[prev in list] [next in list] [prev in thread] [next in thread]
List: linuxbios
Subject: [coreboot] Re: AMDFlaws
From: Matt B <matthewwbradley6 () gmail ! com>
Date: 2019-02-21 1:15:36
Message-ID: CAOEb0vY=owRmnuzcSRC4vVPLXjavrbzrp5hrxrZ2oAFdFpRkCw () mail ! gmail ! com
[Download RAW message or body]
[Attachment #2 (multipart/alternative)]
>
> Early 16h systems (Jaguar) are safe because they don't have a
> PSP
Safe yes, but not helpful in coming to grips with the PSP.
> > On Sun, Feb 17, 2019 at 12:18 AM Matt B <matthewwbradley6@gmail.com>
> wrote:
> >
> > As for the patching, afaik AMD has released patches for all of these,
> but I haven't seen any patches for my 16h systems.
> >
> Almost all the coreboot-supported AMD 16h boards are AMD _early_ 16h
> (so no PSP). Please tell what 16h systems do you have, maybe they
> don't have a PSP at all?
I was specifically referring to the non-coreboot-supported 16h systems with
PSP that I have.
Now since the build of x86 AGESA blob used never actually sends PSP the
> message RAM is ready, I figured that we may never actually load the "PSP
> Secure OS" but only the bootloader part.
This sounds very promising and should be well worth pursuing.
Also, don't forget pre-PSP silicons still have SMU/PMU.
One step at a time I guess. We'd get nowhere if we weren't willing to
tolerate some imperfections, especially while working on others.
-Matt
On Sun, Feb 17, 2019 at 7:20 AM Ky=C3=B6sti M=C3=A4lkki <kyosti.malkki@gmai=
l.com>
wrote:
>
> On Sun, Feb 17, 2019 at 8:47 AM Mike Banon <mikebdp2@gmail.com> wrote:
>
>> Hi,
>
> Almost all the coreboot-supported AMD 16h boards are AMD _early_ 16h
>> (so no PSP). Please tell what 16h systems do you have, maybe they
>> don't have a PSP at all?
>>
>>
> Well pcengines/apu2 variants are fam16h model30h with PSP.
>
> I have done experiments with it to reduce PSP blob footprint, see the
> branch [1] in gerrit. There is some (NDAd) documentation about the firmwa=
re
> signatures and one can capture PSP firwmare POST codes from LPC. Now sinc=
e
> the build of x86 AGESA blob used never actually sends PSP the message RAM
> is ready, I figured that we may never actually load the "PSP Secure OS" b=
ut
> only the bootloader part.
>
> Also, don't forget pre-PSP silicons still have SMU/PMU.
>
> [1] https://review.coreboot.org/q/topic:"amd-fw-layout"
>
[Attachment #5 (text/html)]
<div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><blockquote \
class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid \
rgb(204,204,204);padding-left:1ex">Early 16h systems (Jaguar) are safe because they \
don't have a<br>PSP</blockquote><div><br></div><div>Safe yes, but not helpful in \
coming to grips with the PSP. </div><div> </div><blockquote class="gmail_quote" \
style="margin:0px 0px 0px 0.8ex;border-left:1px solid \
rgb(204,204,204);padding-left:1ex"><span class="gmail-im">> On Sun, Feb 17, 2019 \
at 12:18 AM Matt B <<a href="mailto:matthewwbradley6@gmail.com" \
target="_blank">matthewwbradley6@gmail.com</a>> wrote:<br></span><span \
class="gmail-im">><br></span><span class="gmail-im">> As for the patching, \
afaik AMD has released patches for all of these, but I haven't seen any patches \
for my 16h systems.<br></span><span class="gmail-im">></span><span \
class="gmail-im"><br></span>Almost all the coreboot-supported AMD 16h boards are AMD \
_early_ 16h<br>(so no PSP). Please tell what 16h systems do you have, maybe \
they<br>don't have a PSP at all?</blockquote><div><br></div><div>I was \
specifically referring to the non-coreboot-supported 16h systems with PSP that I \
have. </div><div><br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px \
0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">Now since the build of \
x86 AGESA blob used never actually sends PSP the message RAM is ready, I figured that \
we may never actually load the "PSP Secure OS" but only the bootloader \
part.</blockquote><div><br></div><div>This sounds very promising and should be well \
worth pursuing.</div><div><br></div><blockquote class="gmail_quote" style="margin:0px \
0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"> Also, \
don't forget pre-PSP silicons still have \
SMU/PMU.</blockquote><div><br></div><div>One step at a time I guess. We'd get \
nowhere if we weren't willing to tolerate some imperfections, especially while \
working on others.</div><div><br></div><div>-Matt</div></div></div></div></div><br><div \
class="gmail_quote"><div dir="ltr" class="gmail_attr">On Sun, Feb 17, 2019 at 7:20 AM \
Kyösti Mälkki <<a \
href="mailto:kyosti.malkki@gmail.com">kyosti.malkki@gmail.com</a>> \
wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px \
0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div \
dir="ltr"><div dir="ltr"><br></div><div class="gmail_quote"><div dir="ltr" \
class="gmail_attr">On Sun, Feb 17, 2019 at 8:47 AM Mike Banon <<a \
href="mailto:mikebdp2@gmail.com" target="_blank">mikebdp2@gmail.com</a>> \
wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px \
0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">Hi, \
</blockquote><blockquote class="gmail_quote" style="margin:0px 0px 0px \
0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">Almost all the \
coreboot-supported AMD 16h boards are AMD _early_ 16h<br> (so no PSP). Please tell \
what 16h systems do you have, maybe they<br> don't have a PSP at all?<br>
<br></blockquote><div><br></div><div>Well pcengines/apu2 variants are fam16h model30h \
with PSP.</div><div><br></div><div>I have done experiments with it to reduce PSP blob \
footprint, see the branch [1] in gerrit. There is some (NDAd) documentation about the \
firmware signatures and one can capture PSP firwmare POST codes from LPC. Now since \
the build of x86 AGESA blob used never actually sends PSP the message RAM is ready, I \
figured that we may never actually load the "PSP Secure OS" but only the \
bootloader part.</div><div><br></div><div>Also, don't forget pre-PSP silicons \
still have SMU/PMU.<br></div><br></div><div class="gmail_quote">[1] <a \
href="https://review.coreboot.org/q/topic" \
target="_blank">https://review.coreboot.org/q/topic</a>:"amd-fw-layout"<br></div></div></div>
</blockquote></div>
_______________________________________________
coreboot mailing list -- coreboot@coreboot.org
To unsubscribe send an email to coreboot-leave@coreboot.org
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic