Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

wolfTPM Support For Das U-Boot Bootloader #398

Draft
wants to merge 11 commits into
base: master
Choose a base branch
from

Conversation

aidangarske
Copy link
Contributor

@aidangarske aidangarske commented Jan 24, 2025

Description

Experimental support for u-boot with wolfTPM.

  • Recommended to use the SOFT SPI driver in U-boot
  • wolfTPM serves as a TPM 2.0 driver thanks to its internal TIS layer
  • wolfTPM provides native API with full access to all TPM 2.0 commands
  • wolfTPM offers wrappers API for complex and common TPM 2.0 operations
  • Two paths customers can take:
    __linux__ utilizes the existing tpm interface through tpm2_linux.c
    __UBOOT__ directly talks to TPM with SPI through tpm_io_uboot.c

U-Boot TPM commands to be added:

  • Get Capability (report device details including key group)
  • Start Firmware Update
  • Send Manifest File
  • Send Firmware File
  • Cancel / Abandon

Testing

Refer to readme - tested caps with qemu and swtpm simulator

Documentation

examples/u-boot/README.md

@aidangarske aidangarske self-assigned this Jan 24, 2025
examples/include.am Outdated Show resolved Hide resolved
@aidangarske aidangarske requested a review from dgarske January 24, 2025 21:30
@dgarske dgarske removed their request for review January 28, 2025 17:08
@aidangarske aidangarske requested a review from dgarske January 31, 2025 16:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants