DRTM between coreboot and UEFI payload

This milestone will implement support for performing DRTM between coreboot and its payload, in this case edk2. While the implementation of dynamic launch will be in coreboot, the payload must be able to handle unusual state after the hand-off. It also has to carefully manage the access to memory, as well as control when and how other cores are allowed to be started. Finally, the payload binary must contain information that would tell coreboot that it can be started through dynamic launch.

Components marked in green will be added or modified as part of this milestone. The implementation will be done with Dasharo, with coreboot part of the implementation sent to upstream coreboot repository for review. Platforms chosen for initial implementation:

PC Engines apu2 (or later one), with TPM 2.0
Protectli VP66xx with TPM 2.0

Navigation Menu

Uh oh!

DRTM between coreboot and UEFI payload

coreboot implementation for AMD

UEFI payload implementation for AMD

coreboot implementation for Intel

UEFI payload implementation for Intel

Develop and perform tests on the platforms

trenchboot.org documentation update

Upstream coreboot changes