1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
|
//**********************************************************************
//**********************************************************************
//** **
//** (C)Copyright 1985-2013, American Megatrends, Inc. **
//** **
//** All Rights Reserved. **
//** **
//** 5555 Oakbrook Parkway, Suite 200, Norcross, GA 30093 **
//** **
//** Phone: (770)-246-8600 **
//** **
//**********************************************************************
//**********************************************************************
//**********************************************************************
// $Header: /Alaska/SOURCE/Modules/SharkBayRefCodes/FIT/Dxe/BootGuardTPM2Dxe/BootGuardTPM2Dxe.h 1 9/06/13 6:17a Bensonlai $
//
// $Revision: 1 $
//
// $Date: 9/06/13 6:17a $
//**********************************************************************
// Revision History
// ----------------
// $Log: /Alaska/SOURCE/Modules/SharkBayRefCodes/FIT/Dxe/BootGuardTPM2Dxe/BootGuardTPM2Dxe.h $
//
// 1 9/06/13 6:17a Bensonlai
// [TAG] EIP135513
// [Category] New Feature
// [Description] Implementation of Boot Guard of PTT flow for WHCK test.
// [Files] BootGuardTPM2Dxe.cif
// BootGuardTPM2Dxe.c
// BootGuardTPM2Dxe.h
// BootGuardTPM2Dxe.sdl
// BootGuardTPM2Dxe.mak
//
//**********************************************************************
//<AMI_FHDR_START>
//
// Name: BootGuardTPM2Dxe.c
//
// Description: TPM2 Initialization Flow for Boot Guard
//
//<AMI_FHDR_END>
//**********************************************************************
#ifndef _BOOT_GUARD_TPM2_H_
#define _BOOT_GUARD_TPM2_H_
#ifndef _EFI_MMIO_ACCESS_H_
#define _EFI_MMIO_ACCESS_H_
#define MmioAddress(BaseAddr, Register) \
( (UINTN)BaseAddr + (UINTN)(Register) )
// 32-bit
#define Mmio32Ptr(BaseAddr, Register) \
( (volatile UINT32 *)MmioAddress(BaseAddr, Register) )
#define Mmio32(BaseAddr, Register) \
*Mmio32Ptr(BaseAddr, Register)
#define MmioRead32(Addr) \
Mmio32(Addr, 0)
#define MmioWrite32(Addr, Value) \
(Mmio32(Addr, 0) = (UINT32)Value)
#define MmioRW32(Addr, set, reset) \
(Mmio32(Addr, 0) = ((Mmio32(Addr, 0) & (UINT32)~(reset)) | (UINT32)set))
// 16-bit
#define Mmio16Ptr(BaseAddr, Register) \
( (volatile UINT16 *)MmioAddress(BaseAddr, Register) )
#define Mmio16(BaseAddr, Register) \
*Mmio16Ptr(BaseAddr, Register)
#define MmioRead16(Addr) \
Mmio16(Addr, 0)
#define MmioWrite16(Addr, Value) \
(Mmio16(Addr, 0) = (UINT16)Value)
#define MmioRW16(Addr, set, reset) \
(Mmio16(Addr, 0) = ((Mmio16(Addr, 0) & (UINT16)~(reset)) | (UINT16)set))
// 8-bit
#define Mmio8Ptr(BaseAddr, Register) \
( (volatile UINT8 *)MmioAddress(BaseAddr, Register) )
#define Mmio8(BaseAddr, Register) \
*Mmio8Ptr(BaseAddr, Register)
#define MmioRead8(Addr) \
Mmio8(Addr, 0)
#define MmioWrite8(Addr, Value) \
(Mmio8(Addr, 0) = (UINT8)Value)
#define MmioRW8(Addr, set, reset) \
(Mmio8(Addr, 0) = ((Mmio8(Addr, 0) & (UINT8)~(reset)) | (UINT8)set))
#endif
//
// Define macros to build data structure signatures from characters.
//
#define EFI_SIGNATURE_16(A, B) ((A) | (B << 8))
#define EFI_SIGNATURE_32(A, B, C, D) (EFI_SIGNATURE_16 (A, B) | (EFI_SIGNATURE_16 (C, D) << 16))
#define EFI_SIGNATURE_64(A, B, C, D, E, F, G, H) \
(EFI_SIGNATURE_32 (A, B, C, D) | ((UINT64) (EFI_SIGNATURE_32 (E, F, G, H)) << 32))
#define IBB_ENTRYPOINT_M 0xFFFFFFC0
#pragma pack(1)
typedef struct _BOOT_POLICY
{
UINT8 RSTR0:1;
UINT8 RSTR1:1;
UINT8 RSTR2:1;
UINT8 RSTR3:1;
UINT8 RSTR4:1;
UINT8 RSTR5:1;
UINT8 RSTR6:1;
UINT8 RSTR7:1;
UINT8 TYPE0:1;
UINT8 TYPE1:1;
UINT8 TYPE2:1;
UINT8 TYPE3:1;
UINT8 TYPE4:1;
UINT8 TYPE5:1;
UINT8 TYPE6:1;
UINT8 TYPE7:1;
UINT16 ACM_SVN;
UINT8 ACM_Signature[256];
UINT8 Key_Manifest_Signature[256];
UINT8 Boot_Policy_Manifest_Signature[256];
UINT8 Digest_of_Hashed_IBB_Segment[32];
} BOOT_POLICY;
typedef struct _FIT_ENTRY
{
UINT64 TblAddress;
UINT32 TblSIZE;
UINT16 TblVer;
UINT8 TblType;
UINT8 TblChkSum;
} FIT_ENTRY;
//
// Manifest definition
//
#define TPM_ALG_SHA1 0x4
#define TPM_ALG_SHA256 0xB
#define SHA1_DIGEST_SIZE 20
#define SHA256_DIGEST_SIZE 32
typedef struct {
UINT16 HashAlg;
UINT16 Size;
UINT8 HashBuffer[SHA256_DIGEST_SIZE];
} HASH_STRUCTURE;
#define RSA_PUBLIC_KEY_STRUCT_KEY_SIZE_DEFAULT 2048
#define RSA_PUBLIC_KEY_STRUCT_KEY_LEN_DEFAULT (RSA_PUBLIC_KEY_STRUCT_KEY_SIZE_DEFAULT/8)
#define RSA_PUBLIC_KEY_STRUCT_KEY_EXPONENT_DEFAULT 0x10001 // NOT 0x10001
typedef struct {
UINT8 Version;
UINT16 KeySize;
UINT32 Exponent;
UINT8 Modulus[RSA_PUBLIC_KEY_STRUCT_KEY_LEN_DEFAULT];
} RSA_PUBLIC_KEY_STRUCT;
#define RSASSA_SIGNATURE_STRUCT_KEY_SIZE_DEFAULT 2048
#define RSASSA_SIGNATURE_STRUCT_KEY_LEN_DEFAULT (RSASSA_SIGNATURE_STRUCT_KEY_SIZE_DEFAULT/8)
typedef struct {
UINT8 Version;
UINT16 KeySize;
UINT16 HashAlg;
UINT8 Signature[RSASSA_SIGNATURE_STRUCT_KEY_LEN_DEFAULT];
} RSASSA_SIGNATURE_STRUCT;
typedef struct {
UINT8 Version;
UINT16 KeyAlg;
RSA_PUBLIC_KEY_STRUCT Key;
UINT16 SigScheme;
RSASSA_SIGNATURE_STRUCT Signature;
} KEY_SIGNATURE_STRUCT;
typedef struct {
UINT8 StructureID[8];
UINT8 StructVersion;
UINT8 HdrStructVersion;
UINT8 PMBPMVersion;
UINT8 BPSVN_BPM;
UINT8 ACMSVN_BPM;
UINT8 Reserved;
UINT16 NEMDataStack;
} BOOT_POLICY_MANIFEST_HEADER;
typedef struct {
UINT16 Reserved;
UINT16 Flags;
UINT32 Base;
UINT32 Size;
} IBB_SEGMENT_ELEMENT;
typedef struct {
UINT8 StructureID[8];
UINT8 StructVersion;
UINT8 SetNumber;
UINT8 Reserved;
UINT8 PBETValue;
UINT32 Flags;
UINT64 IBB_MCHBAR;
UINT64 VTD_BAR;
UINT32 PMRL_Base;
UINT32 PMRL_Limit;
UINT64 PMRH_Base;
UINT64 PMRH_Limit;
HASH_STRUCTURE PostIbbHash;
UINT32 EntryPoint;
HASH_STRUCTURE Digest;
UINT8 SegmentCount; // 1 ~ 8
IBB_SEGMENT_ELEMENT IBBSegment[1];
} IBB_ELEMENT;
typedef struct {
UINT8 StructureID[8];
UINT8 StructVersion;
UINT16 PMDataSize;
//UINT8 PMData[PMDataSize];
} PLATFORM_MANUFACTURER_ELEMENT;
typedef struct {
UINT8 StructureID[8];
UINT8 StructVersion;
KEY_SIGNATURE_STRUCT KeySignature;
} BOOT_POLICY_MANIFEST_SIGNATURE_ELEMENT;
typedef struct {
BOOT_POLICY_MANIFEST_HEADER Bpm_Header;
IBB_ELEMENT Ibb_Element;
//PLATFORM_MANUFACTURER_ELEMENT Platform_Manufacture_Element;
BOOT_POLICY_MANIFEST_SIGNATURE_ELEMENT Bpm_Signature_Element;
} BpmStruct;
typedef struct {
UINT8 StructureID[8];
UINT8 StructVersion;
UINT8 KeyManifestVersion;
UINT8 KMSVN;
UINT8 KeyManifestID;
HASH_STRUCTURE BPKey;
KEY_SIGNATURE_STRUCT KeyManifestSignature;
} KEY_MANIFEST_STRAUCTURE;
#pragma pack()
#endif
//**********************************************************************
//**********************************************************************
//** **
//** (C)Copyright 1985-2013, American Megatrends, Inc. **
//** **
//** All Rights Reserved. **
//** **
//** 5555 Oakbrook Parkway, Suite 200, Norcross, GA 30093 **
//** **
//** Phone: (770)-246-8600 **
//** **
//**********************************************************************
//**********************************************************************
|