X-Git-Url: https://git.proxmox.com/?a=blobdiff_plain;f=SecurityPkg%2FSecurityPkg.dec;h=a9da5a6847823cb1323c408622fed992ac6470d9;hb=37e86e267be46ec4e2b7f97e70059e25912cea6b;hp=63f67da5bbf12cef8121bfe2fddfaa3c9a28c45e;hpb=f88e9c5bb9b4e50390cc79ca81547f89911a4e0c;p=mirror_edk2.git diff --git a/SecurityPkg/SecurityPkg.dec b/SecurityPkg/SecurityPkg.dec index 63f67da5bb..a9da5a6847 100644 --- a/SecurityPkg/SecurityPkg.dec +++ b/SecurityPkg/SecurityPkg.dec @@ -5,7 +5,7 @@ # It also provides the definitions(including PPIs/PROTOCOLs/GUIDs and library classes) # and libraries instances, which are used for those features. # -# Copyright (c) 2009 - 2015, Intel Corporation. All rights reserved.
+# Copyright (c) 2009 - 2016, Intel Corporation. All rights reserved.
# (C) Copyright 2015 Hewlett Packard Enterprise Development LP
# This program and the accompanying materials are licensed and made available under # the terms and conditions of the BSD License which accompanies this distribution. @@ -22,7 +22,7 @@ PACKAGE_NAME = SecurityPkg PACKAGE_UNI_FILE = SecurityPkg.uni PACKAGE_GUID = 4EFC4F66-6219-4427-B780-FB99F470767F - PACKAGE_VERSION = 0.95 + PACKAGE_VERSION = 0.96 [Includes] Include @@ -71,6 +71,27 @@ ## @libraryclass Provides support for TrEE PP >= 128 Vendor Specific PPI Operation. # TrEEPpVendorLib|Include/Library/TrEEPpVendorLib.h + + ## @libraryclass Provides support for TCG Physical Presence Interface (PPI) specification + # >= 128 Vendor Specific PPI Operation. + # + Tcg2PpVendorLib|Include/Library/TcgPpVendorLib.h + + ## @libraryclass Handle TPM 2.0 physical presence request from OS. + # + Tcg2PhysicalPresenceLib|Include/Library/Tcg2PhysicalPresenceLib.h + + ## @libraryclass Provides interfaces about TCG storage generic commond. + # + TcgStorageCoreLib|Include/Library/TcgStorageCoreLib.h + + ## @libraryclass Provides interfaces about TCG storage Opal generic commond. + # + TcgStorageOpalLib|Include/Library/TcgStorageOpalLib.h + + ## @libraryclass Provides interfaces about Opal commond special for Opal password solution. + # + OpalPasswordSupportLib|Include/Library/OpalPasswordSupportLib.h [Guids] ## Security package token space guid. @@ -97,10 +118,10 @@ # Include/Guid/AuthenticatedVariableFormat.h gEfiVendorKeysNvGuid = { 0x9073e4e0, 0x60ec, 0x4b6e, { 0x99, 0x3, 0x4c, 0x22, 0x3c, 0x26, 0xf, 0x3c } } - ## GUID used to "certdb" variable to store the signer's certificates for common variables with EFI_VARIABLE_TIME_BASED_AUTHENTICATED_WRITE_ACCESS attribute. + ## GUID used to "certdb"/"certdbv" variable to store the signer's certificates for common variables with EFI_VARIABLE_TIME_BASED_AUTHENTICATED_WRITE_ACCESS attribute. # Include/Guid/AuthenticatedVariableFormat.h gEfiCertDbGuid = { 0xd9bee56e, 0x75dc, 0x49d9, { 0xb4, 0xd7, 0xb5, 0x34, 0x21, 0xf, 0x63, 0x7a } } - + ## Hob GUID used to pass a TCG_PCR_EVENT from a TPM PEIM to a TPM DXE Driver. # Include/Guid/TcgEventHob.h gTcgEventEntryHobGuid = { 0x2b9ffb52, 0x1b13, 0x416f, { 0xa8, 0x7b, 0xbc, 0x93, 0xd, 0xef, 0x92, 0xa8 }} @@ -177,6 +198,10 @@ # Include/Guid/TrEEConfigHii.h gTrEEConfigFormSetGuid = {0xc54b425f, 0xaa79, 0x48b4, { 0x98, 0x1f, 0x99, 0x8b, 0x3c, 0x4b, 0x64, 0x1c }} + ## Include/OpalPasswordExtraInfoVariable.h + gOpalExtraInfoVariableGuid = {0x44a2ad5d, 0x612c, 0x47b3, {0xb0, 0x6e, 0xc8, 0xf5, 0x0b, 0xfb, 0xf0, 0x7d}} + + [Ppis] ## The PPI GUID for that TPM physical presence should be locked. # Include/Ppi/LockPhysicalPresence.h @@ -274,6 +299,10 @@ # @ValidList 0x80000003 | 0x010D0000 gEfiSecurityPkgTokenSpaceGuid.PcdStatusCodeSubClassTpmDevice|0x010D0000|UINT32|0x00000007 + ## Null-terminated string of the Version of Physical Presence interface supported by platform. + # @Prompt Version of Physical Presence interface supported by platform. + gEfiSecurityPkgTokenSpaceGuid.PcdTcgPhysicalPresenceInterfaceVer|"1.3"|VOID*|0x00000008 + [PcdsFixedAtBuild, PcdsPatchableInModule, PcdsDynamic, PcdsDynamicEx] ## Indicates the presence or absence of the platform operator during firmware booting. # If platform operator is not physical presence during boot. TPM will be locked and the TPM commands @@ -367,6 +396,7 @@ ## This PCR means the OEM configurated number of PCR banks. # 0 means dynamic get from supported HASH algorithm + # @Prompt OEM configurated number of PCR banks. gEfiSecurityPkgTokenSpaceGuid.PcdTcg2NumberOfPCRBanks|0x0|UINT32|0x00010015 ## Provides one or more SHA 256 Hashes of the RSA 2048 public keys used to verify Recovery and Capsule Update images @@ -375,6 +405,15 @@ # gEfiSecurityPkgTokenSpaceGuid.PcdRsa2048Sha256PublicKeyBuffer|{0x91, 0x29, 0xc4, 0xbd, 0xea, 0x6d, 0xda, 0xb3, 0xaa, 0x6f, 0x50, 0x16, 0xfc, 0xdb, 0x4b, 0x7e, 0x3c, 0xd6, 0xdc, 0xa4, 0x7a, 0x0e, 0xdd, 0xe6, 0x15, 0x8c, 0x73, 0x96, 0xa2, 0xd4, 0xa6, 0x4d}|VOID*|0x00010013 + ## This PCD defines minimum length(in bytes) of the system preboot TCG event log area(LAML). + # For PC Client Implementation spec up to and including 1.2 the minimum log size is 64KB. + # @Prompt Minimum length(in bytes) of the system preboot TCG event log area(LAML). + gEfiSecurityPkgTokenSpaceGuid.PcdTcgLogAreaMinLen|0x10000|UINT32|0x00010017 + + ## This PCD defines length(in bytes) of the TCG2 Final event log area. + # @Prompt Length(in bytes) of the TCG2 Final event log area. + gEfiSecurityPkgTokenSpaceGuid.PcdTcg2FinalLogAreaLen|0x8000|UINT32|0x00010018 + [PcdsDynamic, PcdsDynamicEx] ## This PCD indicates Hash mask for TPM 2.0.

@@ -391,6 +430,7 @@ ## This PCD indicated final BIOS supported Hash mask. # Bios may choose to register a subset of PcdTpm2HashMask. # So this PCD is final value of how many hash algo is extended to PCR. + # @Prompt Hash Algorithm bitmap. gEfiSecurityPkgTokenSpaceGuid.PcdTcg2HashAlgorithmBitmap|0xFFFFFFFF|UINT32|0x00010016 [UserExtensions.TianoCore."ExtraFiles"]