wolfBoot/IDE
David Garske 490286be7d Support for sealing/unseal a secret based on an externally signed PCR policy.
* Added new `WOLFBOOT_TPM_SEAL` and `WOLFBOOT_TPM_SEAL_NV_BASE` config options.
* Added new `tools/tpm/policy_create` tool for assisting with creation of a policy digest. The sign keytool `--policy=file` signs the policy.
* Added new `WOLFBOOT_TPM_VERIFY` option to enable offloading of the asymmetric verification to the TPM. By default wolfCrypt will be used.
* Added example seal/unseal to update_flash for ARCH_SIM.
* Renamed `WOLFBOOT_TPM_KEYSTORE_NV_INDEX` to `WOLFBOOT_TPM_KEYSTORE_NV_BASE` to support multiple public keys.
* Refactored most TPM code into tpm.c.
* Refactored the keystore ROT to use new `wolfBoot_check_rot` API.
* Refactored the sign keytool to have a sign_digest function to allow signing firmware and policy for sealing/unsealing.
* Fix for make distclean && make using the wrong key tools.
2023-09-12 12:26:48 +02:00
..
CCS/TMS570LC43xx Fixes and improvements for iMXRT1050 QSPI. 2023-08-21 11:08:48 +02:00
IAR Fixes and improvements for iMXRT1050 QSPI. 2023-08-21 11:08:48 +02:00
Renesas/e2studio fix compile error on the latest TSIP crypt-only 2023-08-03 08:01:25 +02:00
XilinxSDK Support for sealing/unseal a secret based on an externally signed PCR policy. 2023-09-12 12:26:48 +02:00