Changes in Makefile

eb93f073 - tpm_crb: ffa_tpm: Implement driver compliant to CRB over FF-A

Wed, 12 Mar 2025 21:58:24 +0000

tpm_crb: ffa_tpm: Implement driver compliant to CRB over FF-AThe ARM specification TPM Service CRB over FF-A specification defines theFF-A messages to interact with a CRB-based TPM implemented as an FF-Asecure partition.See: https://developer.arm.com/documentation/den0138/latest/This driver is probed when a TPM Secure Partition is discovered by the FF-Asubsystem. It exposes APIs used by the TPM CRB driver to send notificationsto the TPM.[jarkko: Fine-tuned the commit message.]Acked-by: Sudeep Holla Reviewed-by: Jarkko Sakkinen Signed-off-by: Stuart Yoder Signed-off-by: Jarkko Sakkinen List of files: /linux-6.15/drivers/char/tpm/Makefile

a61809a3 - tpm: Address !chip->auth in tpm_buf_append_name()

Wed, 03 Jul 2024 15:33:14 +0000

tpm: Address !chip->auth in tpm_buf_append_name()Unless tpm_chip_bootstrap() was called by the driver, !chip->auth cancause a null derefence in tpm_buf_append_name(). Thus, address!chip->auth in tpm_buf_append_name() and remove the fallbackimplementation for !TCG_TPM2_HMAC.Cc: stable@vger.kernel.org # v6.10+Reported-by: Stefan Berger Closes: https://lore.kernel.org/linux-integrity/20240617193408.1234365-1-stefanb@linux.ibm.com/Fixes: d0a25bb961e6 ("tpm: Add HMAC session name/handle append")Tested-by: Michael Ellerman # ppcSigned-off-by: Jarkko Sakkinen List of files: /linux-6.15/drivers/char/tpm/Makefile

d2add27c - tpm: Add NULL primary creation

Mon, 29 Apr 2024 20:28:01 +0000

tpm: Add NULL primary creationThe session handling code uses a "salted" session, meaning a sessionwhose salt is encrypted to the public part of another TPM key so anobserver cannot obtain it (and thus deduce the session keys). Thispatch creates and context saves in the tpm_chip area the primary keyof the NULL hierarchy for this purpose.[jarkko@kernel.org: fixed documentation errors]Signed-off-by: James Bottomley Reviewed-by: Jarkko Sakkinen Tested-by: Jarkko Sakkinen Signed-off-by: Jarkko Sakkinen List of files: /linux-6.15/drivers/char/tpm/Makefile

17d89b2e - tpm: Move buffer handling from static inlines to real functions

Mon, 29 Apr 2024 20:27:52 +0000

tpm: Move buffer handling from static inlines to real functionsseparate out the tpm_buf_... handling functions from static inlines intpm.h and move them to their own tpm-buf.c file. This is a precursorto adding new functions for other TPM type handling because the amountof code will grow from the current 70 lines in tpm.h to about 200lines when the additions are done. 200 lines of inline functions is abit too much to keep in a header file.Signed-off-by: James Bottomley Signed-off-by: James Bottomley Reviewed-by: Stefan Berger Reviewed-by: Jarkko Sakkinen Tested-by: Jarkko Sakkinen Signed-off-by: Jarkko Sakkinen List of files: /linux-6.15/drivers/char/tpm/Makefile

bbc23a07 - tpm: Add tpm_tis_i2c backend for tpm_tis_core

Wed, 08 Jun 2022 17:31:13 +0000

tpm: Add tpm_tis_i2c backend for tpm_tis_coreImplement the TCG I2C Interface driver, as specified in the TCG PCClient Platform TPM Profile (PTP) specification for TPM 2.0 v1.04revision 14, section 8, I2C Interface Definition.This driver supports Guard Times. That is, if required by the TPM, thedriver has to wait by a vendor-specific time after each I2C read/write.The specific time is read from the TPM_I2C_INTERFACE_CAPABILITY register.Unfortunately, the TCG specified almost but not quite compatibleregister addresses. Therefore, the TIS register addresses need to bemapped to I2C ones. The locality is stripped because for now, onlylocality 0 is supported.Add a sanity check to I2C reads of e.g. TPM_ACCESS and TPM_STS. This isto detect communication errors and issues due to non-standard behaviour(E.g. the clock stretching quirk in the BCM2835, see 4dbfb5f4401f). Incase the sanity check fails, attempt a retry.Co-developed-by: Johannes Holland Signed-off-by: Johannes Holland Co-developed-by: Amir Mizinski Signed-off-by: Amir Mizinski Signed-off-by: Alexander Steffen Reviewed-by: Jarkko Sakkinen Signed-off-by: Jarkko Sakkinen List of files: /linux-6.15/drivers/char/tpm/Makefile

3a253caa - char: tpm: add i2c driver for cr50

Mon, 07 Dec 2020 14:20:16 +0000

char: tpm: add i2c driver for cr50Add TPM 2.0 compatible I2C interface for chips with cr50 firmware.The firmware running on the currently supported H1 MCU requires aspecial driver to handle its specific protocol, and this makes itunsuitable to use tpm_tis_core_* and instead it must implement theunderlying TPM protocol similar to the other I2C TPM drivers.- All 4 bytes of status register must be read/written at once.- FIFO and burst count is limited to 63 and must be drained by AP.- Provides an interrupt to indicate when read response data is readyand when the TPM is finished processing write data.This driver is based on the existing infineon I2C TPM driver, whichmost closely matches the cr50 i2c protocol behavior.Signed-off-by: Duncan Laurie Signed-off-by: Stephen Boyd Signed-off-by: Fabien Lahoudere Signed-off-by: Adrian Ratiu Tested-by: Adrian Ratiu Reviewed-by: Jarkko Sakkinen Signed-off-by: Jarkko Sakkinen List of files: /linux-6.15/drivers/char/tpm/Makefile

d5ae56a4 - tpm: tis: add support for MMIO TPM on SynQuacer

Tue, 28 Jul 2020 03:14:31 +0000

tpm: tis: add support for MMIO TPM on SynQuacerWhen fitted, the SynQuacer platform exposes its SPI TPM via a MMIOwindow that is backed by the SPI command sequencer in the SPI buscontroller. This arrangement has the limitation that only byte sizeaccesses are supported, and so we'll need to provide a separate modulethat take this into account.Signed-off-by: Ard Biesheuvel Signed-off-by: Masahisa Kojima Reviewed-by: Jarkko Sakkinen Signed-off-by: Jarkko Sakkinen List of files: /linux-6.15/drivers/char/tpm/Makefile

faaca0a0 - tpm: Revert tpm_tis_spi_mod.ko to tpm_tis_spi.ko.

Tue, 04 Feb 2020 12:16:27 +0000

tpm: Revert tpm_tis_spi_mod.ko to tpm_tis_spi.ko.Revert tpm_tis_spi_mod.ko back to tpm_tis_spi.ko as the rename couldbreak user space scripts. This can be achieved by renaming tpm_tis_spi.cas tpm_tis_spi_main.c. Then tpm_tis_spi-y can be used inside themakefile.Cc: Andrey Pronin Cc: Stephen Boyd Cc: stable@vger.kernel.org # 5.5.xFixes: 797c0113c9a4 ("tpm: tpm_tis_spi: Support cr50 devices")Reported-by: Alexander Steffen Tested-by: Alexander Steffen Reviewed-by: Stephen Boyd Signed-off-by: Jarkko Sakkinen List of files: /linux-6.15/drivers/char/tpm/Makefile

797c0113 - tpm: tpm_tis_spi: Support cr50 devices

Fri, 20 Sep 2019 18:32:38 +0000

tpm: tpm_tis_spi: Support cr50 devicesAdd TPM2.0 PTP FIFO compatible SPI interface for chips with Cr50firmware. The firmware running on the currently supported H1 SecureMicrocontroller requires a special driver to handle its specifics: - need to ensure a certain delay between SPI transactions, or else the chip may miss some part of the next transaction - if there is no SPI activity for some time, it may go to sleep, and needs to be waken up before sending further commands - access to vendor-specific registersCr50 firmware has a requirement to wait for the TPM to wakeup beforesending commands over the SPI bus. Otherwise, the firmware could be indeep sleep and not respond. The method to wait for the device to wakeupis slightly different than the usual flow control mechanism described inthe TCG SPI spec. Add a completion to tpm_tis_spi_transfer() before westart a SPI transfer so we can keep track of the last time the TPMdriver accessed the SPI bus to support the flow control mechanism.Split the cr50 logic off into a different file to keep it out of thenormal code flow of the existing SPI driver while making it all part ofthe same module when the code is optionally compiled into the samemodule. Export a new function, tpm_tis_spi_init(), and the associatedread/write/transfer APIs so that we can do this. Make the cr50 code wrapthe tpm_tis_spi_phy struct with its own struct to override the behaviorof tpm_tis_spi_transfer() by supplying a custom flow control hook. Thisshares the most code between the core driver and the cr50 supportwithout combining everything into the core driver or exporting modulesymbols.Signed-off-by: Andrey Pronin Cc: Andrey Pronin Cc: Duncan Laurie Cc: Jason Gunthorpe Cc: Arnd Bergmann Cc: Greg Kroah-Hartman Cc: Guenter Roeck Cc: Alexander Steffen Cc: Heiko Stuebner [swboyd@chromium.org: Replace boilerplate with SPDX tag, dropsuspended bit and remove ifdef checks in cr50.h, migrate to functionsexported in tpm_tis_spi.h, combine into one module instead of two]Signed-off-by: Stephen Boyd Tested-by: Heiko Stuebner Reviewed-by: Heiko Stuebner Reviewed-by: Jarkko Sakkinen Signed-off-by: Jarkko Sakkinen List of files: /linux-6.15/drivers/char/tpm/Makefile

09e57483 - tpm/tpm_ftpm_tee: A driver for firmware TPM running inside TEE

Fri, 05 Jul 2019 20:47:45 +0000

tpm/tpm_ftpm_tee: A driver for firmware TPM running inside TEEAdd a driver for a firmware TPM running inside TEE.Documentation of the firmware TPM:https://www.microsoft.com/en-us/research/publication/ftpm-software-implementation-tpm-chip/ .Implementation of the firmware TPM:https://github.com/Microsoft/ms-tpm-20-ref/tree/master/Samples/ARM32-FirmwareTPMTested-by: Ilias Apalodimas Tested-by: Thirupathaiah Annapureddy Signed-off-by: Thirupathaiah Annapureddy Co-authored-by: Sasha Levin Signed-off-by: Sasha Levin Reviewed-by: Jarkko Sakkinen Signed-off-by: Jarkko Sakkinen List of files: /linux-6.15/drivers/char/tpm/Makefile

b2d6e6de - tpm: factor out tpm 1.x duration calculation to tpm1-cmd.c

Fri, 19 Oct 2018 18:22:50 +0000

tpm: factor out tpm 1.x duration calculation to tpm1-cmd.cFactor out TPM 1.x commands calculation into tpm1-cmd.c file.and change the prefix from tpm_ to tpm1_.No functional change is done here.Signed-off-by: Tomas Winkler Tested-by: Jarkko Sakkinen Reviewed-by: Jarkko Sakkinen Signed-off-by: Jarkko Sakkinen List of files: /linux-6.15/drivers/char/tpm/Makefile

100b16a6 - tpm: sort objects in the Makefile

Fri, 19 Oct 2018 18:22:49 +0000

tpm: sort objects in the MakefileMake the tpm Makefile a bit more in order by puttingobjects in one column.Signed-off-by: Tomas Winkler Tested-by: Jarkko Sakkinen Reviewed-by: Jarkko Sakkinen Signed-off-by: Jarkko Sakkinen List of files: /linux-6.15/drivers/char/tpm/Makefile

9b01b535 - tpm: Move shared eventlog functions to common.c

Thu, 12 Apr 2018 10:13:49 +0000

tpm: Move shared eventlog functions to common.cFunctions and structures specific to TPM1 are renamed from tpm* to tpm1*.Signed-off-by: Thiebaud Weksteen Suggested-by: Jarkko Sakkinen Reviewed-by: Jarkko Sakkinen Tested-by: Jarkko Sakkinen Signed-off-by: Jarkko Sakkinen List of files: /linux-6.15/drivers/char/tpm/Makefile

0bfb2374 - tpm: Move eventlog files to a subdirectory

Thu, 12 Apr 2018 10:13:48 +0000

tpm: Move eventlog files to a subdirectorySigned-off-by: Thiebaud Weksteen Suggested-by: Jarkko Sakkinen Reviewed-by: Jarkko Sakkinen Tested-by: Jarkko Sakkinen Signed-off-by: Jarkko Sakkinen List of files: /linux-6.15/drivers/char/tpm/Makefile

58cc1e4f - tpm: parse TPM event logs based on EFI table

Wed, 20 Sep 2017 08:13:40 +0000

tpm: parse TPM event logs based on EFI tableIf we are not able to retrieve the TPM event logs from the ACPI table,check the EFI configuration table (Linux-specific GUID).The format version of the log is now returned by the provider function.Signed-off-by: Thiebaud Weksteen Reviewed-by: Jason Gunthorpe Reviewed-by: Javier Martinez Canillas Tested-by: Javier Martinez Canillas Tested-by: Jarkko Sakkinen Reviewed-by: Jarkko Sakkinen Signed-off-by: Jarkko Sakkinen List of files: /linux-6.15/drivers/char/tpm/Makefile

67cb8e11 - tpm: rename event log provider files

Wed, 20 Sep 2017 08:13:37 +0000

tpm: rename event log provider filesRename the current TPM Event Log provider files (ACPI and OF)for clarity.Signed-off-by: Thiebaud Weksteen Reviewed-by: Jarkko Sakkinen Reviewed-by: Javier Martinez Canillas Tested-by: Javier Martinez Canillas Tested-by: Jarkko Sakkinen Reviewed-by: Jarkko Sakkinen Signed-off-by: Jarkko Sakkinen List of files: /linux-6.15/drivers/char/tpm/Makefile

b2441318 - License cleanup: add SPDX GPL-2.0 license identifier to files with no license

Wed, 01 Nov 2017 14:07:57 +0000

License cleanup: add SPDX GPL-2.0 license identifier to files with no licenseMany source files in the tree are missing licensing information, whichmakes it harder for compliance tools to determine the correct license.By default all files without license information are under the defaultlicense of the kernel, which is GPL version 2.Update the files which contain no license information with the 'GPL-2.0'SPDX license identifier. The SPDX identifier is a legally bindingshorthand, which can be used instead of the full boiler plate text.This patch is based on work done by Thomas Gleixner and Kate Stewart andPhilippe Ombredanne.How this work was done:Patches were generated and checked against linux-4.14-rc6 for a subset ofthe use cases: - file had no licensing information it it. - file was a */uapi/* one with no licensing information in it, - file was a */uapi/* one with existing licensing information,Further patches will be generated in subsequent months to fix up caseswhere non-standard license headers were used, and references to licensehad to be inferred by heuristics based on keywords.The analysis to determine which SPDX License Identifier to be applied toa file was done in a spreadsheet of side by side results from of theoutput of two independent scanners (ScanCode & Windriver) producing SPDXtag:value files created by Philippe Ombredanne. Philippe prepared thebase worksheet, and did an initial spot review of a few 1000 files.The 4.13 kernel was the starting point of the analysis with 60,537 filesassessed. Kate Stewart did a file by file comparison of the scannerresults in the spreadsheet to determine which SPDX license identifier(s)to be applied to the file. She confirmed any determination that was notimmediately clear with lawyers working with the Linux Foundation.Criteria used to select files for SPDX license identifier tagging was: - Files considered eligible had to be source code files. - Make and config files were included as candidates if they contained >5 lines of source - File already had some variant of a license header in it (even if <5 lines).All documentation files were explicitly excluded.The following heuristics were used to determine which SPDX licenseidentifiers to apply. - when both scanners couldn't find any license traces, file was considered to have no license information in it, and the top level COPYING file license applied. For non */uapi/* files that summary was: SPDX license identifier # files ---------------------------------------------------|------- GPL-2.0 11139 and resulted in the first patch in this series. If that file was a */uapi/* path one, it was "GPL-2.0 WITH Linux-syscall-note" otherwise it was "GPL-2.0". Results of that was: SPDX license identifier # files ---------------------------------------------------|------- GPL-2.0 WITH Linux-syscall-note 930 and resulted in the second patch in this series. - if a file had some form of licensing information in it, and was one of the */uapi/* ones, it was denoted with the Linux-syscall-note if any GPL family license was found in the file or had no licensing in it (per prior point). Results summary: SPDX license identifier # files ---------------------------------------------------|------ GPL-2.0 WITH Linux-syscall-note 270 GPL-2.0+ WITH Linux-syscall-note 169 ((GPL-2.0 WITH Linux-syscall-note) OR BSD-2-Clause) 21 ((GPL-2.0 WITH Linux-syscall-note) OR BSD-3-Clause) 17 LGPL-2.1+ WITH Linux-syscall-note 15 GPL-1.0+ WITH Linux-syscall-note 14 ((GPL-2.0+ WITH Linux-syscall-note) OR BSD-3-Clause) 5 LGPL-2.0+ WITH Linux-syscall-note 4 LGPL-2.1 WITH Linux-syscall-note 3 ((GPL-2.0 WITH Linux-syscall-note) OR MIT) 3 ((GPL-2.0 WITH Linux-syscall-note) AND MIT) 1 and that resulted in the third patch in this series. - when the two scanners agreed on the detected license(s), that became the concluded license(s). - when there was disagreement between the two scanners (one detected a license but the other didn't, or they both detected different licenses) a manual inspection of the file occurred. - In most cases a manual inspection of the information in the file resulted in a clear resolution of the license that should apply (and which scanner probably needed to revisit its heuristics). - When it was not immediately clear, the license identifier was confirmed with lawyers working with the Linux Foundation. - If there was any question as to the appropriate license identifier, the file was flagged for further research and to be revisited later in time.In total, over 70 hours of logged manual review was done on thespreadsheet to determine the SPDX license identifiers to apply to thesource files by Kate, Philippe, Thomas and, in some cases, confirmationby lawyers working with the Linux Foundation.Kate also obtained a third independent scan of the 4.13 code base fromFOSSology, and compared selected files where the other two scannersdisagreed against that SPDX file, to see if there was new insights. TheWindriver scanner is based on an older version of FOSSology in part, sothey are related.Thomas did random spot checks in about 500 files from the spreadsheetsfor the uapi headers and agreed with SPDX license identifier in thefiles he inspected. For the non-uapi files Thomas did random spot checksin about 15000 files.In initial set of patches against 4.14-rc6, 3 files were found to havecopy/paste license identifier errors, and have been fixed to reflect thecorrect identifier.Additionally Philippe spent 10 hours this week doing a detailed manualinspection and review of the 12,461 patched files from the initial patchversion early this week with: - a full scancode scan run, collecting the matched texts, detected license ids and scores - reviewing anything where there was a license detected (about 500+ files) to ensure that the applied SPDX license was correct - reviewing anything where there was no detection but the patch license was not GPL-2.0 WITH Linux-syscall-note to ensure that the applied SPDX license was correctThis produced a worksheet with 20 files needing minor correction. Thisworksheet was then exported into 3 different .csv files for thedifferent types of files to be modified.These .csv files were then reviewed by Greg. Thomas wrote a script toparse the csv files and add the proper SPDX tag to the file, in theformat that the file expected. This script was further refined by Gregbased on the output to detect more types of files automatically and todistinguish between header and source .c files (which need differentcomment types.) Finally Greg ran the script using the .csv files togenerate the patches.Reviewed-by: Kate Stewart Reviewed-by: Philippe Ombredanne Reviewed-by: Thomas Gleixner Signed-off-by: Greg Kroah-Hartman List of files: /linux-6.15/drivers/char/tpm/Makefile

fdc915f7 - tpm: expose spaces via a device link /dev/tpmrm

Tue, 03 Jan 2017 17:07:32 +0000

tpm: expose spaces via a device link /dev/tpmrmCurrently the tpm spaces are not exposed to userspace. Make thisexposure via a separate device, which can now be opened multiple timesbecause each read/write transaction goes separately via the space.Concurrency is protected by the chip->tpm_mutex for each read/writetransaction separately. The TPM is cleared of all transient objectsby the time the mutex is dropped, so there should be no interferencebetween the kernel and userspace.Signed-off-by: James Bottomley Tested-by: Jarkko Sakkinen Reviewed-by: Jarkko Sakkinen Signed-off-by: Jarkko Sakkinen List of files: /linux-6.15/drivers/char/tpm/Makefile

ecb38e2f - tpm: split out tpm-dev.c into tpm-dev.c and tpm-common-dev.c

Wed, 11 Jan 2017 03:08:53 +0000

tpm: split out tpm-dev.c into tpm-dev.c and tpm-common-dev.cSigned-off-by: James Bottomley Tested-by: Jarkko Sakkinen Reviewed-by: Jarkko Sakkinen Signed-off-by: Jarkko Sakkinen List of files: /linux-6.15/drivers/char/tpm/Makefile

745b361e - tpm: infrastructure for TPM spaces

Fri, 06 Jan 2017 12:03:45 +0000

tpm: infrastructure for TPM spacesAdded an ability to virtualize TPM commands into an isolated contextthat we call a TPM space because the word context is already heavilyused in the TPM specification. Both the handle areas and bodies (wherenecessary) are virtualized.The mechanism works by adding a new parameter struct tpm_space to thetpm_transmit() function. This new structure contains the list of virtualhandles and a buffer of page size (currently) for backing storage.When tpm_transmit() is called with a struct tpm_space instance it willexecute the following sequence:1. Take locks.2. Load transient objects from the backing storage by using ContextLoad and map virtual handles to physical handles.3. Perform the transaction.4. Save transient objects to backing storage by using ContextSave and map resulting physical handle to virtual handle if there is such.This commit does not implement virtualization support for hmac andpolicy sessions.Signed-off-by: Jarkko Sakkinen Tested-by: James Bottomley Reviewed-by: James Bottomley List of files: /linux-6.15/drivers/char/tpm/Makefile