tree 14ac33fe377d43589d3a01c1b105f5658b62597a
parent 0dc82cc80b217a066c4f9abd8c2c91abd8ae51f0
author Arthur Heymans <arthur@aheymans.xyz> 1621494596 +0200
committer Patrick Georgi <pgeorgi@google.com> 1621596171 +0000

security/tpm/tspi: Always measure the cache to pcr

Most of the time when INIT_BOOTBLOCK is selected, the cache should be
empty here anyway, so this is a no-op. But when it's not empty that
means the bootblock loaded some other file before it got to the TPM
init part (which is possible, for example, if hooks like
bootblock_soc_init() load something).

Change-Id: I4aea86c094abc951d7670838f12371fddaffaa90
Signed-off-by: Arthur Heymans <arthur@aheymans.xyz>
Reviewed-on: https://review.coreboot.org/c/coreboot/+/54717
Tested-by: build bot (Jenkins) <no-reply@coreboot.org>
Reviewed-by: Angel Pons <th3fanbus@gmail.com>
Reviewed-by: Julius Werner <jwerner@chromium.org>