search

Dasharo / dasharo-issues

The Dasharo issue tracker
https://dasharo.com/
24 stars 0 forks source link

Migrate coreboot TPM event log entries to UEFI payload #278

Closed miczyg1 closed 3 months ago

miczyg1 commented 1 year ago

Dasharo version Any

Dasharo variant Any

Affected component(s) or functionality TPM event log

Brief summary Currently, the coreboot event log entries are not propagated to the UEFI payload so all information what was measured to PCRs is lost when EDK2 TPM drivers kick in. This results in the inconsistent TPM event log with PCRs being returned from UEIF to OS.

How reproducible1 100%

How to reproduce

Steps to reproduce the behavior:

  1. Use tpm2 tools event log utility to calculate final PCRs values and compare them to PCR values taken from TPM.

Expected behavior Calculated PCR values are identical to those read from TPM.

Actual behavior Calculated PCR values are not identical to those read from TPM.

Screenshots None

Additional context None

Solutions you've tried None

macpijan commented 3 months ago

Seems to be a duplicate of: https://github.com/Dasharo/dasharo-issues/issues/455 - which provides more context and discussion already.