google / gce-tcb-verifier

Reference code for creating and verifying a GCE firmware signed reference value message.
Apache License 2.0
9 stars 2 forks source link

Add SP800155 event generation. #20

Closed deeglaze closed 3 months ago

deeglaze commented 3 months ago

This produces another file alongside the snapshotted firmware and signature for the VMM to provide as a boot-services UEFI variable. The firmware will read this and extend the HOB list in the PEI stage to make Tcg2Dxe emit the EV_NO_ACTION events for verifiers to read and find where the reference values can be found.

Changes to existing marshaling logic comes from debugging an end-to-end test.