Hello all,

The initial patch for Measured Boot has been split into 5 separates buildable ones:

https://review.trustedfirmware.org/c/TF-A/trusted-firmware-a/+/3806
https://review.trustedfirmware.org/c/TF-A/trusted-firmware-a/+/4473
https://review.trustedfirmware.org/c/TF-A/trusted-firmware-a/+/4508
https://review.trustedfirmware.org/c/TF-A/trusted-firmware-a/+/4509
https://review.trustedfirmware.org/c/TF-A/trusted-firmware-a/+/4510

and are ready for review/merge.

The design follows "TF-A Design Notes for Measured Boot" document .

The number of API changes and code modifications based on the received feedback were made, and the most important are:
  1. TPM hash algorithm is now independent from the one used by Trusted Boot and can be set separately to a different value.
  2. Size of Event Log is passed as a driver build option and can be tuned to meet platform specific requirements (debug/release, number of images loaded, etc.).
  3. Driver accepts platform specific table of images to be loaded/measured.
  4. PCR index to use for TMP records is passed in platform specific table (see above) and can be set individually for each image.
Regards.

Alexei