- 441c63d security/vboot: fix policy digest for nvmem spaces by Andrey Pronin · 3 years, 10 months ago
- 4a30d42 vboot: Disable vboot functions in SMM by Julius Werner · 3 years, 10 months ago
- 4622a2f security/tpm/tspi/crtm: Add line break to debug messages by Frans Hendriks · 3 years, 10 months ago
- 8f8cb95 sec/intel/txt: Split MTRR setup ASM code into a macro by Angel Pons · 3 years, 10 months ago
- 0149025 sec/intel/txt: Add `enable_getsec_or_reset` function by Angel Pons · 3 years, 10 months ago
- 7b4d67cf sec/intel/txt: Extract BIOS ACM loading into a function by Angel Pons · 3 years, 10 months ago
- 6c4028d sec/intel/txt: Only run LockConfig for LT-SX by Angel Pons · 3 years, 10 months ago
- e70a3f8 sec/intel/txt: Always run SCHECK on regular boots by Angel Pons · 3 years, 10 months ago
- 8a285fd8 sec/intel/txt: Allow skipping ACM NOP function by Angel Pons · 3 years, 10 months ago
- c037695 sec/intel/txt/ramstage.c: Do not init the heap on S3 resume by Angel Pons · 3 years, 10 months ago
- 8f7e2a3 sec/intel/txt/ramstage.c: Extract heap init into a function by Angel Pons · 3 years, 10 months ago
- 08de7d6 sec/intel/txt: Add and fill in BIOS Specification info by Angel Pons · 3 years, 10 months ago
- 28d0408 sec/intel/txt/common.c: Only log ACM error on failure by Angel Pons · 3 years, 10 months ago
- 5a6daa6 sec/intel/txt: Move DPR size to Kconfig by Angel Pons · 3 years, 10 months ago
- 17df7d6 security/vboot: Remove all tpm 1.2 functions for mrc hash in the tpm by Shelley Chen · 3 years, 10 months ago
- c1040f3 mrc_cache: Add tpm_hash_index field to cache_region struct by Shelley Chen · 3 years, 10 months ago
- df0481e security/vboot: Add new TPM NVRAM index MRC_RW_HASH_NV_INDEX by Shelley Chen · 3 years, 10 months ago
- a79803c security/vboot: Make mrc_cache hash functions generic by Shelley Chen · 3 years, 10 months ago
- 1fed53f mrc_cache: Move mrc_cache_*_hash functions into mrc_cache driver by Shelley Chen · 3 years, 10 months ago
- 9f8ac64 mrc_cache: Add config MRC_SAVE_HASH_IN_TPM by Shelley Chen · 3 years, 10 months ago
- d5faa90 security/vboot: Rename mem_init.h to mrc_cache_hash_tpm.h by Shelley Chen · 3 years, 10 months ago
- ffbb4b2 intel/txt: Add `txt_get_chipset_dpr` function by Angel Pons · 3 years, 10 months ago
- 578a4d2 security/intel/txt: Improve MTRR setup for GETSEC[ENTERACCS] by Angel Pons · 4 years ago
- 038cef9 sec/intel/txt: Bail if var MTRRs cannot snugly cache the BIOS ACM by Angel Pons · 3 years, 10 months ago
- 7af8aca sec/intel/txt/getsec_enteraccs.S: Save and restore MTRR_DEF_TYPE by Arthur Heymans · 3 years, 10 months ago
- 1133472 security/intel/txt: Use `smm_region()` to get TSEG base by Angel Pons · 3 years, 11 months ago
- 463e44b security/intel/txt: Add and use DPR register layout by Angel Pons · 3 years, 11 months ago
- 52082be security/intel/txt: Clean up includes by Angel Pons · 3 years, 11 months ago
- 7979bf5 security/intel/stm: Add options for STM build by Eugene Myers · 3 years, 11 months ago
- 6e536bc security/intel/txt: Print chipset as hex value by Christian Walter · 3 years, 11 months ago
- bbbdba1 security/intel/stm: Fix size_t printf format error by Felix Held · 3 years, 11 months ago
- 075df92 security/intel/stm: Fix size_t printf format error by Eugene D Myers · 4 years ago
- f91bcb3 src/security: Drop unneeded empty lines by Elyes HAOUAS · 4 years ago
- c07fb75 security/tpm/tss/tcg-2.0: add const to marshalling functions by Caveh Jalali · 4 years ago
- 803bd3c security/intel/txt/getsec.c: Do not check lock bit by Angel Pons · 4 years ago
- 7fdd1fa security/intel/txt: Add missing definitions by Angel Pons · 4 years ago
- dcae807 drivers/spi/tpm: Enable long cr50 ready pulses for Tiger Lake systems by Jes Klinke · 4 years, 1 month ago
- ec17902 src: Remove unused 'include <lib.h>' by Elyes HAOUAS · 4 years, 1 month ago
- abfacd8 src: Remove unused 'include <boot_device.h>' by Elyes HAOUAS · 4 years, 2 months ago
- 77025b3 security/vboot/Makefile.inc: Update regions-for-file function by Sridhar Siricilla · 4 years, 1 month ago
- 2f1739a security/intel/txt: Fix variable MTRR handling by Angel Pons · 4 years, 1 month ago
- 1fc43aa security/intel/txt: Allow using CF9 reset, too by Angel Pons · 4 years, 1 month ago
- 536e965 security/intel/txt: Avoid shifting by a negative value by John Zhao · 4 years, 1 month ago
- 5f9f776 security/intel/txt: Add Intel TXT support by Philipp Deppenwiese · 6 years ago
- f48acbd src: Change BOOL CONFIG_ to CONFIG() in comments & strings by Martin Roth · 4 years, 1 month ago
- 8dcccea src: Remove unused 'include <cbmem.h>' by Elyes HAOUAS · 4 years, 1 month ago
- 002e5e0 security/intel/stm: Add missing <stdbool.h> by Angel Pons · 4 years, 1 month ago
- 3f5de1c security/vboot: ensure that NVMEM is saved on every kernel space write by Jett Rink · 4 years, 1 month ago
- 14aff23 src: Remove unused 'include <cpu/x86/msr.h>' by Elyes HAOUAS · 4 years, 1 month ago
- 8547823 src: Remove unused 'include <stdint.h> by Elyes HAOUAS · 4 years, 3 months ago
- 20d7bd0 security/vboot/secdata_tpm.c: Drop dead code by Angel Pons · 4 years, 1 month ago
- 649fc6b security/tpm/tss/tcg-1.2/tss.c: Drop dead code by Angel Pons · 4 years, 1 month ago
- 6303671 security/vboot: Allow files to go into only RW-A or RW-B region by Martin Roth · 4 years, 2 months ago
- 18a8ba4 arch/x86: Remove RELOCATABLE_RAMSTAGE by Kyösti Mälkki · 4 years, 2 months ago
- 542cffa drivers/pc80/tpm: Remove LPC_TPM by Kyösti Mälkki · 4 years, 3 months ago
- a890138 lockdown: Add hint for how to check for lockdown support in boot log by Daniel Gröber · 4 years, 3 months ago
- 16dbbeb lockdown: Add Kconfigs for SPI media protection mode by Daniel Gröber · 4 years, 3 months ago
- b8fba86 Kconfig: Escape variable to accommodate new Kconfig versions by Patrick Georgi · 4 years, 2 months ago
- ab673ce security/tpm: Change wording of variable names by Duncan Laurie · 4 years, 2 months ago
- 7336f97 treewide: Replace CONFIG(ARCH_xx) tests by Kyösti Mälkki · 4 years, 2 months ago
- 8a3a3c8 security/vboot: Add option to run verstage before bootblock by Martin Roth · 4 years, 4 months ago
- e83c56a src: Remove unused 'include <fmap.h>' by Elyes HAOUAS · 4 years, 3 months ago
- 0c154af src: Remove redundant includes by Elyes HAOUAS · 4 years, 3 months ago
- a3b02e2 src: Remove unused 'include <symbols.h>' by Elyes HAOUAS · 4 years, 3 months ago
- a895344 lockdown: Fix missing spaces in boot log by Daniel Gröber · 4 years, 3 months ago
- fcbbb91 Remove MAYBE_STATIC_BSS and ENV_STAGE_HAS_BSS_SECTION by Kyösti Mälkki · 4 years, 4 months ago
- fa8f567 security/tpm: Use SPDX identifiers by Jacob Garber · 4 years, 3 months ago
- aae1633 security/tpm/tspi: Fix handling of white space delimited list by harshit · 4 years, 3 months ago
- b74f45e src: Remove unused 'include <string.h>' by Elyes HAOUAS · 4 years, 3 months ago
- 5dd76fd src: Remove unused 'include <lib.h>' by Elyes HAOUAS · 4 years, 3 months ago
- c4b7027 src: Remove leading blank lines from SPDX header by Elyes HAOUAS · 4 years, 3 months ago
- e30c396 src: Remove unused '#include <stddef.h>' by Elyes HAOUAS · 4 years, 3 months ago
- f70bd99 src: Remove unused '#include <stdint.h>' by Elyes HAOUAS · 4 years, 3 months ago
- 593124d treewide: Convert more license headers to SPDX style by Patrick Georgi · 4 years, 3 months ago
- 6b5bc77 treewide: Remove "this file is part of" lines by Patrick Georgi · 4 years, 3 months ago
- c49d7a3 src/: Replace GPL boilerplate with SPDX headers by Patrick Georgi · 4 years, 3 months ago
- 71a1314 security: tcg-2.0: Ignore data payload for errors, fix Cr50 boot mode by Julius Werner · 4 years, 4 months ago
- f7b2fe6 {security,soc}/*/Kconfig: Replace GPLv2 long form headers with SPDX header by Elyes HAOUAS · 4 years, 3 months ago
- 8c92bcc vboot: Provide declaration for verstage_mainboard_early_init() by Furquan Shaikh · 4 years, 4 months ago
- 89ac87a security/vboot: Limit vboot verification code access to only verstage by Sridhar Siricilla · 4 years, 4 months ago
- 76cedd2 acpi: Move ACPI table support out of arch/x86 (3/5) by Furquan Shaikh · 4 years, 4 months ago
- f213f17 intel/stm: Drop now unneeded `num_cpus` param by Eugene D Myers · 4 years, 4 months ago
- 076605b intel/stm: Place resource list right below MSEG by Eugene D Myers · 4 years, 4 months ago
- 3032278 security/vboot: Convert reboot-related errors to vboot2-style by Yu-Ping Wu · 4 years, 4 months ago
- f0ebaf2 vboot: Always build secdata functions for romstage by Julius Werner · 4 years, 4 months ago
- 6093c50 security/lockdown: Write-protect WP_RO by Patrick Rudolph · 5 years ago
- 78feacc security: Add common boot media write protection by Patrick Rudolph · 4 years, 9 months ago
- 7bcd9a1 drivers/spi/tpm: Add support for non CR50 SPI TPM2 by Patrick Rudolph · 4 years, 5 months ago
- 21a4053 rules.h: Rename ENV_VERSTAGE to ENV_SEPARATE_VERSTAGE by Julius Werner · 4 years, 4 months ago
- d9f26ed vboot: Add permission check for kernel space by Daisuke Nojiri · 4 years, 4 months ago
- b81147c security/vboot, mb/google: Fix build errors by Patrick Georgi · 4 years, 4 months ago
- 3814116 vboot/secdata: remove retries, readback, and CRC check by Joel Kitching · 4 years, 4 months ago
- 97e4422 vboot: remove leftover TPM_PCR_GBB constants by Joel Kitching · 4 years, 4 months ago
- dff56a0 ec_sync: Run EFS2 in romstage by dnojiri · 4 years, 5 months ago
- 622c6b8 TPM: Add tlcl_cr50_get_boot_mode by dnojiri · 4 years, 5 months ago
- 374d7c2 Do not select USE_BLOBS by Nico Huber · 4 years, 5 months ago
- db2c8df assert.h: Simplify dead_code() by Nico Huber · 4 years, 5 months ago
- 7c45c83 assert.h: Add a tag parameter to dead_code() by Nico Huber · 4 years, 5 months ago
- 986d50e src/security: Use SPDX for GPL-2.0-only files by Angel Pons · 4 years, 5 months ago
- 23a82e8 security/tpm: Fix compile-time elimination for SEPARATE_VERSTAGE by Julius Werner · 4 years, 5 months ago