summaryrefslogtreecommitdiff
path: root/Cryptlib/OpenSSL/crypto/objects/obj_xref.c
diff options
context:
space:
mode:
authorLu Ken <ken.lu@intel.com>2022-05-22 16:02:20 +0800
committerRobbie Harwood <rharwood@redhat.com>2022-08-16 17:45:30 -0400
commit4fd484e4c29364b4fdf4d043556fa0a210c5fdfc (patch)
tree4422a027c212d6ee0a78d85b2536c04f81148eb6 /Cryptlib/OpenSSL/crypto/objects/obj_xref.c
parent8b59b690613add728189897228e4dd888f8c9f16 (diff)
downloadefi-boot-shim-4fd484e4c29364b4fdf4d043556fa0a210c5fdfc.tar.gz
efi-boot-shim-4fd484e4c29364b4fdf4d043556fa0a210c5fdfc.zip
Enable TDX measurement to RTMR register
Intel Trust Domain Extensions (Intel TDX) extends Virtual Machine Extensions (VMX) and Multi-Key Total Memory Encryption (MK-TME) with a new kind of virtual machine guest called a Trust Domain(TD)[1]. A TD runs in a CPU mode that is designed to protect the confidentiality of its memory contents and its CPU state from any other software, including the hosting Virtual Machine Monitor (VMM). Trust Domain Virtual Firmware (TDVF) is required to provide Intel TDX implementation and service for EFI_CC_MEASUREMENT_PROTOCOL[2]. The bugzilla for TDVF is at https://bugzilla.tianocore.org/show_bug.cgi?id=3625. To support CC measurement/attestation with Intel TDX technology, these 4 RTMR registers will be extended by TDX service like TPM/TPM2 PCR: - RTMR[0] for TDVF configuration - RTMR[1] for the TD OS loader and kernel - RTMR[2] for the OS application - RTMR[3] reserved for special usage only Add a TDX Implementation for CC Measurement protocol along with TPM/TPM2 protocol. References: [1] https://software.intel.com/content/dam/develop/external/us/en/documents/tdx-whitepaper-v4.pdf [2] https://software.intel.com/content/dam/develop/external/us/en/documents/tdx-virtual-firmware-design-guide-rev-1.pdf [3] https://software.intel.com/content/dam/develop/external/us/en/documents/intel-tdx-guest-hypervisor-communication-interface-1.0-344426-002.pdf Signed-off-by: Lu Ken <ken.lu@intel.com> [rharwood: style pass on code and commit message] Signed-off-by: Robbie Harwood <rharwood@redhat.com>
Diffstat (limited to 'Cryptlib/OpenSSL/crypto/objects/obj_xref.c')
0 files changed, 0 insertions, 0 deletions