Messages in this thread | | | From | Daniel Kiper <> | Subject | [GRUB PATCH RFC 00/18] i386: Intel TXT secure launcher | Date | Tue, 5 May 2020 01:21:14 +0200 |
| |
Hi,
This is an RFC patchset for the GRUB introducing the Intel TXT secure launcher. This is a part of larger work known as the TrenchBoot. Patchset can be split into two distinct parts: - 01-12: preparatory patches, - 13-18: the Intel TXT secure launcher itself.
The initial implementation of the Intel TXT secure launcher works. However, there are still some missing bits and pieces, e.g.: - SINIT ACM auto loader, - lack of RMRR support, - lack of support for MLEs larger than 1 GiB, - lack of TPM 1.2 support. - various fixes and cleanups.
Commands introduced by this patchset: tpm_type, slaunch, slaunch_module (not required on server platforms) and slaunch_state (useful for checking platform configuration and state; based on tboot's txt-stat).
Daniel
| |