[Hygon] [a23] [Feature] : Support RTMR and CC Measurement on CSV3 Guest · Pull Request !69 · src-anolis-os/edk2

Support RTMR and CC Measurement on CSV3 Guest。

1. 
This patchset introduces CSV3 RTMR API and provides CC Measurement protocol for CSV3 Guest. This
allows extending the measurement of images and actions during the pre-OS stage of CSV3 Guest.

SecurityPkg: Removing unused library dependencies in INF [LibraryClasses] Section
Remove useless library dependencies
OvmfPkg: Add RTMR functions in CsvLib for CSV3 virtual machine
OmvfPkg/HashLibCsv: Add HashLibCsv
OvmfPkg/CsvTcg2Dxe: Add CsvTcg2Dxe
Introduce CSV3 RTMR API typedefs and provide CSV3's CC Measurement protocol
OvmfPkg/OvmfPkgX64: Set default value of CC_MEASUREMENT_ENABLE to TRUE
This is a patch backported from the edk2 upstream. This change allows building OVMF that
supports CC Measurement functionality by default.

2. 
CSV3支持RTMR（Runtime Measurement Register）机制，该机制类似于TPM的PCR扩展度量能力。
1）当CSV3虚拟机启动时，从OVMF阶段一直到内核启动成功，启动链中的每个关键二进制和动作都会被记录到CCEL（Confidential-Computing Event Log，符合Uefi规范）中，同时也会被扩展度量至虚拟机的RTMR寄存器中，通过重放CCEL复现RTMR寄存器值可以证明CCEL的完整性，通过CCEL的日志内容可以证明启动链中的二进制和动作是用户预期的。
2）OVMF阶段需要实现自身的RTMR处理能力，并提供Uefi CC Measurement protocol，当shim，grub，guest kernel efi libstub执行过程中，可以识别到OVMF提供的CC Measurement protocol，并调用protocol的API实现RTMR扩展度量及其Event Log。

[test log]:
see: https://gitee.com/anolis/cloud-kernel/pulls/5948

src-anolis-os/edk2 .gitee-modal { width: 500px !important; }

搜索帮助

src-anolis-os/edk2