0f256a0a7a
Add kmod packages to support accessing the fTPM (in-firmware TPM) which can be implemented in the boot firmware of most modern platforms. - kmod-optee: Open Portable Trusted Execution Environment - kmod-optee-rng: OP-TEE random number generator client - kmod-rtc-optee: OP-TEE real-time clock client - kmod-scmi-transport-optee: SCMI OP-TEE transport - kmod-tee: Generic Trusted Execution Environment - kmod-tee-stmm-efi: EFI variable service Trusted Application - kmod-tpm-ftpm-tee: Microsoft fTPM Trusted Application Using the TPM 2.0 can be useful for various security applications, such as encrypting on-disk credentials. OP-TEE itself alone is also useful as it can provide a PKCS#11 token for authentication (eg. to connect to a VPN) and significantly lower the risk of leaking secrets used for authentication. Also, on some platforms RNG and RTC can only be accessed via OP-TEE, and some ARM SystemReady platforms require EFI variables to be access via a TA. Signed-off-by: Daniel Golle <daniel@makrotopia.org> |
||
|---|---|---|
| .. | ||
| base-files | ||
| image | ||
| patches-6.12 | ||
| patches-6.18 | ||
| stm32mp1 | ||
| Makefile | ||
| modules.mk | ||