search

TrenchBoot / landing-zone

An open source implementation of an AMD-V Secure Loader.
GNU General Public License v2.0
23 stars 7 forks source link

build: move bootloader data out of measured block #18

Closed krystian-hebel closed 4 years ago

krystian-hebel commented 4 years ago

Bootloader must fill some information about the kernel (address, size). Those pieces of information are not constant. To keep hash values independent of memory layout, those variables are moved to a separate section out of SL (but still inside SLB). Length in SL header is no longer set to maximum possible value, it points to the end of constant data instead.

GRUB2 code must be changed accordingly.

Util for calculating initial PCR values after SKINIT is included (calc_skinit_lz_sums.sh).

Signed-off-by: Krystian Hebel krystian.hebel@3mdeb.com

andyhhp commented 4 years ago

No major problems. Couple of nice-to-haves