tree 109598db349ecabe1bb4264c3fef415ba5da33ab
parent 5629aaac9f11dab4f9e031da0e9a36b60740ad08
author Masahisa Kojima <masahisa.kojima@linaro.org> 1628838759 +0900
committer Heinrich Schuchardt <xypron.glpk@gmx.de> 1628967281 +0200

efi_loader: add secure boot variable measurement

TCG PC Client PFP spec requires to measure the secure
boot policy before validating the UEFI image.
This commit adds the secure boot variable measurement
of "SecureBoot", "PK", "KEK", "db", "dbx", "dbt", and "dbr".

Note that this implementation assumes that secure boot
variables are pre-configured and not be set/updated in runtime.

Signed-off-by: Masahisa Kojima <masahisa.kojima@linaro.org>