+ ## EDK II Crypto DXE protocol\r
+ # 2C2275C9-3A7B-426F-BE54-2D22BD9D1092\r
+ gEdkiiCryptoProtocolGuid = { 0x2C2275C9, 0x3A7B, 0x426F, { 0xBE, 0x54, 0x2D, 0x22, 0xBD, 0x9D, 0x10, 0x92 }}\r
+\r
+ ## EDK II Crypto SMM protocol\r
+ # F46B2EB2-E0D7-4C96-A3B1-CB7C572EB300\r
+ gEdkiiSmmCryptoProtocolGuid = { 0xF46B2EB2, 0xE0D7, 0x4C96, { 0xA3, 0xB1, 0xc, 0x61, 0xbb, 0x24, 0x5c, 0x42 }}\r
+\r
+[Ppis]\r
+ ## EDK II Crypto PPI\r
+ # 7DCE671B-C223-446A-A705-ED637AAF6771\r
+ gEdkiiCryptoPpiGuid = { 0x7DCE671B, 0xC223, 0x446A, { 0xA7, 0x05, 0xED, 0x63, 0x7A, 0xAF, 0x67, 0x71 }}\r
+\r
+[Guids]\r
+ ## Crypto package token space guid.\r
+ gEfiCryptoPkgTokenSpaceGuid = { 0x6bd7de60, 0x9ef7, 0x4899, { 0x97, 0xd0, 0xab, 0xff, 0xfd, 0xe9, 0x70, 0xf2 } }\r
+\r
+[PcdsFixedAtBuild]\r
+ ## Enable/Disable the families and individual services produced by the\r
+ # EDK II Crypto Protocols/PPIs. The default is all services disabled.\r
+ # This Structured PCD is associated with PCD_CRYPTO_SERVICE_FAMILY_ENABLE\r
+ # structure that is defined in Include/Pcd/PcdCryptoServiceFamilyEnable.h.\r
+ # @Prompt Enable/Disable EDK II Crypto Protocol/PPI services\r
+ gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable|{0x00}|PCD_CRYPTO_SERVICE_FAMILY_ENABLE|0x00000002 {\r
+ <Packages>\r
+ CryptoPkg/CryptoPkg.dec\r
+ <HeaderFiles>\r
+ Pcd/PcdCryptoServiceFamilyEnable.h\r
+ }\r
+\r
+ ## This PCD indicates the HASH algorithm to calculate hash of data\r
+ # Based on the value set, the required algorithm is chosen to calculate\r
+ # the hash of data.<BR>\r
+ # The default hashing algorithm for BaseHashApiLib is set to SHA256.<BR>\r
+ # 0x00000001 - HASH_ALG_SHA1.<BR>\r
+ # 0x00000002 - HASH_ALG_SHA256.<BR>\r
+ # 0x00000004 - HASH_ALG_SHA384.<BR>\r
+ # 0x00000008 - HASH_ALG_SHA512.<BR>\r
+ # 0x00000010 - HASH_ALG_SM3_256.<BR>\r
+ # @Prompt Set policy for hashing unsigned image for Secure Boot.\r
+ # @ValidList 0x80000001 | 0x00000001, 0x00000002, 0x00000004, 0x00000008, 0x00000010\r
+ gEfiCryptoPkgTokenSpaceGuid.PcdHashApiLibPolicy|0x00000002|UINT32|0x00000001\r