From: Tom Rini Date: Wed, 29 Jan 2025 14:12:21 +0000 (-0600) Subject: Merge tag 'tpm-master-28012025' of https://source.denx.de/u-boot/custodians/u-boot-tpm X-Git-Tag: v2025.04-rc2~49 X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=021baf7b08cceb58bb850859dba1614424e16a83;p=pandora-u-boot.git Merge tag 'tpm-master-28012025' of https://source.denx.de/u-boot/custodians/u-boot-tpm CI: https://source.denx.de/u-boot/custodians/u-boot-tpm/-/pipelines/24375 We have use cases where a previous stage boot loader doesn't have any TPM drivers. Instead of extending the hardware PCRs it produces an EventLog that U-Boot later replays on the hardware. The only real example we have is TF-A, which produces the EventLog using hashing algorithms created at compile time. This creates a problem to the TPM since measurements need to extend all active PCR banks. Up to now we were exiting refusing the extend measurements. TPMs can be instructed to change their active PCR banks, as long as the device resets immediately after a reconfiguration. This PR is adding that functionality. U-Boot can now scan the currently active TPM PCR banks, the ones it was compiled to support and the ones present in an EventLog. It the reconfigures the TPM on the fly with the correct algorithms. --- 021baf7b08cceb58bb850859dba1614424e16a83