Add bases for TPM measuremement replications (small steps to forward sealing)
Nobody has claimed this yet.
- Dominant language
- Makefile
- Stars
- 1.6k
- Forks
- 211
- Avg merge
- 4d 21h
- Merged PRs (30d)
- 6
Description
1- Borrow https://github.com/TrenchBoot/secure-kernel-loader/blob/master/util.sh
2- wrap around TCPA log output (cbmem -L) to extract ROM content (cbfs extract + sha1 call from until.sh provided functions)
3- Have PCR2 measurements equivalent and be happy.
4- Extend PoC as needed.
5- Integrate and even maybe parse ROM to be flashed.
6- Extract those hashes from CI/local builds (global hash of coreboot hash is nice. Having hashes of everything built under hashes.txt per each build too. But having equivalent of what coreboot will store under PCR2 would be better.)
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reviewing util.sh and the referenced until.sh functions, then inspect the cbmem -L and cbfs extract steps described in the issue. The work is complete when PCR2 measurements are equivalent and the requested hashes can be extracted from CI or local builds, including the hashes.txt output.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- linux, shell
- Domain
- build-system, operating-systems, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100