9elements / converged-security-suite

Converged Security Suite for Intel & AMD platform security features
https://www.9esec.io
BSD 3-Clause "New" or "Revised" License
59 stars 15 forks source link

Add amd measurements flow #255

Closed rihter007 closed 3 years ago

rihter007 commented 3 years ago

Add PSPDisabledLegacy & PSPEnabledLegacy flows Add detection of AMD firmware Add parsing of MP0C2PMsg37 register

TODO: move intel registers into registers/intel folder (in another PR)

rihter007 commented 3 years ago

Checked locally with the latest AMD firmware:

Set 0x -> 0x0000000000000000000000000000000000000003

Event 'pcdFirmwareVendor_measured_data': 1efb6b540c1d5540a4ad4ef4bf17b83a (sha1.digest) sha1.digest(0x 0000000000000000000000000000000000000003 C42FEDAD268200CB1D15F97841C344E79DAE3320) == 0x634B3E0535CC6A07546BAD47A462ABC427BA6D28

Event 'DXE': 000000000000000000000000000000007ac07354... (len: 7397376) (sha1.digest) sha1.digest(0x 634B3E0535CC6A07546BAD47A462ABC427BA6D28 F3C8D23FC5E66F863DEF8D071053B2987949BC50) == 0x40EAF1ECB357CBAAF67B52F6F6563B763464897A

Event 'separator': 00000000 (sha1.digest) sha1.digest(0x 40EAF1ECB357CBAAF67B52F6F6563B763464897A 9069CA78E7450A285173431B3E52C5C25299E473) == 0x89CDFDC579DCFB24DD282AE66C73867784D18575

Resulting PCR0: 89CDFDC579DCFB24DD282AE66C73867784D18575