wolfBoot

Commit Graph

Author	SHA1	Message	Date
Daniele Lacamera	cc447ea879	Support for hybrid authentication (2 ciphers)	2024-10-30 13:17:06 +01:00
Daniele Lacamera	fce6149cf8	Update license GPL2 -> GPL3	2024-04-16 16:46:15 +02:00
Daniele Lacamera	f28eec1b90	stage1: add TPM support	2023-09-28 13:12:26 +02:00
David Garske	c04960c097	Fix simulator to not just while(1) on panic, which causes CI to spin/timeout (instead exit with error). Fix ROT logic and make sure read error code gets passed up stack.	2023-09-12 12:26:48 +02:00
David Garske	490286be7d	Support for sealing/unseal a secret based on an externally signed PCR policy. * Added new `WOLFBOOT_TPM_SEAL` and `WOLFBOOT_TPM_SEAL_NV_BASE` config options. * Added new `tools/tpm/policy_create` tool for assisting with creation of a policy digest. The sign keytool `--policy=file` signs the policy. * Added new `WOLFBOOT_TPM_VERIFY` option to enable offloading of the asymmetric verification to the TPM. By default wolfCrypt will be used. * Added example seal/unseal to update_flash for ARCH_SIM. * Renamed `WOLFBOOT_TPM_KEYSTORE_NV_INDEX` to `WOLFBOOT_TPM_KEYSTORE_NV_BASE` to support multiple public keys. * Refactored most TPM code into tpm.c. * Refactored the keystore ROT to use new `wolfBoot_check_rot` API. * Refactored the sign keytool to have a sign_digest function to allow signing firmware and policy for sealing/unsealing. * Fix for make distclean && make using the wrong key tools.	2023-09-12 12:26:48 +02:00
David Garske	9ca58248e4	Adding GitHub Action for testing TPM features.	2023-08-17 13:43:58 +02:00

6 Commits (bigbrett-patch-2)