~ubuntu-branches/ubuntu/jaunty/trousers/jaunty

Committer: Bazaar Package Importer
Author(s): Daniel Baumann
Date: 2008-01-23 22:03:00 UTC
mfrom: (1.1.1 upstream)
Revision ID: james.westby@ubuntu.com-20080123220300-fhtqja3c0oq0gp6z

Tags: 0.3.1-4

http://bugs.debian.org/457400

http://bugs.debian.org/459682

* Added patch from Aaron M. Ucko <ucko@debian.org> to allow trousers to
  build successfully on amd64, and presumably also other 64-bit
  architectures (Closes: #457400).
* Including udev rule for /dev/tpm from William Lima
  <wlima.amadeus@gmail.com> as suggested by David Smith <dds@google.com>
  (Closes: #459682).
* Added lintian overrides.

files added:
debian/TODO

debian/config

debian/config/45-trousers.rules

debian/libtspi-dev.docs

debian/lintian

debian/lintian/libtspi1

debian/lintian/trousers

debian/patches/01-tss-user.dpatch

debian/patches/02-manapge.dpatch

debian/patches/03-readme.dpatch

debian/patches/04-64bit-cleanliness.dpatch

debian/trousers.examples

man/man3/Tspi_Context_GetRegisteredKeysByUUID2.3

man/man3/Tspi_DAA_IssueCredential.3

man/man3/Tspi_DAA_IssueInit.3

man/man3/Tspi_DAA_IssueSetup.3

man/man3/Tspi_DAA_IssuerKeyVerification.3

man/man3/Tspi_DAA_VerifyInit.3

man/man3/Tspi_DAA_VerifySignature.3

man/man3/Tspi_DecodeBER_TssBlob.3

man/man3/Tspi_EncodeDER_TssBlob.3

man/man3/Tspi_TPM_DAA_JoinCreateDaaPubKey.3

man/man3/Tspi_TPM_DAA_JoinInit.3

man/man3/Tspi_TPM_DAA_JoinStoreCredential.3

man/man3/Tspi_TPM_DAA_Sign.3

man/man3/Tspi_TPM_GetAuditDigest.3

man/man3/Tspi_TPM_OwnerGetSRKPubKey.3

man/man3/Tspi_TPM_Quote2.3

src/include/authsess.h

src/include/obj_context.h

src/include/obj_daa.h

src/include/obj_delfamily.h

src/include/obj_encdata.h

src/include/obj_hash.h

src/include/obj_migdata.h

src/include/obj_nv.h

src/include/obj_pcrs.h

src/include/obj_policy.h

src/include/obj_rsakey.h

src/include/obj_tpm.h

src/include/rpc_tcstp.h

src/include/rpc_tcstp_tcs.h

src/include/rpc_tcstp_tsp.h

src/include/tcs_aik.h

src/include/tcs_context.h

src/include/tcs_key_ps.h

src/include/threads.h

src/include/tsp_audit.h

src/include/tsp_delegate.h

src/include/tsp_seal.h

src/include/tss/TSP.idl

src/include/tss/compat11b.h

src/include/tss/tcs.h

src/include/tss/tcs_defines.h

src/include/tss/tpm.h

src/include/tss/tpm_error.h

src/include/tss/tpm_ordinal.h

src/tcs/crypto

src/tcs/crypto/openssl

src/tcs/crypto/openssl/crypto.c

src/tcs/rpc

src/tcs/rpc/tcstp

src/tcs/rpc/tcstp/rpc.c

src/tcs/rpc/tcstp/rpc_admin.c

src/tcs/rpc/tcstp/rpc_aik.c

src/tcs/rpc/tcstp/rpc_audit.c

src/tcs/rpc/tcstp/rpc_auth.c

src/tcs/rpc/tcstp/rpc_bind.c

src/tcs/rpc/tcstp/rpc_caps.c

src/tcs/rpc/tcstp/rpc_caps_tpm.c

src/tcs/rpc/tcstp/rpc_certify.c

src/tcs/rpc/tcstp/rpc_changeauth.c

src/tcs/rpc/tcstp/rpc_cmk.c

src/tcs/rpc/tcstp/rpc_context.c

src/tcs/rpc/tcstp/rpc_counter.c

src/tcs/rpc/tcstp/rpc_daa.c

src/tcs/rpc/tcstp/rpc_delegate.c

src/tcs/rpc/tcstp/rpc_dir.c

src/tcs/rpc/tcstp/rpc_ek.c

src/tcs/rpc/tcstp/rpc_evlog.c

src/tcs/rpc/tcstp/rpc_key.c

src/tcs/rpc/tcstp/rpc_maint.c

src/tcs/rpc/tcstp/rpc_migration.c

src/tcs/rpc/tcstp/rpc_nv.c

src/tcs/rpc/tcstp/rpc_oper.c

src/tcs/rpc/tcstp/rpc_own.c

src/tcs/rpc/tcstp/rpc_pcr_extend.c

src/tcs/rpc/tcstp/rpc_ps.c

src/tcs/rpc/tcstp/rpc_quote.c

src/tcs/rpc/tcstp/rpc_quote2.c

src/tcs/rpc/tcstp/rpc_random.c

src/tcs/rpc/tcstp/rpc_seal.c

src/tcs/rpc/tcstp/rpc_selftest.c

src/tcs/rpc/tcstp/rpc_sign.c

src/tcs/rpc/tcstp/rpc_tick.c

src/tcs/rpc/tcstp/rpc_transport.c

src/tcs/tcs_aik.c

src/tcs/tcs_auth_mgr.c

src/tcs/tcs_caps.c

src/tcs/tcs_context.c

src/tcs/tcs_context_key.c

src/tcs/tcs_counter.c

src/tcs/tcs_evlog.c

src/tcs/tcs_evlog_biosem.c

src/tcs/tcs_evlog_imaem.c

src/tcs/tcs_key.c

src/tcs/tcs_key_mem_cache.c

src/tcs/tcs_key_ps.c

src/tcs/tcs_migration.c

src/tcs/tcs_pbg.c

src/tcs/tcs_ps.c

src/tcs/tcs_quote.c

src/tcs/tcs_quote2.c

src/tcs/tcs_req_mgr.c

src/tcs/tcs_seal.c

src/tcs/tcsi_admin.c

src/tcs/tcsi_aik.c

src/tcs/tcsi_audit.c

src/tcs/tcsi_auth.c

src/tcs/tcsi_bind.c

src/tcs/tcsi_caps.c

src/tcs/tcsi_caps_tpm.c

src/tcs/tcsi_certify.c

src/tcs/tcsi_changeauth.c

src/tcs/tcsi_cmk.c

src/tcs/tcsi_context.c

src/tcs/tcsi_counter.c

src/tcs/tcsi_daa.c

src/tcs/tcsi_delegate.c

src/tcs/tcsi_dir.c

src/tcs/tcsi_ek.c

src/tcs/tcsi_evlog.c

src/tcs/tcsi_key.c

src/tcs/tcsi_maint.c

src/tcs/tcsi_migration.c

src/tcs/tcsi_nv.c

src/tcs/tcsi_oper.c

src/tcs/tcsi_own.c

src/tcs/tcsi_pcr.c

src/tcs/tcsi_ps.c

src/tcs/tcsi_quote.c

src/tcs/tcsi_quote2.c

src/tcs/tcsi_random.c

src/tcs/tcsi_seal.c

src/tcs/tcsi_selftest.c

src/tcs/tcsi_sign.c

src/tcs/tcsi_tick.c

src/tcs/tcsi_transport.c

src/trspi/crypto/openssl/hash.c

src/trspi/crypto/openssl/rsa.c

src/trspi/crypto/openssl/symmetric.c

src/tspi/obj_daa.c

src/tspi/obj_delfamily.c

src/tspi/obj_migdata.c

src/tspi/obj_nv.c

src/tspi/rpc

src/tspi/rpc/hosttable.c

src/tspi/rpc/tcs_api.c

src/tspi/rpc/tcstp

src/tspi/rpc/tcstp/rpc.c

src/tspi/rpc/tcstp/rpc_admin.c

src/tspi/rpc/tcstp/rpc_aik.c

src/tspi/rpc/tcstp/rpc_audit.c

src/tspi/rpc/tcstp/rpc_auth.c

src/tspi/rpc/tcstp/rpc_bind.c

src/tspi/rpc/tcstp/rpc_caps.c

src/tspi/rpc/tcstp/rpc_caps_tpm.c

src/tspi/rpc/tcstp/rpc_certify.c

src/tspi/rpc/tcstp/rpc_changeauth.c

src/tspi/rpc/tcstp/rpc_cmk.c

src/tspi/rpc/tcstp/rpc_context.c

src/tspi/rpc/tcstp/rpc_counter.c

src/tspi/rpc/tcstp/rpc_daa.c

src/tspi/rpc/tcstp/rpc_delegate.c

src/tspi/rpc/tcstp/rpc_dir.c

src/tspi/rpc/tcstp/rpc_ek.c

src/tspi/rpc/tcstp/rpc_evlog.c

src/tspi/rpc/tcstp/rpc_key.c

src/tspi/rpc/tcstp/rpc_maint.c

src/tspi/rpc/tcstp/rpc_migration.c

src/tspi/rpc/tcstp/rpc_nv.c

src/tspi/rpc/tcstp/rpc_oper.c

src/tspi/rpc/tcstp/rpc_own.c

src/tspi/rpc/tcstp/rpc_pcr_extend.c

src/tspi/rpc/tcstp/rpc_ps.c

src/tspi/rpc/tcstp/rpc_quote.c

src/tspi/rpc/tcstp/rpc_quote2.c

src/tspi/rpc/tcstp/rpc_random.c

src/tspi/rpc/tcstp/rpc_seal.c

src/tspi/rpc/tcstp/rpc_selftest.c

src/tspi/rpc/tcstp/rpc_sign.c

src/tspi/rpc/tcstp/rpc_tick.c

src/tspi/rpc/tcstp/rpc_transport.c

src/tspi/tsp_admin.c

src/tspi/tsp_aik.c

src/tspi/tsp_asym.c

src/tspi/tsp_audit.c

src/tspi/tsp_auth.c

src/tspi/tsp_bind.c

src/tspi/tsp_caps.c

src/tspi/tsp_caps_tpm.c

src/tspi/tsp_certify.c

src/tspi/tsp_changeauth.c

src/tspi/tsp_context_mem.c

src/tspi/tsp_counter.c

src/tspi/tsp_daa.c

src/tspi/tsp_delegate.c

src/tspi/tsp_dir.c

src/tspi/tsp_ek.c

src/tspi/tsp_get_flags.c

src/tspi/tsp_key.c

src/tspi/tsp_maint.c

src/tspi/tsp_migration.c

src/tspi/tsp_nv.c

src/tspi/tsp_oper.c

src/tspi/tsp_own.c

src/tspi/tsp_pcr.c

src/tspi/tsp_pcr_extend.c

src/tspi/tsp_policy.c

src/tspi/tsp_ps.c

src/tspi/tsp_quote.c

src/tspi/tsp_quote2.c

src/tspi/tsp_random.c

src/tspi/tsp_seal.c

src/tspi/tsp_selftest.c

src/tspi/tsp_sign.c

src/tspi/tsp_tick.c

src/tspi/tsp_transport.c

src/tspi/tspi_admin.c

src/tspi/tspi_aik.c

src/tspi/tspi_asn1.c

src/tspi/tspi_audit.c

src/tspi/tspi_bind.c

src/tspi/tspi_caps.c

src/tspi/tspi_caps_tpm.c

src/tspi/tspi_certify.c

src/tspi/tspi_changeauth.c

src/tspi/tspi_cmk.c

src/tspi/tspi_context.c

src/tspi/tspi_counter.c

src/tspi/tspi_daa.c

src/tspi/tspi_delegate.c

src/tspi/tspi_dir.c

src/tspi/tspi_ek.c

src/tspi/tspi_getset.c

src/tspi/tspi_hash.c

src/tspi/tspi_key.c

src/tspi/tspi_maint.c

src/tspi/tspi_migration.c

src/tspi/tspi_nv.c

src/tspi/tspi_oper.c

src/tspi/tspi_own.c

src/tspi/tspi_pcr_comp.c

src/tspi/tspi_pcr_comp12.c

src/tspi/tspi_pcr_events.c

src/tspi/tspi_pcr_extend.c

src/tspi/tspi_policy.c

src/tspi/tspi_ps.c

src/tspi/tspi_quote.c

src/tspi/tspi_quote2.c

src/tspi/tspi_random.c

src/tspi/tspi_seal.c

src/tspi/tspi_selftest.c

src/tspi/tspi_sign.c

src/tspi/tspi_tick.c

src/tspi/tspi_transport.c

files removed:
autom4te.cache

autom4te.cache/output.0

autom4te.cache/output.1

autom4te.cache/requests

autom4te.cache/traces.0

autom4te.cache/traces.1

debian/45-trousers.rules

debian/patches/01_makefiles.diff

debian/patches/01_makefiles.dpatch

debian/patches/02_defaultgroup__tcsd.dpatch

debian/trousers.README.Debian

debian/trousers.default

debian/trousers.dirs

debian/watch

src/include/spi_internal_types.h

src/include/tcs_internal_types.h

src/include/trpctp.h

src/tcs/auth_mgr.c

src/tcs/biosem.c

src/tcs/cache.c

src/tcs/cxt.c

src/tcs/imaem.c

src/tcs/req_mgr.c

src/tcs/tcscm.c

src/tcs/tcsem.c

src/tcs/tcskcm.c

src/tcs/tcspbg.c

src/tcsd/tcsd_wrap.c

src/tcsd_api

src/tcsd_api/calltcsapi.c

src/tcsd_api/clntside.c

src/tcsd_api/hosttable.c

src/tcsd_api/tcstp.c

src/trspi/crypto/openssl/crypto.c

src/tspi/keyreg.c

src/tspi/memmgr.c

src/tspi/secrets.c

src/tspi/spi_context.c

src/tspi/spi_data.c

src/tspi/spi_getset.c

src/tspi/spi_hash.c

src/tspi/spi_key.c

src/tspi/spi_pcr.c

src/tspi/spi_policy.c

src/tspi/spi_tpm.c

files modified:
AUTHORS

ChangeLog

Makefile.in

README

config.guess

config.sub

configure

configure.in

debian/changelog

debian/control

debian/copyright

debian/libtspi-dev.install

debian/libtspi1.install

debian/patches/00list

debian/rules

debian/trousers.docs

debian/trousers.init

debian/trousers.install

debian/trousers.postinst

debian/trousers.postrm

dist/Makefile.in

dist/tcsd.conf.in

man/Makefile.in

man/man3/Makefile.am

man/man3/Makefile.in

man/man3/Tspi_Context_LoadKeyByUUID.3

man/man3/Tspi_TPM_GetPubEndorsementKey.3

man/man5/Makefile.in

man/man5/tcsd.conf.5.in

man/man8/Makefile.in

src/Makefile.in

src/include/Makefile.am

src/include/Makefile.in

src/include/auth_mgr.h

src/include/capabilities.h

src/include/hosttable.h

src/include/memmgr.h

src/include/obj.h

src/include/req_mgr.h

src/include/spi_utils.h

src/include/tcs_tsp.h

src/include/tcs_utils.h

src/include/tcsd.h

src/include/tcsd_ops.h

src/include/tcsd_wrap.h

src/include/tcsem.h

src/include/tcslog.h

src/include/tcsps.h

src/include/trousers/trousers.h

src/include/trousers/tss.h

src/include/trousers_types.h

src/include/tspps.h

src/include/tss/platform.h

src/include/tss/tcpa_defines.h

src/include/tss/tcpa_error.h

src/include/tss/tcpa_struct.h

src/include/tss/tcpa_typedef.h

src/include/tss/tcs_error.h

src/include/tss/tcs_structs.h

src/include/tss/tcs_typedef.h

src/include/tss/tddl_error.h

src/include/tss/tddlapi_error.h

src/include/tss/tddli.h

src/include/tss/tspi.h

src/include/tss/tss_defines.h

src/include/tss/tss_error.h

src/include/tss/tss_error_basics.h

src/include/tss/tss_structs.h

src/include/tss/tss_typedef.h

src/tcs/Makefile.am

src/tcs/Makefile.in

src/tcs/ps/ps_utils.c

src/tcs/ps/tcsps.c

src/tcs/tcs_utils.c

src/tcsd/Makefile.am

src/tcsd/Makefile.in

src/tcsd/platform.c

src/tcsd/svrside.c

src/tcsd/tcsd_conf.c

src/tcsd/tcsd_threads.c

src/tddl/Makefile.am

src/tddl/Makefile.in

src/trspi/Makefile.am

src/trspi/Makefile.in

src/trspi/trousers.c

src/tspi/Makefile.am

src/tspi/Makefile.in

src/tspi/obj.c

src/tspi/obj_context.c

src/tspi/obj_encdata.c

src/tspi/obj_hash.c

src/tspi/obj_pcrs.c

src/tspi/obj_policy.c

src/tspi/obj_rsakey.c

src/tspi/obj_tpm.c

src/tspi/ps/tspps.c

src/tspi/spi_utils.c

tools/Makefile.in

tools/ps_inspect.c

Show diffs side-by-side

added added

removed removed

src/tcs/tcs_key.c

* Licensed Materials - Property of IBM

* trousers - An open source TCG Software Stack

* (C) Copyright International Business Machines Corp. 2004-2006

#include <string.h>

#include "trousers/tss.h"

#include "trousers_types.h"

#include "req_mgr.h"

#include "tcs_tsp.h"

#include "tcslog.h"

#include "tcs_utils.h"

#include "tcs_int_literals.h"

struct key_mem_cache *key_mem_cache_head = NULL;

TSS_UUID NULL_UUID = { 0, 0, 0, 0, 0, { 0, 0, 0, 0, 0, 0 } };

TSS_RESULT

add_cache_entry(TCS_CONTEXT_HANDLE hContext,

BYTE* blob,

TCS_KEY_HANDLE hParent,

TPM_KEY_HANDLE hSlot,

TCS_KEY_HANDLE* new)

{

UINT64 offset;

TSS_RESULT result;

TCS_KEY_HANDLE tcsHandle;

TSS_KEY key, *pKey;

if (!blob) {

pKey = NULL;

} else {

offset = 0;

if ((result = UnloadBlob_TSS_KEY(&offset, blob, &key)))

return result;

if ((tcsHandle = mc_get_handle_by_pub(&key.pubKey, hParent)) == NULL_TCS_HANDLE) {

pKey = &key;

} else {

mc_set_slot_by_handle(tcsHandle, hSlot);

*new = tcsHandle;

goto done;

}

LogDebugFn("No existing key handle for this key, creating new one...");

/* Get a new TCS Key Handle */

tcsHandle = getNextTcsKeyHandle();

LogDebugFn("calling mc_add_entry, TCS handle: 0x%x, TPM handle 0x%x", tcsHandle, hSlot);

if ((result = mc_add_entry(tcsHandle, hSlot, pKey)))

goto done;

LogDebugFn("ctx_mark_key_loaded");

if (ctx_mark_key_loaded(hContext, tcsHandle)) {

LogError("Error marking key as loaded");

result = TCSERR(TSS_E_INTERNAL_ERROR);

goto done;

}

if ((result = mc_set_parent_by_handle(tcsHandle, hParent))) {

LogError("mc_set_parent_by_handle failed.");

goto done;

}

*new = tcsHandle;

done:

if (blob)

destroy_key_refs(&key);

return result;

}

/* Check that the context has this key loaded and return the associated slot. Do not search PS if

* the key is not found */

TSS_RESULT

get_slot_lite(TCS_CONTEXT_HANDLE hContext, TCS_KEY_HANDLE hKey, TPM_KEY_HANDLE *out)

{

if (ctx_has_key_loaded(hContext, hKey)) {

if ((*out = mc_get_slot_by_handle(hKey)) == NULL_TPM_HANDLE)

return TCSERR(TCS_E_INVALID_KEY);

return TSS_SUCCESS;

}

return TCSERR(TCS_E_INVALID_KEY);

}

/* XXX Can get_slot be merged with ensureKeyIsLoaded? */

/* Given a handle, get_slot searches the mem cache for a mapping to a TPM handle. If there is no

100

* mapping, it looks up the pub key of the handle and attempts to load it by finding its pub key

101

* in the persistent store. If that's not found, return error. */

102

TSS_RESULT

103

get_slot(TCS_CONTEXT_HANDLE hContext, TCS_KEY_HANDLE hKey, TPM_KEY_HANDLE *out)

104

{

105

TSS_RESULT result = TSS_SUCCESS;

106

TPM_STORE_PUBKEY *pub = NULL;

107

TPM_KEY_HANDLE slot;

108

109

LogDebugFn("calling mc_get_slot_by_handle");

110

if ((slot = mc_get_slot_by_handle(hKey)) == NULL_TPM_HANDLE) {

111

LogDebugFn("calling mc_get_pub_by_slot");

112

if ((pub = mc_get_pub_by_slot(hKey)) == NULL)

113

return TCSERR(TCS_E_KM_LOADFAILED);

114

115

LogDebugFn("calling LoadKeyShim");

116

/* Otherwise, try to load it using the shim */

117

result = LoadKeyShim(hContext, pub, NULL, &slot);

118

}

119

120

if (!result)

121

*out = slot;

122

123

return result;

124

}

125

126

/* load_key_init is the common entry point for all load key requests to the TCSD. These can come in

127

* as straight load or load2 requests, or through a transport session.

128

129

* We'll always attempt to load the key if

130

* A) It requires auth (load should fail if auth is bad, even when its already been loaded by

131

* another thread)

132

* B) Its in a transport session (the key blob is encrypted)

133

134

* Otherwise if the key is already loaded by another thread and it doesn't require auth, then we

135

* will just set *load_key to FALSE, telling the caller that there's no need to send anything to

136

* the TPM.

137

138

TSS_RESULT

139

load_key_init(TPM_COMMAND_CODE ord,

140

TCS_CONTEXT_HANDLE hContext,

141

TCS_KEY_HANDLE parent_handle,

142

UINT32 blob_size,

143

BYTE* blob,

144

TSS_BOOL encrypted,

145

TPM_AUTH* auth,

146

TSS_BOOL* load_key,

147

UINT64* out_len,

148

BYTE* out,

149

TCS_KEY_HANDLE* handle,

150

TPM_KEY_HANDLE* slot)

151

{

152

TSS_RESULT result = TSS_SUCCESS;

153

TSS_KEY key;

154

UINT64 offset;

155

TPM_KEY_HANDLE tpm_slot;

156

TCS_KEY_HANDLE tcs_handle;

157

TSS_BOOL canLoad;

158

159

160

if (!encrypted) {

161

offset = 0;

162

memset(&key, 0, sizeof(TSS_KEY));

163

if ((result = UnloadBlob_TSS_KEY(&offset, blob, &key)))

164

return result;

165

}

166

167

if (!auth && !encrypted) {

168

LogDebugFn("Checking if LoadKeyByBlob can be avoided by using existing key");

169

170

if ((tcs_handle = mc_get_handle_by_pub(&key.pubKey, parent_handle))) {

171

LogDebugFn("tcs key handle exists");

172

173

tpm_slot = mc_get_slot_by_handle(tcs_handle);

174

if (tpm_slot && (isKeyLoaded(tpm_slot) == TRUE)) {

175

LogDebugFn("Don't need to reload this key.");

176

*handle = tcs_handle;

177

*slot = tpm_slot;

178

*load_key = FALSE;

179

goto done;

180

}

181

}

182

}

183

*load_key = TRUE;

184

185

LogDebugFn("calling canILoadThisKey");

186

if (!encrypted) {

187

if ((result = canILoadThisKey(&(key.algorithmParms), &canLoad)))

188

goto error;

189

190

if (canLoad == FALSE) {

191

LogDebugFn("calling evictFirstKey");

192

/* Evict a key that isn't the parent */

193

if ((result = evictFirstKey(parent_handle)))

194

goto error;

195

}

196

}

197

198

error:

199

if (!encrypted)

200

destroy_key_refs(&key);

201

done:

202

return result;

203

}

204

205

TSS_RESULT

206

load_key_final(TCS_CONTEXT_HANDLE hContext,

207

TCS_KEY_HANDLE parent_handle,

208

TCS_KEY_HANDLE* tcs_handle,

209

BYTE* blob,

210

TPM_KEY_HANDLE slot)

211

{

212

if (*tcs_handle == NULL_TCS_HANDLE)

213

return add_cache_entry(hContext, blob, parent_handle, slot, tcs_handle);

214

else

215

return mc_set_slot_by_handle(*tcs_handle, slot);

216

}

217

218

TSS_RESULT

219

canILoadThisKey(TCPA_KEY_PARMS *parms, TSS_BOOL *b)

220

{

221

UINT16 subCapLength;

222

UINT64 offset;

223

BYTE subCap[100];

224

TCPA_RESULT result;

225

UINT32 respDataLength;

226

BYTE *respData;

227

228

offset = 0;

229

LoadBlob_KEY_PARMS(&offset, subCap, parms);

230

subCapLength = offset;

231

232

if ((result = TCSP_GetCapability_Internal(InternalContext, TCPA_CAP_CHECK_LOADED,

233

subCapLength, subCap, &respDataLength,

234

&respData))) {

235

*b = FALSE;

236

LogDebugFn("NO");

237

return result;

238

}

239

240

*b = respData[0];

241

free(respData);

242

LogDebugFn("%s", *b ? "YES" : "NO");

243

244

return TSS_SUCCESS;

245

}

246

247

TCPA_RESULT

248

internal_EvictByKeySlot(TCPA_KEY_HANDLE slot)

249

{

250

TCPA_RESULT result;

251

UINT32 paramSize;

252

UINT64 offset;

253

BYTE txBlob[TSS_TPM_TXBLOB_SIZE];

254

255

LogDebug("Entering Evict Key");

256

257

if (TPM_VERSION_IS(1,2)) {

258

LogDebugFn("Evicting key using FlushSpecific for TPM 1.2");

259

260

return TCSP_FlushSpecific_Common(slot, TPM_RT_KEY);

261

}

262

263

offset = 10;

264

LoadBlob_UINT32(&offset, slot, txBlob);

265

LoadBlob_Header(TPM_TAG_RQU_COMMAND, offset, TPM_ORD_EvictKey, txBlob);

266

267

if ((result = req_mgr_submit_req(txBlob)))

268

return result;

269

270

result = UnloadBlob_Header(txBlob, &paramSize);

271

272

LogResult("Evict Key", result);

273

return result;

274

}

275

276

TSS_RESULT

277

clearUnknownKeys(TCS_CONTEXT_HANDLE hContext, UINT32 *cleared)

278

{

279

TSS_RESULT result = TSS_SUCCESS;

280

TCPA_KEY_HANDLE_LIST keyList = { 0, NULL };

281

int i;

282

BYTE *respData = NULL;

283

UINT32 respDataSize = 0, count = 0;

284

TCPA_CAPABILITY_AREA capArea = -1;

285

UINT64 offset = 0;

286

TSS_BOOL found = FALSE;

287

struct key_mem_cache *tmp;

288

289

capArea = TCPA_CAP_KEY_HANDLE;

290

291

if ((result = TCSP_GetCapability_Internal(hContext, capArea, 0, NULL, &respDataSize,

292

&respData)))

293

return result;

294

295

if ((result = UnloadBlob_KEY_HANDLE_LIST(&offset, respData, &keyList)))

296

goto done;

297

298

#ifdef TSS_DEBUG

299

LogDebug("Loaded TPM key handles:");

300

for (i = 0; i < keyList.loaded; i++) {

301

LogDebugFn("%d: %x", i, keyList.handle[i]);

302

}

303

304

LogDebug("Loaded TCSD key handles:");

305

i=0;

306

for (tmp = key_mem_cache_head; tmp; tmp = tmp->next) {

307

LogDebugFn("%d: 0x%x -> 0x%x", i++, tmp->tpm_handle,

308

tmp->tcs_handle);

309

}

310

#endif

311

312

for (i = 0; i < keyList.loaded; i++) {

313

/* as long as we're only called from evictFirstKey(), we don't

314

* need to lock here */

315

for (tmp = key_mem_cache_head; tmp; tmp = tmp->next) {

316

if (tmp->tpm_handle == keyList.handle[i]) {

317

found = TRUE;

318

break;

319

}

320

}

321

if (found)

322

found = FALSE;

323

else {

324

if ((result = internal_EvictByKeySlot(keyList.handle[i])))

325

goto done;

326

else

327

count++;

328

}

329

}

330

331

*cleared = count;

332

done:

333

free(keyList.handle);

334

free(respData);

335

336

return TSS_SUCCESS;

337

}

338

339

#if 0

340

TCPA_RESULT

341

clearKeysFromChip(TCS_CONTEXT_HANDLE hContext)

342

{

343

TCPA_RESULT result;

344

TCPA_KEY_HANDLE_LIST keyList;

345

UINT32 i;

346

BYTE *respData = 0;

347

UINT32 respDataSize = 0;

348

TCPA_CAPABILITY_AREA capArea = -1;

349

UINT64 offset = 0;

350

351

capArea = TCPA_CAP_KEY_HANDLE;

352

353

if ((result = TCSP_GetCapability_Internal(hContext, capArea, 0, NULL,

354

&respDataSize, &respData)))

355

return result;

356

357

if ((result = UnloadBlob_KEY_HANDLE_LIST(&offset, respData, &keyList)))

358

return result;

359

for (i = 0; i < keyList.loaded; i++) {

360

if (keyList.handle[i] == SRK_TPM_HANDLE || /*can't evict SRK */

361

keyList.handle[i] == EK_TPM_HANDLE) /*can't evict EK */

362

continue;

363

if ((result = internal_EvictByKeySlot(keyList.handle[i])))

364

return result;

365

}

366

return TSS_SUCCESS;

367

}

368

#endif

369

370

void

371

LoadBlob_KEY_PARMS(UINT64 *offset, BYTE *blob, TCPA_KEY_PARMS *keyInfo)

372

{

373

LoadBlob_UINT32(offset, keyInfo->algorithmID, blob);

374

LoadBlob_UINT16(offset, keyInfo->encScheme, blob);

375

LoadBlob_UINT16(offset, keyInfo->sigScheme, blob);

376

LoadBlob_UINT32(offset, keyInfo->parmSize, blob);

377

LoadBlob(offset, keyInfo->parmSize, blob, keyInfo->parms);

378

}

379

380

TSS_RESULT

381

UnloadBlob_STORE_PUBKEY(UINT64 *offset, BYTE *blob, TCPA_STORE_PUBKEY *store)

382

{

383

if (!store) {

384

UINT32 keyLength;

385

386

UnloadBlob_UINT32(offset, &keyLength, blob);

387

388

if (keyLength > 0)

389

UnloadBlob(offset, keyLength, blob, NULL);

390

391

return TSS_SUCCESS;

392

}

393

394

UnloadBlob_UINT32(offset, &store->keyLength, blob);

395

396

if (store->keyLength == 0) {

397

store->key = NULL;

398

LogWarn("Unloading a public key of size 0!");

399

} else {

400

store->key = (BYTE *)malloc(store->keyLength);

401

if (store->key == NULL) {

402

LogError("malloc of %u bytes failed.", store->keyLength);

403

store->keyLength = 0;

404

return TCSERR(TSS_E_OUTOFMEMORY);

405

}

406

407

UnloadBlob(offset, store->keyLength, blob, store->key);

408

}

409

410

return TSS_SUCCESS;

411

}

412

413

void

414

LoadBlob_STORE_PUBKEY(UINT64 *offset, BYTE * blob, TCPA_STORE_PUBKEY * store)

415

{

416

LoadBlob_UINT32(offset, store->keyLength, blob);

417

LoadBlob(offset, store->keyLength, blob, store->key);

418

}

419

420

TSS_RESULT

421

UnloadBlob_TSS_KEY(UINT64 *offset, BYTE *blob, TSS_KEY *key)

422

{

423

TSS_RESULT rc;

424

425

if (!key) {

426

UINT32 size;

427

428

/* TPM_KEY's ver and TPM_KEY12's tag/file are

429

the same size, so... */

430

UnloadBlob_VERSION(offset, blob, NULL);

431

UnloadBlob_UINT16(offset, NULL, blob);

432

UnloadBlob_KEY_FLAGS(offset, blob, NULL);

433

UnloadBlob_BOOL(offset, NULL, blob);

434

if ((rc = UnloadBlob_KEY_PARMS(offset, blob, NULL)))

435

return rc;

436

UnloadBlob_UINT32(offset, &size, blob);

437

438

if (size > 0)

439

UnloadBlob(offset, size, blob, NULL);

440

441

if ((rc = UnloadBlob_STORE_PUBKEY(offset, blob, NULL)))

442

return rc;

443

444

UnloadBlob_UINT32(offset, &size, blob);

445

446

if (size > 0)

447

UnloadBlob(offset, size, blob, NULL);

448

449

return TSS_SUCCESS;

450

}

451

452

if (key->hdr.key12.tag == TPM_TAG_KEY12) {

453

UnloadBlob_UINT16(offset, &key->hdr.key12.tag, blob);

454

UnloadBlob_UINT16(offset, &key->hdr.key12.fill, blob);

455

} else

456

UnloadBlob_TCPA_VERSION(offset, blob, &key->hdr.key11.ver);

457

UnloadBlob_UINT16(offset, &key->keyUsage, blob);

458

UnloadBlob_KEY_FLAGS(offset, blob, &key->keyFlags);

459

UnloadBlob_BOOL(offset, (TSS_BOOL *)&key->authDataUsage, blob);

460

if ((rc = UnloadBlob_KEY_PARMS(offset, blob, &key->algorithmParms)))

461

return rc;

462

UnloadBlob_UINT32(offset, &key->PCRInfoSize, blob);

463

464

if (key->PCRInfoSize == 0)

465

key->PCRInfo = NULL;

466

else {

467

key->PCRInfo = malloc(key->PCRInfoSize);

468

if (key->PCRInfo == NULL) {

469

LogError("malloc of %u bytes failed.", key->PCRInfoSize);

470

key->PCRInfoSize = 0;

471

free(key->algorithmParms.parms);

472

key->algorithmParms.parms = NULL;

473

key->algorithmParms.parmSize = 0;

474

return TCSERR(TSS_E_OUTOFMEMORY);

475

}

476

UnloadBlob(offset, key->PCRInfoSize, blob, key->PCRInfo);

477

}

478

479

if ((rc = UnloadBlob_STORE_PUBKEY(offset, blob, &key->pubKey))) {

480

free(key->PCRInfo);

481

key->PCRInfo = NULL;

482

key->PCRInfoSize = 0;

483

free(key->algorithmParms.parms);

484

key->algorithmParms.parms = NULL;

485

key->algorithmParms.parmSize = 0;

486

return rc;

487

}

488

UnloadBlob_UINT32(offset, &key->encSize, blob);

489

490

if (key->encSize == 0)

491

key->encData = NULL;

492

else {

493

key->encData = (BYTE *)malloc(key->encSize);

494

if (key->encData == NULL) {

495

LogError("malloc of %d bytes failed.", key->encSize);

496

key->encSize = 0;

497

free(key->algorithmParms.parms);

498

key->algorithmParms.parms = NULL;

499

key->algorithmParms.parmSize = 0;

500

free(key->PCRInfo);

501

key->PCRInfo = NULL;

502

key->PCRInfoSize = 0;

503

free(key->pubKey.key);

504

key->pubKey.key = NULL;

505

key->pubKey.keyLength = 0;

506

return TCSERR(TSS_E_OUTOFMEMORY);

507

}

508

UnloadBlob(offset, key->encSize, blob, key->encData);

509

}

510

511

return TSS_SUCCESS;

512

}

513

514

void

515

LoadBlob_TSS_KEY(UINT64 *offset, BYTE * blob, TSS_KEY * key)

516

{

517

if (key->hdr.key12.tag == TPM_TAG_KEY12) {

518

LoadBlob_UINT16(offset, key->hdr.key12.tag, blob);

519

LoadBlob_UINT16(offset, key->hdr.key12.fill, blob);

520

} else

521

LoadBlob_TCPA_VERSION(offset, blob, &key->hdr.key11.ver);

522

LoadBlob_UINT16(offset, key->keyUsage, blob);

523

LoadBlob_KEY_FLAGS(offset, blob, &key->keyFlags);

524

LoadBlob_BOOL(offset, key->authDataUsage, blob);

525

LoadBlob_KEY_PARMS(offset, blob, &key->algorithmParms);

526

LoadBlob_UINT32(offset, key->PCRInfoSize, blob);

527

LoadBlob(offset, key->PCRInfoSize, blob, key->PCRInfo);

528

LoadBlob_STORE_PUBKEY(offset, blob, &key->pubKey);

529

LoadBlob_UINT32(offset, key->encSize, blob);

530

LoadBlob(offset, key->encSize, blob, key->encData);

531

}

532

533

void

534

LoadBlob_PUBKEY(UINT64 *offset, BYTE * blob, TCPA_PUBKEY * key)

535

{

536

LoadBlob_KEY_PARMS(offset, blob, &(key->algorithmParms));

537

LoadBlob_STORE_PUBKEY(offset, blob, &(key->pubKey));

538

}

539

540

TSS_RESULT

541

UnloadBlob_PUBKEY(UINT64 *offset, BYTE *blob, TCPA_PUBKEY *key)

542

{

543

TSS_RESULT rc;

544

545

if (!key) {

546

if ((rc = UnloadBlob_KEY_PARMS(offset, blob, NULL)))

547

return rc;

548

return UnloadBlob_STORE_PUBKEY(offset, blob, NULL);

549

}

550

551

if ((rc = UnloadBlob_KEY_PARMS(offset, blob, &key->algorithmParms)))

552

return rc;

553

if ((rc = UnloadBlob_STORE_PUBKEY(offset, blob, &key->pubKey))) {

554

free(key->algorithmParms.parms);

555

key->algorithmParms.parms = NULL;

556

key->algorithmParms.parmSize = 0;

557

}

558

559

return rc;

560

}

561

562

void

563

LoadBlob_KEY_FLAGS(UINT64 *offset, BYTE * blob, TCPA_KEY_FLAGS * flags)

564

{

565

LoadBlob_UINT32(offset, *flags, blob);

566

}

567

568

void

569

destroy_key_refs(TSS_KEY *key)

570

{

571

free(key->algorithmParms.parms);

572

key->algorithmParms.parms = NULL;

573

key->algorithmParms.parmSize = 0;

574

575

free(key->pubKey.key);

576

key->pubKey.key = NULL;

577

key->pubKey.keyLength = 0;

578

579

free(key->encData);

580

key->encData = NULL;

581

key->encSize = 0;

582

583

free(key->PCRInfo);

584

key->PCRInfo = NULL;

585

key->PCRInfoSize = 0;

586

}

Older »