library/ReportStatusCodeLib.h>
|
|
||||||
|
|
||||||
#define PERF_ID_TREE_PEI 0x3080
|
|
||||||
|
|
||||||
typedef struct {
|
|
||||||
EFI_GUID *EventGuid;
|
|
||||||
TREE_EVENT_LOG_FORMAT LogFormat;
|
|
||||||
} TREE_EVENT_INFO_STRUCT;
|
|
||||||
|
|
||||||
TREE_EVENT_INFO_STRUCT mTreeEventInfo[] = {
|
|
||||||
{&gTcgEventEntryHobGuid, TREE_EVENT_LOG_FORMAT_TCG_1_2},
|
|
||||||
};
|
|
||||||
|
|
||||||
BOOLEAN mImageInMemory = FALSE;
|
|
||||||
EFI_PEI_FILE_HANDLE mFileHandle;
|
|
||||||
|
|
||||||
EFI_PEI_PPI_DESCRIPTOR mTpmInitializedPpiList = {
|
|
||||||
EFI_PEI_PPI_DESCRIPTOR_PPI | EFI_PEI_PPI_DESCRIPTOR_TERMINATE_LIST,
|
|
||||||
&gPeiTpmInitializedPpiGuid,
|
|
||||||
NULL
|
|
||||||
};
|
|
||||||
|
|
||||||
EFI_PEI_PPI_DESCRIPTOR mTpmInitializationDonePpiList = {
|
|
||||||
EFI_PEI_PPI_DESCRIPTOR_PPI | EFI_PEI_PPI_DESCRIPTOR_TERMINATE_LIST,
|
|
||||||
&gPeiTpmInitializationDonePpiGuid,
|
|
||||||
NULL
|
|
||||||
};
|
|
||||||
|
|
||||||
EFI_PLATFORM_FIRMWARE_BLOB *mMeasuredBaseFvInfo;
|
|
||||||
UINT32 mMeasuredBaseFvIndex = 0;
|
|
||||||
|
|
||||||
EFI_PLATFORM_FIRMWARE_BLOB *mMeasuredChildFvInfo;
|
|
||||||
UINT32 mMeasuredChildFvIndex = 0;
|
|
||||||
|
|
||||||
/**
|
|
||||||
Measure and record the Firmware Volum Information once FvInfoPPI install.
|
|
||||||
|
|
||||||
@param[in] PeiServices An indirect pointer to the EFI_PEI_SERVICES table published by the PEI Foundation.
|
|
||||||
@param[in] NotifyDescriptor Address of the notification descriptor data structure.
|
|
||||||
@param[in] Ppi Address of the PPI that was installed.
|
|
||||||
|
|
||||||
@retval EFI_SUCCESS The FV Info is measured and recorded to TPM.
|
|
||||||
@return Others Fail to measure FV.
|
|
||||||
|
|
||||||
**/
|
|
||||||
EFI_STATUS
|
|
||||||
EFIAPI
|
|
||||||
FirmwareVolmeInfoPpiNotifyCallback (
|
|
||||||
IN EFI_PEI_SERVICES **PeiServices,
|
|
||||||
IN EFI_PEI_NOTIFY_DESCRIPTOR *NotifyDescriptor,
|
|
||||||
IN VOID *Ppi
|
|
||||||
);
|
|
||||||
|
|
||||||
/**
|
|
||||||
Record all measured Firmware Volum Information into a Guid Hob
|
|
||||||
|
|
||||||
@param[in] PeiServices An indirect pointer to the EFI_PEI_SERVICES table published by the PEI Foundation.
|
|
||||||
@param[in] NotifyDescriptor Address of the notification descriptor data structure.
|
|
||||||
@param[in] Ppi Address of the PPI that was installed.
|
|
||||||
|
|
||||||
@retval EFI_SUCCESS The FV Info is measured and recorded to TPM.
|
|
||||||
@return Others Fail to measure FV.
|
|
||||||
|
|
||||||
**/
|
|
||||||
EFI_STATUS
|
|
||||||
EFIAPI
|
|
||||||
EndofPeiSignalNotifyCallBack (
|
|
||||||
IN EFI_PEI_SERVICES **PeiServices,
|
|
||||||
IN EFI_PEI_NOTIFY_DESCRIPTOR *NotifyDescriptor,
|
|
||||||
IN VOID *Ppi
|
|
||||||
);
|
|
||||||
|
|
||||||
EFI_PEI_NOTIFY_DESCRIPTOR mNotifyList[] = {
|
|
||||||
{
|
|
||||||
EFI_PEI_PPI_DESCRIPTOR_NOTIFY_CALLBACK,
|
|
||||||
&gEfiPeiFirmwareVolumeInfoPpiGuid,
|
|
||||||
FirmwareVolmeInfoPpiNotifyCallback
|
|
||||||
},
|
|
||||||
{
|
|
||||||
EFI_PEI_PPI_DESCRIPTOR_NOTIFY_CALLBACK,
|
|
||||||
&gEfiPeiFirmwareVolumeInfo2PpiGuid,
|
|
||||||
FirmwareVolmeInfoPpiNotifyCallback
|
|
||||||
},
|
|
||||||
{
|
|
||||||
(EFI_PEI_PPI_DESCRIPTOR_NOTIFY_CALLBACK | EFI_PEI_PPI_DESCRIPTOR_TERMINATE_LIST),
|
|
||||||
&gEfiEndOfPeiSignalPpiGuid,
|
|
||||||
EndofPeiSignalNotifyCallBack
|
|
||||||
}
|
|
||||||
};
|
|
||||||
|
|
||||||
EFI_PEI_FIRMWARE_VOLUME_INFO_MEASUREMENT_EXCLUDED_PPI *mMeasurementExcludedFvPpi;
|
|
||||||
|
|
||||||
/**
|
|
||||||
Record all measured Firmware Volum Information into a Guid Hob
|
|
||||||
Guid Hob payload layout is
|
|
||||||
|
|
||||||
UINT32 *************************** FIRMWARE_BLOB number
|
|
||||||
EFI_PLATFORM_FIRMWARE_BLOB******** BLOB Array
|
|
||||||
|
|
||||||
@param[in] PeiServices An indirect pointer to the EFI_PEI_SERVICES table published by the PEI Foundation.
|
|
||||||
@param[in] NotifyDescriptor Address of the notification descriptor data structure.
|
|
||||||
@param[in] Ppi Address of the PPI that was installed.
|
|
||||||
|
|
||||||
@retval EFI_SUCCESS The FV Info is measured and recorded to TPM.
|
|
||||||
@return Others Fail to measure FV.
|
|
||||||
|
|
||||||
**/
|
|
||||||
EFI_STATUS
|
|
||||||
EFIAPI
|
|
||||||
EndofPeiSignalNotifyCallBack (
|
|
||||||
IN EFI_PEI_SERVICES **PeiServices,
|
|
||||||
IN EFI_PEI_NOTIFY_DESCRIPTOR *NotifyDescriptor,
|
|
||||||
IN VOID *Ppi
|
|
||||||
)
|
|
||||||
{
|
|
||||||
MEASURED_HOB_DATA *MeasuredHobData;
|
|
||||||
|
|
||||||
MeasuredHobData = NULL;
|
|
||||||
|
|
||||||
//
|
|
||||||
// Create a Guid hob to save all measured Fv
|
|
||||||
//
|
|
||||||
MeasuredHobData = BuildGuidHob(
|
|
||||||
&gMeasuredFvHobGuid,
|
|
||||||
sizeof(UINTN) + sizeof(EFI_PLATFORM_FIRMWARE_BLOB) * (mMeasuredBaseFvIndex + mMeasuredChildFvIndex)
|
|
||||||
);
|
|
||||||
|
|
||||||
if (MeasuredHobData != NULL){
|
|
||||||
//
|
|
||||||
// Save measured FV info enty number
|
|
||||||
//
|
|
||||||
MeasuredHobData->Num = mMeasuredBaseFvIndex + mMeasuredChildFvIndex;
|
|
||||||
|
|
||||||
//
|
|
||||||
// Save measured base Fv info
|
|
||||||
//
|
|
||||||
CopyMem (MeasuredHobData->MeasuredFvBuf, mMeasuredBaseFvInfo, sizeof(EFI_PLATFORM_FIRMWARE_BLOB) * (mMeasuredBaseFvIndex));
|
|
||||||
|
|
||||||
//
|
|
||||||
// Save measured child Fv info
|
|
||||||
//
|
|
||||||
CopyMem (&MeasuredHobData->MeasuredFvBuf[mMeasuredBaseFvIndex] , mMeasuredChildFvInfo, sizeof(EFI_PLATFORM_FIRMWARE_BLOB) * (mMeasuredChildFvIndex));
|
|
||||||
}
|
|
||||||
|
|
||||||
return EFI_SUCCESS;
|
|
||||||
}
|
|
||||||
|
|
||||||
/**
|
|
||||||
Add a new entry to the Event Log.
|
|
||||||
|
|
||||||
@param[in] DigestList A list of digest.
|
|
||||||
@param[in,out] NewEventHdr Pointer to a TCG_PCR_EVENT_HDR data structure.
|
|
||||||
@param[in] NewEventData Pointer to the new event data.
|
|
||||||
|
|
||||||
@retval EFI_SUCCESS The new event log entry was added.
|
|
||||||
@retval EFI_OUT_OF_RESOURCES No enough memory to log the new event.
|
|
||||||
**/
|
|
||||||
EFI_STATUS
|
|
||||||
LogHashEvent (
|
|
||||||
IN TPML_DIGEST_VALUES *DigestList,
|
|
||||||
IN OUT TCG_PCR_EVENT_HDR *NewEventHdr,
|
|
||||||
IN UINT8 *NewEventData
|
|
||||||
)
|
|
||||||
{
|
|
||||||
VOID *HobData;
|
|
||||||
EFI_STATUS Status;
|
|
||||||
UINTN Index;
|
|
||||||
EFI_STATUS RetStatus;
|
|
||||||
|
|
||||||
RetStatus = EFI_SUCCESS;
|
|
||||||
for (Index = 0; Index < sizeof(mTreeEventInfo)/sizeof(mTreeEventInfo[0]); Index++) {
|
|
||||||
DEBUG ((EFI_D_INFO, " LogFormat - 0x%08x\n", mTreeEventInfo[Index].LogFormat));
|
|
||||||
switch (mTreeEventInfo[Index].LogFormat) {
|
|
||||||
case TREE_EVENT_LOG_FORMAT_TCG_1_2:
|
|
||||||
Status = GetDigestFromDigestList (TPM_ALG_SHA1, DigestList, &NewEventHdr->Digest);
|
|
||||||
if (!EFI_ERROR (Status)) {
|
|
||||||
HobData = BuildGuidHob (
|
|
||||||
&gTcgEventEntryHobGuid,
|
|
||||||
sizeof (*NewEventHdr) + NewEventHdr->EventSize
|
|
||||||
);
|
|
||||||
if (HobData == NULL) {
|
|
||||||
RetStatus = EFI_OUT_OF_RESOURCES;
|
|
||||||
break;
|
|
||||||
}
|
|
||||||
|
|
||||||
CopyMem (HobData, NewEventHdr, sizeof (*NewEventHdr));
|
|
||||||
HobData = (VOID *) ((UINT8*)HobData + sizeof (*NewEventHdr));
|
|
||||||
CopyMem (HobData, NewEventData, NewEventHdr->EventSize);
|
|
||||||
}
|
|
||||||
break;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
return RetStatus;
|
|
||||||
}
|
|
||||||
|
|
||||||
/**
|
|
||||||
Do a hash operation on a data buffer, extend a specific TPM PCR with the hash result,
|
|
||||||
and build a GUIDed HOB recording the event which will be passed to the DXE phase and
|
|
||||||
added into the Event Log.
|
|
||||||
|
|
||||||
@param[in] Flags Bitmap providing additional information.
|
|
||||||
@param[in] HashData Physical address of the start of the data buffer
|
|
||||||
to be hashed, extended, and logged.
|
|
||||||
@param[in] HashDataLen The length, in bytes, of the buffer referenced by HashData.
|
|
||||||
@param[in] NewEventHdr Pointer to a TCG_PCR_EVENT_HDR data structure.
|
|
||||||
@param[in] NewEventData Pointer to the new event data.
|
|
||||||
|
|
||||||
@retval EFI_SUCCESS Operation completed successfully.
|
|
||||||
@retval EFI_OUT_OF_RESOURCES No enough memory to log the new event.
|
|
||||||
@retval EFI_DEVICE_ERROR The command was unsuccessful.
|
|
||||||
|
|
||||||
**/
|
|
||||||
EFI_STATUS
|
|
||||||
HashLogExtendEvent (
|
|
||||||
IN UINT64 Flags,
|
|
||||||
IN UINT8 *HashData,
|
|
||||||
IN UINTN HashDataLen,
|
|
||||||
IN TCG_PCR_EVENT_HDR *NewEventHdr,
|
|
||||||
IN UINT8 *NewEventData
|
|
||||||
)
|
|
||||||
{
|
|
||||||
EFI_STATUS Status;
|
|
||||||
TPML_DIGEST_VALUES DigestList;
|
|
||||||
|
|
||||||
if (GetFirstGuidHob (&gTpmErrorHobGuid) != NULL) {
|
|
||||||
return EFI_DEVICE_ERROR;
|
|
||||||
}
|
|
||||||
|
|
||||||
Status = HashAndExtend (
|
|
||||||
NewEventHdr->PCRIndex,
|
|
||||||
HashData,
|
|
||||||
HashDataLen,
|
|
||||||
&DigestList
|
|
||||||
);
|
|
||||||
if (!EFI_ERROR (Status)) {
|
|
||||||
if ((Flags & TREE_EXTEND_ONLY) == 0) {
|
|
||||||
Status = LogHashEvent (&DigestList, NewEventHdr, NewEventData);
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
if (Status == EFI_DEVICE_ERROR) {
|
|
||||||
DEBUG ((EFI_D_ERROR, "HashLogExtendEvent - %r. Disable TPM.\n", Status));
|
|
||||||
BuildGuidHob (&gTpmErrorHobGuid,0);
|
|
||||||
REPORT_STATUS_CODE (
|
|
||||||
EFI_ERROR_CODE | EFI_ERROR_MINOR,
|
|
||||||
(PcdGet32 (PcdStatusCodeSubClassTpmDevice) | EFI_P_EC_INTERFACE_ERROR)
|
|
||||||
);
|
|
||||||
}
|
|
||||||
|
|
||||||
return Status;
|
|
||||||
}
|
|
||||||
|
|
||||||
/**
|
|
||||||
Measure CRTM version.
|
|
||||||
|
|
||||||
@retval EFI_SUCCESS Operation completed successfully.
|
|
||||||
@retval EFI_OUT_OF_RESOURCES No enough memory to log the new event.
|
|
||||||
@retval EFI_DEVICE_ERROR The command was unsuccessful.
|
|
||||||
|
|
||||||
**/
|
|
||||||
EFI_STATUS
|
|
||||||
MeasureCRTMVersion (
|
|
||||||
VOID
|
|
||||||
)
|
|
||||||
{
|
|
||||||
TCG_PCR_EVENT_HDR TcgEventHdr;
|
|
||||||
|
|
||||||
//
|
|
||||||
// Use FirmwareVersion string to represent CRTM version.
|
|
||||||
// OEMs should get real CRTM version string and measure it.
|
|
||||||
//
|
|
||||||
|
|
||||||
TcgEventHdr.PCRIndex = 0;
|
|
||||||
TcgEventHdr.EventType = EV_S_CRTM_VERSION;
|
|
||||||
TcgEventHdr.EventSize = (UINT32) StrSize((CHAR16*)PcdGetPtr (PcdFirmwareVersionString));
|
|
||||||
|
|
||||||
return HashLogExtendEvent (
|
|
||||||
0,
|
|
||||||
(UINT8*)PcdGetPtr (PcdFirmwareVersionString),
|
|
||||||
TcgEventHdr.EventSize,
|
|
||||||
&TcgEventHdr,
|
|
||||||
(UINT8*)PcdGetPtr (PcdFirmwareVersionString)
|
|
||||||
);
|
|
||||||
}
|
|
||||||
|
|
||||||
/**
|
|
||||||
Measure FV image.
|
|
||||||
Add it into the measured FV list after the FV is measured successfully.
|
|
||||||
|
|
||||||
@param[in] FvBase Base address of FV image.
|
|
||||||
@param[in] FvLength Length of FV image.
|
|
||||||
|
|
||||||
@retval EFI_SUCCESS Fv image is measured successfully
|
|
||||||
or it has been already measured.
|
|
||||||
@retval EFI_OUT_OF_RESOURCES No enough memory to log the new event.
|
|
||||||
@retval EFI_DEVICE_ERROR The command was unsuccessful.
|
|
||||||
|
|
||||||
**/
|
|
||||||
EFI_STATUS
|
|
||||||
MeasureFvImage (
|
|
||||||
IN EFI_PHYSICAL_ADDRESS FvBase,
|
|
||||||
IN UINT64 FvLength
|
|
||||||
)
|
|
||||||
{
|
|
||||||
UINT32 Index;
|
|
||||||
EFI_STATUS Status;
|
|
||||||
EFI_PLATFORM_FIRMWARE_BLOB FvBlob;
|
|
||||||
TCG_PCR_EVENT_HDR TcgEventHdr;
|
|
||||||
|
|
||||||
//
|
|
||||||
// Check if it is in Excluded FV list
|
|
||||||
//
|
|
||||||
if (mMeasurementExcludedFvPpi != NULL) {
|
|
||||||
for (Index = 0; Index < mMeasurementExcludedFvPpi->Count; Index ++) {
|
|
||||||
if (mMeasurementExcludedFvPpi->Fv[Index].FvBase == FvBase) {
|
|
||||||
DEBUG ((DEBUG_INFO, "The FV which is excluded by TrEEPei starts at: 0x%x\n", FvBase));
|
|
||||||
DEBUG ((DEBUG_INFO, "The FV which is excluded by TrEEPei has the size: 0x%x\n", FvLength));
|
|
||||||
return EFI_SUCCESS;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
//
|
|
||||||
// Check whether FV is in the measured FV list.
|
|
||||||
//
|
|
||||||
for (Index = 0; Index < mMeasuredBaseFvIndex; Index ++) {
|
|
||||||
if (mMeasuredBaseFvInfo[Index].BlobBase == FvBase) {
|
|
||||||
return EFI_SUCCESS;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
//
|
|
||||||
// Measure and record the FV to the TPM
|
|
||||||
//
|
|
||||||
FvBlob.BlobBase = FvBase;
|
|
||||||
FvBlob.BlobLength = FvLength;
|
|
||||||
|
|
||||||
DEBUG ((DEBUG_INFO, "The FV which is measured by TrEEPei starts at: 0x%x\n", FvBlob.BlobBase));
|
|
||||||
DEBUG ((DEBUG_INFO, "The FV which is measured by TrEEPei has the size: 0x%x\n", FvBlob.BlobLength));
|
|
||||||
|
|
||||||
TcgEventHdr.PCRIndex = 0;
|
|
||||||
TcgEventHdr.EventType = EV_EFI_PLATFORM_FIRMWARE_BLOB;
|
|
||||||
TcgEventHdr.EventSize = sizeof (FvBlob);
|
|
||||||
|
|
||||||
Status = HashLogExtendEvent (
|
|
||||||
0,
|
|
||||||
(UINT8*) (UINTN) FvBlob.BlobBase,
|
|
||||||
(UINTN) FvBlob.BlobLength,
|
|
||||||
&TcgEventHdr,
|
|
||||||
(UINT8*) &FvBlob
|
|
||||||
);
|
|
||||||
|
|
||||||
//
|
|
||||||
// Add new FV into the measured FV list.
|
|
||||||
//
|
|
||||||
ASSERT (mMeasuredBaseFvIndex < PcdGet32 (PcdPeiCoreMaxFvSupported));
|
|
||||||
if (mMeasuredBaseFvIndex < PcdGet32 (PcdPeiCoreMaxFvSupported)) {
|
|
||||||
mMeasuredBaseFvInfo[mMeasuredBaseFvIndex].BlobBase = FvBase;
|
|
||||||
mMeasuredBaseFvInfo[mMeasuredBaseFvIndex].BlobLength = FvLength;
|
|
||||||
mMeasuredBaseFvIndex++;
|
|
||||||
}
|
|
||||||
|
|
||||||
return Status;
|
|
||||||
}
|
|
||||||
|
|
||||||
/**
|
|
||||||
Measure main BIOS.
|
|
||||||
|
|
||||||
@retval EFI_SUCCESS Operation completed successfully.
|
|
||||||
@retval EFI_OUT_OF_RESOURCES No enough memory to log the new event.
|
|
||||||
@retval EFI_DEVICE_ERROR The command was unsuccessful.
|
|
||||||
|
|
||||||
**/
|
|
||||||
EFI_STATUS
|
|
||||||
MeasureMainBios (
|
|
||||||
VOID
|
|
||||||
)
|
|
||||||
{
|
|
||||||
EFI_STATUS Status;
|
|
||||||
UINT32 FvInstances;
|
|
||||||
EFI_PEI_FV_HANDLE VolumeHandle;
|
|
||||||
EFI_FV_INFO VolumeInfo;
|
|
||||||
EFI_PEI_FIRMWARE_VOLUME_PPI *FvPpi;
|
|
||||||
|
|
||||||
PERF_START_EX (mFileHandle, "EventRec", "TrEEPei", 0, PERF_ID_TREE_PEI);
|
|
||||||
FvInstances = 0;
|
|
||||||
while (TRUE) {
|
|
||||||
//
|
|
||||||
// Traverse all firmware volume instances of Static Core Root of Trust for Measurement
|
|
||||||
// (S-CRTM), this firmware volume measure policy can be modified/enhanced by special
|
|
||||||
// platform for special CRTM TPM measuring.
|
|
||||||
//
|
|
||||||
Status = PeiServicesFfsFindNextVolume (FvInstances, &VolumeHandle);
|
|
||||||
if (EFI_ERROR (Status)) {
|
|
||||||
break;
|
|
||||||
}
|
|
||||||
|
|
||||||
//
|
|
||||||
// Measure and record the firmware volume that is dispatched by PeiCore
|
|
||||||
//
|
|
||||||
Status = PeiServicesFfsGetVolumeInfo (VolumeHandle, &VolumeInfo);
|
|
||||||
ASSERT_EFI_ERROR (Status);
|
|
||||||
//
|
|
||||||
// Locate the corresponding FV_PPI according to founded FV's format guid
|
|
||||||
//
|
|
||||||
Status = PeiServicesLocatePpi (
|
|
||||||
&VolumeInfo.FvFormat,
|
|
||||||
0,
|
|
||||||
NULL,
|
|
||||||
(VOID**)&FvPpi
|
|
||||||
);
|
|
||||||
if (!EFI_ERROR (Status)) {
|
|
||||||
MeasureFvImage ((EFI_PHYSICAL_ADDRESS) (UINTN) VolumeInfo.FvStart, VolumeInfo.FvSize);
|
|
||||||
}
|
|
||||||
|
|
||||||
FvInstances++;
|
|
||||||
}
|
|
||||||
PERF_END_EX (mFileHandle, "EventRec", "TrEEPei", 0, PERF_ID_TREE_PEI + 1);
|
|
||||||
|
|
||||||
return EFI_SUCCESS;
|
|
||||||
}
|
|
||||||
|
|
||||||
/**
|
|
||||||
Measure and record the Firmware Volum Information once FvInfoPPI install.
|
|
||||||
|
|
||||||
@param[in] PeiServices An indirect pointer to the EFI_PEI_SERVICES table published by the PEI Foundation.
|
|
||||||
@param[in] NotifyDescriptor Address of the notification descriptor data structure.
|
|
||||||
@param[in] Ppi Address of the PPI that was installed.
|
|
||||||
|
|
||||||
@retval EFI_SUCCESS The FV Info is measured and recorded to TPM.
|
|
||||||
@return Others Fail to measure FV.
|
|
||||||
|
|
||||||
**/
|
|
||||||
EFI_STATUS
|
|
||||||
EFIAPI
|
|
||||||
FirmwareVolmeInfoPpiNotifyCallback (
|
|
||||||
IN EFI_PEI_SERVICES **PeiServices,
|
|
||||||
IN EFI_PEI_NOTIFY_DESCRIPTOR *NotifyDescriptor,
|
|
||||||
IN VOID *Ppi
|
|
||||||
)
|
|
||||||
{
|
|
||||||
EFI_PEI_FIRMWARE_VOLUME_INFO_PPI *Fv;
|
|
||||||
EFI_STATUS Status;
|
|
||||||
EFI_PEI_FIRMWARE_VOLUME_PPI *FvPpi;
|
|
||||||
UINTN Index;
|
|
||||||
|
|
||||||
Fv = (EFI_PEI_FIRMWARE_VOLUME_INFO_PPI *) Ppi;
|
|
||||||
|
|
||||||
//
|
|
||||||
// The PEI Core can not dispatch or load files from memory mapped FVs that do not support FvPpi.
|
|
||||||
//
|
|
||||||
Status = PeiServicesLocatePpi (
|
|
||||||
&Fv->FvFormat,
|
|
||||||
0,
|
|
||||||
NULL,
|
|
||||||
(VOID**)&FvPpi
|
|
||||||
);
|
|
||||||
if (EFI_ERROR (Status)) {
|
|
||||||
return EFI_SUCCESS;
|
|
||||||
}
|
|
||||||
|
|
||||||
//
|
|
||||||
// This is an FV from an FFS file, and the parent FV must have already been measured,
|
|
||||||
// No need to measure twice, so just record the FV and return
|
|
||||||
//
|
|
||||||
if (Fv->ParentFvName != NULL || Fv->ParentFileName != NULL ) {
|
|
||||||
|
|
||||||
ASSERT (mMeasuredChildFvIndex < PcdGet32 (PcdPeiCoreMaxFvSupported));
|
|
||||||
if (mMeasuredChildFvIndex < PcdGet32 (PcdPeiCoreMaxFvSupported)) {
|
|
||||||
//
|
|
||||||
// Check whether FV is in the measured child FV list.
|
|
||||||
//
|
|
||||||
for (Index = 0; Index < mMeasuredChildFvIndex; Index++) {
|
|
||||||
if (mMeasuredChildFvInfo[Index].BlobBase == (EFI_PHYSICAL_ADDRESS) (UINTN) Fv->FvInfo) {
|
|
||||||
return EFI_SUCCESS;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
mMeasuredChildFvInfo[mMeasuredChildFvIndex].BlobBase = (EFI_PHYSICAL_ADDRESS) (UINTN) Fv->FvInfo;
|
|
||||||
mMeasuredChildFvInfo[mMeasuredChildFvIndex].BlobLength = Fv->FvInfoSize;
|
|
||||||
mMeasuredChildFvIndex++;
|
|
||||||
}
|
|
||||||
return EFI_SUCCESS;
|
|
||||||
}
|
|
||||||
|
|
||||||
return MeasureFvImage ((EFI_PHYSICAL_ADDRESS) (UINTN) Fv->FvInfo, Fv->FvInfoSize);
|
|
||||||
}
|
|
||||||
|
|
||||||
/**
|
|
||||||
Do measurement after memory is ready.
|
|
||||||
|
|
||||||
@param[in] PeiServices Describes the list of possible PEI Services.
|
|
||||||
|
|
||||||
@retval EFI_SUCCESS Operation completed successfully.
|
|
||||||
@retval EFI_OUT_OF_RESOURCES No enough memory to log the new event.
|
|
||||||
@retval EFI_DEVICE_ERROR The command was unsuccessful.
|
|
||||||
|
|
||||||
**/
|
|
||||||
EFI_STATUS
|
|
||||||
PeimEntryMP (
|
|
||||||
IN EFI_PEI_SERVICES **PeiServices
|
|
||||||
)
|
|
||||||
{
|
|
||||||
EFI_STATUS Status;
|
|
||||||
|
|
||||||
Status = PeiServicesLocatePpi (
|
|
||||||
&gEfiPeiFirmwareVolumeInfoMeasurementExcludedPpiGuid,
|
|
||||||
0,
|
|
||||||
NULL,
|
|
||||||
(VOID**)&mMeasurementExcludedFvPpi
|
|
||||||
);
|
|
||||||
// Do not check status, because it is optional
|
|
||||||
|
|
||||||
mMeasuredBaseFvInfo = (EFI_PLATFORM_FIRMWARE_BLOB *) AllocateZeroPool (sizeof (EFI_PLATFORM_FIRMWARE_BLOB) * PcdGet32 (PcdPeiCoreMaxFvSupported));
|
|
||||||
ASSERT (mMeasuredBaseFvInfo != NULL);
|
|
||||||
mMeasuredChildFvInfo = (EFI_PLATFORM_FIRMWARE_BLOB *) AllocateZeroPool (sizeof (EFI_PLATFORM_FIRMWARE_BLOB) * PcdGet32 (PcdPeiCoreMaxFvSupported));
|
|
||||||
ASSERT (mMeasuredChildFvInfo != NULL);
|
|
||||||
|
|
||||||
if (PcdGet8 (PcdTpm2ScrtmPolicy) == 1) {
|
|
||||||
Status = MeasureCRTMVersion ();
|
|
||||||
}
|
|
||||||
|
|
||||||
Status = MeasureMainBios ();
|
|
||||||
|
|
||||||
//
|
|
||||||
// Post callbacks:
|
|
||||||
// for the FvInfoPpi services to measure and record
|
|
||||||
// the additional Fvs to TPM
|
|
||||||
//
|
|
||||||
Status = PeiServicesNotifyPpi (&mNotifyList[0]);
|
|
||||||
ASSERT_EFI_ERROR (Status);
|
|
||||||
|
|
||||||
return Status;
|
|
||||||
}
|
|
||||||
|
|
||||||
/**
|
|
||||||
Entry point of this module.
|
|
||||||
|
|
||||||
@param[in] FileHandle Handle of the file being invoked.
|
|
||||||
@param[in] PeiServices Describes the list of possible PEI Services.
|
|
||||||
|
|
||||||
@return Status.
|
|
||||||
|
|
||||||
**/
|
|
||||||
EFI_STATUS
|
|
||||||
EFIAPI
|
|
||||||
PeimEntryMA (
|
|
||||||
IN EFI_PEI_FILE_HANDLE FileHandle,
|
|
||||||
IN CONST EFI_PEI_SERVICES **PeiServices
|
|
||||||
)
|
|
||||||
{
|
|
||||||
EFI_STATUS Status;
|
|
||||||
EFI_STATUS Status2;
|
|
||||||
EFI_BOOT_MODE BootMode;
|
|
||||||
|
|
||||||
if (CompareGuid (PcdGetPtr(PcdTpmInstanceGuid), &gEfiTpmDeviceInstanceNoneGuid) ||
|
|
||||||
CompareGuid (PcdGetPtr(PcdTpmInstanceGuid), &gEfiTpmDeviceInstanceTpm12Guid)){
|
|
||||||
DEBUG ((DEBUG_INFO, "No TPM2 instance required!\n"));
|
|
||||||
return EFI_UNSUPPORTED;
|
|
||||||
}
|
|
||||||
|
|
||||||
if (GetFirstGuidHob (&gTpmErrorHobGuid) != NULL) {
|
|
||||||
DEBUG ((EFI_D_ERROR, "TPM2 error!\n"));
|
|
||||||
return EFI_DEVICE_ERROR;
|
|
||||||
}
|
|
||||||
|
|
||||||
Status = PeiServicesGetBootMode (&BootMode);
|
|
||||||
ASSERT_EFI_ERROR (Status);
|
|
||||||
|
|
||||||
//
|
|
||||||
// In S3 path, skip shadow logic. no measurement is required
|
|
||||||
//
|
|
||||||
if (BootMode != BOOT_ON_S3_RESUME) {
|
|
||||||
Status = (**PeiServices).RegisterForShadow(FileHandle);
|
|
||||||
if (Status == EFI_ALREADY_STARTED) {
|
|
||||||
mImageInMemory = TRUE;
|
|
||||||
mFileHandle = FileHandle;
|
|
||||||
} else if (Status == EFI_NOT_FOUND) {
|
|
||||||
ASSERT_EFI_ERROR (Status);
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
if (!mImageInMemory) {
|
|
||||||
//
|
|
||||||
// Initialize TPM device
|
|
||||||
//
|
|
||||||
Status = Tpm2RequestUseTpm ();
|
|
||||||
if (EFI_ERROR (Status)) {
|
|
||||||
DEBUG ((DEBUG_ERROR, "TPM2 not detected!\n"));
|
|
||||||
goto Done;
|
|
||||||
}
|
|
||||||
|
|
||||||
if (PcdGet8 (PcdTpm2InitializationPolicy) == 1) {
|
|
||||||
if (BootMode == BOOT_ON_S3_RESUME) {
|
|
||||||
Status = Tpm2Startup (TPM_SU_STATE);
|
|
||||||
if (EFI_ERROR (Status) ) {
|
|
||||||
Status = Tpm2Startup (TPM_SU_CLEAR);
|
|
||||||
}
|
|
||||||
} else {
|
|
||||||
Status = Tpm2Startup (TPM_SU_CLEAR);
|
|
||||||
}
|
|
||||||
if (EFI_ERROR (Status) ) {
|
|
||||||
goto Done;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
//
|
|
||||||
// TpmSelfTest is optional on S3 path, skip it to save S3 time
|
|
||||||
//
|
|
||||||
if (BootMode != BOOT_ON_S3_RESUME) {
|
|
||||||
if (PcdGet8 (PcdTpm2SelfTestPolicy) == 1) {
|
|
||||||
Status = Tpm2SelfTest (NO);
|
|
||||||
if (EFI_ERROR (Status)) {
|
|
||||||
goto Done;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
//
|
|
||||||
// Only intall TpmInitializedPpi on success
|
|
||||||
//
|
|
||||||
Status = PeiServicesInstallPpi (&mTpmInitializedPpiList);
|
|
||||||
ASSERT_EFI_ERROR (Status);
|
|
||||||
}
|
|
||||||
|
|
||||||
if (mImageInMemory) {
|
|
||||||
Status = PeimEntryMP ((EFI_PEI_SERVICES**)PeiServices);
|
|
||||||
return Status;
|
|
||||||
}
|
|
||||||
|
|
||||||
Done:
|
|
||||||
if (EFI_ERROR (Status)) {
|
|
||||||
DEBUG ((EFI_D_ERROR, "TPM2 error! Build Hob\n"));
|
|
||||||
BuildGuidHob (&gTpmErrorHobGuid,0);
|
|
||||||
REPORT_STATUS_CODE (
|
|
||||||
EFI_ERROR_CODE | EFI_ERROR_MINOR,
|
|
||||||
(PcdGet32 (PcdStatusCodeSubClassTpmDevice) | EFI_P_EC_INTERFACE_ERROR)
|
|
||||||
);
|
|
||||||
}
|
|
||||||
//
|
|
||||||
// Always intall TpmInitializationDonePpi no matter success or fail.
|
|
||||||
// Other driver can know TPM initialization state by TpmInitializedPpi.
|
|
||||||
//
|
|
||||||
Status2 = PeiServicesInstallPpi (&mTpmInitializationDonePpiList);
|
|
||||||
ASSERT_EFI_ERROR (Status2);
|
|
||||||
|
|
||||||
return Status;
|
|
||||||
}
|
|
||||||
|
|
@ -1,86 +0,0 @@
|
||||||
## @file
|
|
||||||
# Initializes TPM 2.0 device and measure FVs in PEI phase
|
|
||||||
#
|
|
||||||
# This module will initialize TPM device, measure reported FVs and BIOS version.
|
|
||||||
#
|
|
||||||
# Copyright (c) 2013 - 2015, Intel Corporation. All rights reserved.<BR>
|
|
||||||
# This program and the accompanying materials
|
|
||||||
# are licensed and made available under the terms and conditions of the BSD License
|
|
||||||
# which accompanies this distribution. The full text of the license may be found at
|
|
||||||
# http://opensource.org/licenses/bsd-license.php
|
|
||||||
# THE PROGRAM IS DISTRIBUTED UNDER THE BSD LICENSE ON AN "AS IS" BASIS,
|
|
||||||
# WITHOUT WARRANTIES OR REPRESENTATIONS OF ANY KIND, EITHER EXPRESS OR IMPLIED.
|
|
||||||
#
|
|
||||||
##
|
|
||||||
|
|
||||||
[Defines]
|
|
||||||
INF_VERSION = 0x00010005
|
|
||||||
BASE_NAME = TrEEPei
|
|
||||||
MODULE_UNI_FILE = TrEEPei.uni
|
|
||||||
FILE_GUID = CA5A1928-6523-409d-A9FE-5DCC87387222
|
|
||||||
MODULE_TYPE = PEIM
|
|
||||||
VERSION_STRING = 1.0
|
|
||||||
ENTRY_POINT = PeimEntryMA
|
|
||||||
|
|
||||||
#
|
|
||||||
# The following information is for reference only and not required by the build tools.
|
|
||||||
#
|
|
||||||
# VALID_ARCHITECTURES = IA32 X64 IPF EBC
|
|
||||||
#
|
|
||||||
# [BootMode]
|
|
||||||
# S3_RESUME ## SOMETIMES_CONSUMES
|
|
||||||
#
|
|
||||||
|
|
||||||
[Sources]
|
|
||||||
TrEEPei.c
|
|
||||||
|
|
||||||
[Packages]
|
|
||||||
MdePkg/MdePkg.dec
|
|
||||||
MdeModulePkg/MdeModulePkg.dec
|
|
||||||
SecurityPkg/SecurityPkg.dec
|
|
||||||
|
|
||||||
[LibraryClasses]
|
|
||||||
HobLib
|
|
||||||
PeimEntryPoint
|
|
||||||
PeiServicesLib
|
|
||||||
BaseMemoryLib
|
|
||||||
DebugLib
|
|
||||||
Tpm2CommandLib
|
|
||||||
PeiServicesTablePointerLib
|
|
||||||
Tpm2DeviceLib
|
|
||||||
HashLib
|
|
||||||
PerformanceLib
|
|
||||||
MemoryAllocationLib
|
|
||||||
ReportStatusCodeLib
|
|
||||||
|
|
||||||
[Guids]
|
|
||||||
gTcgEventEntryHobGuid ## PRODUCES ## HOB
|
|
||||||
gTpmErrorHobGuid ## SOMETIMES_PRODUCES ## HOB
|
|
||||||
gMeasuredFvHobGuid ## PRODUCES ## HOB
|
|
||||||
gEfiTpmDeviceInstanceNoneGuid ## SOMETIMES_PRODUCES ## GUID # TPM device identifier
|
|
||||||
gEfiTpmDeviceInstanceTpm12Guid ## SOMETIMES_PRODUCES ## GUID # TPM device identifier
|
|
||||||
|
|
||||||
[Ppis]
|
|
||||||
gEfiPeiFirmwareVolumeInfoPpiGuid ## SOMETIMES_CONSUMES ## NOTIFY
|
|
||||||
gEfiPeiFirmwareVolumeInfo2PpiGuid ## SOMETIMES_CONSUMES ## NOTIFY
|
|
||||||
gEfiPeiFirmwareVolumeInfoMeasurementExcludedPpiGuid ## SOMETIMES_CONSUMES
|
|
||||||
gPeiTpmInitializedPpiGuid ## SOMETIMES_PRODUCES
|
|
||||||
gPeiTpmInitializationDonePpiGuid ## PRODUCES
|
|
||||||
gEfiEndOfPeiSignalPpiGuid ## SOMETIMES_CONSUMES ## NOTIFY
|
|
||||||
|
|
||||||
[Pcd]
|
|
||||||
gEfiMdeModulePkgTokenSpaceGuid.PcdFirmwareVersionString ## SOMETIMES_CONSUMES
|
|
||||||
gEfiSecurityPkgTokenSpaceGuid.PcdTpmInstanceGuid ## CONSUMES
|
|
||||||
gEfiSecurityPkgTokenSpaceGuid.PcdTpm2InitializationPolicy ## CONSUMES
|
|
||||||
gEfiSecurityPkgTokenSpaceGuid.PcdTpm2SelfTestPolicy ## SOMETIMES_CONSUMES
|
|
||||||
gEfiSecurityPkgTokenSpaceGuid.PcdTpm2ScrtmPolicy ## CONSUMES
|
|
||||||
gEfiMdeModulePkgTokenSpaceGuid.PcdPeiCoreMaxFvSupported ## CONSUMES
|
|
||||||
gEfiSecurityPkgTokenSpaceGuid.PcdStatusCodeSubClassTpmDevice ## SOMETIMES_CONSUMES
|
|
||||||
|
|
||||||
[Depex]
|
|
||||||
gEfiPeiMasterBootModePpiGuid AND
|
|
||||||
gEfiPeiReadOnlyVariable2PpiGuid AND
|
|
||||||
gEfiTpmDeviceSelectedGuid
|
|
||||||
|
|
||||||
[UserExtensions.TianoCore."ExtraFiles"]
|
|
||||||
TrEEPeiExtra.uni
|
|
||||||
|
|
@ -1,21 +0,0 @@
|
||||||
// /** @file
|
|
||||||
// Initializes TPM 2.0 device and measure FVs in PEI phase
|
|
||||||
//
|
|
||||||
// This module will initialize TPM device, measure reported FVs and BIOS version.
|
|
||||||
//
|
|
||||||
// Copyright (c) 2013 - 2014, Intel Corporation. All rights reserved.<BR>
|
|
||||||
//
|
|
||||||
// This program and the accompanying materials
|
|
||||||
// are licensed and made available under the terms and conditions of the BSD License
|
|
||||||
// which accompanies this distribution. The full text of the license may be found at
|
|
||||||
// http://opensource.org/licenses/bsd-license.php
|
|
||||||
// THE PROGRAM IS DISTRIBUTED UNDER THE BSD LICENSE ON AN "AS IS" BASIS,
|
|
||||||
// WITHOUT WARRANTIES OR REPRESENTATIONS OF ANY KIND, EITHER EXPRESS OR IMPLIED.
|
|
||||||
//
|
|
||||||
// **/
|
|
||||||
|
|
||||||
|
|
||||||
#string STR_MODULE_ABSTRACT #language en-US "Initializes TPM 2.0 device and measure FVs in PEI phase"
|
|
||||||
|
|
||||||
#string STR_MODULE_DESCRIPTION #language en-US "This module will initialize TPM device, measure reported FVs and BIOS version."
|
|
||||||
|
|
||||||
|
|
@ -1,19 +0,0 @@
|
||||||
// /** @file
|
|
||||||
// TrEEPei Localized Strings and Content
|
|
||||||
//
|
|
||||||
// Copyright (c) 2014, Intel Corporation. All rights reserved.<BR>
|
|
||||||
//
|
|
||||||
// This program and the accompanying materials
|
|
||||||
// are licensed and made available under the terms and conditions of the BSD License
|
|
||||||
// which accompanies this distribution. The full text of the license may be found at
|
|
||||||
// http://opensource.org/licenses/bsd-license.php
|
|
||||||
// THE PROGRAM IS DISTRIBUTED UNDER THE BSD LICENSE ON AN "AS IS" BASIS,
|
|
||||||
// WITHOUT WARRANTIES OR REPRESENTATIONS OF ANY KIND, EITHER EXPRESS OR IMPLIED.
|
|
||||||
//
|
|
||||||
// **/
|
|
||||||
|
|
||||||
#string STR_PROPERTIES_MODULE_NAME
|
|
||||||
#language en-US
|
|
||||||
"TrEE (Trusted Execution Environment) PEI"
|
|
||||||
|
|
||||||
|
|
||||||
Loading…
Reference in New Issue