Re: [EXTERNAL] [edk2-devel] [PATCH v4 0/8] Need add a FSP binary measurement

Bret Barkelew <bret.barkelew@...>

Awesome. That gives me a little time. Thanks, Jiewen! And thanks for tracking the issue.


- Bret


From: Yao, Jiewen
Sent: Thursday, August 20, 2020 11:16 PM
To:; Bret Barkelew; Zhang, Qi1
Cc: Wang, Jian J; Wu, Hao A; Chiu, Chasel; Desimone, Nathaniel L; Zeng, Star
Subject: RE: [EXTERNAL] [edk2-devel] [PATCH v4 0/8] Need add a FSP binary measurement


We are in SFF.

I posted to temporarily.


Please let us know if you have any feedback.

I plan to post after the 202008 stable tag.


Thank you

Yao Jiewen



From: <> On Behalf Of Bret Barkelew via
Sent: Friday, August 21, 2020 1:56 PM
To:; Zhang, Qi1 <qi1.zhang@...>
Cc: Yao, Jiewen <jiewen.yao@...>; Wang, Jian J <>; Wu, Hao A <hao.a.wu@...>; Chiu, Chasel <chasel.chiu@...>; Desimone, Nathaniel L <nathaniel.l.desimone@...>; Zeng, Star <star.zeng@...>
Subject: Re: [EXTERNAL] [edk2-devel] [PATCH v4 0/8] Need add a FSP binary measurement


Does this live in a branch somewhere? I'd like to take a look at it and make sure it fully replaces our current custom solution.




- Bret


From: <> on behalf of Qi Zhang via <qi1.zhang@...>
Sent: Monday, August 17, 2020 11:26 PM
To: <>
Cc: Qi Zhang <qi1.zhang@...>; Yao, Jiewen <jiewen.yao@...>; Jian J Wang <>; Hao A Wu <hao.a.wu@...>; Chasel Chiu <chasel.chiu@...>; Desimone, Nathaniel L <nathaniel.l.desimone@...>; Star Zeng <star.zeng@...>
Subject: [EXTERNAL] [edk2-devel] [PATCH v4 0/8] Need add a FSP binary measurement


v4 change:
   rename FvEventLogRecordLib to TcgEventLogRecordLib.
v3 change:
  add a new lib FvEventLogRecordLib for gerneric code.


The EDKII BIOS calls FSP API in FSP Wrapper Pkg.
This FSP code need to be measured into TPM.

We need add a generic module in FSP Wrapper Pkg code to measure:
1) FSP-T, FSP-M, FSP-S in API mode.
2) FSP-T in Dispatch-mode. The FSP-M and FSP-S will be reported
   as standard FV and they will be measured by TCG-PEI.

Cc: Jiewen Yao <jiewen.yao@...>
Cc: Jian J Wang <>
Cc: Hao A Wu <hao.a.wu@...>
Cc: Chasel Chiu <chasel.chiu@...>
Cc: Nate DeSimone <nathaniel.l.desimone@...>
Cc: Star Zeng <star.zeng@...>
Cc: Qi Zhang <qi1.zhang@...>

Jiewen Yao (4):
  IntelFsp2WrapperPkg/FspMeasurementLib: Add header file.
  IntelFsp2WrapperPkg/FspMeasurementLib: Add BaseFspMeasurementLib.
  IntelFsp2WraperPkg/Fsp{m|s}WrapperPeim: Add FspBin measurement.
  IntelFsp2Wrapper/dsc: Add FspTpmMeasurementLib and

Qi Zhang (4):
  SecurityPkg/TcgEventLogRecordLib: add new lib for firmware measurement
  SecurityPkg/dsc: add FvEventLogRecordLib
  SecurityPkg/Tcg2: handle PRE HASH and LOG ONLY
  IntelFsp2WrapperPkg/dsc: add HashLib, Tpm2CommandLib and Tpm2DeviceLib

 .../FspmWrapperPeim/FspmWrapperPeim.c         |  90 ++++++-
 .../FspmWrapperPeim/FspmWrapperPeim.inf       |  20 +-
 .../FspsWrapperPeim/FspsWrapperPeim.c         |  86 +++++-
 .../FspsWrapperPeim/FspsWrapperPeim.inf       |  27 +-
 .../Include/Library/FspMeasurementLib.h       |  39 +++
 IntelFsp2WrapperPkg/IntelFsp2WrapperPkg.dec   |  17 ++
 IntelFsp2WrapperPkg/IntelFsp2WrapperPkg.dsc   |  10 +-
 .../BaseFspMeasurementLib.inf                 |  54 ++++
 .../BaseFspMeasurementLib/FspMeasurementLib.c | 248 ++++++++++++++++++
 .../Include/Library/TcgEventLogRecordLib.h    |  97 +++++++
 SecurityPkg/Include/Ppi/Tcg.h                 |   5 +
 .../TcgEventLogRecordLib.c                    | 197 ++++++++++++++
 .../TcgEventLogRecordLib.inf                  |  40 +++
 .../TcgEventLogRecordLib.uni                  |  17 ++
 SecurityPkg/SecurityPkg.dec                   |   3 +
 SecurityPkg/SecurityPkg.dsc                   |   2 +
 SecurityPkg/Tcg/Tcg2Pei/Tcg2Pei.c             |  12 +-
 17 files changed, 939 insertions(+), 25 deletions(-)
 create mode 100644 IntelFsp2WrapperPkg/Include/Library/FspMeasurementLib.h
 create mode 100644 IntelFsp2WrapperPkg/Library/BaseFspMeasurementLib/BaseFspMeasurementLib.inf
 create mode 100644 IntelFsp2WrapperPkg/Library/BaseFspMeasurementLib/FspMeasurementLib.c
 create mode 100644 SecurityPkg/Include/Library/TcgEventLogRecordLib.h
 create mode 100644 SecurityPkg/Library/TcgEventLogRecordLib/TcgEventLogRecordLib.c
 create mode 100644 SecurityPkg/Library/TcgEventLogRecordLib/TcgEventLogRecordLib.inf
 create mode 100644 SecurityPkg/Library/TcgEventLogRecordLib/TcgEventLogRecordLib.uni



Join { to automatically receive all group messages.