Changes in Kconfig

eb93f073 - tpm_crb: ffa_tpm: Implement driver compliant to CRB over FF-A

Wed, 12 Mar 2025 21:58:24 +0000

tpm_crb: ffa_tpm: Implement driver compliant to CRB over FF-AThe ARM specification TPM Service CRB over FF-A specification defines theFF-A messages to interact with a CRB-based TPM implemented as an FF-Asecure partition.See: https://developer.arm.com/documentation/den0138/latest/This driver is probed when a TPM Secure Partition is discovered by the FF-Asubsystem. It exposes APIs used by the TPM CRB driver to send notificationsto the TPM.[jarkko: Fine-tuned the commit message.]Acked-by: Sudeep Holla Reviewed-by: Jarkko Sakkinen Signed-off-by: Stuart Yoder Signed-off-by: Jarkko Sakkinen List of files: /linux-6.15/drivers/char/tpm/Kconfig

5578b434 - tpm: atmel: Drop PPC64 specific MMIO setup

Wed, 06 Nov 2024 18:17:42 +0000

tpm: atmel: Drop PPC64 specific MMIO setupThe PPC64 specific MMIO setup open codes DT address functions ratherthan using standard address parsing functions. The open-coded versionfails to handle any address translation and is not endian safe.I haven't found any evidence of what platform used this. The only thingthat turned up was a PPC405 platform, but that is 32-bit and PPC405support is being removed as well. CONFIG_TCG_ATMEL is not enabled forany powerpc config and never was. The support was added in 2005 andhasn't been touched since.Rather than try to modernize and fix this code, just remove it.[jarkko: fixed couple of style issues reported by checkpatch.pl --strict and put offset into parentheses in the macro declarations.]Signed-off-by: Rob Herring (Arm) Acked-by: Michael Ellerman Reviewed-by: Jarkko Sakkinen Signed-off-by: Jarkko Sakkinen List of files: /linux-6.15/drivers/char/tpm/Kconfig

d3e43a8f - tpm: Enable TCG_TPM2_HMAC by default only for X86_64

Tue, 28 May 2024 09:58:41 +0000

tpm: Enable TCG_TPM2_HMAC by default only for X86_64Given the not fully root caused performance issues on non-x86 platforms,enable the feature by default only for x86-64. That is the platform itbrings the most value and has gone most of the QA. Can be reconsideredlater and can be obviously opt-in enabled too on any arch.Link: https://lore.kernel.org/linux-integrity/bf67346ef623ff3c452c4f968b7d900911e250c3.camel@gmail.com/#tSigned-off-by: Jarkko Sakkinen List of files: /linux-6.15/drivers/char/tpm/Kconfig

699e3efd - tpm: Add HMAC session start and end functions

Mon, 29 Apr 2024 20:28:03 +0000

tpm: Add HMAC session start and end functionsAdd session based HMAC authentication plus parameter decryption andresponse encryption using AES. The basic design is to segregate allthe nasty crypto, hash and hmac code into tpm2-sessions.c and export ausable API. The API first of all starts off by gaining a session withtpm2_start_auth_session() which initiates a session with the TPM andallocates an opaque tpm2_auth structure to handle the sessionparameters. The design is that session use will be single threadedfrom start to finish under the ops lock, so the tpm2_auth structure isstored in struct tpm2_chip to simpify the externally visible API.The session can be ended with tpm2_end_auth_session() which isdesigned only to be used in error legs. Ordinarily the furthersession API (future patches) will end or continue the sessionappropriately without having to call this.Signed-off-by: James Bottomley Reviewed-by: Ard Biesheuvel # crypto API partsReviewed-by: Jarkko Sakkinen Tested-by: Jarkko Sakkinen Signed-off-by: Jarkko Sakkinen List of files: /linux-6.15/drivers/char/tpm/Kconfig

033ee84e - tpm: Add TCG mandated Key Derivation Functions (KDFs)

Mon, 29 Apr 2024 20:28:02 +0000

tpm: Add TCG mandated Key Derivation Functions (KDFs)The TCG mandates two Key derivation functions called KDFa and KDFeused to derive keys from seeds and elliptic curve points respectively.The definitions for these functions are found in the TPM 2.0 LibrarySpecification Part 1 - Architecture Guidehttps://trustedcomputinggroup.org/resource/tpm-library-specification/Implement a cut down version of each of these functions sufficient tosupport the key derivation needs of HMAC sessions.Signed-off-by: James Bottomley Reviewed-by: Jarkko Sakkinen Tested-by: Jarkko Sakkinen Signed-off-by: Jarkko Sakkinen List of files: /linux-6.15/drivers/char/tpm/Kconfig

d2add27c - tpm: Add NULL primary creation

Mon, 29 Apr 2024 20:28:01 +0000

tpm: Add NULL primary creationThe session handling code uses a "salted" session, meaning a sessionwhose salt is encrypted to the public part of another TPM key so anobserver cannot obtain it (and thus deduce the session keys). Thispatch creates and context saves in the tpm_chip area the primary keyof the NULL hierarchy for this purpose.[jarkko@kernel.org: fixed documentation errors]Signed-off-by: James Bottomley Reviewed-by: Jarkko Sakkinen Tested-by: Jarkko Sakkinen Signed-off-by: Jarkko Sakkinen List of files: /linux-6.15/drivers/char/tpm/Kconfig

8516b23a - char: tpm: Keep TPM_INF_IO_PORT define for HAS_IOPORT=n

Mon, 22 Apr 2024 12:37:11 +0000

char: tpm: Keep TPM_INF_IO_PORT define for HAS_IOPORT=nThe recent change to handle HAS_IOPORT removed the TPM_INF_IO_PORTdefine for the HAS_IOPORT=n case despite the define being used insections of code not covered by the same ifdef check. This was missedbecause at the moment TCG_INFINEON indirectly depends on HAS_IOPORT viaPNP which depends on ACPI || ISA. As TCG_INFINEON does in principlesupport MMIO only use add it for COMPILE_TEST to cover the HAS_IOPORT=ncase.Link: https://lore.kernel.org/lkml/9d9fa267-067e-421b-9a39-aa178b913298@app.fastmail.com/Fixes: dab56f80e7f9 ("char: tpm: handle HAS_IOPORT dependencies")Signed-off-by: Niklas Schnelle Reviewed-by: Jarkko Sakkinen Signed-off-by: Jarkko Sakkinen List of files: /linux-6.15/drivers/char/tpm/Kconfig

61551536 - char: tpm: handle HAS_IOPORT dependencies

Thu, 04 Apr 2024 10:58:40 +0000

char: tpm: handle HAS_IOPORT dependenciesIn a future patch HAS_IOPORT=n will disable inb()/outb() and friends atcompile time. We thus need to add this dependency and ifdef sections ofcode using inb()/outb() as alternative access methods.Reviewed-by: Jarkko Sakkinen Co-developed-by: Arnd Bergmann Signed-off-by: Arnd Bergmann Signed-off-by: Niklas Schnelle Acked-by: Jarkko Sakkinen Signed-off-by: Jarkko Sakkinen List of files: /linux-6.15/drivers/char/tpm/Kconfig

bbc23a07 - tpm: Add tpm_tis_i2c backend for tpm_tis_core

Wed, 08 Jun 2022 17:31:13 +0000

tpm: Add tpm_tis_i2c backend for tpm_tis_coreImplement the TCG I2C Interface driver, as specified in the TCG PCClient Platform TPM Profile (PTP) specification for TPM 2.0 v1.04revision 14, section 8, I2C Interface Definition.This driver supports Guard Times. That is, if required by the TPM, thedriver has to wait by a vendor-specific time after each I2C read/write.The specific time is read from the TPM_I2C_INTERFACE_CAPABILITY register.Unfortunately, the TCG specified almost but not quite compatibleregister addresses. Therefore, the TIS register addresses need to bemapped to I2C ones. The locality is stripped because for now, onlylocality 0 is supported.Add a sanity check to I2C reads of e.g. TPM_ACCESS and TPM_STS. This isto detect communication errors and issues due to non-standard behaviour(E.g. the clock stretching quirk in the BCM2835, see 4dbfb5f4401f). Incase the sanity check fails, attempt a retry.Co-developed-by: Johannes Holland Signed-off-by: Johannes Holland Co-developed-by: Amir Mizinski Signed-off-by: Amir Mizinski Signed-off-by: Alexander Steffen Reviewed-by: Jarkko Sakkinen Signed-off-by: Jarkko Sakkinen List of files: /linux-6.15/drivers/char/tpm/Kconfig

4091c004 - tpm: tis: Kconfig: Add helper dependency on COMPILE_TEST

Thu, 26 Aug 2021 01:10:12 +0000

tpm: tis: Kconfig: Add helper dependency on COMPILE_TESTCOMPILE_TEST is helpful to find compilation errors in other platform(e.g.X86).In this case, the support of COMPILE_TEST is added, so this module couldbe compiled in other platform(e.g.X86), without ARCH_SYNQUACER configuration.Signed-off-by: Cai Huoqing Reviewed-by: Jarkko Sakkinen Signed-off-by: Jarkko Sakkinen List of files: /linux-6.15/drivers/char/tpm/Kconfig

847fdae1 - char: tpm: Kconfig: remove bad i2c cr50 select

Tue, 27 Jul 2021 17:13:12 +0000

char: tpm: Kconfig: remove bad i2c cr50 selectThis fixes a minor bug which went unnoticed during the initialdriver upstreaming review: TCG_CR50 does not exist in mainlinekernels, so remove it.Fixes: 3a253caaad11 ("char: tpm: add i2c driver for cr50")Cc: stable@vger.kernel.orgReviewed-by: Jarkko Sakkinen Signed-off-by: Adrian Ratiu Signed-off-by: Jarkko Sakkinen List of files: /linux-6.15/drivers/char/tpm/Kconfig

3a253caa - char: tpm: add i2c driver for cr50

Mon, 07 Dec 2020 14:20:16 +0000

char: tpm: add i2c driver for cr50Add TPM 2.0 compatible I2C interface for chips with cr50 firmware.The firmware running on the currently supported H1 MCU requires aspecial driver to handle its specific protocol, and this makes itunsuitable to use tpm_tis_core_* and instead it must implement theunderlying TPM protocol similar to the other I2C TPM drivers.- All 4 bytes of status register must be read/written at once.- FIFO and burst count is limited to 63 and must be drained by AP.- Provides an interrupt to indicate when read response data is readyand when the TPM is finished processing write data.This driver is based on the existing infineon I2C TPM driver, whichmost closely matches the cr50 i2c protocol behavior.Signed-off-by: Duncan Laurie Signed-off-by: Stephen Boyd Signed-off-by: Fabien Lahoudere Signed-off-by: Adrian Ratiu Tested-by: Adrian Ratiu Reviewed-by: Jarkko Sakkinen Signed-off-by: Jarkko Sakkinen List of files: /linux-6.15/drivers/char/tpm/Kconfig

d5ae56a4 - tpm: tis: add support for MMIO TPM on SynQuacer

Tue, 28 Jul 2020 03:14:31 +0000

tpm: tis: add support for MMIO TPM on SynQuacerWhen fitted, the SynQuacer platform exposes its SPI TPM via a MMIOwindow that is backed by the SPI command sequencer in the SPI buscontroller. This arrangement has the limitation that only byte sizeaccesses are supported, and so we'll need to provide a separate modulethat take this into account.Signed-off-by: Ard Biesheuvel Signed-off-by: Masahisa Kojima Reviewed-by: Jarkko Sakkinen Signed-off-by: Jarkko Sakkinen List of files: /linux-6.15/drivers/char/tpm/Kconfig

a7f7f624 - treewide: replace '---help---' in Kconfig files with 'help'

Sat, 13 Jun 2020 16:50:22 +0000

treewide: replace '---help---' in Kconfig files with 'help'Since commit 84af7a6194e4 ("checkpatch: kconfig: prefer 'help' over'---help---'"), the number of '---help---' has been graduallydecreasing, but there are still more than 2400 instances.This commit finishes the conversion. While I touched the lines,I also fixed the indentation.There are a variety of indentation styles found. a) 4 spaces + '---help---' b) 7 spaces + '---help---' c) 8 spaces + '---help---' d) 1 space + 1 tab + '---help---' e) 1 tab + '---help---' (correct indentation) f) 1 tab + 1 space + '---help---' g) 1 tab + 2 spaces + '---help---'In order to convert all of them to 1 tab + 'help', I ran thefollowing commend: $ find . -name 'Kconfig*' | xargs sed -i 's/^[[:space:]]*---help---/\thelp/'Signed-off-by: Masahiro Yamada List of files: /linux-6.15/drivers/char/tpm/Kconfig

797c0113 - tpm: tpm_tis_spi: Support cr50 devices

Fri, 20 Sep 2019 18:32:38 +0000

tpm: tpm_tis_spi: Support cr50 devicesAdd TPM2.0 PTP FIFO compatible SPI interface for chips with Cr50firmware. The firmware running on the currently supported H1 SecureMicrocontroller requires a special driver to handle its specifics: - need to ensure a certain delay between SPI transactions, or else the chip may miss some part of the next transaction - if there is no SPI activity for some time, it may go to sleep, and needs to be waken up before sending further commands - access to vendor-specific registersCr50 firmware has a requirement to wait for the TPM to wakeup beforesending commands over the SPI bus. Otherwise, the firmware could be indeep sleep and not respond. The method to wait for the device to wakeupis slightly different than the usual flow control mechanism described inthe TCG SPI spec. Add a completion to tpm_tis_spi_transfer() before westart a SPI transfer so we can keep track of the last time the TPMdriver accessed the SPI bus to support the flow control mechanism.Split the cr50 logic off into a different file to keep it out of thenormal code flow of the existing SPI driver while making it all part ofthe same module when the code is optionally compiled into the samemodule. Export a new function, tpm_tis_spi_init(), and the associatedread/write/transfer APIs so that we can do this. Make the cr50 code wrapthe tpm_tis_spi_phy struct with its own struct to override the behaviorof tpm_tis_spi_transfer() by supplying a custom flow control hook. Thisshares the most code between the core driver and the cr50 supportwithout combining everything into the core driver or exporting modulesymbols.Signed-off-by: Andrey Pronin Cc: Andrey Pronin Cc: Duncan Laurie Cc: Jason Gunthorpe Cc: Arnd Bergmann Cc: Greg Kroah-Hartman Cc: Guenter Roeck Cc: Alexander Steffen Cc: Heiko Stuebner [swboyd@chromium.org: Replace boilerplate with SPDX tag, dropsuspended bit and remove ifdef checks in cr50.h, migrate to functionsexported in tpm_tis_spi.h, combine into one module instead of two]Signed-off-by: Stephen Boyd Tested-by: Heiko Stuebner Reviewed-by: Heiko Stuebner Reviewed-by: Jarkko Sakkinen Signed-off-by: Jarkko Sakkinen List of files: /linux-6.15/drivers/char/tpm/Kconfig

09e57483 - tpm/tpm_ftpm_tee: A driver for firmware TPM running inside TEE

Fri, 05 Jul 2019 20:47:45 +0000

tpm/tpm_ftpm_tee: A driver for firmware TPM running inside TEEAdd a driver for a firmware TPM running inside TEE.Documentation of the firmware TPM:https://www.microsoft.com/en-us/research/publication/ftpm-software-implementation-tpm-chip/ .Implementation of the firmware TPM:https://github.com/Microsoft/ms-tpm-20-ref/tree/master/Samples/ARM32-FirmwareTPMTested-by: Ilias Apalodimas Tested-by: Thirupathaiah Annapureddy Signed-off-by: Thirupathaiah Annapureddy Co-authored-by: Sasha Levin Signed-off-by: Sasha Levin Reviewed-by: Jarkko Sakkinen Signed-off-by: Jarkko Sakkinen List of files: /linux-6.15/drivers/char/tpm/Kconfig

ec8f24b7 - treewide: Add SPDX license identifier - Makefile/Kconfig

Sun, 19 May 2019 12:07:45 +0000

treewide: Add SPDX license identifier - Makefile/KconfigAdd SPDX license identifiers to all Make/Kconfig files which: - Have no license information of any formThese files fall under the project license, GPL v2 only. The resulting SPDXlicense identifier is: GPL-2.0-onlySigned-off-by: Thomas Gleixner Signed-off-by: Greg Kroah-Hartman List of files: /linux-6.15/drivers/char/tpm/Kconfig

5dd50aae - Make anon_inodes unconditional

Mon, 05 Nov 2018 17:40:31 +0000

Make anon_inodes unconditionalMake the anon_inodes facility unconditional so that it can be used by coreVFS code and pidfd code.Signed-off-by: David Howells Signed-off-by: Al Viro [christian@brauner.io: adapt commit message to mention pidfds]Signed-off-by: Christian Brauner List of files: /linux-6.15/drivers/char/tpm/Kconfig

dadd2299 - Make anon_inodes unconditional

Mon, 05 Nov 2018 17:40:31 +0000

Make anon_inodes unconditionalMake the anon_inodes facility unconditional so that it can be used by coreVFS code.Signed-off-by: David Howells Signed-off-by: Al Viro List of files: /linux-6.15/drivers/char/tpm/Kconfig

2f7d8dbb - tpm: Make SECURITYFS a weak dependency

Mon, 03 Sep 2018 19:51:51 +0000

tpm: Make SECURITYFS a weak dependencyWhile having SECURITYFS enabled for the tpm subsystem is beneficial inmost cases, it is not strictly necessary to have it enabled at all.Especially on platforms without any boot firmware integration of the TPM(e.g. raspberry pi) it does not add any value for the tpm subsystem,as there is no eventlog present.By turning it from 'select' to 'imply' it still gets selected perdefault, but enables users who want to save some kb of ram by turningSECURITYFS off.Signed-off-by: Peter Huewe Reviewed-by: Jarkko Sakkinen Signed-off-by: Jarkko Sakkinen List of files: /linux-6.15/drivers/char/tpm/Kconfig