From 5f921bc00db9f9b1c8cee87cceb420ab46af857b Mon Sep 17 00:00:00 2001 From: Vadim Sukhomlinov Date: Mon, 15 Jun 2020 15:10:51 -0700 Subject: fips: introduce FIPS & policy power-up known-answer tests Add invocation of power-up known-answer tests (KATs) on power-on and after failures, while avoiding power-up tests on wake from sleep. Added console & vendor commands to report FIPS status, run tests, simulate errors. BUG=b:138577539 TEST=manual; check console fips on, fips test, fips sha, fips trng will add tpmtest for vendor command Signed-off-by: Vadim Sukhomlinov Change-Id: I58790d0637fda683c4b6187ba091edf08757f8ee Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/ec/+/2262055 Reviewed-by: Vadim Sukhomlinov Reviewed-by: Vadim Bendebury Tested-by: Vadim Sukhomlinov Commit-Queue: Vadim Sukhomlinov Auto-Submit: Vadim Sukhomlinov --- include/hooks.h | 1 + 1 file changed, 1 insertion(+) (limited to 'include/hooks.h') diff --git a/include/hooks.h b/include/hooks.h index f349d906cb..0142ab62a0 100644 --- a/include/hooks.h +++ b/include/hooks.h @@ -15,6 +15,7 @@ enum hook_priority { HOOK_PRIO_FIRST = 1, /* Highest priority */ HOOK_PRIO_DEFAULT = 5000, /* Default priority */ HOOK_PRIO_LAST = 9999, /* Lowest priority */ + HOOK_PRIO_FIPS = 10000, /* FIPS init executes last */ /* Specific hook vales for HOOK_INIT */ /* DMA inits before ADC, I2C, SPI */ -- cgit v1.2.1