wolfBoot

Commit Graph

Author	SHA1	Message	Date
Daniele Lacamera	cc447ea879	Support for hybrid authentication (2 ciphers)	2024-10-30 13:17:06 +01:00
David Garske	080dae0125	Fixes to properly support TPM policy with more than one PCR.	2024-09-10 20:53:10 +02:00
Daniele Lacamera	fce6149cf8	Update license GPL2 -> GPL3	2024-04-16 16:46:15 +02:00
Marco Oliverio	9722f2e2e1	tools/tpm: fix name in license header	2023-09-28 13:12:26 +02:00
David Garske	05b83544fb	Fixes based on peer review. Add output of signed policy to file (append .sig). Tested successfully with multiple PCRs. In example unlock_disk extend PCR with random value after unseal to prevent unsealing after boot.	2023-09-12 12:26:48 +02:00
David Garske	490286be7d	Support for sealing/unseal a secret based on an externally signed PCR policy. * Added new `WOLFBOOT_TPM_SEAL` and `WOLFBOOT_TPM_SEAL_NV_BASE` config options. * Added new `tools/tpm/policy_create` tool for assisting with creation of a policy digest. The sign keytool `--policy=file` signs the policy. * Added new `WOLFBOOT_TPM_VERIFY` option to enable offloading of the asymmetric verification to the TPM. By default wolfCrypt will be used. * Added example seal/unseal to update_flash for ARCH_SIM. * Renamed `WOLFBOOT_TPM_KEYSTORE_NV_INDEX` to `WOLFBOOT_TPM_KEYSTORE_NV_BASE` to support multiple public keys. * Refactored most TPM code into tpm.c. * Refactored the keystore ROT to use new `wolfBoot_check_rot` API. * Refactored the sign keytool to have a sign_digest function to allow signing firmware and policy for sealing/unsealing. * Fix for make distclean && make using the wrong key tools.	2023-09-12 12:26:48 +02:00

6 Commits (build-cmake-test)