BZ: https://bugzilla.tianocore.org/show_bug.cgi?id=3625

If TEE-Guest firmware supports measurement and an event is created,
TEE-Guest firmware is designed to report the event log with the same data
structure in TCG-Platform-Firmware-Profile specification with
EFI_TCG2_EVENT_LOG_FORMAT_TCG_2 format.

The TEE-Guest firmware supports measurement. It is
designed to produce EFI_TEE_MEASUREMENT_PROTOCOL with new
GUID EFI_TEE_MEASUREMENT_PROTOCOL_GUID to report event log
and provides hash capability.

Patch #1:
Introduce the TEE Measurement Protocol definition into MdePkg.

Patch #2:
Update DxeTpm2MeasureBootLib to support TEE based measure boot.

Patch #3:
Update DxeTpmMeasurementLib to support TEE based measurement.

Code is at https://github.com/mxu9/edk2/tree/td_protocol.v3

v3 changes:
 - Rename TdProtocol to TeeMeasurementProtocol which is a neutral name.
   With this protocol, TEE based measure boot is supported.
   TD based measure boot is one of the TEE based measure boot.
 - The spec will be updated according to the changes later.
 - Fix errors in DxeTpm2MeasureBootLib.

v2 changes:
 - TD based measure boot is implemented in DxeTpm2MeasureBootLib.
   This minimize the code changes.
 - TD based measurement is added. It is implemented in
   DxeTpmMeasurementLib.
 - Fix the typo in comments.

Cc: Michael D Kinney <michael.d.kinney@intel.com>
Cc: Liming Gao <gaoliming@byosoft.com.cn>
Cc: Zhiguang Liu <zhiguang.liu@intel.com>
Cc: Jiewen Yao <jiewen.yao@intel.com>
Cc: Jian J Wang <jian.j.wang@intel.com>
Cc: Ken Lu <ken.lu@intel.com>
Cc: Sami Mujawar <sami.mujawar@arm.com>
Signed-off-by: Min Xu <min.m.xu@intel.com>

Min Xu (3):
  MdePkg: Introduce TeeMeasurementProtocol for TEE Guest firmware
  SecurityPkg: Support TeeMeasurementProtocol in DxeTpm2MeasureBootLib
  SecurityPkg: Support TeeMeasurementProtocol in DxeTpmMeasurementLib

 MdePkg/Include/Protocol/TdProtocol.h          |  36 ++
 MdePkg/Include/Protocol/TeeMeasurement.h      | 296 ++++++++++++++
 MdePkg/MdePkg.dec                             |   3 +
 .../DxeTpm2MeasureBootLib.c                   | 364 ++++++++++++++----
 .../DxeTpm2MeasureBootLib.inf                 |   1 +
 .../DxeTpmMeasurementLib.c                    |  88 ++++-
 .../DxeTpmMeasurementLib.inf                  |   5 +-
 7 files changed, 720 insertions(+), 73 deletions(-)
 create mode 100644 MdePkg/Include/Protocol/TdProtocol.h
 create mode 100644 MdePkg/Include/Protocol/TeeMeasurement.h

-- 
2.29.2.windows.2



-=-=-=-=-=-=-=-=-=-=-=-
Groups.io Links: You receive all messages sent to this group.
View/Reply Online (#82794): https://edk2.groups.io/g/devel/message/82794
Mute This Topic: https://groups.io/mt/86646136/1787277
Group Owner: devel+owner@edk2.groups.io
Unsubscribe: https://edk2.groups.io/g/devel/unsub [importer@patchew.org]
-=-=-=-=-=-=-=-=-=-=-=-