New anti-rollback strategy (no TPM NVRAM write cycles for locking).

src/platform/vboot_reference/vboot_firmware/include/tlcl.h

 /* Copyright (c) 2010 The Chromium OS Authors. All rights reserved.
  * Use of this source code is governed by a BSD-style license that can be
  * found in the LICENSE file.
  */
 
 /* TPM Lightweight Command Library.
  *
  * A low-level library for interfacing to TPM hardware or an emulator.
  */
 
@@ skipping 48 matching lines @@
 void TlclWriteLock(uint32_t index);
 
 /* Read-locks space at [index].
  */
 void TlclReadLock(uint32_t index);
 
 /* Asserts physical presence in software.
  */
 void TlclAssertPhysicalPresence(void);
 
+/* Turns off physical presence and locks it off until next reboot.
+ */
+uint32_t TlclLockPhysicalPresence(void);
+
 /* Sets the nvLocked bit.
  */
 void TlclSetNvLocked(void);
 
 /* Returns 1 if the TPM is owned, 0 otherwise.
  */
 int TlclIsOwned(void);
 
 /* Issues a ForceClear.
  */
 void TlclForceClear(void);
 
-/* Issues a PhysicalEnable.
+/* Issues a SetEnable.
  */
-void TlclPhysicalEnable(void);
+void TlclSetEnable(void);
 
-/* Issues a PhysicalSetDeactivated.  Pass 0 to activate.  Returns result code.
+/* Issues a SetDeactivated.  Pass 0 to activate.  Returns result code.
  */
-int TlclPhysicalSetDeactivated(uint8_t flag);
+int TlclSetDeactivated(uint8_t flag);
 
 /* Gets some permanent flags of interest.  (Add more here as needed.)
  */
 int TlclGetFlags(uint8_t* disable, uint8_t* deactivated);
 
+/* Sets the bGlobalLock flag, which only a reboot can clear.
+ */
+uint32_t TlclSetGlobalLock(void);
+
 #endif  /* TPM_LITE_TLCL_H_ */