PSPTool 是一个用来显示、提取和操作 UEFI 映像中的 PSP 固件的开源工具。
PSPTool是瑞士军刀，用于处理AMD安全处理器（以前称为平台安全处理器或psp）的固件。它将AMD固件定位在UEFI映像中，作为针对AMD平台的BIOS更新的一部分。
它是基于AMD专有文件系统的逆向工程工作，该文件系统用于将固件块打包到UEFI固件映像中。这些通常是16MB大小，可以方便地由uefitool解析。但是，AMD的所有二进制blob都位于uefitool无法分析的填充卷中。
PSPTool可以很好地处理通过BIOS更新获得的UEFI图像。
安装：
git clone https://github.com/cwerling/psptool
cd psptool
sudo python3 setup.py install
命令行参数：
usage: psptool [-h] [-E | -X | -R | -U] file
Display, extract, and manipulate PSP firmware inside UEFI images
positional arguments:
file Binary file to be parsed for PSP firmware
optional arguments:
-h, --help Show this help message and exit.
-E, --entries Default: Parse and display PSP firmware entries.
[-d idx] [-n] [-i] [-v]
-d idx: specifies directory_index (default: all directories)
-n: hide duplicate entries from listings
-i: display additional entry header info
-v: display even more info (AGESA Version, Entropy, MD5)
-t csvfile: only display entries found in the given SPI trace
(see psptrace for details)
-X, --extract-entry Extract one or more PSP firmware entries.
[-d idx [-e idx]] [-n] [-u] [-k] [-v] [-o outfile]
-d idx: specifies directory_index (default: all directories)
-e idx: specifies entry_index (default: all entries)
-n: skip duplicate entries
-u: uncompress compressed entries
-k: convert _pubkeys into PEM format
-v: increase output verbosity
-o file: specifies outfile/outdir (default: stdout/$PWD)
-R, --replace-directory-entry
Copy a new entry body into the ROM file and update metadata accordingly.
Note: The given address is assumed to be overwritable (e.g. padding).
-d idx -e idx -b addr [-y] [-s subfile] [-o outfile]
-d idx: specifies directory_index
-e idx: specifies entry_index
-b addr: specifies destination address of the new entry
-s file: specifies subfile (i.e. the new entry) (default: stdin)
-o file: specifies outfile (default: stdout)
-U, --update-signatures
Re-sign all signatures in the ROM file with a given private key and export
a new ROM file.
-p private_key [-o outfile]
-p file: specifies a path to the private_key in PEM format for re-signing
-o file: specifies outfile (default: stdout)
