mirror of
https://github.com/Dasharo/edk2-upstream.git
synced 2026-06-13 19:16:19 -07:00
Gustavo dos Santos CardosoandSergii Dmytruk
04a0e96d79
This DXE driver implements CAPSULE_TRANSFORMATION_PROTOCOL to unseal outer FMP capsule and extract the fully authenticated inner FMP capsule. A sealed capsule is an FMP capsule that acts as a container for the real FMP capsule. The two-level structure is meant to reuse as much as possible of the existing functionality but address the fact that FMP signs each payload individually instead of a capsule as a whole. Signing a capsule in its entirety avoids the need to use a separate mechanism to authenticate embedded drivers as well as prevents repacking the capsule to modify its unsigned parts in any way. Signed-off-by: Gustavo dos Santos Cardoso <gustavo_16a@hotmail.com> Signed-off-by: Sergii Dmytruk <sergii.dmytruk@3mdeb.com>