Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

DeviceSecurityPkg: test exceed LIBSPDM_MAX_ROOT_CERT_SUPPORT. #337

Draft
wants to merge 106 commits into
base: DeviceSecurity
Choose a base branch
from
Draft

DeviceSecurityPkg: test exceed LIBSPDM_MAX_ROOT_CERT_SUPPORT. #337

wants to merge 106 commits into from

Commits on Oct 25, 2022

  1. EmulatorPkg/dsc: enlarge variable size.

    @jyao1
    jyao1 committed Oct 25, 2022
    Configuration menu
    Copy the full SHA
    30123a4 View commit details
    Browse the repository at this point in the history

  2. EmulatorPkg/dsc: Add release build.

    @jyao1
    jyao1 committed Oct 25, 2022
    Configuration menu
    Copy the full SHA
    332b728 View commit details
    Browse the repository at this point in the history

  3. MdePkg/Include: Add SPDM1.1 support. 

    Signed-off-by: Jiewen Yao <[email protected]>
    @jyao1
    jyao1 committed Oct 25, 2022
    Configuration menu
    Copy the full SHA
    b3ab318 View commit details
    Browse the repository at this point in the history

  4. Add DeviceSecurityPkg POC. 

    Signed-off-by: Jiewen Yao <[email protected]>
Signed-off-by: Qi Zhang <[email protected]>
    @jyao1
    jyao1 committed Oct 25, 2022
    Configuration menu
    Copy the full SHA
    66289c6 View commit details
    Browse the repository at this point in the history

  5. SecurityPkg: Add Tpm2NvExtend() support. 

    Signed-off-by: Qi Zhang <[email protected]>
    @jyao1
    jyao1 committed Oct 25, 2022
    Configuration menu
    Copy the full SHA
    8e39ff8 View commit details
    Browse the repository at this point in the history

  6. Add libspdm. 

    Signed-off-by: Jiewen Yao <[email protected]>
    @jyao1
    jyao1 committed Oct 25, 2022
    Configuration menu
    Copy the full SHA
    3ad108b View commit details
    Browse the repository at this point in the history

  7. Add a new test config: trust anchor is not in device security policy … 

    …database.

Signed-off-by: Zhao, Zhiqiang <[email protected]>
    @Zhiqiang520 @jyao1
    Zhiqiang520 authored and jyao1 committed Oct 25, 2022
    Configuration menu
    Copy the full SHA
    f950bed View commit details
    Browse the repository at this point in the history

  8. some measurement is not correct for auth success. 

    Signed-off-by: Qi Zhang <[email protected]>
    @qizhangz @jyao1
    qizhangz authored and jyao1 committed Oct 25, 2022
    Configuration menu
    Copy the full SHA
    1172c0f View commit details
    Browse the repository at this point in the history

  9. Add branch description. 

    Signed-off-by: Jiewen Yao <[email protected]>
    @jyao1
    jyao1 committed Oct 25, 2022
    Configuration menu
    Copy the full SHA
    4c70560 View commit details
    Browse the repository at this point in the history

  10. Add three new test configs: DeviceSecurityPolicy is Authentication On… 

    …ly, DeviceSecurityPolicy is Measurement Only, DeviceSecurityPolicy is None of Authentication and Measurement.

Signed-off-by: Zhao, Zhiqiang <[email protected]>
    @Zhiqiang520 @jyao1
    Zhiqiang520 authored and jyao1 committed Oct 25, 2022
    Configuration menu
    Copy the full SHA
    754a9e7 View commit details
    Browse the repository at this point in the history

  11. update Tcg2DumpLog and DeployCert. 

    Signed-off-by: Qi Zhang <[email protected]>
    @qizhangz @jyao1
    qizhangz authored and jyao1 committed Oct 25, 2022
    Configuration menu
    Copy the full SHA
    0167128 View commit details
    Browse the repository at this point in the history

  12. SecurityPkg/HashLibBaseCryptoRouter: extend whole digest to NV index. 

    Signed-off-by: Qi Zhang <[email protected]>
    @qizhangz @jyao1
    qizhangz authored and jyao1 committed Oct 25, 2022
    Configuration menu
    Copy the full SHA
    554b63a View commit details
    Browse the repository at this point in the history

  13. Fix data structure definition. 

    Signed-off-by: Jiewen Yao <[email protected]>
    @jyao1
    jyao1 committed Oct 25, 2022
    Configuration menu
    Copy the full SHA
    75bb8c3 View commit details
    Browse the repository at this point in the history

  14. clean up nonce registration. 

    Signed-off-by: Jiewen Yao <[email protected]>
    @jyao1
    jyao1 committed Oct 25, 2022
    Configuration menu
    Copy the full SHA
    de1effb View commit details
    Browse the repository at this point in the history

  15. signature database should include root certificate not cert chain. 

    Signed-off-by: Qi Zhang <[email protected]>
    @qizhangz @jyao1
    qizhangz authored and jyao1 committed Oct 25, 2022
    Configuration menu
    Copy the full SHA
    5a128f3 View commit details
    Browse the repository at this point in the history

  16. Add new event log. 

    Signed-off-by: Jiewen Yao <[email protected]>
    @jyao1
    jyao1 committed Oct 25, 2022
    Configuration menu
    Copy the full SHA
    538fe2f View commit details
    Browse the repository at this point in the history

  17. fix the failure of TestSpdm(). 

    Signed-off-by: Qi Zhang <[email protected]>
    @qizhangz @jyao1
    qizhangz authored and jyao1 committed Oct 25, 2022
    Configuration menu
    Copy the full SHA
    4895578 View commit details
    Browse the repository at this point in the history

  18. Update RIM example. 

    Signed-off-by: Jiewen Yao <[email protected]>
    @jyao1
    jyao1 committed Oct 25, 2022
    Configuration menu
    Copy the full SHA
    26e0698 View commit details
    Browse the repository at this point in the history

  19. Clean up Device Auth definition. 

    Signed-off-by: Jiewen Yao <[email protected]>
    @jyao1
    jyao1 committed Oct 25, 2022
    Configuration menu
    Copy the full SHA
    9d257eb View commit details
    Browse the repository at this point in the history

  20. update NV attribute according to PTP spec. 

    Signed-off-by: Qi Zhang <[email protected]>
    @qizhangz @jyao1
    qizhangz authored and jyao1 committed Oct 25, 2022
    Configuration menu
    Copy the full SHA
    53b40a7 View commit details
    Browse the repository at this point in the history

  21. Add a new test config: the device reports that the measurement conten… 

    …t has been modified again.

Signed-off-by: Zhao, Zhiqiang <[email protected]>
    @Zhiqiang520 @jyao1
    Zhiqiang520 authored and jyao1 committed Oct 25, 2022
    Configuration menu
    Copy the full SHA
    b0c6912 View commit details
    Browse the repository at this point in the history

  22. Add missing tag-version. 

    Signed-off-by: Jiewen Yao <[email protected]>
    @jyao1
    jyao1 committed Oct 25, 2022
    Configuration menu
    Copy the full SHA
    3ea7ef8 View commit details
    Browse the repository at this point in the history

  23. Fix comid typo. 

    Signed-off-by: Jiewen Yao <[email protected]>
    @jyao1
    jyao1 committed Oct 25, 2022
    Configuration menu
    Copy the full SHA
    e88f697 View commit details
    Browse the repository at this point in the history

  24. update with libspdm 2.1.0. 

    Signed-off-by: Qi Zhang <[email protected]>
    @qizhangz @jyao1
    qizhangz authored and jyao1 committed Oct 25, 2022
    Configuration menu
    Copy the full SHA
    4b49036 View commit details
    Browse the repository at this point in the history

  25. sync libspdm 2.1.0 

    Signed-off-by: Qi Zhang <[email protected]>
    @qizhangz @jyao1
    qizhangz authored and jyao1 committed Oct 25, 2022
    Configuration menu
    Copy the full SHA
    ad16f5a View commit details
    Browse the repository at this point in the history

  26. only request GENERATE SIGNATURE for measurement when authenticated. 

    Signed-off-by: Qi Zhang <[email protected]>
    @qizhangz @jyao1
    qizhangz authored and jyao1 committed Oct 25, 2022
    Configuration menu
    Copy the full SHA
    ad3dd99 View commit details
    Browse the repository at this point in the history

  27. update the version of NV_INDEX_INSTANCE_EVENT_LOG_STRUCT and NV_INDEX… 

    …_DYNAMIC_EVENT_LOG_STRUCT.

Signed-off-by: Qi Zhang <[email protected]>
    @qizhangz @jyao1
    qizhangz authored and jyao1 committed Oct 25, 2022
    Configuration menu
    Copy the full SHA
    baec7ed View commit details
    Browse the repository at this point in the history

  28. check SubHeaderLength for Tcg event log dump. 

    Signed-off-by: Qi Zhang <[email protected]>
    @qizhangz @jyao1
    qizhangz authored and jyao1 committed Oct 25, 2022
    Configuration menu
    Copy the full SHA
    494a681 View commit details
    Browse the repository at this point in the history

  29. 1. Set SPDM requester support more algorithms default. 2. Add a new t… 

    …est config: Set SPDM responder support RSASSA_3072 and SHA_384 default.

Signed-off-by: Zhao, Zhiqiang <[email protected]>
    @Zhiqiang520 @jyao1
    Zhiqiang520 authored and jyao1 committed Oct 25, 2022
    Configuration menu
    Copy the full SHA
    a50dd5b View commit details
    Browse the repository at this point in the history

  30. fix some typo. 

    Signed-off-by: Zhao, Zhiqiang <[email protected]>
    @Zhiqiang520 @jyao1
    Zhiqiang520 authored and jyao1 committed Oct 25, 2022
    Configuration menu
    Copy the full SHA
    c460b6b View commit details
    Browse the repository at this point in the history

  31. enable PcdOpensslEcEnabled. 

    Signed-off-by: Qi Zhang <[email protected]>
    @qizhangz @jyao1
    qizhangz authored and jyao1 committed Oct 25, 2022
    Configuration menu
    Copy the full SHA
    cf430e4 View commit details
    Browse the repository at this point in the history

  32. update Cryptlib HAL. 

    Signed-off-by: Qi Zhang <[email protected]>
    @qizhangz @jyao1
    qizhangz authored and jyao1 committed Oct 25, 2022
    Configuration menu
    Copy the full SHA
    41df44a View commit details
    Browse the repository at this point in the history

  33. update Crypto config. 

    Signed-off-by: Qi Zhang <[email protected]>
    @qizhangz @jyao1
    qizhangz authored and jyao1 committed Oct 25, 2022
    Configuration menu
    Copy the full SHA
    bb54e80 View commit details
    Browse the repository at this point in the history

  34. udpate Device Security with Crypt lib. 

    Signed-off-by: Qi Zhang <[email protected]>
    @qizhangz @jyao1
    qizhangz authored and jyao1 committed Oct 25, 2022
    Configuration menu
    Copy the full SHA
    93f087e View commit details
    Browse the repository at this point in the history

  35. update Crypt test. 

    Signed-off-by: Qi Zhang <[email protected]>
    @qizhangz @jyao1
    qizhangz authored and jyao1 committed Oct 25, 2022
    Configuration menu
    Copy the full SHA
    8a89097 View commit details
    Browse the repository at this point in the history

  36. Fix ValidateCryptHmac fail. 

    Signed-off-by: Zhao, Zhiqiang <[email protected]>
    @Zhiqiang520 @jyao1
    Zhiqiang520 authored and jyao1 committed Oct 25, 2022
    Configuration menu
    Copy the full SHA
    e3f35a3 View commit details
    Browse the repository at this point in the history

  37. Fix ValidateCryptRsa2( ) function fail when running Cryptest.efi 

    Signed-off-by: Zhao, Zhiqiang <[email protected]>
    @Zhiqiang520 @jyao1
    Zhiqiang520 authored and jyao1 committed Oct 25, 2022
    Configuration menu
    Copy the full SHA
    dd621d5 View commit details
    Browse the repository at this point in the history

  38. update Crypt test, remove ValidateCryptPkcs7Ec(). 

    Signed-off-by: Zhao, Zhiqiang <[email protected]>
    @Zhiqiang520 @jyao1
    Zhiqiang520 authored and jyao1 committed Oct 25, 2022
    Configuration menu
    Copy the full SHA
    6cdacdb View commit details
    Browse the repository at this point in the history

  39. Update RsaVerify from RSA1024 to RSA2048, fix ValidateCryptRsa( ) fun… 

    …ction fail when running Cryptest.efi

Signed-off-by: Zhao, Zhiqiang <[email protected]>
    @Zhiqiang520 @jyao1
    Zhiqiang520 authored and jyao1 committed Oct 25, 2022
    Configuration menu
    Copy the full SHA
    a7d86b2 View commit details
    Browse the repository at this point in the history

  40. Add a new test config: Set SPDM responder support RSASSA_4096 and SHA… 

    …_512 default.

Signed-off-by: Zhao, Zhiqiang <[email protected]>
    @Zhiqiang520 @jyao1
    Zhiqiang520 authored and jyao1 committed Oct 25, 2022
    Configuration menu
    Copy the full SHA
    75c4514 View commit details
    Browse the repository at this point in the history

  41. Add a new test config: Set SPDM responder support ECDSA_ECC_NIST_P256… 

    … and SHA_256 default.

Signed-off-by: Zhao, Zhiqiang <[email protected]>
    @Zhiqiang520 @jyao1
    Zhiqiang520 authored and jyao1 committed Oct 25, 2022
    Configuration menu
    Copy the full SHA
    5bc4dde View commit details
    Browse the repository at this point in the history

  42. Fix typo. 

    Signed-off-by: Zhao, Zhiqiang <[email protected]>
    @Zhiqiang520 @jyao1
    Zhiqiang520 authored and jyao1 committed Oct 25, 2022
    Configuration menu
    Copy the full SHA
    3cd9a24 View commit details
    Browse the repository at this point in the history

  43. Add a new test config: Set SPDM responder support ECDSA_ECC_NIST_P384… 

    … and SHA_384 default.

Signed-off-by: Zhao, Zhiqiang <[email protected]>
    @Zhiqiang520 @jyao1
    Zhiqiang520 authored and jyao1 committed Oct 25, 2022
    Configuration menu
    Copy the full SHA
    2583c15 View commit details
    Browse the repository at this point in the history

  44. Add a new test config: Set SPDM responder support ECDSA_ECC_NIST_P521… 

    … and SHA_512 default.

Signed-off-by: Zhao, Zhiqiang <[email protected]>
    @Zhiqiang520 @jyao1
    Zhiqiang520 authored and jyao1 committed Oct 25, 2022
    Configuration menu
    Copy the full SHA
    3c2f34a View commit details
    Browse the repository at this point in the history

  45. Add test configs to test PCI DOE. 

    Signed-off-by: Zhao, Zhiqiang <[email protected]>
    @Zhiqiang520 @jyao1
    Zhiqiang520 authored and jyao1 committed Oct 25, 2022
    Configuration menu
    Copy the full SHA
    74d0403 View commit details
    Browse the repository at this point in the history

  46. If the Responder does not support MEASUREMENTS response capabilities,… 

    … it should set zero to its MeasurementSpecification and MeasurementHashAlgo field.

Signed-off-by: Zhao, Zhiqiang <[email protected]>
    @Zhiqiang520 @jyao1
    Zhiqiang520 authored and jyao1 committed Oct 25, 2022
    Configuration menu
    Copy the full SHA
    189175b View commit details
    Browse the repository at this point in the history

  47. Add two test configs: Set SPDM responder support SECP_256_R1 and AES_… 

    …256_GCM default. Set SPDM responder support SECP_521_R1 and CHACHA20_POLY1305 default.

Signed-off-by: Zhao, Zhiqiang <[email protected]>
    @Zhiqiang520 @jyao1
    Zhiqiang520 authored and jyao1 committed Oct 25, 2022
    Configuration menu
    Copy the full SHA
    7d62826 View commit details
    Browse the repository at this point in the history

  48. DeviceSecurityPkg: Update CryptlibStub with X509. 

    Signed-off-by: Qi Zhang <[email protected]>
    @qizhangz @jyao1
    qizhangz authored and jyao1 committed Oct 25, 2022
    Configuration menu
    Copy the full SHA
    a1041b7 View commit details
    Browse the repository at this point in the history

  49. DeviceSecurityPkg: sync libspdm 2.2.0. 

    Signed-off-by: Qi Zhang <[email protected]>
    @qizhangz @jyao1
    qizhangz authored and jyao1 committed Oct 25, 2022
    Configuration menu
    Copy the full SHA
    89386ee View commit details
    Browse the repository at this point in the history

  50. DeviceSecurityPkg: update with libspdm 2.2.0. 

    Signed-off-by: Qi Zhang <[email protected]>
    @qizhangz @jyao1
    qizhangz authored and jyao1 committed Oct 25, 2022
    Configuration menu
    Copy the full SHA
    d425855 View commit details
    Browse the repository at this point in the history

  51. DeviceSecurityPkg: platform_lib of os_stub. 

    Signed-off-by: Qi Zhang <[email protected]>
    @qizhangz @jyao1
    qizhangz authored and jyao1 committed Oct 25, 2022
    Configuration menu
    Copy the full SHA
    2579c88 View commit details
    Browse the repository at this point in the history

  52. DeviceSecurityPkg: memlib of os_stub. 

    Signed-off-by: Qi Zhang <[email protected]>
    @qizhangz @jyao1
    qizhangz authored and jyao1 committed Oct 25, 2022
    Configuration menu
    Copy the full SHA
    887166f View commit details
    Browse the repository at this point in the history

  53. DeviceSecurityPkg: cryptlib of os_stub. 

    Signed-off-by: Qi Zhang <[email protected]>
    @qizhangz @jyao1
    qizhangz authored and jyao1 committed Oct 25, 2022
    Configuration menu
    Copy the full SHA
    fca06ee View commit details
    Browse the repository at this point in the history

  54. DeviceSecurityPkg: spdm stub code refine. 

    Signed-off-by: Qi Zhang <[email protected]>
    @qizhangz @jyao1
    qizhangz authored and jyao1 committed Oct 25, 2022
    Configuration menu
    Copy the full SHA
    d74ba0b View commit details
    Browse the repository at this point in the history

  55. DeviceSecurityPkg: Pass GCC build. 

    Signed-off-by: Qi Zhang <[email protected]>
    @qizhangz @jyao1
    qizhangz authored and jyao1 committed Oct 25, 2022
    Configuration menu
    Copy the full SHA
    214e978 View commit details
    Browse the repository at this point in the history

  56. DeviceSecurityPkg: define LIBSPDM_STDINT_ALT. 

    Signed-off-by: Qi Zhang <[email protected]>
    @qizhangz @jyao1
    qizhangz authored and jyao1 committed Oct 25, 2022
    Configuration menu
    Copy the full SHA
    3d0d6e2 View commit details
    Browse the repository at this point in the history

  57. DeviceSecurityPkg: undo SpdmLibStub. 

    Signed-off-by: Qi Zhang <[email protected]>
    @qizhangz @jyao1
    qizhangz authored and jyao1 committed Oct 25, 2022
    Configuration menu
    Copy the full SHA
    f6c1067 View commit details
    Browse the repository at this point in the history

  58. DeviceSecurityPkg: Uncrustify alignment. 

    Signed-off-by: Qi Zhang <[email protected]>
    @qizhangz @jyao1
    qizhangz authored and jyao1 committed Oct 25, 2022
    Configuration menu
    Copy the full SHA
    a721565 View commit details
    Browse the repository at this point in the history

  59. DeviceSecurityPkg: wrap RsaPkcs1Verify and RsaPkcs1Sign. 

    Signed-off-by: Qi Zhang <[email protected]>
    @qizhangz @jyao1
    qizhangz authored and jyao1 committed Oct 25, 2022
    Configuration menu
    Copy the full SHA
    329d7fe View commit details
    Browse the repository at this point in the history

  60. DeviceSecurityPkg: add some NULL pointer check. 

    Signed-off-by: Qi Zhang <[email protected]>
    @qizhangz @jyao1
    qizhangz authored and jyao1 committed Oct 25, 2022
    Configuration menu
    Copy the full SHA
    5040d56 View commit details
    Browse the repository at this point in the history

  61. correct get testconfig. 

    Signed-off-by: Zhao, Zhiqiang <[email protected]>
    @Zhiqiang520 @jyao1
    Zhiqiang520 authored and jyao1 committed Oct 25, 2022
    Configuration menu
    Copy the full SHA
    ccec989 View commit details
    Browse the repository at this point in the history

  62. DeviceSecurityPkg: update with X509 upstream. 

    Signed-off-by: Qi Zhang <[email protected]>
    @qizhangz @jyao1
    qizhangz authored and jyao1 committed Oct 25, 2022
    Configuration menu
    Copy the full SHA
    52bc322 View commit details
    Browse the repository at this point in the history

  63. DeviceSecurityPkg: remove unused file. 

    Signed-off-by: Qi Zhang <[email protected]>
    @qizhangz @jyao1
    qizhangz authored and jyao1 committed Oct 25, 2022
    Configuration menu
    Copy the full SHA
    6601862 View commit details
    Browse the repository at this point in the history

  64. DeviceSecurityPkg: spdm return type is libspdm_return_t. 

    Signed-off-by: Qi Zhang <[email protected]>
    @qizhangz @jyao1
    qizhangz authored and jyao1 committed Oct 25, 2022
    Configuration menu
    Copy the full SHA
    6dd109e View commit details
    Browse the repository at this point in the history

  65. DeviceSecurityPkg: reconfig Include layout. 

    Signed-off-by: Qi Zhang <[email protected]>
    @qizhangz @jyao1
    qizhangz authored and jyao1 committed Oct 25, 2022
    Configuration menu
    Copy the full SHA
    e5d8459 View commit details
    Browse the repository at this point in the history

  66. DeviceSecurityPkg: fix a typo. 

    Signed-off-by: Qi Zhang <[email protected]>
    @qizhangz @jyao1
    qizhangz authored and jyao1 committed Oct 25, 2022
    Configuration menu
    Copy the full SHA
    ed7bc2c View commit details
    Browse the repository at this point in the history

  67. DeviceSecurityPkg: fix build error. 

    Signed-off-by: Qi Zhang <[email protected]>
    @qizhangz @jyao1
    qizhangz authored and jyao1 committed Oct 25, 2022
    Configuration menu
    Copy the full SHA
    6af18da View commit details
    Browse the repository at this point in the history

  68. DeviceSecurityPkg: include OpensslLibFull lib for EC enabled. 

    As CryptoPkg discarded PcdOpensslEcEnabled.

Signed-off-by: Qi Zhang <[email protected]>
    @qizhangz @jyao1
    qizhangz authored and jyao1 committed Oct 25, 2022
    Configuration menu
    Copy the full SHA
    a6691d7 View commit details
    Browse the repository at this point in the history

Commits on Nov 2, 2022

  1. DeviceSecurityPkg: reconfig includes. 

    Signed-off-by: Qi Zhang <[email protected]>
    @qizhangz @jyao1
    qizhangz authored and jyao1 committed Nov 2, 2022
    Configuration menu
    Copy the full SHA
    77b80ab View commit details
    Browse the repository at this point in the history

Commits on Nov 4, 2022

  1. DeviceSecurityPkg: Requester Nonce is needed. 

    Set requester_nonce_in to null and let libspdm to
create requester nonce.

Signed-off-by: Qi Zhang <[email protected]>
    @qizhangz @jyao1
    qizhangz authored and jyao1 committed Nov 4, 2022
    Configuration menu
    Copy the full SHA
    56467f3 View commit details
    Browse the repository at this point in the history

  2. DeviceSecurityPkg: set PcrIndex and EventType for No Data. 

    Signed-off-by: Qi Zhang <[email protected]>
    @qizhangz @jyao1
    qizhangz authored and jyao1 committed Nov 4, 2022
    Configuration menu
    Copy the full SHA
    04ef112 View commit details
    Browse the repository at this point in the history

Commits on Nov 8, 2022

  1. DeviceSecurityPkg: get Sig Measurement without CHAL_CAP. 

    Signed-off-by: Qi Zhang <[email protected]>
    @qizhangz @jyao1
    qizhangz authored and jyao1 committed Nov 8, 2022
    Configuration menu
    Copy the full SHA
    09d0cb6 View commit details
    Browse the repository at this point in the history

  2. DeviceSecurityPkg: enum slot id for GET_CERTIFICATE. 

    Signed-off-by: Qi Zhang <[email protected]>
    @qizhangz @jyao1
    qizhangz authored and jyao1 committed Nov 8, 2022
    Configuration menu
    Copy the full SHA
    3c7fb8d View commit details
    Browse the repository at this point in the history

  3. DeviceSecurityPkg: Add a new test config. 

    1. Requester does not provision root CA of responder.
2. Provision certificate chain to responder.
3. Responder does not support Challenge capability.
4. Get measurement with signature.

Signed-off-by: Zhao, Zhiqiang <[email protected]>
    @Zhiqiang520 @jyao1
    Zhiqiang520 authored and jyao1 committed Nov 8, 2022
    Configuration menu
    Copy the full SHA
    77fa4a3 View commit details
    Browse the repository at this point in the history

Commits on Nov 10, 2022

  1. DeviceSecurityPkg: support multiple cert in Database 

    Signed-off-by: Qi Zhang <[email protected]>
    @qizhangz @jyao1
    qizhangz authored and jyao1 committed Nov 10, 2022
    Configuration menu
    Copy the full SHA
    0a28d48 View commit details
    Browse the repository at this point in the history

Commits on Nov 11, 2022

  1. DeviceSecurityPkg: handle ContentChanged case for measurement. 

    Signed-off-by: Qi Zhang <[email protected]>
    @qizhangz @jyao1
    qizhangz authored and jyao1 committed Nov 11, 2022
    Configuration menu
    Copy the full SHA
    7d0461d View commit details
    Browse the repository at this point in the history

  2. DeviceSecurityPkg: Add test different certificate chains. 

    1. Provision a valid certificate chain without trust anchor
   to slot_0 of responder.
2. Provision a valid certificate chain with trust anchor
   to slot_1 of responder.
3. Authentication will select slot_1 to do later CHALLENGE
   and GET_MEASUREMENTS.
4. StartSession with slot_1.

Signed-off-by: Zhao, Zhiqiang <[email protected]>
    @Zhiqiang520 @jyao1
    Zhiqiang520 authored and jyao1 committed Nov 11, 2022
    Configuration menu
    Copy the full SHA
    38dc1dd View commit details
    Browse the repository at this point in the history

Commits on Nov 15, 2022

  1. DeviceSecurityPkg: Record SlotId in Data. 

    Per PFP spec, Record NvIndex DEV_SEC (AUTH_FAIL_INVALID,
TYPE: CertChain, Data:SlotId)

Signed-off-by: Qi Zhang <[email protected]>
    @qizhangz @jyao1
    qizhangz authored and jyao1 committed Nov 15, 2022
    Configuration menu
    Copy the full SHA
    e658cd2 View commit details
    Browse the repository at this point in the history

  2. DeviceSecurityPkg: return SecurityState. 

    Signed-off-by: Qi Zhang <[email protected]>
    @qizhangz @jyao1
    qizhangz authored and jyao1 committed Nov 15, 2022
    Configuration menu
    Copy the full SHA
    dda8605 View commit details
    Browse the repository at this point in the history

  3. DeviceSecurityPkg: test SignatureType is not EFI_CERT_X509_GUID. 

    1. there is only one SignatureList in database.
2. in SignatureList, the SignatureType is gEfiCertSha256Guid,
   not gEfiCertX509Guid.
3. Finally requester will not provision root CA of responder.
4. GetCertificate pass, but RootCert not match and no TrustAnchor.

Signed-off-by: Zhao, Zhiqiang <[email protected]>
    @Zhiqiang520 @jyao1
    Zhiqiang520 authored and jyao1 committed Nov 15, 2022
    Configuration menu
    Copy the full SHA
    62edd2a View commit details
    Browse the repository at this point in the history

Commits on Nov 22, 2022

  1. DeviceSecurityPkg: measurement with AUTH_FAIL_INVALID and No Data. 

    Signed-off-by: Qi Zhang <[email protected]>
    @qizhangz @jyao1
    qizhangz authored and jyao1 committed Nov 22, 2022
    Configuration menu
    Copy the full SHA
    15c8e2d View commit details
    Browse the repository at this point in the history

  2. DeviceSecurityPkg: SubheaderUID for each responder. 

    Signed-off-by: Qi Zhang <[email protected]>
    @qizhangz @jyao1
    qizhangz authored and jyao1 committed Nov 22, 2022
    Configuration menu
    Copy the full SHA
    2da8439 View commit details
    Browse the repository at this point in the history

  3. DeviceSecurityPkg: check return value of libspdm. 

    Signed-off-by: Qi Zhang <[email protected]>
    @qizhangz @jyao1
    qizhangz authored and jyao1 committed Nov 22, 2022
    Configuration menu
    Copy the full SHA
    8dcc69f View commit details
    Browse the repository at this point in the history

Commits on Nov 23, 2022

  1. DeviceSecurityPkg: remove TCG_DEVICE_SECURITY_EVENT_DATA_VERSION_1 

    Signed-off-by: Qi Zhang <[email protected]>
    @qizhangz @jyao1
    qizhangz authored and jyao1 committed Nov 23, 2022
    Configuration menu
    Copy the full SHA
    b83ede0 View commit details
    Browse the repository at this point in the history

Commits on Nov 30, 2022

  1. DeviceSecurityPkg: measure signature db to PCR 1. 

    Signed-off-by: Qi Zhang <[email protected]>
    @qizhangz @jyao1
    qizhangz authored and jyao1 committed Nov 30, 2022
    Configuration menu
    Copy the full SHA
    c4782d7 View commit details
    Browse the repository at this point in the history

  2. DeviceSecurityPkg: create SPDM Uid from volatile variable. 

    Signed-off-by: Qi Zhang <[email protected]>
    @qizhangz @jyao1
    qizhangz authored and jyao1 committed Nov 30, 2022
    Configuration menu
    Copy the full SHA
    fd2bd99 View commit details
    Browse the repository at this point in the history

  3. DeviceSecurityPkg: record signature db full status. 

    Signed-off-by: Qi Zhang <[email protected]>
    @qizhangz @jyao1
    qizhangz authored and jyao1 committed Nov 30, 2022
    Configuration menu
    Copy the full SHA
    03e1e06 View commit details
    Browse the repository at this point in the history

Commits on Dec 5, 2022

  1. DeviceSecurityPkg: test SPDM_MESSAGE_VERSION_11. 

    1. Set SPDM responder only support SPDM_MESSAGE_VERSION_11.
2. Do later device authentication and measurement successfully.

Signed-off-by: Zhao, Zhiqiang <[email protected]>
    @Zhiqiang520 @jyao1
    Zhiqiang520 authored and jyao1 committed Dec 5, 2022
    Configuration menu
    Copy the full SHA
    5d9e2a7 View commit details
    Browse the repository at this point in the history

  2. DeviceSecurityPkg: test SPDM_MESSAGE_VERSION_10. 

    1. Set SPDM responder only support SPDM_MESSAGE_VERSION_10.
2. Do later device authentication and measurement successfully.
3. SPDM 1.0 does not support KEY_EXCHANGE or PSK_EXCHANGE, so skip.

Signed-off-by: Zhao, Zhiqiang <[email protected]>
    @Zhiqiang520 @jyao1
    Zhiqiang520 authored and jyao1 committed Dec 5, 2022
    Configuration menu
    Copy the full SHA
    af6a6b4 View commit details
    Browse the repository at this point in the history

Commits on Dec 12, 2022

  1. remove libspdm from DeviceSecurityPkg. 

    Signed-off-by: Qi Zhang <[email protected]>
    @qizhangz @jyao1
    qizhangz authored and jyao1 committed Dec 12, 2022
    Configuration menu
    Copy the full SHA
    cc71188 View commit details
    Browse the repository at this point in the history

  2. DeviceSecurityPkg: move SpdmLib to SecurityPkg. 

    Signed-off-by: Qi Zhang <[email protected]>
    @qizhangz @jyao1
    qizhangz authored and jyao1 committed Dec 12, 2022
    Configuration menu
    Copy the full SHA
    a6d43b3 View commit details
    Browse the repository at this point in the history

  3. SecurityPkg: add libspdm. 

    Signed-off-by: Qi Zhang <[email protected]>
    @qizhangz @jyao1
    qizhangz authored and jyao1 committed Dec 12, 2022
    Configuration menu
    Copy the full SHA
    ae9e1c6 View commit details
    Browse the repository at this point in the history

  4. SecurityPkg: add SpdmLib of libspdm wrapper. 

    Signed-off-by: Qi Zhang <[email protected]>
    @qizhangz @jyao1
    qizhangz authored and jyao1 committed Dec 12, 2022
    Configuration menu
    Copy the full SHA
    373fc83 View commit details
    Browse the repository at this point in the history

  5. SecurityPkg: add OsStub lib to support libspdm. 

    Signed-off-by: Qi Zhang <[email protected]>
    @qizhangz @jyao1
    qizhangz authored and jyao1 committed Dec 12, 2022
    Configuration menu
    Copy the full SHA
    87aadbc View commit details
    Browse the repository at this point in the history

  6. SecurityPkg: add SpdmSecurityLib. 

    Signed-off-by: Qi Zhang <[email protected]>
    @qizhangz @jyao1
    qizhangz authored and jyao1 committed Dec 12, 2022
    Configuration menu
    Copy the full SHA
    00ad4a1 View commit details
    Browse the repository at this point in the history

  7. SecurityPkg: add definition of signature database devdb. 

    Signed-off-by: Qi Zhang <[email protected]>
    @qizhangz @jyao1
    qizhangz authored and jyao1 committed Dec 12, 2022
    Configuration menu
    Copy the full SHA
    815e9ad View commit details
    Browse the repository at this point in the history

  8. SecurityPkg: add defintion of DeviceSecurityPolicy. 

    Signed-off-by: Qi Zhang <[email protected]>
    @qizhangz @jyao1
    qizhangz authored and jyao1 committed Dec 12, 2022
    Configuration menu
    Copy the full SHA
    36155d1 View commit details
    Browse the repository at this point in the history

  9. SecurityPkg: update dec&dsc file for SPDM. 

    Signed-off-by: Qi Zhang <[email protected]>
    @qizhangz @jyao1
    qizhangz authored and jyao1 committed Dec 12, 2022
    Configuration menu
    Copy the full SHA
    5033505 View commit details
    Browse the repository at this point in the history

  10. MdePkg: add Tcg Spdm definition. 

    Signed-off-by: Qi Zhang <[email protected]>
    @qizhangz @jyao1
    qizhangz authored and jyao1 committed Dec 12, 2022
    Configuration menu
    Copy the full SHA
    bf64c93 View commit details
    Browse the repository at this point in the history

  11. SecurityPkg: update YAML to ignore the Ecc errors of spdm. 

    Signed-off-by: Qi Zhang <[email protected]>
    @qizhangz @jyao1
    qizhangz authored and jyao1 committed Dec 12, 2022
    Configuration menu
    Copy the full SHA
    09043e4 View commit details
    Browse the repository at this point in the history

  12. .pytool/CISettings.py: add libspdm submodule. 

    Signed-off-by: Qi Zhang <[email protected]>
    @qizhangz @jyao1
    qizhangz authored and jyao1 committed Dec 12, 2022
    Configuration menu
    Copy the full SHA
    b8333d2 View commit details
    Browse the repository at this point in the history

Commits on Dec 13, 2022

  1. DeviceSecurityPkg: rename to DeviceSecurityTestPkg. 

    Signed-off-by: Qi Zhang <[email protected]>
    @qizhangz @jyao1
    qizhangz authored and jyao1 committed Dec 13, 2022
    Configuration menu
    Copy the full SHA
    411c40c View commit details
    Browse the repository at this point in the history

Commits on Dec 14, 2022

  1. SecurityPkg/DeviceSecurity: fix signature parsing issue. 

    Signed-off-by: Qi Zhang <[email protected]>
    @qizhangz @jyao1
    qizhangz authored and jyao1 committed Dec 14, 2022
    Configuration menu
    Copy the full SHA
    4184682 View commit details
    Browse the repository at this point in the history

Commits on Dec 16, 2022

  1. SecurityPkg/DeviceSecurity: fix possible memory leak. 

    Signed-off-by: Qi Zhang <[email protected]>
    @qizhangz @jyao1
    qizhangz authored and jyao1 committed Dec 16, 2022
    Configuration menu
    Copy the full SHA
    30d09a7 View commit details
    Browse the repository at this point in the history

Commits on Dec 19, 2022

  1. SecurityPkg/DeviceSecurity: Record Nonc for No Trust Anchor case. 

    Signed-off-by: Qi Zhang <[email protected]>
    @qizhangz @jyao1
    qizhangz authored and jyao1 committed Dec 19, 2022
    Configuration menu
    Copy the full SHA
    8453ff0 View commit details
    Browse the repository at this point in the history

Commits on Dec 21, 2022

  1. DeviceSecurityTestPkg: Test LIBSPDM_MAX_ROOT_CERT_SUPPORT. 

    1. there is only one SignatureList in database.
2. The total number of RootCert in database exceed the
 LIBSPDM_MAX_ROOT_CERT_SUPPORT.
3. Then fail to set multiple root certificates as
 trust anchors in SPDM context.
4. Finally fail to create a connection with the SPDM device
 and extend some error in PCR.

Signed-off-by: Zhao, Zhiqiang <[email protected]>
    @Zhiqiang520
    Zhiqiang520 committed Dec 21, 2022
    Configuration menu
    Copy the full SHA
    584e0cf View commit details
    Browse the repository at this point in the history