Add TPM2 support defined in trusted computing group.

TCG EFI Protocol Specification for TPM Family 2.0 Revision 1.0 Version 9 at http://www.trustedcomputinggroup.org/resources/tcg_efi_protocol_specification
TCG Physical Presence Interface Specification Version 1.30, Revision 00.52 at http://www.trustedcomputinggroup.org/resources/tcg_physical_presence_interface_specification

Add Tcg2XXX, similar file/directory as TrEEXXX. Old TrEE driver/library can be deprecated.
1) Add Tcg2Pei/Dxe/Smm driver to log event and provide services.
2) Add Dxe/Pei/SmmTcg2PhysicalPresenceLib to support TCG PP.
3) Update Tpm2 library to use TCG2 protocol instead of TrEE protocol.

Test Win8/Win10 with SecureBoot enabled, PCR7 shows bound.

Contributed-under: TianoCore Contribution Agreement 1.0
Signed-off-by: "Yao, Jiewen" <Jiewen.Yao@intel.com>
Reviewed-by: "Zhang, Chao B" <chao.b.zhang@intel.com>

git-svn-id: https://svn.code.sf.net/p/edk2/code/trunk/edk2@18219 6f19259b-4bc3-4df7-8a09-765794883524

3 files changed, 171 insertions, 0 deletions

diff --git a/SecurityPkg/Library/Tpm2DeviceLibTcg2/Tpm2DeviceLibTcg2.c b/SecurityPkg/Library/Tpm2DeviceLibTcg2/Tpm2DeviceLibTcg2.c
new file mode 100644
index 0000000000..e1a92c31f4
--- /dev/null
+++ b/SecurityPkg/Library/Tpm2DeviceLibTcg2/Tpm2DeviceLibTcg2.c
@@ -0,0 +1,125 @@
+/** @file

+  Ihis library is TPM2 TCG2 protocol lib.

+

+Copyright (c) 2013, Intel Corporation. All rights reserved. <BR>

+This program and the accompanying materials

+are licensed and made available under the terms and conditions of the BSD License

+which accompanies this distribution.  The full text of the license may be found at

+http://opensource.org/licenses/bsd-license.php

+

+THE PROGRAM IS DISTRIBUTED UNDER THE BSD LICENSE ON AN "AS IS" BASIS,

+WITHOUT WARRANTIES OR REPRESENTATIONS OF ANY KIND, EITHER EXPRESS OR IMPLIED.

+

+**/

+

+#include <Library/BaseLib.h>

+#include <Library/BaseMemoryLib.h>

+#include <Library/DebugLib.h>

+#include <Library/UefiBootServicesTableLib.h>

+#include <Library/Tpm2DeviceLib.h>

+#include <Protocol/Tcg2Protocol.h>

+#include <IndustryStandard/Tpm20.h>

+

+EFI_TCG2_PROTOCOL  *mTcg2Protocol = NULL; 

+

+/**

+  This service enables the sending of commands to the TPM2.

+

+  @param[in]      InputParameterBlockSize  Size of the TPM2 input parameter block.

+  @param[in]      InputParameterBlock      Pointer to the TPM2 input parameter block.

+  @param[in,out]  OutputParameterBlockSize Size of the TPM2 output parameter block.

+  @param[in]      OutputParameterBlock     Pointer to the TPM2 output parameter block.

+

+  @retval EFI_SUCCESS            The command byte stream was successfully sent to the device and a response was successfully received.

+  @retval EFI_DEVICE_ERROR       The command was not successfully sent to the device or a response was not successfully received from the device.

+  @retval EFI_BUFFER_TOO_SMALL   The output parameter block is too small. 

+**/

+EFI_STATUS

+EFIAPI

+Tpm2SubmitCommand (

+  IN UINT32            InputParameterBlockSize,

+  IN UINT8             *InputParameterBlock,

+  IN OUT UINT32        *OutputParameterBlockSize,

+  IN UINT8             *OutputParameterBlock

+  )

+{

+  EFI_STATUS                Status;

+  TPM2_RESPONSE_HEADER      *Header;

+

+  if (mTcg2Protocol == NULL) {

+    Status = gBS->LocateProtocol (&gEfiTcg2ProtocolGuid, NULL, (VOID **) &mTcg2Protocol);

+    if (EFI_ERROR (Status)) {

+      //

+      // Tcg2 protocol is not installed. So, TPM2 is not present.

+      //

+      DEBUG ((EFI_D_ERROR, "Tpm2SubmitCommand - Tcg2 - %r\n", Status));

+      return EFI_NOT_FOUND;

+    }

+  }

+  //

+  // Assume when Tcg2 Protocol is ready, RequestUseTpm already done.

+  //

+  Status = mTcg2Protocol->SubmitCommand (

+                            mTcg2Protocol,

+                            InputParameterBlockSize,

+                            InputParameterBlock,

+                            *OutputParameterBlockSize,

+                            OutputParameterBlock

+                            );

+  if (EFI_ERROR (Status)) {

+    return Status;

+  }

+  Header = (TPM2_RESPONSE_HEADER *)OutputParameterBlock;

+  *OutputParameterBlockSize = SwapBytes32 (Header->paramSize);

+

+  return EFI_SUCCESS;

+}

+

+/**

+  This service requests use TPM2.

+

+  @retval EFI_SUCCESS      Get the control of TPM2 chip.

+  @retval EFI_NOT_FOUND    TPM2 not found.

+  @retval EFI_DEVICE_ERROR Unexpected device behavior.

+**/

+EFI_STATUS

+EFIAPI

+Tpm2RequestUseTpm (

+  VOID

+  )

+{

+  EFI_STATUS   Status;

+

+  if (mTcg2Protocol == NULL) {

+    Status = gBS->LocateProtocol (&gEfiTcg2ProtocolGuid, NULL, (VOID **) &mTcg2Protocol);

+    if (EFI_ERROR (Status)) {

+      //

+      // Tcg2 protocol is not installed. So, TPM2 is not present.

+      //

+      DEBUG ((EFI_D_ERROR, "Tpm2RequestUseTpm - Tcg2 - %r\n", Status));

+      return EFI_NOT_FOUND;

+    }

+  }

+  //

+  // Assume when Tcg2 Protocol is ready, RequestUseTpm already done.

+  //

+  return EFI_SUCCESS;

+}

+

+/**

+  This service register TPM2 device.

+

+  @param Tpm2Device  TPM2 device

+

+  @retval EFI_SUCCESS          This TPM2 device is registered successfully.

+  @retval EFI_UNSUPPORTED      System does not support register this TPM2 device.

+  @retval EFI_ALREADY_STARTED  System already register this TPM2 device.

+**/

+EFI_STATUS

+EFIAPI

+Tpm2RegisterTpm2DeviceLib (

+  IN TPM2_DEVICE_INTERFACE   *Tpm2Device

+  )

+{

+  return EFI_UNSUPPORTED;

+}

diff --git a/SecurityPkg/Library/Tpm2DeviceLibTcg2/Tpm2DeviceLibTcg2.inf b/SecurityPkg/Library/Tpm2DeviceLibTcg2/Tpm2DeviceLibTcg2.inf
new file mode 100644
index 0000000000..6d95ebdd50
--- /dev/null
+++ b/SecurityPkg/Library/Tpm2DeviceLibTcg2/Tpm2DeviceLibTcg2.inf
@@ -0,0 +1,46 @@
+## @file

+#  Provides function interfaces to communicate with TPM 2.0 device

+#

+#  This library helps to use TPM 2.0 device in library function API

+#  based on TPM2 protocol.

+#

+# Copyright (c) 2013 - 2014, Intel Corporation. All rights reserved.<BR>

+# This program and the accompanying materials

+# are licensed and made available under the terms and conditions of the BSD License

+# which accompanies this distribution. The full text of the license may be found at

+# http://opensource.org/licenses/bsd-license.php

+# THE PROGRAM IS DISTRIBUTED UNDER THE BSD LICENSE ON AN "AS IS" BASIS,

+# WITHOUT WARRANTIES OR REPRESENTATIONS OF ANY KIND, EITHER EXPRESS OR IMPLIED.

+#

+##

+

+[Defines]

+  INF_VERSION                    = 0x00010005

+  BASE_NAME                      = Tpm2DeviceLibTcg2

+  MODULE_UNI_FILE                = Tpm2DeviceLibTcg2.uni

+  FILE_GUID                      = A1B0B230-67DC-431E-A94A-A96AF1EBE637

+  MODULE_TYPE                    = DXE_DRIVER

+  VERSION_STRING                 = 1.0

+  LIBRARY_CLASS                  = Tpm2DeviceLib|DXE_DRIVER DXE_RUNTIME_DRIVER DXE_SAL_DRIVER DXE_SMM_DRIVER UEFI_APPLICATION UEFI_DRIVER 

+

+#

+# The following information is for reference only and not required by the build tools.

+#

+#  VALID_ARCHITECTURES           = IA32 X64 IPF

+#

+

+[Sources]

+  Tpm2DeviceLibTcg2.c

+

+[Packages]

+  MdePkg/MdePkg.dec

+  SecurityPkg/SecurityPkg.dec

+

+[LibraryClasses]

+  BaseLib

+  BaseMemoryLib

+  DebugLib

+  UefiBootServicesTableLib

+

+[Protocols]

+  gEfiTcg2ProtocolGuid                           ## CONSUMES

diff --git a/SecurityPkg/Library/Tpm2DeviceLibTcg2/Tpm2DeviceLibTcg2.uni b/SecurityPkg/Library/Tpm2DeviceLibTcg2/Tpm2DeviceLibTcg2.uni
new file mode 100644
index 0000000000..27e390d8e8
--- /dev/null
+++ b/SecurityPkg/Library/Tpm2DeviceLibTcg2/Tpm2DeviceLibTcg2.uni