util/amdfwtool: Add options to separate signed firmwares
commit3c164e13e7b3c1ba36686fb7a946f88971c1398d
authorKangheui Won <khwon@chromium.org>
Fri, 3 Dec 2021 09:25:05 +0000 (3 20:25 +1100)
committerMartin Roth <martin.roth@amd.corp-partner.google.com>
Sun, 2 Oct 2022 22:11:13 +0000 (2 22:11 +0000)
treebc7564dd10adcd40efacf2fd95dacf8b6b435cac
parent236245ec7dc79b03e5e8011d4bac4880126752da
util/amdfwtool: Add options to separate signed firmwares

Add support for separating signed firmwares into another CBFS. If
sig_opt flag in AMD/PSPFW file header is 1, it means that the firmware
is signed against AMD chain of trust and will be verified by PSP. If
those firmware binaries are put outside FW_MAIN_[AB], vboot can skip
redundant verification, improving overall verification time.

BUG=b:206909680
TEST=Build amdfwtool. Build Skyrim BIOS image and boot to OS.

Change-Id: I9f3610a7002b2a9c70946b083b0b3be6934200b0
Signed-off-by: Kangheui Won <khwon@chromium.org>
Signed-off-by: Karthikeyan Ramasubramanian <kramasub@google.com>
Reviewed-on: https://review.coreboot.org/c/coreboot/+/59866
Reviewed-by: Jon Murphy <jpmurphy@google.com>
Tested-by: build bot (Jenkins) <no-reply@coreboot.org>
util/amdfwtool/amdfwtool.c
util/amdfwtool/amdfwtool.h