Skip to content

Commit

Permalink
DeviceSecurityTestPkg： Add DeviceSecurity test support
Browse files Browse the repository at this point in the history 
Signed-off-by: Jiewen Yao <jiewen.yao@intel.com>
Signed-off-by: Wenxing Hou <wenxing.hou@intel.com>
  • Loading branch information
@qizhangz @jyao1
qizhangz authored and jyao1 committed Feb 20, 2024
1 parent 6a6f4be commit fa06a7f
Show file tree
Hide file tree
Showing 132 changed files with 27,307 additions and 0 deletions.
87 changes: 87 additions & 0 deletions DeviceSecurityTestPkg/DeviceSecurityTestPkg.dec
View file
Original file line number Diff line number Diff line change
@@ -0,0 +1,87 @@
## @file
# This package provides EDKII Device Security related support.
#
# Copyright (c) 2019, Intel Corporation. All rights reserved.<BR>
# SPDX-License-Identifier: BSD-2-Clause-Patent
#
##

[Defines]
DEC_SPECIFICATION = 0x00010005
PACKAGE_NAME = DeviceSecurityTestPkg
PACKAGE_GUID = 575E6A14-ACD5-4101-A74C-747D49D17AC9
PACKAGE_VERSION = 0.1

[Includes]
Include
../SecurityPkg/DeviceSecurity/SpdmLib/Include
../SecurityPkg/DeviceSecurity/SpdmLib/libspdm/include

[Includes.Common.Private]
#Library/SpdmLib/Include
#Library/SpdmLib/libspdm/include
Include/PrivateTest

[LibraryClasses]
## @libraryclass Perform SPDM (following SPDM spec) and measure data to TPM (following TCG PFP spec).
##
#SpdmSecurityLib|Include/Library/SpdmSecurityLib.h

[Guids]
gEfiDeviceSecurityPkgTokenSpaceGuid = { 0x506945e8, 0x7603, 0x49ee, { 0xbf, 0x36, 0x6c, 0x28, 0x74, 0xca, 0x26, 0xdc }}

gEfiDeviceSecurityPkgTestConfig = { 0x6761aa6c, 0x41bf, 0x4a38, { 0x84, 0x93, 0x26, 0x6b, 0x11, 0x98, 0x44, 0xfc }}

gEfiDeviceSecuritySpdmUidGuid = {0xe37b5665, 0x5ef9, 0x4e7e, {0xb4, 0x91, 0xd6, 0x78, 0xab, 0xff, 0xfb, 0xcb }}

[Ppis]

## Include/Ppi/DeviceSecurity.h
gEdkiiDeviceSecurityPpiGuid = {0x4b05faa, 0x7f36, 0x4dc5, {0xbf, 0xb3, 0x42, 0xde, 0x30, 0xbc, 0x3d, 0x80}}


## Include/Ppi/DeviceSecurityPolicy.h
gEdkiiDeviceSecurityPolicyPpiGuid = {0x5b7b8831, 0xb15b, 0x4e39, {0xad, 0xfc, 0x88, 0x4d, 0x5a, 0x89, 0xf7, 0x4a}}

## Include/Ppi/SpdmIo.h
gSpdmIoPpiGuid = {0x02320bff, 0x6b67, 0x4acc, {0x8b, 0x37, 0x45, 0xf4, 0x20, 0xfa, 0x9f, 0x98}}

## Include/Ppi/Spdm.h
gSpdmPpiGuid = {0x0a1227b3, 0x0f30, 0x4639, {0xbe, 0xb3, 0xb4, 0x60, 0x77, 0x35, 0xee, 0x89}}

## Include/PrivateTest/Ppi/SpdmTest.h
gSpdmTestPpiGuid = {0x9580d073, 0x5c95, 0x469f, {0x9a, 0xbe, 0xd4, 0xbc, 0xb7, 0x5f, 0xbf, 0x5c}}

[Protocols]
## Include/Protocol/DeviceSecurityPolicy.h
gEdkiiDeviceSecurityPolicyProtocolGuid = {0x9e15104a, 0x9e7c, 0x437d, {0xb1, 0xf0, 0x6c, 0xbb, 0xfb, 0x75, 0xdc, 0x87}}

## Include/Protocol/SpdmIo.h
gSpdmIoProtocolGuid = {0x78cad8aa, 0x7f4, 0x4c9b, {0x95, 0x5e, 0x85, 0x73, 0x2e, 0x37, 0x21, 0x96}}

## Include/Protocol/Spdm.h
gSpdmProtocolGuid = {0x4f96162, 0x9ed8, 0x4499, {0x96, 0xd8, 0x58, 0x8c, 0x6d, 0xc6, 0x11, 0x5d}}

## Include/PrivateTest/Protocol/SpdmTest.h
gSpdmTestProtocolGuid = {0xcbd8291b, 0x824a, 0x4b28, {0xad, 0x1f, 0x71, 0x1e, 0xc5, 0x4d, 0x13, 0x31}}

[PcdsFixedAtBuild, PcdsPatchableInModule]
## PCD to indicate the BaseAsymAlgo in negotiate algorithm message.
# Please refer to MdePkg\Include\IndustryStandard\Spdm.h, SPDM_ALGORITHMS_BASE_ASYM_ALGO_TPM_ALG_xxx.
gEfiDeviceSecurityPkgTokenSpaceGuid.PcdSpdmBaseAsymAlgo|0x01|UINT32|0x00000001

## PCD to indicate the BaseHashAlgo in negotiate algorithm message.
# Please refer to MdePkg\Include\IndustryStandard\Spdm.h, SPDM_ALGORITHMS_BASE_HASH_ALGO_TPM_ALG_xxx.
gEfiDeviceSecurityPkgTokenSpaceGuid.PcdSpdmBaseHashAlgo|0x01|UINT32|0x00000002

## PCD to indicate the DHENamedGroup in negotiate algorithm message.
# Please refer to MdePkg\Include\IndustryStandard\Spdm.h, SPDM_ALGORITHMS_DHE_NAMED_GROUP_xxx.
gEfiDeviceSecurityPkgTokenSpaceGuid.PcdSpdmDHENamedGroup|0x01|UINT16|0x00000003

## PCD to indicate the AEADCipherSuite in negotiate algorithm message.
# Please refer to MdePkg\Include\IndustryStandard\Spdm.h, SPDM_ALGORITHMS_AEAD_CIPHER_SUITE_xxx.
gEfiDeviceSecurityPkgTokenSpaceGuid.PcdSpdmAEADCipherSuite|0x01|UINT16|0x00000004

## PCD to indicate the KeySchedule in negotiate algorithm message.
# Please refer to MdePkg\Include\IndustryStandard\Spdm.h, SPDM_ALGORITHMS_KEY_SCHEDULE_xxx.
gEfiDeviceSecurityPkgTokenSpaceGuid.PcdSpdmKeySchedule|0x01|UINT16|0x00000005
305 changes: 305 additions & 0 deletions DeviceSecurityTestPkg/DeviceSecurityTestPkg.dsc
View file

Large diffs are not rendered by default.

125 changes: 125 additions & 0 deletions DeviceSecurityTestPkg/Example/spdm_comid.json
View file
Original file line number Diff line number Diff line change
@@ -0,0 +1,125 @@
{
"corim": { // #6.501 (unsigned-corim-map)
"corim.id": "d0c996b044a6a4ce43e5541800123f0a", // 0
"corim.tags": [
{ // 1: #6.506 (concise-mid-tag)
"comid.tag-identity": { // 1
"comid.tag-id": "3f06af63a93c11e4979700505690773f", // 0
"comid.tag-version": 0 // 1
},
"comid.entity": { // 2
"comid.entity-name": "device_entity_name_AAA", // 0
"comid.reg-id": "http://www.device_vendor.com", // 1
"comid.role": [ // 2
"comid.tag-creator", // 0
"comid.creator" // 1
]
},
"comid.triples": { // 4
"comid.reference-triples": [ // 0
[
{
"comid.class": { // 0
"comid.class-id": "67b28b6c34cc40a19117ab5b05911e37", // 0
"comid.vendor": "device_vendor", // 1
"comid.model": "device_model_AAA", // 2
"comid.layer": 1, // 3
"comid.index": 1 // 4
}
},
{
"comid.mval": { // 1
"comid.digests": [ // 2
[
"SHA_256", // 1
"C8BED0AF5473E956F38C0DEF7C0B5047FF756A6A7E666F5F3FB956C5C1652B1E"
]
]
}
}
],
[
{
"comid.class": { // 0
"comid.class-id": "67b28b6c34cc40a19117ab5b05911e37", // 0
"comid.vendor": "device_vendor", // 1
"comid.model": "device_model_AAA", // 2
"comid.layer": 1, // 3
"comid.index": 2 // 4
}
},
{
"comid.mval": { // 1
"comid.digests": [ // 2
[
"SHA_256", // 1
"C6F392711FFFABBEA5986F8E2CEF7F6BAD3BC4BDA1664259406E4675FC66ED8E"
]
]
}
}
],
[
{
"comid.class": { // 0
"comid.class-id": "67b28b6c34cc40a19117ab5b05911e37", // 0
"comid.vendor": "device_vendor", // 1
"comid.model": "device_model_AAA", // 2
"comid.layer": 1, // 3
"comid.index": 3 // 4
}
},
{
"comid.mval": { // 1
"comid.digests": [ // 2
[
"SHA_256", // 1
"C3BE3AAD7A60E53C9BAA8F52219CEF642C32085AD8D42FB42C62D6CF7875D441"
]
]
}
}
],
[
{
"comid.class": { // 0
"comid.class-id": "67b28b6c34cc40a19117ab5b05911e37", // 0
"comid.vendor": "device_vendor", // 1
"comid.model": "device_model_AAA", // 2
"comid.layer": 1, // 3
"comid.index": 4 // 4
}
},
{
"comid.mval": { // 1
"comid.digests": [ // 2
[
"SHA_256", // 1
"946901532CEC8B44733B6BE24618C3BAF940E3EC23191693FA1932AC2E6241C5"
]
]
}
}
],
[
{
"comid.class": { // 0
"comid.class-id": "67b28b6c34cc40a19117ab5b05911e37", // 0
"comid.vendor": "device_vendor", // 1
"comid.model": "device_model_AAA", // 2
"comid.layer": 1, // 3
"comid.index": 16 // 4
}
},
{
"comid.mval": {
"comid.svn": 7 // 1 : #6.552 (tagged-svn)
}
}
]
]
}
}
]
}
}
86 changes: 86 additions & 0 deletions DeviceSecurityTestPkg/Example/spdm_coswid.json
View file
Original file line number Diff line number Diff line change
@@ -0,0 +1,86 @@
{
"corim": { // #6.501 (unsigned-corim-map)
"corim.id": "6F8FE7AF-57A0-4087-83DB-D9D95AB237D4", // 0
"corim.tags": [
{ // 1: #6.505 (concise-coswid-tag)
"tag-id": "C43C3BDB-74E6-4336-8676-79B3D405FAEA", // 0
"tag-version": 0, // 12
"software-name": "device_software_name_AAA", // 1
"software-version": "device_firmware_version_01", // 13
"corpus": false, // 8
"patch": false, // 9
"supplemental": false, // 11
"software-meta": [ // 5
{
"colloquial-version": "device_colloquial_version_1.0", // 45
"edition": "device_edition_1.0", // 47
"product": "device_product_AAA", // 52
"revision": "device_revision_3.7.6" // 54
}
],
"entity": [ // 2
{
"entity-name": "device_entity_name_AAA", // 31
"role": [ // 33
"softwareCreator", // 2
"tagCreator" // 1
],
"thumbprint": [ // 34
"SHA_256", // 1
"1234567812345678123456781234567812345678123456781234567812345678"
],
"reg-id": "http://www.device_vendor.com" // 32
}
],
"link": [ // 4
{
"href": "https://github.com/device_vendor/device_AAA", // 38
"rel": 4 // 40
}
],
"payload": { // 6
"directory": { // 16
"fs-name": "Device_FS", // 24
"location": "DeviceBin", // 23
"path-elements": { // 26
"file": [ // 17
{
"fs-name": "Rom.bin", // 24
"size": 65536, // 20
"hash": [ // 7
"SHA_256", // 1
"C8BED0AF5473E956F38C0DEF7C0B5047FF756A6A7E666F5F3FB956C5C1652B1E"
]
},
{
"fs-name": "Firmware.bin", // 24
"size": 65536, // 20
"hash": [ // 7
"SHA_256", // 1
"C6F392711FFFABBEA5986F8E2CEF7F6BAD3BC4BDA1664259406E4675FC66ED8E"
]
},
{
"fs-name": "HwConfig.bin", // 24
"size": 4096, // 20
"hash": [ // 7
"SHA_256", // 1
"C3BE3AAD7A60E53C9BAA8F52219CEF642C32085AD8D42FB42C62D6CF7875D441"
]
},
{
"fs-name": "FwConfig.bin", // 24
"size": 4096, // 20
"hash": [ // 7
"SHA_256", // 1
"946901532CEC8B44733B6BE24618C3BAF940E3EC23191693FA1932AC2E6241C5"
]
}
]
}
}
}
}
]
}
}
Loading

0 comments on commit fa06a7f

Please sign in to comment.