chromeos: vboot2: Add TPM PCR extension support

ChromeOS/vboot devices expect the TPM PCRs 0 and 1 to be extended with
digests that attest the chosen boot mode (developer/recovery) and the
HWID in a secure way. This patch uses the newly added vboot2 support
functions to fetch these digests and store them in the TPM.

TEST=Booted Jerry. Confirmed that PCR0 contains the same value as on my
vboot1 Blaze and Falco (and PCR1 contains some non-zero hash).

Original-Change-Id: I7037b8198c09fccee5440c4c85f0821166784cec
Original-Signed-off-by: Julius Werner <>
Original-Reviewed-by: Aaron Durbin <>
Original-Reviewed-by: Daisuke Nojiri <>

(cherry picked from commit 8b44e13098cb7493091f2ce6c4ab423f2cbf0177)
Signed-off-by: Aaron Durbin <>

Change-Id: I549de8c07353683633fbf73e4ee62ba0ed72ff89
Tested-by: build bot (Jenkins)
Reviewed-by: Stefan Reinauer <>
Reviewed-by: Paul Menzel <>
4 files changed