mirror of
https://github.com/ARM-software/arm-trusted-firmware.git
synced 2025-08-14 00:17:02 +02:00
78da42a5f1
With RSS now introduced, we have 2 Measured Boot backends. Both backends can be used in the same firmware build with potentially different hash algorithms, so now there can be more than one hash algorithm in a build. Therefore the logic for selecting the measured boot hash algorithm needs to be updated and the coordination of algorithm selection added. This is done by: - Adding MBOOT_EL_HASH_ALG for Event Log to define the hash algorithm to replace TPM_HASH_ALG, removing reference to TPM. - Adding MBOOT_RSS_HASH_ALG for RSS to define the hash algorithm to replace TPM_HASH_ALG. - Coordinating MBOOT_EL_HASH_ALG and MBOOT_RSS_HASH_ALG to define the Measured Boot configuration macros through defining TF_MBEDTLS_MBOOT_USE_SHA512 to pull in SHA-512 support if either backend requires a stronger algorithm than SHA-256. Signed-off-by: Lauren Wehrmeister <lauren.wehrmeister@arm.com> Change-Id: I4ddf06ebdc3835beb4d1b6c7bab5a257ffc5c71a
33 lines
812 B
Makefile
33 lines
812 B
Makefile
#
|
|
# Copyright (c) 2022, Arm Limited. All rights reserved.
|
|
#
|
|
# SPDX-License-Identifier: BSD-3-Clause
|
|
#
|
|
|
|
# Hash algorithm for measured boot
|
|
# SHA-256 (or stronger) is required.
|
|
MBOOT_RSS_HASH_ALG := sha256
|
|
|
|
ifeq (${MBOOT_RSS_HASH_ALG}, sha512)
|
|
MBOOT_ALG_ID := MBOOT_ALG_SHA512
|
|
MBOOT_DIGEST_SIZE := 64U
|
|
else ifeq (${MBOOT_RSS_HASH_ALG}, sha384)
|
|
MBOOT_ALG_ID := MBOOT_ALG_SHA384
|
|
MBOOT_DIGEST_SIZE := 48U
|
|
else
|
|
MBOOT_ALG_ID := MBOOT_ALG_SHA256
|
|
MBOOT_DIGEST_SIZE := 32U
|
|
endif #MBOOT_RSS_HASH_ALG
|
|
|
|
# Set definitions for Measured Boot driver.
|
|
$(eval $(call add_defines,\
|
|
$(sort \
|
|
MBOOT_ALG_ID \
|
|
MBOOT_DIGEST_SIZE \
|
|
MBOOT_RSS_BACKEND \
|
|
)))
|
|
|
|
MEASURED_BOOT_SRC_DIR := drivers/measured_boot/rss/
|
|
|
|
MEASURED_BOOT_SOURCES += ${MEASURED_BOOT_SRC_DIR}rss_measured_boot.c
|