diff options
| author | Andreas Fuchs <andreas.fuchs@sit.fraunhofer.de> | 2017-11-13 17:14:36 +0100 |
|---|---|---|
| committer | Philip Tricca <philip.b.tricca@intel.com> | 2017-11-16 10:36:26 -0800 |
| commit | be5899d2b8b08caa3873d591c6b13bc6f9899254 (patch) | |
| tree | 65e2f3b6922b9fd387a529b7af566f61be2184a6 /include | |
| parent | 35750de13af0b2aa4e82e24308a99c7e0f06c961 (diff) | |
| download | tpm2-tss-be5899d2b8b08caa3873d591c6b13bc6f9899254.tar.gz | |
All: Changed namespace from TPM_ to TPM2_
According to the specification the TPM types shall
reside in the namespace TPM2_ in order to not collide
with TPM 1.2 things.
Accordingly, moved all entries from TPM_ to TPM2_ and
also all non-namespcaed definition to TPM2_
Signed-off-by: Andreas Fuchs <andreas.fuchs@sit.fraunhofer.de>
Signed-off-by: Juergen Repp <juergen.repp@sit.fraunhofer.de>
Signed-off-by: Philip Tricca <philip.b.tricca@intel.com>
Diffstat (limited to 'include')
| -rw-r--r-- | include/sapi/sys_api_part3.h | 156 | ||||
| -rw-r--r-- | include/sapi/tss2_mu.h | 16 | ||||
| -rw-r--r-- | include/sapi/tss2_tpm2_types.h | 1595 |
3 files changed, 883 insertions, 884 deletions
diff --git a/include/sapi/sys_api_part3.h b/include/sapi/sys_api_part3.h index 1b61959f..17f86701 100644 --- a/include/sapi/sys_api_part3.h +++ b/include/sapi/sys_api_part3.h @@ -34,378 +34,378 @@ #endif /* TSS2_API_VERSION_1_1_1_1 */ typedef struct { - TPM_ST tag; + TPM2_ST tag; UINT32 responseSize; UINT32 responseCode; UINT8 otherData; } TPM20_Startup_Out; typedef struct { - TPM_ST tag; + TPM2_ST tag; UINT32 responseSize; UINT32 responseCode; UINT8 otherData; } TPM20_Shutdown_Out; typedef struct { - TPM_ST tag; + TPM2_ST tag; UINT32 responseSize; UINT32 responseCode; UINT8 otherData; } TPM20_SelfTest_Out; typedef struct { - TPM_ST tag; + TPM2_ST tag; UINT32 responseSize; UINT32 responseCode; UINT8 otherData; } TPM20_PolicyRestart_Out; typedef struct { - TPM_ST tag; + TPM2_ST tag; UINT32 responseSize; UINT32 responseCode; UINT8 otherData; } TPM20_StirRandom_Out; typedef struct { - TPM_ST tag; + TPM2_ST tag; UINT32 responseSize; UINT32 responseCode; UINT8 otherData; } TPM20_SequenceUpdate_Out; typedef struct { - TPM_ST tag; + TPM2_ST tag; UINT32 responseSize; UINT32 responseCode; UINT8 otherData; } TPM20_SetCommandCodeAuditStatus_Out; typedef struct { - TPM_ST tag; + TPM2_ST tag; UINT32 responseSize; UINT32 responseCode; UINT8 otherData; } TPM20_PCR_Extend_Out; typedef struct { - TPM_ST tag; + TPM2_ST tag; UINT32 responseSize; UINT32 responseCode; UINT8 otherData; } TPM20_PCR_SetAuthPolicy_Out; typedef struct { - TPM_ST tag; + TPM2_ST tag; UINT32 responseSize; UINT32 responseCode; UINT8 otherData; } TPM20_PCR_SetAuthValue_Out; typedef struct { - TPM_ST tag; + TPM2_ST tag; UINT32 responseSize; UINT32 responseCode; UINT8 otherData; } TPM20_PCR_Reset_Out; typedef struct { - TPM_ST tag; + TPM2_ST tag; UINT32 responseSize; UINT32 responseCode; UINT8 otherData; } TPM20_PolicyTicket_Out; typedef struct { - TPM_ST tag; + TPM2_ST tag; UINT32 responseSize; UINT32 responseCode; UINT8 otherData; } TPM20_PolicyOR_Out; typedef struct { - TPM_ST tag; + TPM2_ST tag; UINT32 responseSize; UINT32 responseCode; UINT8 otherData; } TPM20_PolicyPCR_Out; typedef struct { - TPM_ST tag; + TPM2_ST tag; UINT32 responseSize; UINT32 responseCode; UINT8 otherData; } TPM20_PolicyLocality_Out; typedef struct { - TPM_ST tag; + TPM2_ST tag; UINT32 responseSize; UINT32 responseCode; UINT8 otherData; } TPM20_PolicyNV_Out; typedef struct { - TPM_ST tag; + TPM2_ST tag; UINT32 responseSize; UINT32 responseCode; UINT8 otherData; } TPM20_PolicyCounterTimer_Out; typedef struct { - TPM_ST tag; + TPM2_ST tag; UINT32 responseSize; UINT32 responseCode; UINT8 otherData; } TPM20_PolicyCommandCode_Out; typedef struct { - TPM_ST tag; + TPM2_ST tag; UINT32 responseSize; UINT32 responseCode; UINT8 otherData; } TPM20_PolicyPhysicalPresence_Out; typedef struct { - TPM_ST tag; + TPM2_ST tag; UINT32 responseSize; UINT32 responseCode; UINT8 otherData; } TPM20_PolicyCpHash_Out; typedef struct { - TPM_ST tag; + TPM2_ST tag; UINT32 responseSize; UINT32 responseCode; UINT8 otherData; } TPM20_PolicyNameHash_Out; typedef struct { - TPM_ST tag; + TPM2_ST tag; UINT32 responseSize; UINT32 responseCode; UINT8 otherData; } TPM20_PolicyDuplicationSelect_Out; typedef struct { - TPM_ST tag; + TPM2_ST tag; UINT32 responseSize; UINT32 responseCode; UINT8 otherData; } TPM20_PolicyAuthorize_Out; typedef struct { - TPM_ST tag; + TPM2_ST tag; UINT32 responseSize; UINT32 responseCode; UINT8 otherData; } TPM20_PolicyAuthValue_Out; typedef struct { - TPM_ST tag; + TPM2_ST tag; UINT32 responseSize; UINT32 responseCode; UINT8 otherData; } TPM20_PolicyPassword_Out; typedef struct { - TPM_ST tag; + TPM2_ST tag; UINT32 responseSize; UINT32 responseCode; UINT8 otherData; } TPM20_PolicyNvWritten_Out; typedef struct { - TPM_ST tag; + TPM2_ST tag; UINT32 responseSize; UINT32 responseCode; UINT8 otherData; } TPM20_HierarchyControl_Out; typedef struct { - TPM_ST tag; + TPM2_ST tag; UINT32 responseSize; UINT32 responseCode; UINT8 otherData; } TPM20_SetPrimaryPolicy_Out; typedef struct { - TPM_ST tag; + TPM2_ST tag; UINT32 responseSize; UINT32 responseCode; UINT8 otherData; } TPM20_ChangePPS_Out; typedef struct { - TPM_ST tag; + TPM2_ST tag; UINT32 responseSize; UINT32 responseCode; UINT8 otherData; } TPM20_ChangeEPS_Out; typedef struct { - TPM_ST tag; + TPM2_ST tag; UINT32 responseSize; UINT32 responseCode; UINT8 otherData; } TPM20_Clear_Out; typedef struct { - TPM_ST tag; + TPM2_ST tag; UINT32 responseSize; UINT32 responseCode; UINT8 otherData; } TPM20_ClearControl_Out; typedef struct { - TPM_ST tag; + TPM2_ST tag; UINT32 responseSize; UINT32 responseCode; UINT8 otherData; } TPM20_HierarchyChangeAuth_Out; typedef struct { - TPM_ST tag; + TPM2_ST tag; UINT32 responseSize; UINT32 responseCode; UINT8 otherData; } TPM20_DictionaryAttackLockReset_Out; typedef struct { - TPM_ST tag; + TPM2_ST tag; UINT32 responseSize; UINT32 responseCode; UINT8 otherData; } TPM20_DictionaryAttackParameters_Out; typedef struct { - TPM_ST tag; + TPM2_ST tag; UINT32 responseSize; UINT32 responseCode; UINT8 otherData; } TPM20_PP_Commands_Out; typedef struct { - TPM_ST tag; + TPM2_ST tag; UINT32 responseSize; UINT32 responseCode; UINT8 otherData; } TPM20_SetAlgorithmSet_Out; typedef struct { - TPM_ST tag; + TPM2_ST tag; UINT32 responseSize; UINT32 responseCode; UINT8 otherData; } TPM20_FieldUpgradeStart_Out; typedef struct { - TPM_ST tag; + TPM2_ST tag; UINT32 responseSize; UINT32 responseCode; UINT8 otherData; } TPM20_FlushContext_Out; typedef struct { - TPM_ST tag; + TPM2_ST tag; UINT32 responseSize; UINT32 responseCode; UINT8 otherData; } TPM20_EvictControl_Out; typedef struct { - TPM_ST tag; + TPM2_ST tag; UINT32 responseSize; UINT32 responseCode; UINT8 otherData; } TPM20_ClockSet_Out; typedef struct { - TPM_ST tag; + TPM2_ST tag; UINT32 responseSize; UINT32 responseCode; UINT8 otherData; } TPM20_ClockRateAdjust_Out; typedef struct { - TPM_ST tag; + TPM2_ST tag; UINT32 responseSize; UINT32 responseCode; UINT8 otherData; } TPM20_TestParms_Out; typedef struct { - TPM_ST tag; + TPM2_ST tag; UINT32 responseSize; UINT32 responseCode; UINT8 otherData; } TPM20_NV_DefineSpace_Out; typedef struct { - TPM_ST tag; + TPM2_ST tag; UINT32 responseSize; UINT32 responseCode; UINT8 otherData; } TPM20_NV_UndefineSpace_Out; typedef struct { - TPM_ST tag; + TPM2_ST tag; UINT32 responseSize; UINT32 responseCode; UINT8 otherData; } TPM20_NV_UndefineSpaceSpecial_Out; typedef struct { - TPM_ST tag; + TPM2_ST tag; UINT32 responseSize; UINT32 responseCode; UINT8 otherData; } TPM20_NV_Write_Out; typedef struct { - TPM_ST tag; + TPM2_ST tag; UINT32 responseSize; UINT32 responseCode; UINT8 otherData; } TPM20_NV_Increment_Out; typedef struct { - TPM_ST tag; + TPM2_ST tag; UINT32 responseSize; UINT32 responseCode; UINT8 otherData; } TPM20_NV_Extend_Out; typedef struct { - TPM_ST tag; + TPM2_ST tag; UINT32 responseSize; UINT32 responseCode; UINT8 otherData; } TPM20_NV_SetBits_Out; typedef struct { - TPM_ST tag; + TPM2_ST tag; UINT32 responseSize; UINT32 responseCode; UINT8 otherData; } TPM20_NV_WriteLock_Out; typedef struct { - TPM_ST tag; + TPM2_ST tag; UINT32 responseSize; UINT32 responseCode; UINT8 otherData; } TPM20_NV_GlobalWriteLock_Out; typedef struct { - TPM_ST tag; + TPM2_ST tag; UINT32 responseSize; UINT32 responseCode; UINT8 otherData; } TPM20_NV_ReadLock_Out; typedef struct { - TPM_ST tag; + TPM2_ST tag; UINT32 responseSize; UINT32 responseCode; UINT8 otherData; @@ -415,23 +415,23 @@ typedef struct { TSS2_RC Tss2_Sys_Startup_Prepare( TSS2_SYS_CONTEXT *sysContext, - TPM_SU startupType + TPM2_SU startupType ); TSS2_RC Tss2_Sys_Startup( TSS2_SYS_CONTEXT *sysContext, - TPM_SU startupType + TPM2_SU startupType ); TSS2_RC Tss2_Sys_Shutdown_Prepare( TSS2_SYS_CONTEXT *sysContext, - TPM_SU shutdownType + TPM2_SU shutdownType ); TSS2_RC Tss2_Sys_Shutdown( TSS2_SYS_CONTEXT *sysContext, TSS2_SYS_CMD_AUTHS const *cmdAuthsArray, - TPM_SU shutdownType, + TPM2_SU shutdownType, TSS2_SYS_RSP_AUTHS *rspAuthsArray ); @@ -472,14 +472,14 @@ TSS2_RC Tss2_Sys_GetTestResult_Prepare( TSS2_RC Tss2_Sys_GetTestResult_Complete( TSS2_SYS_CONTEXT *sysContext, TPM2B_MAX_BUFFER *outData, - TPM_RC *testResult + TPM2_RC *testResult ); TSS2_RC Tss2_Sys_GetTestResult( TSS2_SYS_CONTEXT *sysContext, TSS2_SYS_CMD_AUTHS const *cmdAuthsArray, TPM2B_MAX_BUFFER *outData, - TPM_RC *testResult, + TPM2_RC *testResult, TSS2_SYS_RSP_AUTHS *rspAuthsArray ); @@ -489,7 +489,7 @@ TSS2_RC Tss2_Sys_StartAuthSession_Prepare( TPMI_DH_ENTITY bind, const TPM2B_NONCE *nonceCaller, const TPM2B_ENCRYPTED_SECRET *encryptedSalt, - TPM_SE sessionType, + TPM2_SE sessionType, const TPMT_SYM_DEF *symmetric, TPMI_ALG_HASH authHash ); @@ -507,7 +507,7 @@ TSS2_RC Tss2_Sys_StartAuthSession( TSS2_SYS_CMD_AUTHS const *cmdAuthsArray, const TPM2B_NONCE *nonceCaller, const TPM2B_ENCRYPTED_SECRET *encryptedSalt, - TPM_SE sessionType, + TPM2_SE sessionType, const TPMT_SYM_DEF *symmetric, TPMI_ALG_HASH authHash, TPMI_SH_AUTH_SESSION *sessionHandle, @@ -570,7 +570,7 @@ TSS2_RC Tss2_Sys_Load_Prepare( TSS2_RC Tss2_Sys_Load_Complete( TSS2_SYS_CONTEXT *sysContext, - TPM_HANDLE *objectHandle, + TPM2_HANDLE *objectHandle, TPM2B_NAME *name ); @@ -580,7 +580,7 @@ TSS2_RC Tss2_Sys_Load( TSS2_SYS_CMD_AUTHS const *cmdAuthsArray, const TPM2B_PRIVATE *inPrivate, const TPM2B_PUBLIC *inPublic, - TPM_HANDLE *objectHandle, + TPM2_HANDLE *objectHandle, TPM2B_NAME *name, TSS2_SYS_RSP_AUTHS *rspAuthsArray ); @@ -594,7 +594,7 @@ TSS2_RC Tss2_Sys_LoadExternal_Prepare( TSS2_RC Tss2_Sys_LoadExternal_Complete( TSS2_SYS_CONTEXT *sysContext, - TPM_HANDLE *objectHandle, + TPM2_HANDLE *objectHandle, TPM2B_NAME *name ); @@ -604,7 +604,7 @@ TSS2_RC Tss2_Sys_LoadExternal( const TPM2B_SENSITIVE *inPrivate, const TPM2B_PUBLIC *inPublic, TPMI_RH_HIERARCHY hierarchy, - TPM_HANDLE *objectHandle, + TPM2_HANDLE *objectHandle, TPM2B_NAME *name, TSS2_SYS_RSP_AUTHS *rspAuthsArray ); @@ -1708,7 +1708,7 @@ TSS2_RC Tss2_Sys_PolicyNV_Prepare( TPMI_SH_POLICY policySession, const TPM2B_OPERAND *operandB, UINT16 offset, - TPM_EO operation + TPM2_EO operation ); TSS2_RC Tss2_Sys_PolicyNV( @@ -1719,7 +1719,7 @@ TSS2_RC Tss2_Sys_PolicyNV( TSS2_SYS_CMD_AUTHS const *cmdAuthsArray, const TPM2B_OPERAND *operandB, UINT16 offset, - TPM_EO operation, + TPM2_EO operation, TSS2_SYS_RSP_AUTHS *rspAuthsArray ); @@ -1728,7 +1728,7 @@ TSS2_RC Tss2_Sys_PolicyCounterTimer_Prepare( TPMI_SH_POLICY policySession, const TPM2B_OPERAND *operandB, UINT16 offset, - TPM_EO operation + TPM2_EO operation ); TSS2_RC Tss2_Sys_PolicyCounterTimer( @@ -1737,21 +1737,21 @@ TSS2_RC Tss2_Sys_PolicyCounterTimer( TSS2_SYS_CMD_AUTHS const *cmdAuthsArray, const TPM2B_OPERAND *operandB, UINT16 offset, - TPM_EO operation, + TPM2_EO operation, TSS2_SYS_RSP_AUTHS *rspAuthsArray ); TSS2_RC Tss2_Sys_PolicyCommandCode_Prepare( TSS2_SYS_CONTEXT *sysContext, TPMI_SH_POLICY policySession, - TPM_CC code + TPM2_CC code ); TSS2_RC Tss2_Sys_PolicyCommandCode( TSS2_SYS_CONTEXT *sysContext, TPMI_SH_POLICY policySession, TSS2_SYS_CMD_AUTHS const *cmdAuthsArray, - TPM_CC code, + TPM2_CC code, TSS2_SYS_RSP_AUTHS *rspAuthsArray ); @@ -1900,7 +1900,7 @@ TSS2_RC Tss2_Sys_CreatePrimary_Prepare( TSS2_RC Tss2_Sys_CreatePrimary_Complete( TSS2_SYS_CONTEXT *sysContext, - TPM_HANDLE *objectHandle, + TPM2_HANDLE *objectHandle, TPM2B_PUBLIC *outPublic, TPM2B_CREATION_DATA *creationData, TPM2B_DIGEST *creationHash, @@ -1916,7 +1916,7 @@ TSS2_RC Tss2_Sys_CreatePrimary( const TPM2B_PUBLIC *inPublic, const TPM2B_DATA *outsideInfo, const TPML_PCR_SELECTION *creationPCR, - TPM_HANDLE *objectHandle, + TPM2_HANDLE *objectHandle, TPM2B_PUBLIC *outPublic, TPM2B_CREATION_DATA *creationData, TPM2B_DIGEST *creationHash, @@ -2226,20 +2226,20 @@ TSS2_RC Tss2_Sys_ClockSet( TSS2_RC Tss2_Sys_ClockRateAdjust_Prepare( TSS2_SYS_CONTEXT *sysContext, TPMI_RH_PROVISION auth, - TPM_CLOCK_ADJUST rateAdjust + TPM2_CLOCK_ADJUST rateAdjust ); TSS2_RC Tss2_Sys_ClockRateAdjust( TSS2_SYS_CONTEXT *sysContext, TPMI_RH_PROVISION auth, TSS2_SYS_CMD_AUTHS const *cmdAuthsArray, - TPM_CLOCK_ADJUST rateAdjust, + TPM2_CLOCK_ADJUST rateAdjust, TSS2_SYS_RSP_AUTHS *rspAuthsArray ); TSS2_RC Tss2_Sys_GetCapability_Prepare( TSS2_SYS_CONTEXT *sysContext, - TPM_CAP capability, + TPM2_CAP capability, UINT32 property, UINT32 propertyCount ); @@ -2253,7 +2253,7 @@ TSS2_RC Tss2_Sys_GetCapability_Complete( TSS2_RC Tss2_Sys_GetCapability( TSS2_SYS_CONTEXT *sysContext, TSS2_SYS_CMD_AUTHS const *cmdAuthsArray, - TPM_CAP capability, + TPM2_CAP capability, UINT32 property, UINT32 propertyCount, TPMI_YES_NO *moreData, diff --git a/include/sapi/tss2_mu.h b/include/sapi/tss2_mu.h index a23076cb..cfc38de2 100644 --- a/include/sapi/tss2_mu.h +++ b/include/sapi/tss2_mu.h @@ -169,32 +169,32 @@ Tss2_MU_UINT64_Unmarshal( UINT64 *dest); TSS2_RC -Tss2_MU_TPM_CC_Marshal( - TPM_CC src, +Tss2_MU_TPM2_CC_Marshal( + TPM2_CC src, uint8_t buffer[], size_t buffer_size, size_t *offset); TSS2_RC -Tss2_MU_TPM_CC_Unmarshal( +Tss2_MU_TPM2_CC_Unmarshal( uint8_t const buffer[], size_t buffer_size, size_t *offset, - TPM_CC *dest); + TPM2_CC *dest); TSS2_RC -Tss2_MU_TPM_ST_Marshal( - TPM_ST src, +Tss2_MU_TPM2_ST_Marshal( + TPM2_ST src, uint8_t buffer[], size_t buffer_size, size_t *offset); TSS2_RC -Tss2_MU_TPM_ST_Unmarshal( +Tss2_MU_TPM2_ST_Unmarshal( uint8_t const buffer[], size_t buffer_size, size_t *offset, - TPM_ST *dest); + TPM2_ST *dest); TSS2_RC Tss2_MU_TPMA_ALGORITHM_Marshal( diff --git a/include/sapi/tss2_tpm2_types.h b/include/sapi/tss2_tpm2_types.h index 81a23e3c..1086a343 100644 --- a/include/sapi/tss2_tpm2_types.h +++ b/include/sapi/tss2_tpm2_types.h @@ -38,632 +38,631 @@ /* Defines from previous implementation.h; DEPRECATED */ #define YES 1 #define NO 0 -#define MAX_COMMAND_SIZE 4096 /* maximum size of a command */ -#define MAX_RESPONSE_SIZE 4096 /* maximum size of a response */ -#define MAX_SESSION_NUM 3 /* this is the current maximum value */ -#define HASH_COUNT NUM_PCR_BANKS /* this is for compatibility */ +#define TPM2_MAX_COMMAND_SIZE 4096 /* maximum size of a command */ +#define TPM2_MAX_RESPONSE_SIZE 4096 /* maximum size of a response */ +#define TPM2_MAX_SESSION_NUM 3 /* this is the current maximum value */ /* TPM constants for buffer sizes */ -#define NUM_PCR_BANKS 3 -#define MAX_DIGEST_BUFFER 1024 -#define MAX_NV_BUFFER_SIZE 2048 -#define MAX_PCRS 32 -#define MAX_ALG_LIST_SIZE 128 -#define MAX_CAP_CC 256 -#define MAX_CAP_BUFFER 1024 -#define MAX_CONTEXT_SIZE 5120 +#define TPM2_NUM_PCR_BANKS 3 +#define TPM2_MAX_DIGEST_BUFFER 1024 +#define TPM2_MAX_NV_BUFFER_SIZE 2048 +#define TPM2_MAX_PCRS 32 +#define TPM2_MAX_ALG_LIST_SIZE 128 +#define TPM2_MAX_CAP_CC 256 +#define TPM2_MAX_CAP_BUFFER 1024 +#define TPM2_MAX_CONTEXT_SIZE 5120 /* Hash algorithm sizes */ -#define SHA_DIGEST_SIZE 20 -#define SHA1_DIGEST_SIZE 20 -#define SHA256_DIGEST_SIZE 32 -#define SHA384_DIGEST_SIZE 48 -#define SHA512_DIGEST_SIZE 64 -#define SM3_256_DIGEST_SIZE 32 +#define TPM2_SHA_DIGEST_SIZE 20 +#define TPM2_SHA1_DIGEST_SIZE 20 +#define TPM2_SHA256_DIGEST_SIZE 32 +#define TPM2_SHA384_DIGEST_SIZE 48 +#define TPM2_SHA512_DIGEST_SIZE 64 +#define TPM2_SM3_256_DIGEST_SIZE 32 /* Encryption algorithm sizes */ -#define MAX_SYM_BLOCK_SIZE 16 -#define MAX_SYM_DATA 256 -#define MAX_ECC_KEY_BYTES 128 -#define MAX_SYM_KEY_BYTES 32 -#define MAX_RSA_KEY_BYTES 512 +#define TPM2_MAX_SYM_BLOCK_SIZE 16 +#define TPM2_MAX_SYM_DATA 256 +#define TPM2_MAX_ECC_KEY_BYTES 128 +#define TPM2_MAX_SYM_KEY_BYTES 32 +#define TPM2_MAX_RSA_KEY_BYTES 512 /* Capability buffer sizes*/ -#define LABEL_MAX_BUFFER 32 -#define PCR_SELECT_MAX ((MAX_PCRS+7)/8) -#define MAX_CAP_HANDLES ((MAX_CAP_BUFFER-sizeof(TPM_CAP)-\ - sizeof(UINT32))/sizeof(TPM_HANDLE)) -#define MAX_CAP_ALGS ((MAX_CAP_BUFFER-sizeof(TPM_CAP)-\ +#define TPM2_LABEL_MAX_BUFFER 32 +#define TPM2_PCR_SELECT_MAX ((TPM2_MAX_PCRS+7)/8) +#define TPM2_MAX_CAP_HANDLES ((TPM2_MAX_CAP_BUFFER-sizeof(TPM2_CAP)-\ + sizeof(UINT32))/sizeof(TPM2_HANDLE)) +#define TPM2_MAX_CAP_ALGS ((TPM2_MAX_CAP_BUFFER-sizeof(TPM2_CAP)-\ sizeof(UINT32))/sizeof(TPMS_ALG_PROPERTY)) -#define MAX_TPM_PROPERTIES ((MAX_CAP_BUFFER-sizeof(TPM_CAP)-\ +#define TPM2_MAX_TPM_PROPERTIES ((TPM2_MAX_CAP_BUFFER-sizeof(TPM2_CAP)-\ sizeof(UINT32))/sizeof(TPMS_TAGGED_PROPERTY)) -#define MAX_PCR_PROPERTIES ((MAX_CAP_BUFFER-sizeof(TPM_CAP)-\ +#define TPM2_MAX_PCR_PROPERTIES ((TPM2_MAX_CAP_BUFFER-sizeof(TPM2_CAP)-\ sizeof(UINT32))/sizeof(TPMS_TAGGED_PCR_SELECT)) -#define MAX_ECC_CURVES ((MAX_CAP_BUFFER-sizeof(TPM_CAP)-\ - sizeof(UINT32))/sizeof(TPM_ECC_CURVE)) -#define MAX_TAGGED_POLICIES ((MAX_CAP_BUFFER-sizeof(TPM_CAP)-\ +#define TPM2_MAX_ECC_CURVES ((TPM2_MAX_CAP_BUFFER-sizeof(TPM2_CAP)-\ + sizeof(UINT32))/sizeof(TPM2_ECC_CURVE)) +#define TPM2_MAX_TAGGED_POLICIES ((TPM2_MAX_CAP_BUFFER-sizeof(TPM2_CAP)-\ sizeof(UINT32))/sizeof(TPMS_TAGGED_POLICY)) -#define PRIVATE_VENDOR_SPECIFIC_BYTES ((MAX_RSA_KEY_BYTES/2)*(3+2)) +#define TPM2_PRIVATE_VENDOR_SPECIFIC_BYTES ((TPM2_MAX_RSA_KEY_BYTES/2)*(3+2)) /* Vendor Specific Defines */ -#define MAX_PTT_PROPERTIES (MAX_CAP_BUFFER/sizeof(UINT32)) - -// From TCG Algorithm Registry: Table 3 - Definition of TPM_ALG_ID Constants -typedef UINT16 TPM_ALG_ID; -#define TPM_ALG_ERROR 0x0000 -#define TPM_ALG_RSA 0x0001 -#define TPM_ALG_SHA 0x0004 -#define TPM_ALG_SHA1 0x0004 -#define TPM_ALG_HMAC 0x0005 -#define TPM_ALG_AES 0x0006 -#define TPM_ALG_MGF1 0x0007 -#define TPM_ALG_KEYEDHASH 0x0008 -#define TPM_ALG_XOR 0x000A -#define TPM_ALG_SHA256 0x000B -#define TPM_ALG_SHA384 0x000C -#define TPM_ALG_SHA512 0x000D -#define TPM_ALG_NULL 0x0010 -#define TPM_ALG_SM3_256 0x0012 -#define TPM_ALG_SM4 0x0013 -#define TPM_ALG_RSASSA 0x0014 -#define TPM_ALG_RSAES 0x0015 -#define TPM_ALG_RSAPSS 0x0016 -#define TPM_ALG_OAEP 0x0017 -#define TPM_ALG_ECDSA 0x0018 -#define TPM_ALG_ECDH 0x0019 -#define TPM_ALG_ECDAA 0x001A -#define TPM_ALG_SM2 0x001B -#define TPM_ALG_ECSCHNORR 0x001C -#define TPM_ALG_ECMQV 0x001D -#define TPM_ALG_KDF1_SP800_56A 0x0020 -#define TPM_ALG_KDF2 0x0021 -#define TPM_ALG_KDF1_SP800_108 0x0022 -#define TPM_ALG_ECC 0x0023 -#define TPM_ALG_SYMCIPHER 0x0025 -#define TPM_ALG_CAMELLIA 0x0026 -#define TPM_ALG_CTR 0x0040 -#define TPM_ALG_SHA3_256 0x0027 -#define TPM_ALG_SHA3_384 0x0028 -#define TPM_ALG_SHA3_512 0x0029 -#define TPM_ALG_OFB 0x0041 -#define TPM_ALG_CBC 0x0042 -#define TPM_ALG_CFB 0x0043 -#define TPM_ALG_ECB 0x0044 -#define TPM_ALG_FIRST 0x0001 -#define TPM_ALG_LAST 0x0044 - -// From TCG Algorithm Registry: Table 3 - Definition of TPM_ECC_CURVE Constants - -typedef UINT16 TPM_ECC_CURVE; -#define TPM_ECC_NONE (TPM_ECC_CURVE)(0x0000) -#define TPM_ECC_NIST_P192 (TPM_ECC_CURVE)(0x0001) -#define TPM_ECC_NIST_P224 (TPM_ECC_CURVE)(0x0002) -#define TPM_ECC_NIST_P256 (TPM_ECC_CURVE)(0x0003) -#define TPM_ECC_NIST_P384 (TPM_ECC_CURVE)(0x0004) -#define TPM_ECC_NIST_P521 (TPM_ECC_CURVE)(0x0005) -#define TPM_ECC_BN_P256 (TPM_ECC_CURVE)(0x0010) -#define TPM_ECC_BN_P638 (TPM_ECC_CURVE)(0x0011) -#define TPM_ECC_SM2_P256 (TPM_ECC_CURVE)(0x0020) - -// From TPM 2.0 Part 2: Table 13 - Definition of TPM_CC Constants -typedef UINT32 TPM_CC; -#define TPM_CC_NV_UndefineSpaceSpecial (TPM_CC)(0x0000011f) -#define TPM_CC_FIRST TPM_CC_NV_UndefineSpaceSpecial -#define TPM_CC_EvictControl (TPM_CC)(0x00000120) -#define TPM_CC_HierarchyControl (TPM_CC)(0x00000121) -#define TPM_CC_NV_UndefineSpace (TPM_CC)(0x00000122) -#define TPM_CC_ChangeEPS (TPM_CC)(0x00000124) -#define TPM_CC_ChangePPS (TPM_CC)(0x00000125) -#define TPM_CC_Clear (TPM_CC)(0x00000126) -#define TPM_CC_ClearControl (TPM_CC)(0x00000127) -#define TPM_CC_ClockSet (TPM_CC)(0x00000128) -#define TPM_CC_HierarchyChangeAuth (TPM_CC)(0x00000129) -#define TPM_CC_NV_DefineSpace (TPM_CC)(0x0000012a) -#define TPM_CC_PCR_Allocate (TPM_CC)(0x0000012b) -#define TPM_CC_PCR_SetAuthPolicy (TPM_CC)(0x0000012c) -#define TPM_CC_PP_Commands (TPM_CC)(0x0000012d) -#define TPM_CC_SetPrimaryPolicy (TPM_CC)(0x0000012e) -#define TPM_CC_FieldUpgradeStart (TPM_CC)(0x0000012f) -#define TPM_CC_ClockRateAdjust (TPM_CC)(0x00000130) -#define TPM_CC_CreatePrimary (TPM_CC)(0x00000131) -#define TPM_CC_NV_GlobalWriteLock (TPM_CC)(0x00000132) -#define TPM_CC_GetCommandAuditDigest (TPM_CC)(0x00000133) -#define TPM_CC_NV_Increment (TPM_CC)(0x00000134) -#define TPM_CC_NV_SetBits (TPM_CC)(0x00000135) -#define TPM_CC_NV_Extend (TPM_CC)(0x00000136) -#define TPM_CC_NV_Write (TPM_CC)(0x00000137) -#define TPM_CC_NV_WriteLock (TPM_CC)(0x00000138) -#define TPM_CC_DictionaryAttackLockReset (TPM_CC)(0x00000139) -#define TPM_CC_DictionaryAttackParameters (TPM_CC)(0x0000013a) -#define TPM_CC_NV_ChangeAuth (TPM_CC)(0x0000013b) -#define TPM_CC_PCR_Event (TPM_CC)(0x0000013c) -#define TPM_CC_PCR_Reset (TPM_CC)(0x0000013d) -#define TPM_CC_SequenceComplete (TPM_CC)(0x0000013e) -#define TPM_CC_SetAlgorithmSet (TPM_CC)(0x0000013f) -#define TPM_CC_SetCommandCodeAuditStatus (TPM_CC)(0x00000140) -#define TPM_CC_FieldUpgradeData (TPM_CC)(0x00000141) -#define TPM_CC_IncrementalSelfTest (TPM_CC)(0x00000142) -#define TPM_CC_SelfTest (TPM_CC)(0x00000143) -#define TPM_CC_Startup (TPM_CC)(0x00000144) -#define TPM_CC_Shutdown (TPM_CC)(0x00000145) -#define TPM_CC_StirRandom (TPM_CC)(0x00000146) -#define TPM_CC_ActivateCredential (TPM_CC)(0x00000147) -#define TPM_CC_Certify (TPM_CC)(0x00000148) -#define TPM_CC_PolicyNV (TPM_CC)(0x00000149) -#define TPM_CC_CertifyCreation (TPM_CC)(0x0000014a) -#define TPM_CC_Duplicate (TPM_CC)(0x0000014b) -#define TPM_CC_GetTime (TPM_CC)(0x0000014c) -#define TPM_CC_GetSessionAuditDigest (TPM_CC)(0x0000014d) -#define TPM_CC_NV_Read (TPM_CC)(0x0000014e) -#define TPM_CC_NV_ReadLock (TPM_CC)(0x0000014f) -#define TPM_CC_ObjectChangeAuth (TPM_CC)(0x00000150) -#define TPM_CC_PolicySecret (TPM_CC)(0x00000151) -#define TPM_CC_Rewrap (TPM_CC)(0x00000152) -#define TPM_CC_Create (TPM_CC)(0x00000153) -#define TPM_CC_ECDH_ZGen (TPM_CC)(0x00000154) -#define TPM_CC_HMAC (TPM_CC)(0x00000155) -#define TPM_CC_Import (TPM_CC)(0x00000156) -#define TPM_CC_Load (TPM_CC)(0x00000157) -#define TPM_CC_Quote (TPM_CC)(0x00000158) -#define TPM_CC_RSA_Decrypt (TPM_CC)(0x00000159) -#define TPM_CC_HMAC_Start (TPM_CC)(0x0000015b) -#define TPM_CC_SequenceUpdate (TPM_CC)(0x0000015c) -#define TPM_CC_Sign (TPM_CC)(0x0000015d) -#define TPM_CC_Unseal (TPM_CC)(0x0000015e) -#define TPM_CC_PolicySigned (TPM_CC)(0x00000160) -#define TPM_CC_ContextLoad (TPM_CC)(0x00000161) -#define TPM_CC_ContextSave (TPM_CC)(0x00000162) -#define TPM_CC_ECDH_KeyGen (TPM_CC)(0x00000163) -#define TPM_CC_EncryptDecrypt (TPM_CC)(0x00000164) -#define TPM_CC_FlushContext (TPM_CC)(0x00000165) -#define TPM_CC_LoadExternal (TPM_CC)(0x00000167) -#define TPM_CC_MakeCredential (TPM_CC)(0x00000168) -#define TPM_CC_NV_ReadPublic (TPM_CC)(0x00000169) -#define TPM_CC_PolicyAuthorize (TPM_CC)(0x0000016a) -#define TPM_CC_PolicyAuthValue (TPM_CC)(0x0000016b) -#define TPM_CC_PolicyCommandCode (TPM_CC)(0x0000016c) -#define TPM_CC_PolicyCounterTimer (TPM_CC)(0x0000016d) -#define TPM_CC_PolicyCpHash (TPM_CC)(0x0000016e) -#define TPM_CC_PolicyLocality (TPM_CC)(0x0000016f) -#define TPM_CC_PolicyNameHash (TPM_CC)(0x00000170) -#define TPM_CC_PolicyOR (TPM_CC)(0x00000171) -#define TPM_CC_PolicyTicket (TPM_CC)(0x00000172) -#define TPM_CC_ReadPublic (TPM_CC)(0x00000173) -#define TPM_CC_RSA_Encrypt (TPM_CC)(0x00000174) -#define TPM_CC_StartAuthSession (TPM_CC)(0x00000176) -#define TPM_CC_VerifySignature (TPM_CC)(0x00000177) -#define TPM_CC_ECC_Parameters (TPM_CC)(0x00000178) -#define TPM_CC_FirmwareRead (TPM_CC)(0x00000179) -#define TPM_CC_GetCapability (TPM_CC)(0x0000017a) -#define TPM_CC_GetRandom (TPM_CC)(0x0000017b) -#define TPM_CC_GetTestResult (TPM_CC)(0x0000017c) -#define TPM_CC_Hash (TPM_CC)(0x0000017d) -#define TPM_CC_PCR_Read (TPM_CC)(0x0000017e) -#define TPM_CC_PolicyPCR (TPM_CC)(0x0000017f) -#define TPM_CC_PolicyRestart (TPM_CC)(0x00000180) -#define TPM_CC_ReadClock (TPM_CC)(0x00000181) -#define TPM_CC_PCR_Extend (TPM_CC)(0x00000182) -#define TPM_CC_PCR_SetAuthValue (TPM_CC)(0x00000183) -#define TPM_CC_NV_Certify (TPM_CC)(0x00000184) -#define TPM_CC_EventSequenceComplete (TPM_CC)(0x00000185) -#define TPM_CC_HashSequenceStart (TPM_CC)(0x00000186) -#define TPM_CC_PolicyPhysicalPresence (TPM_CC)(0x00000187) -#define TPM_CC_PolicyDuplicationSelect (TPM_CC)(0x00000188) -#define TPM_CC_PolicyGetDigest (TPM_CC)(0x00000189) -#define TPM_CC_TestParms (TPM_CC)(0x0000018a) -#define TPM_CC_Commit (TPM_CC)(0x0000018b) -#define TPM_CC_PolicyPassword (TPM_CC)(0x0000018c) -#define TPM_CC_ZGen_2Phase (TPM_CC)(0x0000018d) -#define TPM_CC_EC_Ephemeral (TPM_CC)(0x0000018e) -#define TPM_CC_PolicyNvWritten (TPM_CC)(0x0000018f) -#define TPM_CC_EncryptDecrypt2 (TPM_CC)(0x00000193) -#define TPM_CC_LAST (TPM_CC)(0x00000193) -#define TPM_CC_Vendor_TCG_Test (TPM_CC)(0x20000000) +#define TPM2_MAX_PTT_PROPERTIES (TPM2_MAX_CAP_BUFFER/sizeof(UINT32)) + +// From TCG Algorithm Registry: Table 3 - Definition of TPM2_ALG_ID Constants +typedef UINT16 TPM2_ALG_ID; +#define TPM2_ALG_ERROR 0x0000 +#define TPM2_ALG_RSA 0x0001 +#define TPM2_ALG_SHA 0x0004 +#define TPM2_ALG_SHA1 0x0004 +#define TPM2_ALG_HMAC 0x0005 +#define TPM2_ALG_AES 0x0006 +#define TPM2_ALG_MGF1 0x0007 +#define TPM2_ALG_KEYEDHASH 0x0008 +#define TPM2_ALG_XOR 0x000A +#define TPM2_ALG_SHA256 0x000B +#define TPM2_ALG_SHA384 0x000C +#define TPM2_ALG_SHA512 0x000D +#define TPM2_ALG_NULL 0x0010 +#define TPM2_ALG_SM3_256 0x0012 +#define TPM2_ALG_SM4 0x0013 +#define TPM2_ALG_RSASSA 0x0014 +#define TPM2_ALG_RSAES 0x0015 +#define TPM2_ALG_RSAPSS 0x0016 +#define TPM2_ALG_OAEP 0x0017 +#define TPM2_ALG_ECDSA 0x0018 +#define TPM2_ALG_ECDH 0x0019 +#define TPM2_ALG_ECDAA 0x001A +#define TPM2_ALG_SM2 0x001B +#define TPM2_ALG_ECSCHNORR 0x001C +#define TPM2_ALG_ECMQV 0x001D +#define TPM2_ALG_KDF1_SP800_56A 0x0020 +#define TPM2_ALG_KDF2 0x0021 +#define TPM2_ALG_KDF1_SP800_108 0x0022 +#define TPM2_ALG_ECC 0x0023 +#define TPM2_ALG_SYMCIPHER 0x0025 +#define TPM2_ALG_CAMELLIA 0x0026 +#define TPM2_ALG_CTR 0x0040 +#define TPM2_ALG_SHA3_256 0x0027 +#define TPM2_ALG_SHA3_384 0x0028 +#define TPM2_ALG_SHA3_512 0x0029 +#define TPM2_ALG_OFB 0x0041 +#define TPM2_ALG_CBC 0x0042 +#define TPM2_ALG_CFB 0x0043 +#define TPM2_ALG_ECB 0x0044 +#define TPM2_ALG_FIRST 0x0001 +#define TPM2_ALG_LAST 0x0044 + +// From TCG Algorithm Registry: Table 3 - Definition of TPM2_ECC_CURVE Constants + +typedef UINT16 TPM2_ECC_CURVE; +#define TPM2_ECC_NONE (TPM2_ECC_CURVE)(0x0000) +#define TPM2_ECC_NIST_P192 (TPM2_ECC_CURVE)(0x0001) +#define TPM2_ECC_NIST_P224 (TPM2_ECC_CURVE)(0x0002) +#define TPM2_ECC_NIST_P256 (TPM2_ECC_CURVE)(0x0003) +#define TPM2_ECC_NIST_P384 (TPM2_ECC_CURVE)(0x0004) +#define TPM2_ECC_NIST_P521 (TPM2_ECC_CURVE)(0x0005) +#define TPM2_ECC_BN_P256 (TPM2_ECC_CURVE)(0x0010) +#define TPM2_ECC_BN_P638 (TPM2_ECC_CURVE)(0x0011) +#define TPM2_ECC_SM2_P256 (TPM2_ECC_CURVE)(0x0020) + +// From TPM 2.0 Part 2: Table 13 - Definition of TPM2_CC Constants +typedef UINT32 TPM2_CC; +#define TPM2_CC_NV_UndefineSpaceSpecial (TPM2_CC)(0x0000011f) +#define TPM2_CC_FIRST TPM2_CC_NV_UndefineSpaceSpecial +#define TPM2_CC_EvictControl (TPM2_CC)(0x00000120) +#define TPM2_CC_HierarchyControl (TPM2_CC)(0x00000121) +#define TPM2_CC_NV_UndefineSpace (TPM2_CC)(0x00000122) +#define TPM2_CC_ChangeEPS (TPM2_CC)(0x00000124) +#define TPM2_CC_ChangePPS (TPM2_CC)(0x00000125) +#define TPM2_CC_Clear (TPM2_CC)(0x00000126) +#define TPM2_CC_ClearControl (TPM2_CC)(0x00000127) +#define TPM2_CC_ClockSet (TPM2_CC)(0x00000128) +#define TPM2_CC_HierarchyChangeAuth (TPM2_CC)(0x00000129) +#define TPM2_CC_NV_DefineSpace (TPM2_CC)(0x0000012a) +#define TPM2_CC_PCR_Allocate (TPM2_CC)(0x0000012b) +#define TPM2_CC_PCR_SetAuthPolicy (TPM2_CC)(0x0000012c) +#define TPM2_CC_PP_Commands (TPM2_CC)(0x0000012d) +#define TPM2_CC_SetPrimaryPolicy (TPM2_CC)(0x0000012e) +#define TPM2_CC_FieldUpgradeStart (TPM2_CC)(0x0000012f) +#define TPM2_CC_ClockRateAdjust (TPM2_CC)(0x00000130) +#define TPM2_CC_CreatePrimary (TPM2_CC)(0x00000131) +#define TPM2_CC_NV_GlobalWriteLock (TPM2_CC)(0x00000132) +#define TPM2_CC_GetCommandAuditDigest (TPM2_CC)(0x00000133) +#define TPM2_CC_NV_Increment (TPM2_CC)(0x00000134) +#define TPM2_CC_NV_SetBits (TPM2_CC)(0x00000135) +#define TPM2_CC_NV_Extend (TPM2_CC)(0x00000136) +#define TPM2_CC_NV_Write (TPM2_CC)(0x00000137) +#define TPM2_CC_NV_WriteLock (TPM2_CC)(0x00000138) +#define TPM2_CC_DictionaryAttackLockReset (TPM2_CC)(0x00000139) +#define TPM2_CC_DictionaryAttackParameters (TPM2_CC)(0x0000013a) +#define TPM2_CC_NV_ChangeAuth (TPM2_CC)(0x0000013b) +#define TPM2_CC_PCR_Event (TPM2_CC)(0x0000013c) +#define TPM2_CC_PCR_Reset (TPM2_CC)(0x0000013d) +#define TPM2_CC_SequenceComplete (TPM2_CC)(0x0000013e) +#define TPM2_CC_SetAlgorithmSet (TPM2_CC)(0x0000013f) +#define TPM2_CC_SetCommandCodeAuditStatus (TPM2_CC)(0x00000140) +#define TPM2_CC_FieldUpgradeData (TPM2_CC)(0x00000141) +#define TPM2_CC_IncrementalSelfTest (TPM2_CC)(0x00000142) +#define TPM2_CC_SelfTest (TPM2_CC)(0x00000143) +#define TPM2_CC_Startup (TPM2_CC)(0x00000144) +#define TPM2_CC_Shutdown (TPM2_CC)(0x00000145) +#define TPM2_CC_StirRandom (TPM2_CC)(0x00000146) +#define TPM2_CC_ActivateCredential (TPM2_CC)(0x00000147) +#define TPM2_CC_Certify (TPM2_CC)(0x00000148) +#define TPM2_CC_PolicyNV (TPM2_CC)(0x00000149) +#define TPM2_CC_CertifyCreation (TPM2_CC)(0x0000014a) +#define TPM2_CC_Duplicate (TPM2_CC)(0x0000014b) +#define TPM2_CC_GetTime (TPM2_CC)(0x0000014c) +#define TPM2_CC_GetSessionAuditDigest (TPM2_CC)(0x0000014d) +#define TPM2_CC_NV_Read (TPM2_CC)(0x0000014e) +#define TPM2_CC_NV_ReadLock (TPM2_CC)(0x0000014f) +#define TPM2_CC_ObjectChangeAuth (TPM2_CC)(0x00000150) +#define TPM2_CC_PolicySecret (TPM2_CC)(0x00000151) +#define TPM2_CC_Rewrap (TPM2_CC)(0x00000152) +#define TPM2_CC_Create (TPM2_CC)(0x00000153) +#define TPM2_CC_ECDH_ZGen (TPM2_CC)(0x00000154) +#define TPM2_CC_HMAC (TPM2_CC)(0x00000155) +#define TPM2_CC_Import (TPM2_CC)(0x00000156) +#define TPM2_CC_Load (TPM2_CC)(0x00000157) +#define TPM2_CC_Quote (TPM2_CC)(0x00000158) +#define TPM2_CC_RSA_Decrypt (TPM2_CC)(0x00000159) +#define TPM2_CC_HMAC_Start (TPM2_CC)(0x0000015b) +#define TPM2_CC_SequenceUpdate (TPM2_CC)(0x0000015c) +#define TPM2_CC_Sign (TPM2_CC)(0x0000015d) +#define TPM2_CC_Unseal (TPM2_CC)(0x0000015e) +#define TPM2_CC_PolicySigned (TPM2_CC)(0x00000160) +#define TPM2_CC_ContextLoad (TPM2_CC)(0x00000161) +#define TPM2_CC_ContextSave (TPM2_CC)(0x00000162) +#define TPM2_CC_ECDH_KeyGen (TPM2_CC)(0x00000163) +#define TPM2_CC_EncryptDecrypt (TPM2_CC)(0x00000164) +#define TPM2_CC_FlushContext (TPM2_CC)(0x00000165) +#define TPM2_CC_LoadExternal (TPM2_CC)(0x00000167) +#define TPM2_CC_MakeCredential (TPM2_CC)(0x00000168) +#define TPM2_CC_NV_ReadPublic (TPM2_CC)(0x00000169) +#define TPM2_CC_PolicyAuthorize (TPM2_CC)(0x0000016a) +#define TPM2_CC_PolicyAuthValue (TPM2_CC)(0x0000016b) +#define TPM2_CC_PolicyCommandCode (TPM2_CC)(0x0000016c) +#define TPM2_CC_PolicyCounterTimer (TPM2_CC)(0x0000016d) +#define TPM2_CC_PolicyCpHash (TPM2_CC)(0x0000016e) +#define TPM2_CC_PolicyLocality (TPM2_CC)(0x0000016f) +#define TPM2_CC_PolicyNameHash (TPM2_CC)(0x00000170) +#define TPM2_CC_PolicyOR (TPM2_CC)(0x00000171) +#define TPM2_CC_PolicyTicket (TPM2_CC)(0x00000172) +#define TPM2_CC_ReadPublic (TPM2_CC)(0x00000173) +#define TPM2_CC_RSA_Encrypt (TPM2_CC)(0x00000174) +#define TPM2_CC_StartAuthSession (TPM2_CC)(0x00000176) +#define TPM2_CC_VerifySignature (TPM2_CC)(0x00000177) +#define TPM2_CC_ECC_Parameters (TPM2_CC)(0x00000178) +#define TPM2_CC_FirmwareRead (TPM2_CC)(0x00000179) +#define TPM2_CC_GetCapability (TPM2_CC)(0x0000017a) +#define TPM2_CC_GetRandom (TPM2_CC)(0x0000017b) +#define TPM2_CC_GetTestResult (TPM2_CC)(0x0000017c) +#define TPM2_CC_Hash (TPM2_CC)(0x0000017d) +#define TPM2_CC_PCR_Read (TPM2_CC)(0x0000017e) +#define TPM2_CC_PolicyPCR (TPM2_CC)(0x0000017f) +#define TPM2_CC_PolicyRestart (TPM2_CC)(0x00000180) +#define TPM2_CC_ReadClock (TPM2_CC)(0x00000181) +#define TPM2_CC_PCR_Extend (TPM2_CC)(0x00000182) +#define TPM2_CC_PCR_SetAuthValue (TPM2_CC)(0x00000183) +#define TPM2_CC_NV_Certify (TPM2_CC)(0x00000184) +#define TPM2_CC_EventSequenceComplete (TPM2_CC)(0x00000185) +#define TPM2_CC_HashSequenceStart (TPM2_CC)(0x00000186) +#define TPM2_CC_PolicyPhysicalPresence (TPM2_CC)(0x00000187) +#define TPM2_CC_PolicyDuplicationSelect (TPM2_CC)(0x00000188) +#define TPM2_CC_PolicyGetDigest (TPM2_CC)(0x00000189) +#define TPM2_CC_TestParms (TPM2_CC)(0x0000018a) +#define TPM2_CC_Commit (TPM2_CC)(0x0000018b) +#define TPM2_CC_PolicyPassword (TPM2_CC)(0x0000018c) +#define TPM2_CC_ZGen_2Phase (TPM2_CC)(0x0000018d) +#define TPM2_CC_EC_Ephemeral (TPM2_CC)(0x0000018e) +#define TPM2_CC_PolicyNvWritten (TPM2_CC)(0x0000018f) +#define TPM2_CC_EncryptDecrypt2 (TPM2_CC)(0x00000193) +#define TPM2_CC_LAST (TPM2_CC)(0x00000193) +#define TPM2_CC_Vendor_TCG_Test (TPM2_CC)(0x20000000) /* Table 5 Definition of Types for Documentation Clarity */ -typedef UINT32 TPM_ALGORITHM_ID; /* this is the 1.2 compatible form of the TPM_ALG_ID */ -typedef UINT32 TPM_MODIFIER_INDICATOR; /* */ -typedef UINT32 TPM_AUTHORIZATION_SIZE; /* the authorizationSize parameter in a command */ -typedef UINT32 TPM_PARAMETER_SIZE; /* the parameterSize parameter in a command */ -typedef UINT16 TPM_KEY_SIZE; /* a key size in octets */ -typedef UINT16 TPM_KEY_BITS; /* a key size in bits */ - -/* Table 6 Definition of UINT32 TPM_SPEC Constants <> */ -typedef UINT32 TPM_SPEC; -#define TPM_SPEC_FAMILY (0x322E3000 ) /* ASCII 2.0 with null terminator */ -#define TPM_SPEC_LEVEL (00 ) /* the level number for the specification */ -#define TPM_SPEC_VERSION (126 ) /* the version number of the spec 001.26 * 100 */ -#define TPM_SPEC_YEAR (2015 ) /* the year of the version */ -#define TPM_SPEC_DAY_OF_YEAR (233 ) /* the day of the year August 21 2015 */ - -/* Table 7 Definition of UINT32 TPM_GENERATED Constants <O> */ -typedef UINT32 TPM_GENERATED; -#define TPM_GENERATED_VALUE (0xff544347 ) /* 0xFF TCG FF 54 43 4716 */ - -/* Table 16 Definition of UINT32 TPM_RC Constants Actions <OUT> */ -typedef UINT32 TPM_RC; -#define TPM_RC_SUCCESS (0x000 ) /* */ -#define TPM_RC_BAD_TAG (0x01E ) /* defined for compatibility with TPM 1.2 */ -#define RC_VER1 (0x100 ) /* set for all format 0 response codes */ -#define TPM_RC_INITIALIZE (RC_VER1 + 0x000 ) /* TPM not initialized by TPM2_Startup or already initialized */ -#define TPM_RC_FAILURE (RC_VER1 + 0x001 ) /* commands not being accepted because of a TPM failureNOTE This may be returned by TPM2_GetTestResult as the testResult parameter. */ -#define TPM_RC_SEQUENCE (RC_VER1 + 0x003 ) /* improper use of a sequence handle */ -#define TPM_RC_PRIVATE (RC_VER1 + 0x00B ) /* not currently used */ -#define TPM_RC_HMAC (RC_VER1 + 0x019 ) /* not currently used */ -#define TPM_RC_DISABLED (RC_VER1 + 0x020 ) /* the command is disabled */ -#define TPM_RC_EXCLUSIVE (RC_VER1 + 0x021 ) /* command failed because audit sequence required exclusivity */ -#define TPM_RC_AUTH_TYPE (RC_VER1 + 0x024 ) /* authorization handle is not correct for command */ -#define TPM_RC_AUTH_MISSING (RC_VER1 + 0x025 ) /* command requires an authorization session for handle and it is not present. */ -#define TPM_RC_POLICY (RC_VER1 + 0x026 ) /* policy failure in math operation or an invalid authPolicy value */ -#define TPM_RC_PCR (RC_VER1 + 0x027 ) /* PCR check fail */ -#define TPM_RC_PCR_CHANGED (RC_VER1 + 0x028 ) /* PCR have changed since checked. */ -#define TPM_RC_UPGRADE (RC_VER1 + 0x02D ) /* for all commands other than TPM2_FieldUpgradeData this code indicates that the TPM is in field upgrade mode for TPM2_FieldUpgradeData this code indicates that the TPM is not in field upgrade mode */ -#define TPM_RC_TOO_MANY_CONTEXTS (RC_VER1 + 0x02E ) /* context ID counter is at maximum. */ -#define TPM_RC_AUTH_UNAVAILABLE (RC_VER1 + 0x02F ) /* authValue or authPolicy is not available for selected entity. */ -#define TPM_RC_REBOOT (RC_VER1 + 0x030 ) /* a _TPM_Init and StartupCLEAR is required before the TPM can resume operation. */ -#define TPM_RC_UNBALANCED (RC_VER1 + 0x031 ) /* the protection algorithms hash and symmetric are not reasonably balanced. The digest size of the hash must be larger than the key size of the symmetric algorithm. */ -#define TPM_RC_COMMAND_SIZE (RC_VER1 + 0x042 ) /* command commandSize value is inconsistent with contents of the command buffer either the size is not the same as the octets loaded by the hardware interface layer or the value is not large enough to hold a command header */ -#define TPM_RC_COMMAND_CODE (RC_VER1 + 0x043 ) /* command code not supported */ -#define TPM_RC_AUTHSIZE (RC_VER1 + 0x044 ) /* the value of authorizationSize is out of range or the number of octets in the Authorization Area is greater than required */ -#define TPM_RC_AUTH_CONTEXT (RC_VER1 + 0x045 ) /* use of an authorization session with a context command or another command that cannot have an authorization session. */ -#define TPM_RC_NV_RANGE (RC_VER1 + 0x046 ) /* NV offset+size is out of range. */ -#define TPM_RC_NV_SIZE (RC_VER1 + 0x047 ) /* Requested allocation size is larger than allowed. */ -#define TPM_RC_NV_LOCKED (RC_VER1 + 0x048 ) /* NV access locked. */ -#define TPM_RC_NV_AUTHORIZATION (RC_VER1 + 0x049 ) /* NV access authorization fails in command actions this failure does not affect lockout.action */ -#define TPM_RC_NV_UNINITIALIZED (RC_VER1 + 0x04A ) /* an NV Index is used before being initialized or the state saved by TPM2_ShutdownSTATE could not be restored */ -#define TPM_RC_NV_SPACE (RC_VER1 + 0x04B ) /* insufficient space for NV allocation */ -#define TPM_RC_NV_DEFINED (RC_VER1 + 0x04C ) /* NV Index or persistent object already defined */ -#define TPM_RC_BAD_CONTEXT (RC_VER1 + 0x050 ) /* context in TPM2_ContextLoad is not valid */ -#define TPM_RC_CPHASH (RC_VER1 + 0x051 ) /* cpHash value already set or not correct for use */ -#define TPM_RC_PARENT (RC_VER1 + 0x052 ) /* handle for parent is not a valid parent */ -#define TPM_RC_NEEDS_TEST (RC_VER1 + 0x053 ) /* some function needs testing. */ -#define TPM_RC_NO_RESULT (RC_VER1 + 0x054 ) /* returned when an internal function cannot process a request due to an unspecified problem. This code is usually related to invalid parameters that are not properly filtered by the input unmarshaling code. */ -#define TPM_RC_SENSITIVE (RC_VER1 + 0x055 ) /* the sensitive area did not unmarshal correctly after decryption this code is used in lieu of the other unmarshaling errors so that an attacker cannot determine where the unmarshaling error occurred */ -#define RC_MAX_FM0 (RC_VER1 + 0x07F ) /* largest version 1 code that is not a warning */ -#define RC_FMT1 (0x080 ) /* This bit is SET in all format 1 response codesThe codes in this group may have a value added to them to indicate the handle session or parameter to which they apply. */ -#define TPM_RC_ASYMMETRIC (RC_FMT1 + 0x001 ) /* asymmetric algorithm not supported or not correct */ -#define TPM_RC_ATTRIBUTES (RC_FMT1 + 0x002 ) /* inconsistent attributes */ -#define TPM_RC_HASH (RC_FMT1 + 0x003 ) /* hash algorithm not supported or not appropriate */ -#define TPM_RC_VALUE (RC_FMT1 + 0x004 ) /* value is out of range or is not correct for the context */ -#define TPM_RC_HIERARCHY (RC_FMT1 + 0x005 ) /* hierarchy is not enabled or is not correct for the use */ -#define TPM_RC_KEY_SIZE (RC_FMT1 + 0x007 ) /* key size is not supported */ -#define TPM_RC_MGF (RC_FMT1 + 0x008 ) /* mask generation function not supported */ -#define TPM_RC_MODE (RC_FMT1 + 0x009 ) /* mode of operation not supported */ -#define TPM_RC_TYPE (RC_FMT1 + 0x00A ) /* the type of the value is not appropriate for the use */ -#define TPM_RC_HANDLE (RC_FMT1 + 0x00B ) /* the handle is not correct for the use */ -#define TPM_RC_KDF (RC_FMT1 + 0x00C ) /* unsupported key derivation function or function not appropriate for use */ -#define TPM_RC_RANGE (RC_FMT1 + 0x00D ) /* value was out of allowed range. */ -#define TPM_RC_AUTH_FAIL (RC_FMT1 + 0x00E ) /* the authorization HMAC check failed and DA counter incremented */ -#define TPM_RC_NONCE (RC_FMT1 + 0x00F ) /* invalid nonce size or nonce value mismatch */ -#define TPM_RC_PP (RC_FMT1 + 0x010 ) /* authorization requires assertion of PP */ -#define TPM_RC_SCHEME (RC_FMT1 + 0x012 ) /* unsupported or incompatible scheme */ -#define TPM_RC_SIZE (RC_FMT1 + 0x015 ) /* structure is the wrong size */ -#define TPM_RC_SYMMETRIC (RC_FMT1 + 0x016 ) /* unsupported symmetric algorithm or key size or not appropriate for instance */ -#define TPM_RC_TAG (RC_FMT1 + 0x017 ) /* incorrect structure tag */ -#define TPM_RC_SELECTOR (RC_FMT1 + 0x018 ) /* union selector is incorrect */ -#define TPM_RC_INSUFFICIENT (RC_FMT1 + 0x01A ) /* the TPM was unable to unmarshal a value because there were not enough octets in the input buffer */ -#define TPM_RC_SIGNATURE (RC_FMT1 + 0x01B ) /* the signature is not valid */ -#define TPM_RC_KEY (RC_FMT1 + 0x01C ) /* key fields are not compatible with the selected use */ -#define TPM_RC_POLICY_FAIL (RC_FMT1 + 0x01D ) /* a policy check failed */ -#define TPM_RC_INTEGRITY (RC_FMT1 + 0x01F ) /* integrity check failed */ -#define TPM_RC_TICKET (RC_FMT1 + 0x020 ) /* invalid ticket */ -#define TPM_RC_RESERVED_BITS (RC_FMT1 + 0x021 ) /* reserved bits not set to zero as required */ -#define TPM_RC_BAD_AUTH (RC_FMT1 + 0x022 ) /* authorization failure without DA implications */ -#define TPM_RC_EXPIRED (RC_FMT1 + 0x023 ) /* the policy has expired */ -#define TPM_RC_POLICY_CC (RC_FMT1 + 0x024 ) /* the commandCode in the policy is not the commandCode of the command or the command code in a policy command references a command that is not implemented */ -#define TPM_RC_BINDING (RC_FMT1 + 0x025 ) /* public and sensitive portions of an object are not cryptographically bound */ -#define TPM_RC_CURVE (RC_FMT1 + 0x026 ) /* curve not supported */ -#define TPM_RC_ECC_POINT (RC_FMT1 + 0x027 ) /* point is not on the required curve. */ -#define RC_WARN (0x900 ) /* set for warning response codes */ -#define TPM_RC_CONTEXT_GAP (RC_WARN + 0x001 ) /* gap for context ID is too large */ -#define TPM_RC_OBJECT_MEMORY (RC_WARN + 0x002 ) /* out of memory for object contexts */ -#define TPM_RC_SESSION_MEMORY (RC_WARN + 0x003 ) /* out of memory for session contexts */ -#define TPM_RC_MEMORY (RC_WARN + 0x004 ) /* out of shared objectsession memory or need space for internal operations */ -#define TPM_RC_SESSION_HANDLES (RC_WARN + 0x005 ) /* out of session handles a session must be flushed before a new session may be created */ -#define TPM_RC_OBJECT_HANDLES (RC_WARN + 0x006 ) /* out of object handles the handle space for objects is depleted and a reboot is requiredNOTE This cannot occur on the reference implementation.NOTE There is no reason why an implementation would implement a design that would deplete handle space. Platform specifications are encouraged to forbid it. */ -#define TPM_RC_LOCALITY (RC_WARN + 0x007 ) /* bad locality */ -#define TPM_RC_YIELDED (RC_WARN + 0x008 ) /* the TPM has suspended operation on the command forward progress was made and the command may be retriedSee TPM 2.0 Part 1 Multitasking.NOTE This cannot occur on the reference implementation. */ -#define TPM_RC_CANCELED (RC_WARN + 0x009 ) /* the command was canceled */ -#define TPM_RC_TESTING (RC_WARN + 0x00A ) /* TPM is performing selftests */ -#define TPM_RC_REFERENCE_H0 (RC_WARN + 0x010 ) /* the 1st handle in the handle area references a transient object or session that is not loaded */ -#define TPM_RC_REFERENCE_H1 (RC_WARN + 0x011 ) /* the 2nd handle in the handle area references a transient object or session that is not loaded */ -#define TPM_RC_REFERENCE_H2 (RC_WARN + 0x012 ) /* the 3rd handle in the handle area references a transient object or session that is not loaded */ -#define TPM_RC_REFERENCE_H3 (RC_WARN + 0x013 ) /* the 4th handle in the handle area references a transient object or session that is not loaded */ -#define TPM_RC_REFERENCE_H4 (RC_WARN + 0x014 ) /* the 5th handle in the handle area references a transient object or session that is not loaded */ -#define TPM_RC_REFERENCE_H5 (RC_WARN + 0x015 ) /* the 6th handle in the handle area references a transient object or session that is not loaded */ -#define TPM_RC_REFERENCE_H6 (RC_WARN + 0x016 ) /* the 7th handle in the handle area references a transient object or session that is not loaded */ -#define TPM_RC_REFERENCE_S0 (RC_WARN + 0x018 ) /* the 1st authorization session handle references a session that is not loaded */ -#define TPM_RC_REFERENCE_S1 (RC_WARN + 0x019 ) /* the 2nd authorization session handle references a session that is not loaded */ -#define TPM_RC_REFERENCE_S2 (RC_WARN + 0x01A ) /* the 3rd authorization session handle references a session that is not loaded */ -#define TPM_RC_REFERENCE_S3 (RC_WARN + 0x01B ) /* the 4th authorization session handle references a session that is not loaded */ -#define TPM_RC_REFERENCE_S4 (RC_WARN + 0x01C ) /* the 5th session handle references a session that is not loaded */ -#define TPM_RC_REFERENCE_S5 (RC_WARN + 0x01D ) /* the 6th session handle references a session that is not loaded */ -#define TPM_RC_REFERENCE_S6 (RC_WARN + 0x01E ) /* the 7th authorization session handle references a session that is not loaded */ -#define TPM_RC_NV_RATE (RC_WARN + 0x020 ) /* the TPM is ratelimiting accesses to prevent wearout of NV */ -#define TPM_RC_LOCKOUT (RC_WARN + 0x021 ) /* authorizations for objects subject to DA protection are not allowed at this time because the TPM is in DA lockout mode */ -#define TPM_RC_RETRY (RC_WARN + 0x022 ) /* the TPM was not able to start the command */ -#define TPM_RC_NV_UNAVAILABLE (RC_WARN + 0x023 ) /* the command may require writing of NV and NV is not current accessible */ -#define TPM_RC_NOT_USED (RC_WARN + 0x7F ) /* this value is reserved and shall not be returned by the TPM */ -#define TPM_RC_H (0x000 ) /* add to a handlerelated error */ -#define TPM_RC_P (0x040 ) /* add to a parameterrelated error */ -#define TPM_RC_S (0x800 ) /* add to a sessionrelated error */ -#define TPM_RC_1 (0x100 ) /* add to a parameter handle or sessionrelated error */ -#define TPM_RC_2 (0x200 ) /* add to a parameter handle or sessionrelated error */ -#define TPM_RC_3 (0x300 ) /* add to a parameter handle or sessionrelated error */ -#define TPM_RC_4 (0x400 ) /* add to a parameter handle or sessionrelated error */ -#define TPM_RC_5 (0x500 ) /* add to a parameter handle or sessionrelated error */ -#define TPM_RC_6 (0x600 ) /* add to a parameter handle or sessionrelated error */ -#define TPM_RC_7 (0x700 ) /* add to a parameter handle or sessionrelated error */ -#define TPM_RC_8 (0x800 ) /* add to a parameterrelated error */ -#define TPM_RC_9 (0x900 ) /* add to a parameterrelated error */ -#define TPM_RC_A (0xA00 ) /* add to a parameterrelated error */ -#define TPM_RC_B (0xB00 ) /* add to a parameterrelated error */ -#define TPM_RC_C (0xC00 ) /* add to a parameterrelated error */ -#define TPM_RC_D (0xD00 ) /* add to a parameterrelated error */ -#define TPM_RC_E (0xE00 ) /* add to a parameterrelated error */ -#define TPM_RC_F (0xF00 ) /* add to a parameterrelated error */ -#define TPM_RC_N_MASK (0xF00 ) /* number mask */ - -/* Table 17 Definition of INT8 TPM_CLOCK_ADJUST Constants <IN> */ -typedef INT8 TPM_CLOCK_ADJUST; -#define TPM_CLOCK_COARSE_SLOWER (-3 ) /* Slow the Clock update rate by one coarse adjustment step. */ -#define TPM_CLOCK_MEDIUM_SLOWER (-2 ) /* Slow the Clock update rate by one medium adjustment step. */ -#define TPM_CLOCK_FINE_SLOWER (-1 ) /* Slow the Clock update rate by one fine adjustment step. */ -#define TPM_CLOCK_NO_CHANGE (0 ) /* No change to the Clock update rate. */ -#define TPM_CLOCK_FINE_FASTER (1 ) /* Speed the Clock update rate by one fine adjustment step. */ -#define TPM_CLOCK_MEDIUM_FASTER (2 ) /* Speed the Clock update rate by one medium adjustment step. */ -#define TPM_CLOCK_COARSE_FASTER (3 ) /* Speed the Clock update rate by one coarse adjustment step. */ - -/* Table 18 Definition of UINT16 TPM_EO Constants <INOUT> */ -typedef UINT16 TPM_EO; -#define TPM_EO_EQ (0x0000 ) /* A B */ -#define TPM_EO_NEQ (0x0001 ) /* A B */ -#define TPM_EO_SIGNED_GT (0x0002 ) /* A > B signed */ -#define TPM_EO_UNSIGNED_GT (0x0003 ) /* A > B unsigned */ -#define TPM_EO_SIGNED_LT (0x0004 ) /* A < B signed */ -#define TPM_EO_UNSIGNED_LT (0x0005 ) /* A < B unsigned */ -#define TPM_EO_SIGNED_GE (0x0006 ) /* A B signed */ -#define TPM_EO_UNSIGNED_GE (0x0007 ) /* A B unsigned */ -#define TPM_EO_SIGNED_LE (0x0008 ) /* A B signed */ -#define TPM_EO_UNSIGNED_LE (0x0009 ) /* A B unsigned */ -#define TPM_EO_BITSET (0x000A ) /* All bits SET in B are SET in A. ABB */ -#define TPM_EO_BITCLEAR (0x000B ) /* All bits SET in B are CLEAR in A. AB0 */ - -/* Table 19 Definition of UINT16 TPM_ST Constants <INOUT S> */ -typedef UINT16 TPM_ST; -#define TPM_ST_RSP_COMMAND (0x00C4 ) /* tag value for a response used when there is an error in the tag. This is also the value returned from a TPM 1.2 when an error occurs. This value is used in this specification because an error in the command tag may prevent determination of the family. When this tag is used in the response the response code will be TPM_RC_BAD_TAG 0 1E16 which has the same numeric value as the TPM 1.2 response code for TPM_BADTAG.NOTE In a previously published version of this specification TPM_RC_BAD_TAG was incorrectly assigned a value of 0x030 instead of 30 0x01e. Some implementations my return the old value instead of the new value. */ -#define TPM_ST_NULL (0X8000 ) /* no structure type specified */ -#define TPM_ST_NO_SESSIONS (0x8001 ) /* tag value for a commandresponse for a command defined in this specification indicating that the commandresponse has no attached sessions and no authorizationSizeparameterSize value is presentIf the responseCode from the TPM is not TPM_RC_SUCCESS then the response tag shall have this value. */ -#define TPM_ST_SESSIONS (0x8002 ) /* tag value for a commandresponse for a command defined in this specification indicating that the commandresponse has one or more attached sessions and the authorizationSizeparameterSize field is present */ -#define TPM_ST_RESERVED1 (0x8003 ) /* When used between application software and the TPM resource manager this tag indicates that the command has no sessions and the handles are using the Name format rather than the 32bit handle format.NOTE 1 The response to application software will have a tag of TPM_ST_NO_SESSIONS.Between the TRM and TPM this tag would occur in a response from a TPM that overlaps the tag parameter of a request with the tag parameter of a response when the response has no associated sessions.NOTE 2 This tag is not used by all TPM or TRM implementations. */ -#define TPM_ST_RESERVED2 (0x8004 ) /* When used between application software and the TPM resource manager this tag indicates that the command has sessions and the handles are using the Name format rather than the 32bit handle format.NOTE 1 If the command completes successfully the response to application software will have a tag of TPM_ST_SESSIONS.Between the TRM and TPM would occur in a response from a TPM that overlaps the tag parameter of a request with the tag parameter of a response when the response has authorization sessions.NOTE 2 This tag is not used by all TPM or TRM implementations. */ -#define TPM_ST_ATTEST_NV (0x8014 ) /* tag for an attestation structure */ -#define TPM_ST_ATTEST_COMMAND_AUDIT (0x8015 ) /* tag for an attestation structure */ -#define TPM_ST_ATTEST_SESSION_AUDIT (0x8016 ) /* tag for an attestation structure */ -#define TPM_ST_ATTEST_CERTIFY (0x8017 ) /* tag for an attestation structure */ -#define TPM_ST_ATTEST_QUOTE (0x8018 ) /* tag for an attestation structure */ -#define TPM_ST_ATTEST_TIME (0x8019 ) /* tag for an attestation structure */ -#define TPM_ST_ATTEST_CREATION (0x801A ) /* tag for an attestation structure */ -#define TPM_ST_RESERVED3 (0x801B ) /* do not use NOTE This was previously assigned to TPM_ST_ATTEST_NV. The tag is changed because the structure has changed */ -#define TPM_ST_CREATION (0x8021 ) /* tag for a ticket type */ -#define TPM_ST_VERIFIED (0x8022 ) /* tag for a ticket type */ -#define TPM_ST_AUTH_SECRET (0x8023 ) /* tag for a ticket type */ -#define TPM_ST_HASHCHECK (0x8024 ) /* tag for a ticket type */ -#define TPM_ST_AUTH_SIGNED (0x8025 ) /* tag for a ticket type */ -#define TPM_ST_FU_MANIFEST (0x8029 ) /* tag for a structure describing a Field Upgrade Policy */ - -/* Table 20 Definition of UINT16 TPM_SU Constants <IN> */ -typedef UINT16 TPM_SU; -#define TPM_SU_CLEAR (0x0000 ) /* on TPM2_Shutdown indicates that the TPM should prepare for loss of power and save state required for an orderly startup TPM Reset.on TPM2_Startup indicates that the TPM should perform TPM Reset or TPM Restart */ -#define TPM_SU_STATE (0x0001 ) /* on TPM2_Shutdown indicates that the TPM should prepare for loss of power and save state required for an orderly startup TPM Restart or TPM Resumeon TPM2_Startup indicates that the TPM should restore the state saved by TPM2_ShutdownTPM_SU_STATE */ - -/* Table 21 Definition of UINT8 TPM_SE Constants <IN> */ -typedef UINT8 TPM_SE; -#define TPM_SE_HMAC (0x00 ) /* */ -#define TPM_SE_POLICY (0x01 ) /* */ -#define TPM_SE_TRIAL (0x03 ) /* The policy session is being used to compute the policyHash and not for command authorization.This setting modifies some policy commands and prevents session from being used to authorize a command. */ - -/* Table 22 Definition of UINT32 TPM_CAP Constants */ -typedef UINT32 TPM_CAP; -#define TPM_CAP_FIRST (0x00000000 ) /* */ -#define TPM_CAP_ALGS (0x00000000 ) /* TPM_ALG_ID1 */ -#define TPM_CAP_HANDLES (0x00000001 ) /* TPM_HANDLE */ -#define TPM_CAP_COMMANDS (0x00000002 ) /* TPM_CC */ -#define TPM_CAP_PP_COMMANDS (0x00000003 ) /* TPM_CC */ -#define TPM_CAP_AUDIT_COMMANDS (0x00000004 ) /* TPM_CC */ -#define TPM_CAP_PCRS (0x00000005 ) /* reserved */ -#define TPM_CAP_TPM_PROPERTIES (0x00000006 ) /* TPM_PT */ -#define TPM_CAP_PCR_PROPERTIES (0x00000007 ) /* TPM_PT_PCR */ -#define TPM_CAP_ECC_CURVES (0x00000008 ) /* TPM_ECC_CURVE1 */ -#define TPM_CAP_LAST (0x00000008 ) /* */ -#define TPM_CAP_VENDOR_PROPERTY (0x00000100 ) /* manufacturer specific */ - -/* Table 23 Definition of UINT32 TPM_PT Constants <INOUT S> */ -typedef UINT32 TPM_PT; -#define TPM_PT_NONE (0x00000000 ) /* indicates no property type */ -#define PT_GROUP (0x00000100 ) /* The number of properties in each group.NOTE The first group with any properties is group 1 PT_GROUP * 1. Group 0 is reserved. */ -#define PT_FIXED (PT_GROUP * 1 ) /* the group of fixed properties returned as TPMS_TAGGED_PROPERTYThe values in this group are only changed due to a firmware change in the TPM. */ -#define TPM_PT_FAMILY_INDICATOR (PT_FIXED + 0 ) /* a 4octet character string containing the TPM Family value TPM_SPEC_FAMILY */ -#define TPM_PT_LEVEL (PT_FIXED + 1 ) /* the level of the specificationNOTE 1 For this specification the level is zero.NOTE 2 The level is on the title page of the specification. */ -#define TPM_PT_REVISION (PT_FIXED + 2 ) /* the specification Revision times 100EXAMPLE Revision 01.01 would have a value of 101.NOTE The Revision value is on the title page of the specification. */ -#define TPM_PT_DAY_OF_YEAR (PT_FIXED + 3 ) /* the specification day of year using TCG calendarEXAMPLE November 15 2010 has a day of year value of 319 00Â 00Â 01Â 3F16.NOTE The specification date is on the title page of the specification. */ -#define TPM_PT_YEAR (PT_FIXED + 4 ) /* the specification year using the CEEXAMPLE The year 2010 has a value of 00Â 00Â 07Â DA16.NOTE The specification date is on the title page of the specification. */ -#define TPM_PT_MANUFACTURER (PT_FIXED + 5 ) /* the vendor ID unique to each TPM manufacturer */ -#define TPM_PT_VENDOR_STRING_1 (PT_FIXED + 6 ) /* the first four characters of the vendor ID stringNOTE When the vendor string is fewer than 16 octets the additional property values do not have to be present. A vendor string of 4 octets can be represented in one 32bit value and no null terminating character is required. */ -#define TPM_PT_VENDOR_STRING_2 (PT_FIXED + 7 ) /* the second four characters of the vendor ID string */ -#define TPM_PT_VENDOR_STRING_3 (PT_FIXED + 8 ) /* the third four characters of the vendor ID string */ -#define TPM_PT_VENDOR_STRING_4 (PT_FIXED + 9 ) /* the fourth four characters of the vendor ID sting */ -#define TPM_PT_VENDOR_TPM_TYPE (PT_FIXED + 10 ) /* vendordefined value indicating the TPM model */ -#define TPM_PT_FIRMWARE_VERSION_1 (PT_FIXED + 11 ) /* the mostsignificant 32 bits of a TPM vendorspecific value indicating the version number of the firmware. See 10.12.2 and 10.12.8. */ -#define TPM_PT_FIRMWARE_VERSION_2 (PT_FIXED + 12 ) /* the leastsignificant 32 bits of a TPM vendorspecific value indicating the version number of the firmware. See 10.12.2 and 10.12.8. */ -#define TPM_PT_INPUT_BUFFER (PT_FIXED + 13 ) /* the maximum size of a parameter typically a TPM2B_MAX_BUFFER */ -#define TPM_PT_HR_TRANSIENT_MIN (PT_FIXED + 14 ) /* the minimum number of transient objects that can be held in TPM RAMNOTE This minimum shall be no less than the minimum value required by the platformspecific specification to which the TPM is built. */ -#define TPM_PT_HR_PERSISTENT_MIN (PT_FIXED + 15 ) /* the minimum number of persistent objects that can be held in TPM NV memoryNOTE This minimum shall be no less than the minimum value required by the platformspecific specification to which the TPM is built. */ -#define TPM_PT_HR_LOADED_MIN (PT_FIXED + 16 ) /* the minimum number of authorization sessions that can be held in TPM RAM NOTE This minimum shall be no less than the minimum value required by the platformspecific specification to which the TPM is built. */ -#define TPM_PT_ACTIVE_SESSIONS_MAX (PT_FIXED + 17 ) /* the number of authorization sessions that may be active at a timeA session is active when it has a context associated with its handle. The context may either be in TPM RAM or be context saved.NOTE This value shall be no less than the minimum value required by the platformspecific specification to which the TPM is built. */ -#define TPM_PT_PCR_COUNT (PT_FIXED + 18 ) /* the number of PCR implementedNOTE This number is determined by the defined attributes not the number of PCR that are populated. */ -#define TPM_PT_PCR_SELECT_MIN (PT_FIXED + 19 ) /* the minimum number of octets in a TPMS_PCR_SELECT.sizeOfSelectNOTE This value is not determined by the number of PCR implemented but by the number of PCR required by the platformspecific specification with which the TPM is compliant or by the implementer if not adhering to a platformspecific specification. */ -#define TPM_PT_CONTEXT_GAP_MAX (PT_FIXED + 20 ) /* the maximum allowed difference unsigned between the contextID values of two saved session contextsThis value shall be 2n1 where n is at least 16. */ -#define TPM_PT_NV_COUNTERS_MAX (PT_FIXED + 22 ) /* the maximum number of NV Indexes that are allowed to have the TPM_NT_COUNTER attributeNOTE It is allowed for this value to be larger than the number of NV Indexes that can be defined. This would be indicative of a TPM implementation that did not use different implementation technology for different NV Index types. */ -#define TPM_PT_NV_INDEX_MAX (PT_FIXED + 23 ) /* the maximum size of an NV Index data area */ -#define TPM_PT_MEMORY (PT_FIXED + 24 ) /* a TPMA_MEMORY indicating the memory management method for the TPM */ -#define TPM_PT_CLOCK_UPDATE (PT_FIXED + 25 ) /* interval in milliseconds between updates to the copy of TPMS_CLOCK_INFO.clock in NV */ -#define TPM_PT_CONTEXT_HASH (PT_FIXED + 26 ) /* the algorithm used for the integrity HMAC on saved contexts and for hashing the fuData of TPM2_FirmwareRead */ -#define TPM_PT_CONTEXT_SYM (PT_FIXED + 27 ) /* TPM_ALG_ID the algorithm used for encryption of saved contexts */ -#define TPM_PT_CONTEXT_SYM_SIZE (PT_FIXED + 28 ) /* TPM_KEY_BITS the size of the key used for encryption of saved contexts */ -#define TPM_PT_ORDERLY_COUNT (PT_FIXED + 29 ) /* the modulus 1 of the count for NV update of an orderly counterThe returned value is MAX_ORDERLY_COUNT.This will have a value of 2N 1 where 1 N 32NOTE An orderly counter is an NV Index with an TPM_NT of TPM_NV_COUNTER and TPMA_NV_ORDERLY SET.NOTE When the loworder bits of a counter equal this value an NV write occurs on the next increment. */ -#define TPM_PT_MAX_COMMAND_SIZE (PT_FIXED + 30 ) /* the maximum value for commandSize in a command */ -#define TPM_PT_MAX_RESPONSE_SIZE (PT_FIXED + 31 ) /* the maximum value for responseSize in a response */ -#define TPM_PT_MAX_DIGEST (PT_FIXED + 32 ) /* the maximum size of a digest that can be produced by the TPM */ -#define TPM_PT_MAX_OBJECT_CONTEXT (PT_FIXED + 33 ) /* the maximum size of an object context that will be returned by TPM2_ContextSave */ -#define TPM_PT_MAX_SESSION_CONTEXT (PT_FIXED + 34 ) /* the maximum size of a session context that will be returned by TPM2_ContextSave */ -#define TPM_PT_PS_FAMILY_INDICATOR (PT_FIXED + 35 ) /* platformspecific family a TPM_PS valuesee Table 25NOTE The platformspecific values for the TPM_PT_PS parameters are in the relevant platformspecific specification. In the reference implementation all of these values are 0. */ -#define TPM_PT_PS_LEVEL (PT_FIXED + 36 ) /* the level of the platformspecific specification */ -#define TPM_PT_PS_REVISION (PT_FIXED + 37 ) /* the specification Revision times 100 for the platformspecific specification */ -#define TPM_PT_PS_DAY_OF_YEAR (PT_FIXED + 38 ) /* the platformspecific specification day of year using TCG calendar */ -#define TPM_PT_PS_YEAR (PT_FIXED + 39 ) /* the platformspecific specification year using the CE */ -#define TPM_PT_SPLIT_MAX (PT_FIXED + 40 ) /* the number of split signing operations supported by the TPM */ -#define TPM_PT_TOTAL_COMMANDS (PT_FIXED + 41 ) /* total number of commands implemented in the TPM */ -#define TPM_PT_LIBRARY_COMMANDS (PT_FIXED + 42 ) /* number of commands from the TPM library that are implemented */ -#define TPM_PT_VENDOR_COMMANDS (PT_FIXED + 43 ) /* number of vendor commands that are implemented */ -#define TPM_PT_NV_BUFFER_MAX (PT_FIXED + 44 ) /* the maximum data size in one NV write command */ -#define TPM_PT_MODES (PT_FIXED + 45 ) /* a TPMA_MODES value indicating that the TPM is designed for these modes. */ -#define PT_VAR (PT_GROUP * 2 ) /* the group of variable properties returned as TPMS_TAGGED_PROPERTYThe properties in this group change because of a Protected Capability other than a firmware update. The values are not necessarily persistent across all power transitions. */ -#define TPM_PT_PERMANENT (PT_VAR + 0 ) /* TPMA_PERMANENT */ -#define TPM_PT_STARTUP_CLEAR (PT_VAR + 1 ) /* TPMA_STARTUP_CLEAR */ -#define TPM_PT_HR_NV_INDEX (PT_VAR + 2 ) /* the number of NV Indexes currently defined */ -#define TPM_PT_HR_LOADED (PT_VAR + 3 ) /* the number of authorization sessions currently loaded into TPM RAM */ -#define TPM_PT_HR_LOADED_AVAIL (PT_VAR + 4 ) /* the number of additional authorization sessions of any type that could be loaded into TPM RAMThis value is an estimate. If this value is at least 1 then at least one authorization session of any type may be loaded. Any command that changes the RAM memory allocation can make this estimate invalid.NOTE A valid implementation may return 1 even if more than one authorization session would fit into RAM. */ -#define TPM_PT_HR_ACTIVE (PT_VAR + 5 ) /* the number of active authorization sessions currently being tracked by the TPMThis is the sum of the loaded and saved sessions. */ -#define TPM_PT_HR_ACTIVE_AVAIL (PT_VAR + 6 ) /* the number of additional authorization sessions of any type that could be createdThis value is an estimate. If this value is at least 1 then at least one authorization session of any type may be created. Any command that changes the RAM memory allocation can make this estimate invalid.NOTE A valid implementation may return 1 even if more than one authorization session could be created. */ -#define TPM_PT_HR_TRANSIENT_AVAIL (PT_VAR + 7 ) /* estimate of the number of additional transient objects that could be loaded into TPM RAMThis value is an estimate. If this value is at least 1 then at least one object of any type may be loaded. Any command that changes the memory allocation can make this estimate invalid.NOTE A valid implementation may return 1 even if more than one transient object would fit into RAM. */ -#define TPM_PT_HR_PERSISTENT (PT_VAR + 8 ) /* the number of persistent objects currently loaded into TPM NV memory */ -#define TPM_PT_HR_PERSISTENT_AVAIL (PT_VAR + 9 ) /* the number of additional persistent objects that could be loaded into NV memoryThis value is an estimate. If this value is at least 1 then at least one object of any type may be made persistent. Any command that changes the NV memory allocation can make this estimate invalid.NOTE A valid implementation may return 1 even if more than one persistent object would fit into NV memory. */ -#define TPM_PT_NV_COUNTERS (PT_VAR + 10 ) /* the number of defined NV Indexes that have NV the TPM_NT_COUNTER attribute */ -#define TPM_PT_NV_COUNTERS_AVAIL (PT_VAR + 11 ) /* the number of additional NV Indexes that can be defined with their TPM_NT of TPM_NV_COUNTER and the TPMA_NV_ORDERLY attribute SETThis value is an estimate. If this value is at least 1 then at least one NV Index may be created with a TPM_NT of TPM_NV_COUNTER and the TPMA_NV_ORDERLY attributes. Any command that changes the NV memory allocation can make this estimate invalid.NOTE A valid implementation may return 1 even if more than one NV counter could be defined. */ -#define TPM_PT_ALGORITHM_SET (PT_VAR + 12 ) /* code that limits the algorithms that may be used with the TPM */ -#define TPM_PT_LOADED_CURVES (PT_VAR + 13 ) /* the number of loaded ECC curves */ -#define TPM_PT_LOCKOUT_COUNTER (PT_VAR + 14 ) /* the current value of the lockout counter failedTries */ -#define TPM_PT_MAX_AUTH_FAIL (PT_VAR + 15 ) /* the number of authorization failures before DA lockout is invoked */ -#define TPM_PT_LOCKOUT_INTERVAL (PT_VAR + 16 ) /* the number of seconds before the value reported by TPM_PT_LOCKOUT_COUNTER is decremented */ -#define TPM_PT_LOCKOUT_RECOVERY (PT_VAR + 17 ) /* the number of seconds after a lockoutAuth failure before use of lockoutAuth may be attempted again */ -#define TPM_PT_NV_WRITE_RECOVERY (PT_VAR + 18 ) /* number of milliseconds before the TPM will accept another command that will modify NVThis value is an approximation and may go up or down over time. */ -#define TPM_PT_AUDIT_COUNTER_0 (PT_VAR + 19 ) /* the highorder 32 bits of the command audit counter */ -#define TPM_PT_AUDIT_COUNTER_1 (PT_VAR + 20 ) /* the loworder 32 bits of the command audit counter */ - -/* Table 24 Definition of UINT32 TPM_PT_PCR Constants <INOUT S> */ -typedef UINT32 TPM_PT_PCR; -#define TPM_PT_PCR_FIRST (0x00000000 ) /* bottom of the range of TPM_PT_PCR properties */ -#define TPM_PT_PCR_SAVE (0x00000000 ) /* a SET bit in the TPMS_PCR_SELECT indicates that the PCR is saved and restored by TPM_SU_STATE */ -#define TPM_PT_PCR_EXTEND_L0 (0x00000001 ) /* a SET bit in the TPMS_PCR_SELECT indicates that the PCR may be extended from locality 0This property is only present if a locality other than 0 is implemented. */ -#define TPM_PT_PCR_RESET_L0 (0x00000002 ) /* a SET bit in the TPMS_PCR_SELECT indicates that the PCR may be reset by TPM2_PCR_Reset from locality 0 */ -#define TPM_PT_PCR_EXTEND_L1 (0x00000003 ) /* a SET bit in the TPMS_PCR_SELECT indicates that the PCR may be extended from locality 1 This property is only present if locality 1 is implemented. */ -#define TPM_PT_PCR_RESET_L1 (0x00000004 ) /* a SET bit in the TPMS_PCR_SELECT indicates that the PCR may be reset by TPM2_PCR_Reset from locality 1This property is only present if locality 1 is implemented. */ -#define TPM_PT_PCR_EXTEND_L2 (0x00000005 ) /* a SET bit in the TPMS_PCR_SELECT indicates that the PCR may be extended from locality 2 This property is only present if localities 1 and 2 are implemented. */ -#define TPM_PT_PCR_RESET_L2 (0x00000006 ) /* a SET bit in the TPMS_PCR_SELECT indicates that the PCR may be reset by TPM2_PCR_Reset from locality 2This property is only present if localities 1 and 2 are implemented. */ -#define TPM_PT_PCR_EXTEND_L3 (0x00000007 ) /* a SET bit in the TPMS_PCR_SELECT indicates that the PCR may be extended from locality 3This property is only present if localities 1 2 and 3 are implemented. */ -#define TPM_PT_PCR_RESET_L3 (0x00000008 ) /* a SET bit in the TPMS_PCR_SELECT indicates that the PCR may be reset by TPM2_PCR_Reset from locality 3This property is only present if localities 1 2 and 3 are implemented. */ -#define TPM_PT_PCR_EXTEND_L4 (0x00000009 ) /* a SET bit in the TPMS_PCR_SELECT indicates that the PCR may be extended from locality 4This property is only present if localities 1 2 3 and 4 are implemented. */ -#define TPM_PT_PCR_RESET_L4 (0x0000000A ) /* a SET bit in the TPMS_PCR_SELECT indicates that the PCR may be reset by TPM2_PCR_Reset from locality 4This property is only present if localities 1 2 3 and 4 are implemented. */ -#define TPM_PT_PCR_RESERVED1 (0x0000000B 0x00000010 ) /* the values in this range are reserved They correspond to values that may be used to describe attributes associated with the extended localities 32255.synthesize additional software localities. The meaning of these properties need not be the same as the meaning for the Extend and Reset properties above. */ -#define TPM_PT_PCR_NO_INCREMENT (0x00000011 ) /* a SET bit in the TPMS_PCR_SELECT indicates that modifications to this PCR reset or Extend will not increment the pcrUpdateCounter */ -#define TPM_PT_PCR_DRTM_RESET (0x00000012 ) /* a SET bit in the TPMS_PCR_SELECT indicates that the PCR is reset by a DRTM eventThese PCR are reset to 1 on TPM2_Startup and reset to 0 on a _TPM_Hash_End event following a _TPM_Hash_Start event. */ -#define TPM_PT_PCR_POLICY (0x00000013 ) /* a SET bit in the TPMS_PCR_SELECT indicates that the PCR is controlled by policyThis property is only present if the TPM supports policy control of a PCR. */ -#define TPM_PT_PCR_AUTH (0x00000014 ) /* a SET bit in the TPMS_PCR_SELECT indicates that the PCR is controlled by an authorization valueThis property is only present if the TPM supports authorization control of a PCR. */ -#define TPM_PT_PCR_RESERVED2 (0x00000015 ) /* reserved for the next 2nd TPM_PT_PCR_POLICY set */ -#define TPM_PT_PCR_RESERVED3 (0x00000016 ) /* reserved for the next 2nd TPM_PT_PCR_AUTH set */ -#define TPM_PT_PCR_RESERVED4 (0x00000017 0x00000210 ) /* reserved for the 2nd through 255th TPM_PT_PCR_POLICY and TPM_PT_PCR_AUTH values */ -#define TPM_PT_PCR_RESERVED5 (0x00000211 ) /* reserved to the 256th and highest allowed TPM_PT_PCR_POLICY set */ -#define TPM_PT_PCR_RESERVED6 (0x00000212 ) /* reserved to the 256th and highest allowed TPM_PT_PCR_AUTH set */ -#define TPM_PT_PCR_RESERVED7 (0x00000213 ) /* new PCR property values may be assigned starting with this value */ -#define TPM_PT_PCR_LAST (0x00000014 ) /* top of the range of TPM_PT_PCR properties of the implementationIf the TPM receives a request for a PCR property with a value larger than this the TPM will return a zero length list and set the moreData parameter to NO.NOTE This is an implementationspecific value. The value shown reflects the reference code implementation. */ - -/* Table 25 Definition of UINT32 TPM_PS Constants <OUT> */ -typedef UINT32 TPM_PS; -#define TPM_PS_MAIN (0x00000000 ) /* not platform specific */ -#define TPM_PS_PC (0x00000001 ) /* PC Client */ -#define TPM_PS_PDA (0x00000002 ) /* PDA includes all mobile devices that are not specifically cell phones */ -#define TPM_PS_CELL_PHONE (0x00000003 ) /* Cell Phone */ -#define TPM_PS_SERVER (0x00000004 ) /* Server WG */ -#define TPM_PS_PERIPHERAL (0x00000005 ) /* Peripheral WG */ -#define TPM_PS_TSS (0x00000006 ) /* TSS WG */ -#define TPM_PS_STORAGE (0x00000007 ) /* Storage WG */ -#define TPM_PS_AUTHENTICATION (0x00000008 ) /* Authentication WG */ -#define TPM_PS_EMBEDDED (0x00000009 ) /* Embedded WG */ -#define TPM_PS_HARDCOPY (0x0000000A ) /* Hardcopy WG */ -#define TPM_PS_INFRASTRUCTURE (0x0000000B ) /* Infrastructure WG */ -#define TPM_PS_VIRTUALIZATION (0x0000000C ) /* Virtualization WG */ -#define TPM_PS_TNC (0x0000000D ) /* Trusted Network Connect WG */ -#define TPM_PS_MULTI_TENANT (0x0000000E ) /* Multitenant WG */ -#define TPM_PS_TC (0x0000000F ) /* Technical Committee */ +typedef UINT32 TPM2_ALGORITHM_ID; /* this is the 1.2 compatible form of the TPM2_ALG_ID */ +typedef UINT32 TPM2_MODIFIER_INDICATOR; /* */ +typedef UINT32 TPM2_AUTHORIZATION_SIZE; /* the authorizationSize parameter in a command */ +typedef UINT32 TPM2_PARAMETER_SIZE; /* the parameterSize parameter in a command */ +typedef UINT16 TPM2_KEY_SIZE; /* a key size in octets */ +typedef UINT16 TPM2_KEY_BITS; /* a key size in bits */ + +/* Table 6 Definition of UINT32 TPM2_SPEC Constants <> */ +typedef UINT32 TPM2_SPEC; +#define TPM2_SPEC_FAMILY (0x322E3000 ) /* ASCII 2.0 with null terminator */ +#define TPM2_SPEC_LEVEL (00 ) /* the level number for the specification */ +#define TPM2_SPEC_VERSION (126 ) /* the version number of the spec 001.26 * 100 */ +#define TPM2_SPEC_YEAR (2015 ) /* the year of the version */ +#define TPM2_SPEC_DAY_OF_YEAR (233 ) /* the day of the year August 21 2015 */ + +/* Table 7 Definition of UINT32 TPM2_GENERATED Constants <O> */ +typedef UINT32 TPM2_GENERATED; +#define TPM2_GENERATED_VALUE (0xff544347 ) /* 0xFF TCG FF 54 43 4716 */ + +/* Table 16 Definition of UINT32 TPM2_RC Constants Actions <OUT> */ +typedef UINT32 TPM2_RC; +#define TPM2_RC_SUCCESS (0x000 ) /* */ +#define TPM2_RC_BAD_TAG (0x01E ) /* defined for compatibility with TPM 1.2 */ +#define TPM2_RC_VER1 (0x100 ) /* set for all format 0 response codes */ +#define TPM2_RC_INITIALIZE (TPM2_RC_VER1 + 0x000 ) /* TPM not initialized by TPM2_Startup or already initialized */ +#define TPM2_RC_FAILURE (TPM2_RC_VER1 + 0x001 ) /* commands not being accepted because of a TPM failureNOTE This may be returned by TPM2_GetTestResult as the testResult parameter. */ +#define TPM2_RC_SEQUENCE (TPM2_RC_VER1 + 0x003 ) /* improper use of a sequence handle */ +#define TPM2_RC_PRIVATE (TPM2_RC_VER1 + 0x00B ) /* not currently used */ +#define TPM2_RC_HMAC (TPM2_RC_VER1 + 0x019 ) /* not currently used */ +#define TPM2_RC_DISABLED (TPM2_RC_VER1 + 0x020 ) /* the command is disabled */ +#define TPM2_RC_EXCLUSIVE (TPM2_RC_VER1 + 0x021 ) /* command failed because audit sequence required exclusivity */ +#define TPM2_RC_AUTH_TYPE (TPM2_RC_VER1 + 0x024 ) /* authorization handle is not correct for command */ +#define TPM2_RC_AUTH_MISSING (TPM2_RC_VER1 + 0x025 ) /* command requires an authorization session for handle and it is not present. */ +#define TPM2_RC_POLICY (TPM2_RC_VER1 + 0x026 ) /* policy failure in math operation or an invalid authPolicy value */ +#define TPM2_RC_PCR (TPM2_RC_VER1 + 0x027 ) /* PCR check fail */ +#define TPM2_RC_PCR_CHANGED (TPM2_RC_VER1 + 0x028 ) /* PCR have changed since checked. */ +#define TPM2_RC_UPGRADE (TPM2_RC_VER1 + 0x02D ) /* for all commands other than TPM2_FieldUpgradeData this code indicates that the TPM is in field upgrade mode for TPM2_FieldUpgradeData this code indicates that the TPM is not in field upgrade mode */ +#define TPM2_RC_TOO_MANY_CONTEXTS (TPM2_RC_VER1 + 0x02E ) /* context ID counter is at maximum. */ +#define TPM2_RC_AUTH_UNAVAILABLE (TPM2_RC_VER1 + 0x02F ) /* authValue or authPolicy is not available for selected entity. */ +#define TPM2_RC_REBOOT (TPM2_RC_VER1 + 0x030 ) /* a _TPM_Init and StartupCLEAR is required before the TPM can resume operation. */ +#define TPM2_RC_UNBALANCED (TPM2_RC_VER1 + 0x031 ) /* the protection algorithms hash and symmetric are not reasonably balanced. The digest size of the hash must be larger than the key size of the symmetric algorithm. */ +#define TPM2_RC_COMMAND_SIZE (TPM2_RC_VER1 + 0x042 ) /* command commandSize value is inconsistent with contents of the command buffer either the size is not the same as the octets loaded by the hardware interface layer or the value is not large enough to hold a command header */ +#define TPM2_RC_COMMAND_CODE (TPM2_RC_VER1 + 0x043 ) /* command code not supported */ +#define TPM2_RC_AUTHSIZE (TPM2_RC_VER1 + 0x044 ) /* the value of authorizationSize is out of range or the number of octets in the Authorization Area is greater than required */ +#define TPM2_RC_AUTH_CONTEXT (TPM2_RC_VER1 + 0x045 ) /* use of an authorization session with a context command or another command that cannot have an authorization session. */ +#define TPM2_RC_NV_RANGE (TPM2_RC_VER1 + 0x046 ) /* NV offset+size is out of range. */ +#define TPM2_RC_NV_SIZE (TPM2_RC_VER1 + 0x047 ) /* Requested allocation size is larger than allowed. */ +#define TPM2_RC_NV_LOCKED (TPM2_RC_VER1 + 0x048 ) /* NV access locked. */ +#define TPM2_RC_NV_AUTHORIZATION (TPM2_RC_VER1 + 0x049 ) /* NV access authorization fails in command actions this failure does not affect lockout.action */ +#define TPM2_RC_NV_UNINITIALIZED (TPM2_RC_VER1 + 0x04A ) /* an NV Index is used before being initialized or the state saved by TPM2_ShutdownSTATE could not be restored */ +#define TPM2_RC_NV_SPACE (TPM2_RC_VER1 + 0x04B ) /* insufficient space for NV allocation */ +#define TPM2_RC_NV_DEFINED (TPM2_RC_VER1 + 0x04C ) /* NV Index or persistent object already defined */ +#define TPM2_RC_BAD_CONTEXT (TPM2_RC_VER1 + 0x050 ) /* context in TPM2_ContextLoad is not valid */ +#define TPM2_RC_CPHASH (TPM2_RC_VER1 + 0x051 ) /* cpHash value already set or not correct for use */ +#define TPM2_RC_PARENT (TPM2_RC_VER1 + 0x052 ) /* handle for parent is not a valid parent */ +#define TPM2_RC_NEEDS_TEST (TPM2_RC_VER1 + 0x053 ) /* some function needs testing. */ +#define TPM2_RC_NO_RESULT (TPM2_RC_VER1 + 0x054 ) /* returned when an internal function cannot process a request due to an unspecified problem. This code is usually related to invalid parameters that are not properly filtered by the input unmarshaling code. */ +#define TPM2_RC_SENSITIVE (TPM2_RC_VER1 + 0x055 ) /* the sensitive area did not unmarshal correctly after decryption this code is used in lieu of the other unmarshaling errors so that an attacker cannot determine where the unmarshaling error occurred */ +#define TPM2_RC_MAX_FM0 (TPM2_RC_VER1 + 0x07F ) /* largest version 1 code that is not a warning */ +#define TPM2_RC_FMT1 (0x080 ) /* This bit is SET in all format 1 response codesThe codes in this group may have a value added to them to indicate the handle session or parameter to which they apply. */ +#define TPM2_RC_ASYMMETRIC (TPM2_RC_FMT1 + 0x001 ) /* asymmetric algorithm not supported or not correct */ +#define TPM2_RC_ATTRIBUTES (TPM2_RC_FMT1 + 0x002 ) /* inconsistent attributes */ +#define TPM2_RC_HASH (TPM2_RC_FMT1 + 0x003 ) /* hash algorithm not supported or not appropriate */ +#define TPM2_RC_VALUE (TPM2_RC_FMT1 + 0x004 ) /* value is out of range or is not correct for the context */ +#define TPM2_RC_HIERARCHY (TPM2_RC_FMT1 + 0x005 ) /* hierarchy is not enabled or is not correct for the use */ +#define TPM2_RC_KEY_SIZE (TPM2_RC_FMT1 + 0x007 ) /* key size is not supported */ +#define TPM2_RC_MGF (TPM2_RC_FMT1 + 0x008 ) /* mask generation function not supported */ +#define TPM2_RC_MODE (TPM2_RC_FMT1 + 0x009 ) /* mode of operation not supported */ +#define TPM2_RC_TYPE (TPM2_RC_FMT1 + 0x00A ) /* the type of the value is not appropriate for the use */ +#define TPM2_RC_HANDLE (TPM2_RC_FMT1 + 0x00B ) /* the handle is not correct for the use */ +#define TPM2_RC_KDF (TPM2_RC_FMT1 + 0x00C ) /* unsupported key derivation function or function not appropriate for use */ +#define TPM2_RC_RANGE (TPM2_RC_FMT1 + 0x00D ) /* value was out of allowed range. */ +#define TPM2_RC_AUTH_FAIL (TPM2_RC_FMT1 + 0x00E ) /* the authorization HMAC check failed and DA counter incremented */ +#define TPM2_RC_NONCE (TPM2_RC_FMT1 + 0x00F ) /* invalid nonce size or nonce value mismatch */ +#define TPM2_RC_PP (TPM2_RC_FMT1 + 0x010 ) /* authorization requires assertion of PP */ +#define TPM2_RC_SCHEME (TPM2_RC_FMT1 + 0x012 ) /* unsupported or incompatible scheme */ +#define TPM2_RC_SIZE (TPM2_RC_FMT1 + 0x015 ) /* structure is the wrong size */ +#define TPM2_RC_SYMMETRIC (TPM2_RC_FMT1 + 0x016 ) /* unsupported symmetric algorithm or key size or not appropriate for instance */ +#define TPM2_RC_TAG (TPM2_RC_FMT1 + 0x017 ) /* incorrect structure tag */ +#define TPM2_RC_SELECTOR (TPM2_RC_FMT1 + 0x018 ) /* union selector is incorrect */ +#define TPM2_RC_INSUFFICIENT (TPM2_RC_FMT1 + 0x01A ) /* the TPM was unable to unmarshal a value because there were not enough octets in the input buffer */ +#define TPM2_RC_SIGNATURE (TPM2_RC_FMT1 + 0x01B ) /* the signature is not valid */ +#define TPM2_RC_KEY (TPM2_RC_FMT1 + 0x01C ) /* key fields are not compatible with the selected use */ +#define TPM2_RC_POLICY_FAIL (TPM2_RC_FMT1 + 0x01D ) /* a policy check failed */ +#define TPM2_RC_INTEGRITY (TPM2_RC_FMT1 + 0x01F ) /* integrity check failed */ +#define TPM2_RC_TICKET (TPM2_RC_FMT1 + 0x020 ) /* invalid ticket */ +#define TPM2_RC_RESERVED_BITS (TPM2_RC_FMT1 + 0x021 ) /* reserved bits not set to zero as required */ +#define TPM2_RC_BAD_AUTH (TPM2_RC_FMT1 + 0x022 ) /* authorization failure without DA implications */ +#define TPM2_RC_EXPIRED (TPM2_RC_FMT1 + 0x023 ) /* the policy has expired */ +#define TPM2_RC_POLICY_CC (TPM2_RC_FMT1 + 0x024 ) /* the commandCode in the policy is not the commandCode of the command or the command code in a policy command references a command that is not implemented */ +#define TPM2_RC_BINDING (TPM2_RC_FMT1 + 0x025 ) /* public and sensitive portions of an object are not cryptographically bound */ +#define TPM2_RC_CURVE (TPM2_RC_FMT1 + 0x026 ) /* curve not supported */ +#define TPM2_RC_ECC_POINT (TPM2_RC_FMT1 + 0x027 ) /* point is not on the required curve. */ +#define TPM2_RC_WARN (0x900 ) /* set for warning response codes */ +#define TPM2_RC_CONTEXT_GAP (TPM2_RC_WARN + 0x001 ) /* gap for context ID is too large */ +#define TPM2_RC_OBJECT_MEMORY (TPM2_RC_WARN + 0x002 ) /* out of memory for object contexts */ +#define TPM2_RC_SESSION_MEMORY (TPM2_RC_WARN + 0x003 ) /* out of memory for session contexts */ +#define TPM2_RC_MEMORY (TPM2_RC_WARN + 0x004 ) /* out of shared objectsession memory or need space for internal operations */ +#define TPM2_RC_SESSION_HANDLES (TPM2_RC_WARN + 0x005 ) /* out of session handles a session must be flushed before a new session may be created */ +#define TPM2_RC_OBJECT_HANDLES (TPM2_RC_WARN + 0x006 ) /* out of object handles the handle space for objects is depleted and a reboot is requiredNOTE This cannot occur on the reference implementation.NOTE There is no reason why an implementation would implement a design that would deplete handle space. Platform specifications are encouraged to forbid it. */ +#define TPM2_RC_LOCALITY (TPM2_RC_WARN + 0x007 ) /* bad locality */ +#define TPM2_RC_YIELDED (TPM2_RC_WARN + 0x008 ) /* the TPM has suspended operation on the command forward progress was made and the command may be retriedSee TPM 2.0 Part 1 Multitasking.NOTE This cannot occur on the reference implementation. */ +#define TPM2_RC_CANCELED (TPM2_RC_WARN + 0x009 ) /* the command was canceled */ +#define TPM2_RC_TESTING (TPM2_RC_WARN + 0x00A ) /* TPM is performing selftests */ +#define TPM2_RC_REFERENCE_H0 (TPM2_RC_WARN + 0x010 ) /* the 1st handle in the handle area references a transient object or session that is not loaded */ +#define TPM2_RC_REFERENCE_H1 (TPM2_RC_WARN + 0x011 ) /* the 2nd handle in the handle area references a transient object or session that is not loaded */ +#define TPM2_RC_REFERENCE_H2 (TPM2_RC_WARN + 0x012 ) /* the 3rd handle in the handle area references a transient object or session that is not loaded */ +#define TPM2_RC_REFERENCE_H3 (TPM2_RC_WARN + 0x013 ) /* the 4th handle in the handle area references a transient object or session that is not loaded */ +#define TPM2_RC_REFERENCE_H4 (TPM2_RC_WARN + 0x014 ) /* the 5th handle in the handle area references a transient object or session that is not loaded */ +#define TPM2_RC_REFERENCE_H5 (TPM2_RC_WARN + 0x015 ) /* the 6th handle in the handle area references a transient object or session that is not loaded */ +#define TPM2_RC_REFERENCE_H6 (TPM2_RC_WARN + 0x016 ) /* the 7th handle in the handle area references a transient object or session that is not loaded */ +#define TPM2_RC_REFERENCE_S0 (TPM2_RC_WARN + 0x018 ) /* the 1st authorization session handle references a session that is not loaded */ +#define TPM2_RC_REFERENCE_S1 (TPM2_RC_WARN + 0x019 ) /* the 2nd authorization session handle references a session that is not loaded */ +#define TPM2_RC_REFERENCE_S2 (TPM2_RC_WARN + 0x01A ) /* the 3rd authorization session handle references a session that is not loaded */ +#define TPM2_RC_REFERENCE_S3 (TPM2_RC_WARN + 0x01B ) /* the 4th authorization session handle references a session that is not loaded */ +#define TPM2_RC_REFERENCE_S4 (TPM2_RC_WARN + 0x01C ) /* the 5th session handle references a session that is not loaded */ +#define TPM2_RC_REFERENCE_S5 (TPM2_RC_WARN + 0x01D ) /* the 6th session handle references a session that is not loaded */ +#define TPM2_RC_REFERENCE_S6 (TPM2_RC_WARN + 0x01E ) /* the 7th authorization session handle references a session that is not loaded */ +#define TPM2_RC_NV_RATE (TPM2_RC_WARN + 0x020 ) /* the TPM is ratelimiting accesses to prevent wearout of NV */ +#define TPM2_RC_LOCKOUT (TPM2_RC_WARN + 0x021 ) /* authorizations for objects subject to DA protection are not allowed at this time because the TPM is in DA lockout mode */ +#define TPM2_RC_RETRY (TPM2_RC_WARN + 0x022 ) /* the TPM was not able to start the command */ +#define TPM2_RC_NV_UNAVAILABLE (TPM2_RC_WARN + 0x023 ) /* the command may require writing of NV and NV is not current accessible */ +#define TPM2_RC_NOT_USED (TPM2_RC_WARN + 0x7F ) /* this value is reserved and shall not be returned by the TPM */ +#define TPM2_RC_H (0x000 ) /* add to a handlerelated error */ +#define TPM2_RC_P (0x040 ) /* add to a parameterrelated error */ +#define TPM2_RC_S (0x800 ) /* add to a sessionrelated error */ +#define TPM2_RC_1 (0x100 ) /* add to a parameter handle or sessionrelated error */ +#define TPM2_RC_2 (0x200 ) /* add to a parameter handle or sessionrelated error */ +#define TPM2_RC_3 (0x300 ) /* add to a parameter handle or sessionrelated error */ +#define TPM2_RC_4 (0x400 ) /* add to a parameter handle or sessionrelated error */ +#define TPM2_RC_5 (0x500 ) /* add to a parameter handle or sessionrelated error */ +#define TPM2_RC_6 (0x600 ) /* add to a parameter handle or sessionrelated error */ +#define TPM2_RC_7 (0x700 ) /* add to a parameter handle or sessionrelated error */ +#define TPM2_RC_8 (0x800 ) /* add to a parameterrelated error */ +#define TPM2_RC_9 (0x900 ) /* add to a parameterrelated error */ +#define TPM2_RC_A (0xA00 ) /* add to a parameterrelated error */ +#define TPM2_RC_B (0xB00 ) /* add to a parameterrelated error */ +#define TPM2_RC_C (0xC00 ) /* add to a parameterrelated error */ +#define TPM2_RC_D (0xD00 ) /* add to a parameterrelated error */ +#define TPM2_RC_E (0xE00 ) /* add to a parameterrelated error */ +#define TPM2_RC_F (0xF00 ) /* add to a parameterrelated error */ +#define TPM2_RC_N_MASK (0xF00 ) /* number mask */ + +/* Table 17 Definition of INT8 TPM2_CLOCK_ADJUST Constants <IN> */ +typedef INT8 TPM2_CLOCK_ADJUST; +#define TPM2_CLOCK_COARSE_SLOWER (-3 ) /* Slow the Clock update rate by one coarse adjustment step. */ +#define TPM2_CLOCK_MEDIUM_SLOWER (-2 ) /* Slow the Clock update rate by one medium adjustment step. */ +#define TPM2_CLOCK_FINE_SLOWER (-1 ) /* Slow the Clock update rate by one fine adjustment step. */ +#define TPM2_CLOCK_NO_CHANGE (0 ) /* No change to the Clock update rate. */ +#define TPM2_CLOCK_FINE_FASTER (1 ) /* Speed the Clock update rate by one fine adjustment step. */ +#define TPM2_CLOCK_MEDIUM_FASTER (2 ) /* Speed the Clock update rate by one medium adjustment step. */ +#define TPM2_CLOCK_COARSE_FASTER (3 ) /* Speed the Clock update rate by one coarse adjustment step. */ + +/* Table 18 Definition of UINT16 TPM2_EO Constants <INOUT> */ +typedef UINT16 TPM2_EO; +#define TPM2_EO_EQ (0x0000 ) /* A B */ +#define TPM2_EO_NEQ (0x0001 ) /* A B */ +#define TPM2_EO_SIGNED_GT (0x0002 ) /* A > B signed */ +#define TPM2_EO_UNSIGNED_GT (0x0003 ) /* A > B unsigned */ +#define TPM2_EO_SIGNED_LT (0x0004 ) /* A < B signed */ +#define TPM2_EO_UNSIGNED_LT (0x0005 ) /* A < B unsigned */ +#define TPM2_EO_SIGNED_GE (0x0006 ) /* A B signed */ +#define TPM2_EO_UNSIGNED_GE (0x0007 ) /* A B unsigned */ +#define TPM2_EO_SIGNED_LE (0x0008 ) /* A B signed */ +#define TPM2_EO_UNSIGNED_LE (0x0009 ) /* A B unsigned */ +#define TPM2_EO_BITSET (0x000A ) /* All bits SET in B are SET in A. ABB */ +#define TPM2_EO_BITCLEAR (0x000B ) /* All bits SET in B are CLEAR in A. AB0 */ + +/* Table 19 Definition of UINT16 TPM2_ST Constants <INOUT S> */ +typedef UINT16 TPM2_ST; +#define TPM2_ST_RSP_COMMAND (0x00C4 ) /* tag value for a response used when there is an error in the tag. This is also the value returned from a TPM 1.2 when an error occurs. This value is used in this specification because an error in the command tag may prevent determination of the family. When this tag is used in the response the response code will be TPM2_RC_BAD_TAG 0 1E16 which has the same numeric value as the TPM 1.2 response code for TPM_BADTAG.NOTE In a previously published version of this specification TPM2_RC_BAD_TAG was incorrectly assigned a value of 0x030 instead of 30 0x01e. Some implementations my return the old value instead of the new value. */ +#define TPM2_ST_NULL (0X8000 ) /* no structure type specified */ +#define TPM2_ST_NO_SESSIONS (0x8001 ) /* tag value for a commandresponse for a command defined in this specification indicating that the commandresponse has no attached sessions and no authorizationSizeparameterSize value is presentIf the responseCode from the TPM is not TPM2_RC_SUCCESS then the response tag shall have this value. */ +#define TPM2_ST_SESSIONS (0x8002 ) /* tag value for a commandresponse for a command defined in this specification indicating that the commandresponse has one or more attached sessions and the authorizationSizeparameterSize field is present */ +#define TPM2_ST_RESERVED1 (0x8003 ) /* When used between application software and the TPM resource manager this tag indicates that the command has no sessions and the handles are using the Name format rather than the 32bit handle format.NOTE 1 The response to application software will have a tag of TPM2_ST_NO_SESSIONS.Between the TRM and TPM this tag would occur in a response from a TPM that overlaps the tag parameter of a request with the tag parameter of a response when the response has no associated sessions.NOTE 2 This tag is not used by all TPM or TRM implementations. */ +#define TPM2_ST_RESERVED2 (0x8004 ) /* When used between application software and the TPM resource manager this tag indicates that the command has sessions and the handles are using the Name format rather than the 32bit handle format.NOTE 1 If the command completes successfully the response to application software will have a tag of TPM2_ST_SESSIONS.Between the TRM and TPM would occur in a response from a TPM that overlaps the tag parameter of a request with the tag parameter of a response when the response has authorization sessions.NOTE 2 This tag is not used by all TPM or TRM implementations. */ +#define TPM2_ST_ATTEST_NV (0x8014 ) /* tag for an attestation structure */ +#define TPM2_ST_ATTEST_COMMAND_AUDIT (0x8015 ) /* tag for an attestation structure */ +#define TPM2_ST_ATTEST_SESSION_AUDIT (0x8016 ) /* tag for an attestation structure */ +#define TPM2_ST_ATTEST_CERTIFY (0x8017 ) /* tag for an attestation structure */ +#define TPM2_ST_ATTEST_QUOTE (0x8018 ) /* tag for an attestation structure */ +#define TPM2_ST_ATTEST_TIME (0x8019 ) /* tag for an attestation structure */ +#define TPM2_ST_ATTEST_CREATION (0x801A ) /* tag for an attestation structure */ +#define TPM2_ST_RESERVED3 (0x801B ) /* do not use NOTE This was previously assigned to TPM2_ST_ATTEST_NV. The tag is changed because the structure has changed */ +#define TPM2_ST_CREATION (0x8021 ) /* tag for a ticket type */ +#define TPM2_ST_VERIFIED (0x8022 ) /* tag for a ticket type */ +#define TPM2_ST_AUTH_SECRET (0x8023 ) /* tag for a ticket type */ +#define TPM2_ST_HASHCHECK (0x8024 ) /* tag for a ticket type */ +#define TPM2_ST_AUTH_SIGNED (0x8025 ) /* tag for a ticket type */ +#define TPM2_ST_FU_MANIFEST (0x8029 ) /* tag for a structure describing a Field Upgrade Policy */ + +/* Table 20 Definition of UINT16 TPM2_SU Constants <IN> */ +typedef UINT16 TPM2_SU; +#define TPM2_SU_CLEAR (0x0000 ) /* on TPM2_Shutdown indicates that the TPM should prepare for loss of power and save state required for an orderly startup TPM Reset.on TPM2_Startup indicates that the TPM should perform TPM Reset or TPM Restart */ +#define TPM2_SU_STATE (0x0001 ) /* on TPM2_Shutdown indicates that the TPM should prepare for loss of power and save state required for an orderly startup TPM Restart or TPM Resumeon TPM2_Startup indicates that the TPM should restore the state saved by TPM2_ShutdownTPM2_SU_STATE */ + +/* Table 21 Definition of UINT8 TPM2_SE Constants <IN> */ +typedef UINT8 TPM2_SE; +#define TPM2_SE_HMAC (0x00 ) /* */ +#define TPM2_SE_POLICY (0x01 ) /* */ +#define TPM2_SE_TRIAL (0x03 ) /* The policy session is being used to compute the policyHash and not for command authorization.This setting modifies some policy commands and prevents session from being used to authorize a command. */ + +/* Table 22 Definition of UINT32 TPM2_CAP Constants */ +typedef UINT32 TPM2_CAP; +#define TPM2_CAP_FIRST (0x00000000 ) /* */ +#define TPM2_CAP_ALGS (0x00000000 ) /* TPM2_ALG_ID1 */ +#define TPM2_CAP_HANDLES (0x00000001 ) /* TPM2_HANDLE */ +#define TPM2_CAP_COMMANDS (0x00000002 ) /* TPM2_CC */ +#define TPM2_CAP_PP_COMMANDS (0x00000003 ) /* TPM2_CC */ +#define TPM2_CAP_AUDIT_COMMANDS (0x00000004 ) /* TPM2_CC */ +#define TPM2_CAP_PCRS (0x00000005 ) /* reserved */ +#define TPM2_CAP_TPM_PROPERTIES (0x00000006 ) /* TPM2_PT */ +#define TPM2_CAP_PCR_PROPERTIES (0x00000007 ) /* TPM2_PT_PCR */ +#define TPM2_CAP_ECC_CURVES (0x00000008 ) /* TPM2_ECC_CURVE1 */ +#define TPM2_CAP_LAST (0x00000008 ) /* */ +#define TPM2_CAP_VENDOR_PROPERTY (0x00000100 ) /* manufacturer specific */ + +/* Table 23 Definition of UINT32 TPM2_PT Constants <INOUT S> */ +typedef UINT32 TPM2_PT; +#define TPM2_PT_NONE (0x00000000 ) /* indicates no property type */ +#define TPM2_PT_GROUP (0x00000100 ) /* The number of properties in each group.NOTE The first group with any properties is group 1 TPM2_PT_GROUP * 1. Group 0 is reserved. */ +#define TPM2_PT_FIXED (TPM2_PT_GROUP * 1 ) /* the group of fixed properties returned as TPMS_TAGGED_PROPERTYThe values in this group are only changed due to a firmware change in the TPM. */ +#define TPM2_PT_FAMILY_INDICATOR (TPM2_PT_FIXED + 0 ) /* a 4octet character string containing the TPM Family value TPM2_SPEC_FAMILY */ +#define TPM2_PT_LEVEL (TPM2_PT_FIXED + 1 ) /* the level of the specificationNOTE 1 For this specification the level is zero.NOTE 2 The level is on the title page of the specification. */ +#define TPM2_PT_REVISION (TPM2_PT_FIXED + 2 ) /* the specification Revision times 100EXAMPLE Revision 01.01 would have a value of 101.NOTE The Revision value is on the title page of the specification. */ +#define TPM2_PT_DAY_OF_YEAR (TPM2_PT_FIXED + 3 ) /* the specification day of year using TCG calendarEXAMPLE November 15 2010 has a day of year value of 319 00Â 00Â 01Â 3F16.NOTE The specification date is on the title page of the specification. */ +#define TPM2_PT_YEAR (TPM2_PT_FIXED + 4 ) /* the specification year using the CEEXAMPLE The year 2010 has a value of 00Â 00Â 07Â DA16.NOTE The specification date is on the title page of the specification. */ +#define TPM2_PT_MANUFACTURER (TPM2_PT_FIXED + 5 ) /* the vendor ID unique to each TPM manufacturer */ +#define TPM2_PT_VENDOR_STRING_1 (TPM2_PT_FIXED + 6 ) /* the first four characters of the vendor ID stringNOTE When the vendor string is fewer than 16 octets the additional property values do not have to be present. A vendor string of 4 octets can be represented in one 32bit value and no null terminating character is required. */ +#define TPM2_PT_VENDOR_STRING_2 (TPM2_PT_FIXED + 7 ) /* the second four characters of the vendor ID string */ +#define TPM2_PT_VENDOR_STRING_3 (TPM2_PT_FIXED + 8 ) /* the third four characters of the vendor ID string */ +#define TPM2_PT_VENDOR_STRING_4 (TPM2_PT_FIXED + 9 ) /* the fourth four characters of the vendor ID sting */ +#define TPM2_PT_VENDOR_TPM_TYPE (TPM2_PT_FIXED + 10 ) /* vendordefined value indicating the TPM model */ +#define TPM2_PT_FIRMWARE_VERSION_1 (TPM2_PT_FIXED + 11 ) /* the mostsignificant 32 bits of a TPM vendorspecific value indicating the version number of the firmware. See 10.12.2 and 10.12.8. */ +#define TPM2_PT_FIRMWARE_VERSION_2 (TPM2_PT_FIXED + 12 ) /* the leastsignificant 32 bits of a TPM vendorspecific value indicating the version number of the firmware. See 10.12.2 and 10.12.8. */ +#define TPM2_PT_INPUT_BUFFER (TPM2_PT_FIXED + 13 ) /* the maximum size of a parameter typically a TPM2B_MAX_BUFFER */ +#define TPM2_PT_TPM2_HR_TRANSIENT_MIN (TPM2_PT_FIXED + 14 ) /* the minimum number of transient objects that can be held in TPM RAMNOTE This minimum shall be no less than the minimum value required by the platformspecific specification to which the TPM is built. */ +#define TPM2_PT_TPM2_HR_PERSISTENT_MIN (TPM2_PT_FIXED + 15 ) /* the minimum number of persistent objects that can be held in TPM NV memoryNOTE This minimum shall be no less than the minimum value required by the platformspecific specification to which the TPM is built. */ +#define TPM2_PT_HR_LOADED_MIN (TPM2_PT_FIXED + 16 ) /* the minimum number of authorization sessions that can be held in TPM RAM NOTE This minimum shall be no less than the minimum value required by the platformspecific specification to which the TPM is built. */ +#define TPM2_PT_ACTIVE_SESSIONS_MAX (TPM2_PT_FIXED + 17 ) /* the number of authorization sessions that may be active at a timeA session is active when it has a context associated with its handle. The context may either be in TPM RAM or be context saved.NOTE This value shall be no less than the minimum value required by the platformspecific specification to which the TPM is built. */ +#define TPM2_PT_PCR_COUNT (TPM2_PT_FIXED + 18 ) /* the number of PCR implementedNOTE This number is determined by the defined attributes not the number of PCR that are populated. */ +#define TPM2_PT_PCR_SELECT_MIN (TPM2_PT_FIXED + 19 ) /* the minimum number of octets in a TPMS_PCR_SELECT.sizeOfSelectNOTE This value is not determined by the number of PCR implemented but by the number of PCR required by the platformspecific specification with which the TPM is compliant or by the implementer if not adhering to a platformspecific specification. */ +#define TPM2_PT_CONTEXT_GAP_MAX (TPM2_PT_FIXED + 20 ) /* the maximum allowed difference unsigned between the contextID values of two saved session contextsThis value shall be 2n1 where n is at least 16. */ +#define TPM2_PT_NV_COUNTERS_MAX (TPM2_PT_FIXED + 22 ) /* the maximum number of NV Indexes that are allowed to have the TPM2_NT_COUNTER attributeNOTE It is allowed for this value to be larger than the number of NV Indexes that can be defined. This would be indicative of a TPM implementation that did not use different implementation technology for different NV Index types. */ +#define TPM2_PT_NV_INDEX_MAX (TPM2_PT_FIXED + 23 ) /* the maximum size of an NV Index data area */ +#define TPM2_PT_MEMORY (TPM2_PT_FIXED + 24 ) /* a TPMA_MEMORY indicating the memory management method for the TPM */ +#define TPM2_PT_CLOCK_UPDATE (TPM2_PT_FIXED + 25 ) /* interval in milliseconds between updates to the copy of TPMS_CLOCK_INFO.clock in NV */ +#define TPM2_PT_CONTEXT_HASH (TPM2_PT_FIXED + 26 ) /* the algorithm used for the integrity HMAC on saved contexts and for hashing the fuData of TPM2_FirmwareRead */ +#define TPM2_PT_CONTEXT_SYM (TPM2_PT_FIXED + 27 ) /* TPM2_ALG_ID the algorithm used for encryption of saved contexts */ +#define TPM2_PT_CONTEXT_SYM_SIZE (TPM2_PT_FIXED + 28 ) /* TPM2_KEY_BITS the size of the key used for encryption of saved contexts */ +#define TPM2_PT_ORDERLY_COUNT (TPM2_PT_FIXED + 29 ) /* the modulus 1 of the count for NV update of an orderly counterThe returned value is MAX_ORDERLY_COUNT.This will have a value of 2N 1 where 1 N 32NOTE An orderly counter is an NV Index with an TPM2_NT of TPM_NV_COUNTER and TPMA_NV_ORDERLY SET.NOTE When the loworder bits of a counter equal this value an NV write occurs on the next increment. */ +#define TPM2_PT_MAX_COMMAND_SIZE (TPM2_PT_FIXED + 30 ) /* the maximum value for commandSize in a command */ +#define TPM2_PT_MAX_RESPONSE_SIZE (TPM2_PT_FIXED + 31 ) /* the maximum value for responseSize in a response */ +#define TPM2_PT_MAX_DIGEST (TPM2_PT_FIXED + 32 ) /* the maximum size of a digest that can be produced by the TPM */ +#define TPM2_PT_MAX_OBJECT_CONTEXT (TPM2_PT_FIXED + 33 ) /* the maximum size of an object context that will be returned by TPM2_ContextSave */ +#define TPM2_PT_MAX_SESSION_CONTEXT (TPM2_PT_FIXED + 34 ) /* the maximum size of a session context that will be returned by TPM2_ContextSave */ +#define TPM2_PT_PS_FAMILY_INDICATOR (TPM2_PT_FIXED + 35 ) /* platformspecific family a TPM2_PS valuesee Table 25NOTE The platformspecific values for the TPM2_PT_PS parameters are in the relevant platformspecific specification. In the reference implementation all of these values are 0. */ +#define TPM2_PT_PS_LEVEL (TPM2_PT_FIXED + 36 ) /* the level of the platformspecific specification */ +#define TPM2_PT_PS_REVISION (TPM2_PT_FIXED + 37 ) /* the specification Revision times 100 for the platformspecific specification */ +#define TPM2_PT_PS_DAY_OF_YEAR (TPM2_PT_FIXED + 38 ) /* the platformspecific specification day of year using TCG calendar */ +#define TPM2_PT_PS_YEAR (TPM2_PT_FIXED + 39 ) /* the platformspecific specification year using the CE */ +#define TPM2_PT_SPLIT_MAX (TPM2_PT_FIXED + 40 ) /* the number of split signing operations supported by the TPM */ +#define TPM2_PT_TOTAL_COMMANDS (TPM2_PT_FIXED + 41 ) /* total number of commands implemented in the TPM */ +#define TPM2_PT_LIBRARY_COMMANDS (TPM2_PT_FIXED + 42 ) /* number of commands from the TPM library that are implemented */ +#define TPM2_PT_VENDOR_COMMANDS (TPM2_PT_FIXED + 43 ) /* number of vendor commands that are implemented */ +#define TPM2_PT_NV_BUFFER_MAX (TPM2_PT_FIXED + 44 ) /* the maximum data size in one NV write command */ +#define TPM2_PT_MODES (TPM2_PT_FIXED + 45 ) /* a TPMA_MODES value indicating that the TPM is designed for these modes. */ +#define TPM2_PT_VAR (TPM2_PT_GROUP * 2 ) /* the group of variable properties returned as TPMS_TAGGED_PROPERTYThe properties in this group change because of a Protected Capability other than a firmware update. The values are not necessarily persistent across all power transitions. */ +#define TPM2_PT_PERMANENT (TPM2_PT_VAR + 0 ) /* TPMA_PERMANENT */ +#define TPM2_PT_STARTUP_CLEAR (TPM2_PT_VAR + 1 ) /* TPMA_STARTUP_CLEAR */ +#define TPM2_PT_TPM2_HR_NV_INDEX (TPM2_PT_VAR + 2 ) /* the number of NV Indexes currently defined */ +#define TPM2_PT_HR_LOADED (TPM2_PT_VAR + 3 ) /* the number of authorization sessions currently loaded into TPM RAM */ +#define TPM2_PT_HR_LOADED_AVAIL (TPM2_PT_VAR + 4 ) /* the number of additional authorization sessions of any type that could be loaded into TPM RAMThis value is an estimate. If this value is at least 1 then at least one authorization session of any type may be loaded. Any command that changes the RAM memory allocation can make this estimate invalid.NOTE A valid implementation may return 1 even if more than one authorization session would fit into RAM. */ +#define TPM2_PT_HR_ACTIVE (TPM2_PT_VAR + 5 ) /* the number of active authorization sessions currently being tracked by the TPMThis is the sum of the loaded and saved sessions. */ +#define TPM2_PT_HR_ACTIVE_AVAIL (TPM2_PT_VAR + 6 ) /* the number of additional authorization sessions of any type that could be createdThis value is an estimate. If this value is at least 1 then at least one authorization session of any type may be created. Any command that changes the RAM memory allocation can make this estimate invalid.NOTE A valid implementation may return 1 even if more than one authorization session could be created. */ +#define TPM2_PT_TPM2_HR_TRANSIENT_AVAIL (TPM2_PT_VAR + 7 ) /* estimate of the number of additional transient objects that could be loaded into TPM RAMThis value is an estimate. If this value is at least 1 then at least one object of any type may be loaded. Any command that changes the memory allocation can make this estimate invalid.NOTE A valid implementation may return 1 even if more than one transient object would fit into RAM. */ +#define TPM2_PT_TPM2_HR_PERSISTENT (TPM2_PT_VAR + 8 ) /* the number of persistent objects currently loaded into TPM NV memory */ +#define TPM2_PT_TPM2_HR_PERSISTENT_AVAIL (TPM2_PT_VAR + 9 ) /* the number of additional persistent objects that could be loaded into NV memoryThis value is an estimate. If this value is at least 1 then at least one object of any type may be made persistent. Any command that changes the NV memory allocation can make this estimate invalid.NOTE A valid implementation may return 1 even if more than one persistent object would fit into NV memory. */ +#define TPM2_PT_NV_COUNTERS (TPM2_PT_VAR + 10 ) /* the number of defined NV Indexes that have NV the TPM2_NT_COUNTER attribute */ +#define TPM2_PT_NV_COUNTERS_AVAIL (TPM2_PT_VAR + 11 ) /* the number of additional NV Indexes that can be defined with their TPM2_NT of TPM_NV_COUNTER and the TPMA_NV_ORDERLY attribute SETThis value is an estimate. If this value is at least 1 then at least one NV Index may be created with a TPM2_NT of TPM_NV_COUNTER and the TPMA_NV_ORDERLY attributes. Any command that changes the NV memory allocation can make this estimate invalid.NOTE A valid implementation may return 1 even if more than one NV counter could be defined. */ +#define TPM2_PT_ALGORITHM_SET (TPM2_PT_VAR + 12 ) /* code that limits the algorithms that may be used with the TPM */ +#define TPM2_PT_LOADED_CURVES (TPM2_PT_VAR + 13 ) /* the number of loaded ECC curves */ +#define TPM2_PT_LOCKOUT_COUNTER (TPM2_PT_VAR + 14 ) /* the current value of the lockout counter failedTries */ +#define TPM2_PT_MAX_AUTH_FAIL (TPM2_PT_VAR + 15 ) /* the number of authorization failures before DA lockout is invoked */ +#define TPM2_PT_LOCKOUT_INTERVAL (TPM2_PT_VAR + 16 ) /* the number of seconds before the value reported by TPM2_PT_LOCKOUT_COUNTER is decremented */ +#define TPM2_PT_LOCKOUT_RECOVERY (TPM2_PT_VAR + 17 ) /* the number of seconds after a lockoutAuth failure before use of lockoutAuth may be attempted again */ +#define TPM2_PT_NV_WRITE_RECOVERY (TPM2_PT_VAR + 18 ) /* number of milliseconds before the TPM will accept another command that will modify NVThis value is an approximation and may go up or down over time. */ +#define TPM2_PT_AUDIT_COUNTER_0 (TPM2_PT_VAR + 19 ) /* the highorder 32 bits of the command audit counter */ +#define TPM2_PT_AUDIT_COUNTER_1 (TPM2_PT_VAR + 20 ) /* the loworder 32 bits of the command audit counter */ + +/* Table 24 Definition of UINT32 TPM2_PT_PCR Constants <INOUT S> */ +typedef UINT32 TPM2_PT_PCR; +#define TPM2_PT_TPM2_PCR_FIRST (0x00000000 ) /* bottom of the range of TPM2_PT_PCR properties */ +#define TPM2_PT_PCR_SAVE (0x00000000 ) /* a SET bit in the TPMS_PCR_SELECT indicates that the PCR is saved and restored by TPM2_SU_STATE */ +#define TPM2_PT_PCR_EXTEND_L0 (0x00000001 ) /* a SET bit in the TPMS_PCR_SELECT indicates that the PCR may be extended from locality 0This property is only present if a locality other than 0 is implemented. */ +#define TPM2_PT_PCR_RESET_L0 (0x00000002 ) /* a SET bit in the TPMS_PCR_SELECT indicates that the PCR may be reset by TPM2_PCR_Reset from locality 0 */ +#define TPM2_PT_PCR_EXTEND_L1 (0x00000003 ) /* a SET bit in the TPMS_PCR_SELECT indicates that the PCR may be extended from locality 1 This property is only present if locality 1 is implemented. */ +#define TPM2_PT_PCR_RESET_L1 (0x00000004 ) /* a SET bit in the TPMS_PCR_SELECT indicates that the PCR may be reset by TPM2_PCR_Reset from locality 1This property is only present if locality 1 is implemented. */ +#define TPM2_PT_PCR_EXTEND_L2 (0x00000005 ) /* a SET bit in the TPMS_PCR_SELECT indicates that the PCR may be extended from locality 2 This property is only present if localities 1 and 2 are implemented. */ +#define TPM2_PT_PCR_RESET_L2 (0x00000006 ) /* a SET bit in the TPMS_PCR_SELECT indicates that the PCR may be reset by TPM2_PCR_Reset from locality 2This property is only present if localities 1 and 2 are implemented. */ +#define TPM2_PT_PCR_EXTEND_L3 (0x00000007 ) /* a SET bit in the TPMS_PCR_SELECT indicates that the PCR may be extended from locality 3This property is only present if localities 1 2 and 3 are implemented. */ +#define TPM2_PT_PCR_RESET_L3 (0x00000008 ) /* a SET bit in the TPMS_PCR_SELECT indicates that the PCR may be reset by TPM2_PCR_Reset from locality 3This property is only present if localities 1 2 and 3 are implemented. */ +#define TPM2_PT_PCR_EXTEND_L4 (0x00000009 ) /* a SET bit in the TPMS_PCR_SELECT indicates that the PCR may be extended from locality 4This property is only present if localities 1 2 3 and 4 are implemented. */ +#define TPM2_PT_PCR_RESET_L4 (0x0000000A ) /* a SET bit in the TPMS_PCR_SELECT indicates that the PCR may be reset by TPM2_PCR_Reset from locality 4This property is only present if localities 1 2 3 and 4 are implemented. */ +#define TPM2_PT_PCR_RESERVED1 (0x0000000B 0x00000010 ) /* the values in this range are reserved They correspond to values that may be used to describe attributes associated with the extended localities 32255.synthesize additional software localities. The meaning of these properties need not be the same as the meaning for the Extend and Reset properties above. */ +#define TPM2_PT_PCR_NO_INCREMENT (0x00000011 ) /* a SET bit in the TPMS_PCR_SELECT indicates that modifications to this PCR reset or Extend will not increment the pcrUpdateCounter */ +#define TPM2_PT_PCR_DRTM_RESET (0x00000012 ) /* a SET bit in the TPMS_PCR_SELECT indicates that the PCR is reset by a DRTM eventThese PCR are reset to 1 on TPM2_Startup and reset to 0 on a _TPM_Hash_End event following a _TPM_Hash_Start event. */ +#define TPM2_PT_PCR_POLICY (0x00000013 ) /* a SET bit in the TPMS_PCR_SELECT indicates that the PCR is controlled by policyThis property is only present if the TPM supports policy control of a PCR. */ +#define TPM2_PT_PCR_AUTH (0x00000014 ) /* a SET bit in the TPMS_PCR_SELECT indicates that the PCR is controlled by an authorization valueThis property is only present if the TPM supports authorization control of a PCR. */ +#define TPM2_PT_PCR_RESERVED2 (0x00000015 ) /* reserved for the next 2nd TPM2_PT_PCR_POLICY set */ +#define TPM2_PT_PCR_RESERVED3 (0x00000016 ) /* reserved for the next 2nd TPM2_PT_PCR_AUTH set */ +#define TPM2_PT_PCR_RESERVED4 (0x00000017 0x00000210 ) /* reserved for the 2nd through 255th TPM2_PT_PCR_POLICY and TPM2_PT_PCR_AUTH values */ +#define TPM2_PT_PCR_RESERVED5 (0x00000211 ) /* reserved to the 256th and highest allowed TPM2_PT_PCR_POLICY set */ +#define TPM2_PT_PCR_RESERVED6 (0x00000212 ) /* reserved to the 256th and highest allowed TPM2_PT_PCR_AUTH set */ +#define TPM2_PT_PCR_RESERVED7 (0x00000213 ) /* new PCR property values may be assigned starting with this value */ +#define TPM2_PT_TPM2_PCR_LAST (0x00000014 ) /* top of the range of TPM2_PT_PCR properties of the implementationIf the TPM receives a request for a PCR property with a value larger than this the TPM will return a zero length list and set the moreData parameter to NO.NOTE This is an implementationspecific value. The value shown reflects the reference code implementation. */ + +/* Table 25 Definition of UINT32 TPM2_PS Constants <OUT> */ +typedef UINT32 TPM2_PS; +#define TPM2_PS_MAIN (0x00000000 ) /* not platform specific */ +#define TPM2_PS_PC (0x00000001 ) /* PC Client */ +#define TPM2_PS_PDA (0x00000002 ) /* PDA includes all mobile devices that are not specifically cell phones */ +#define TPM2_PS_CELL_PHONE (0x00000003 ) /* Cell Phone */ +#define TPM2_PS_SERVER (0x00000004 ) /* Server WG */ +#define TPM2_PS_PERIPHERAL (0x00000005 ) /* Peripheral WG */ +#define TPM2_PS_TSS (0x00000006 ) /* TSS WG */ +#define TPM2_PS_STORAGE (0x00000007 ) /* Storage WG */ +#define TPM2_PS_AUTHENTICATION (0x00000008 ) /* Authentication WG */ +#define TPM2_PS_EMBEDDED (0x00000009 ) /* Embedded WG */ +#define TPM2_PS_HARDCOPY (0x0000000A ) /* Hardcopy WG */ +#define TPM2_PS_INFRASTRUCTURE (0x0000000B ) /* Infrastructure WG */ +#define TPM2_PS_VIRTUALIZATION (0x0000000C ) /* Virtualization WG */ +#define TPM2_PS_TNC (0x0000000D ) /* Trusted Network Connect WG */ +#define TPM2_PS_MULTI_TENANT (0x0000000E ) /* Multitenant WG */ +#define TPM2_PS_TC (0x0000000F ) /* Technical Committee */ /* Table 26 Definition of Types for Handles */ -typedef UINT32 TPM_HANDLE; /* */ - -/* Table 27 Definition of UINT8 TPM_HT Constants <S> */ -typedef UINT8 TPM_HT; -#define TPM_HT_PCR (0x00 ) /* PCR consecutive numbers starting at 0 that reference the PCR registersA platformspecific specification will set the minimum number of PCR and an implementation may have more. */ -#define TPM_HT_NV_INDEX (0x01 ) /* NV Index assigned by the caller */ -#define TPM_HT_HMAC_SESSION (0x02 ) /* HMAC Authorization Session assigned by the TPM when the session is created */ -#define TPM_HT_LOADED_SESSION (0x02 ) /* Loaded Authorization Session used only in the context of TPM2_GetCapabilityThis type references both loaded HMAC and loaded policy authorization sessions. */ -#define TPM_HT_POLICY_SESSION (0x03 ) /* Policy Authorization Session assigned by the TPM when the session is created */ -#define TPM_HT_SAVED_SESSION (0x03 ) /* Saved Authorization Session used only in the context of TPM2_GetCapabilityThis type references saved authorization session contexts for which the TPM is maintaining tracking information. */ -#define TPM_HT_PERMANENT (0x40 ) /* Permanent Values assigned by this specification in Table 28 */ -#define TPM_HT_TRANSIENT (0x80 ) /* Transient Objects assigned by the TPM when an object is loaded into transientobject memory or when a persistent object is converted to a transient object */ -#define TPM_HT_PERSISTENT (0x81 ) /* Persistent Objects assigned by the TPM when a loaded transient object is made persistent */ - -/* Table 28 Definition of TPM_HANDLE TPM_RH Constants <S> */ -typedef TPM_HANDLE TPM_RH; -#define TPM_RH_FIRST (0x40000000 ) /* R */ -#define TPM_RH_SRK (0x40000000 ) /* R */ -#define TPM_RH_OWNER (0x40000001 ) /* K A P */ -#define TPM_RH_REVOKE (0x40000002 ) /* R */ -#define TPM_RH_TRANSPORT (0x40000003 ) /* R */ -#define TPM_RH_OPERATOR (0x40000004 ) /* R */ -#define TPM_RH_ADMIN (0x40000005 ) /* R */ -#define TPM_RH_EK (0x40000006 ) /* R */ -#define TPM_RH_NULL (0x40000007 ) /* K A P */ -#define TPM_RH_UNASSIGNED (0x40000008 ) /* R */ -#define TPM_RS_PW (0x40000009 ) /* S */ -#define TPM_RH_LOCKOUT (0x4000000A ) /* A */ -#define TPM_RH_ENDORSEMENT (0x4000000B ) /* K A P */ -#define TPM_RH_PLATFORM (0x4000000C ) /* K A P */ -#define TPM_RH_PLATFORM_NV (0x4000000D ) /* C */ -#define TPM_RH_AUTH_00 (0x40000010 ) /* A */ -#define TPM_RH_AUTH_FF (0x4000010F ) /* A */ -#define TPM_RH_LAST (0x4000010F ) /* R */ - -/* Table 29 Definition of TPM_HANDLE TPM_HC Constants <S> */ -typedef TPM_HANDLE TPM_HC; -#define HR_HANDLE_MASK (0x00FFFFFF ) /* to mask off the HR */ -#define HR_RANGE_MASK (0xFF000000 ) /* to mask off the variable part */ -#define HR_SHIFT (24 ) /* */ -#define HR_PCR (TPM_HT_PCR << HR_SHIFT ) /* */ -#define HR_HMAC_SESSION (TPM_HT_HMAC_SESSION << HR_SHIFT ) /* */ -#define HR_POLICY_SESSION (TPM_HT_POLICY_SESSION << HR_SHIFT ) /* */ -#define HR_TRANSIENT (TPM_HT_TRANSIENT << HR_SHIFT ) /* */ -#define HR_PERSISTENT (TPM_HT_PERSISTENT << HR_SHIFT ) /* */ -#define HR_NV_INDEX (TPM_HT_NV_INDEX << HR_SHIFT ) /* */ -#define HR_PERMANENT (TPM_HT_PERMANENT << HR_SHIFT ) /* */ -#define PCR_FIRST (HR_PCR + 0 ) /* first PCR */ -#define PCR_LAST (PCR_FIRST + MAX_PCRS - 1 ) /* last PCR */ -#define HMAC_SESSION_FIRST (HR_HMAC_SESSION + 0 ) /* first HMAC session */ -#define HMAC_SESSION_LAST (HMAC_SESSION_FIRST + 0x00fffffe ) /* last HMAC session */ -#define LOADED_SESSION_FIRST (HMAC_SESSION_FIRST ) /* used in GetCapability */ -#define LOADED_SESSION_LAST (HMAC_SESSION_LAST ) /* used in GetCapability */ -#define POLICY_SESSION_FIRST (HR_POLICY_SESSION + 0 ) /* first policy session */ -#define POLICY_SESSION_LAST (POLICY_SESSION_FIRST + 0x00fffffe ) /* last policy session */ -#define TRANSIENT_FIRST (HR_TRANSIENT + 0 ) /* first transient object */ -#define ACTIVE_SESSION_FIRST (POLICY_SESSION_FIRST ) /* used in GetCapability */ -#define ACTIVE_SESSION_LAST (POLICY_SESSION_LAST ) /* used in GetCapability */ -#define TRANSIENT_LAST (TRANSIENT_FIRST + 0x00fffffe ) /* last transient object */ -#define PERSISTENT_FIRST (HR_PERSISTENT + 0 ) /* first persistent object */ -#define PERSISTENT_LAST (PERSISTENT_FIRST + 0x00FFFFFF ) /* last persistent object */ -#define PLATFORM_PERSISTENT (PERSISTENT_FIRST + 0x00800000 ) /* first platform persistent object */ -#define NV_INDEX_FIRST (HR_NV_INDEX + 0 ) /* first allowed NV Index */ -#define NV_INDEX_LAST (NV_INDEX_FIRST + 0x00FFFFFF ) /* last allowed NV Index */ -#define PERMANENT_FIRST (TPM_RH_FIRST ) /* */ -#define PERMANENT_LAST (TPM_RH_LAST ) /* */ +typedef UINT32 TPM2_HANDLE; /* */ + +/* Table 27 Definition of UINT8 TPM2_HT Constants <S> */ +typedef UINT8 TPM2_HT; +#define TPM2_HT_PCR (0x00 ) /* PCR consecutive numbers starting at 0 that reference the PCR registersA platformspecific specification will set the minimum number of PCR and an implementation may have more. */ +#define TPM2_HT_NV_INDEX (0x01 ) /* NV Index assigned by the caller */ +#define TPM2_HT_HMAC_SESSION (0x02 ) /* HMAC Authorization Session assigned by the TPM when the session is created */ +#define TPM2_HT_LOADED_SESSION (0x02 ) /* Loaded Authorization Session used only in the context of TPM2_GetCapabilityThis type references both loaded HMAC and loaded policy authorization sessions. */ +#define TPM2_HT_POLICY_SESSION (0x03 ) /* Policy Authorization Session assigned by the TPM when the session is created */ +#define TPM2_HT_SAVED_SESSION (0x03 ) /* Saved Authorization Session used only in the context of TPM2_GetCapabilityThis type references saved authorization session contexts for which the TPM is maintaining tracking information. */ +#define TPM2_HT_PERMANENT (0x40 ) /* Permanent Values assigned by this specification in Table 28 */ +#define TPM2_HT_TRANSIENT (0x80 ) /* Transient Objects assigned by the TPM when an object is loaded into transientobject memory or when a persistent object is converted to a transient object */ +#define TPM2_HT_PERSISTENT (0x81 ) /* Persistent Objects assigned by the TPM when a loaded transient object is made persistent */ + +/* Table 28 Definition of TPM2_HANDLE TPM2_RH Constants <S> */ +typedef TPM2_HANDLE TPM2_RH; +#define TPM2_RH_FIRST (0x40000000 ) /* R */ +#define TPM2_RH_SRK (0x40000000 ) /* R */ +#define TPM2_RH_OWNER (0x40000001 ) /* K A P */ +#define TPM2_RH_REVOKE (0x40000002 ) /* R */ +#define TPM2_RH_TRANSPORT (0x40000003 ) /* R */ +#define TPM2_RH_OPERATOR (0x40000004 ) /* R */ +#define TPM2_RH_ADMIN (0x40000005 ) /* R */ +#define TPM2_RH_EK (0x40000006 ) /* R */ +#define TPM2_RH_NULL (0x40000007 ) /* K A P */ +#define TPM2_RH_UNASSIGNED (0x40000008 ) /* R */ +#define TPM2_RS_PW (0x40000009 ) /* S */ +#define TPM2_RH_LOCKOUT (0x4000000A ) /* A */ +#define TPM2_RH_ENDORSEMENT (0x4000000B ) /* K A P */ +#define TPM2_RH_PLATFORM (0x4000000C ) /* K A P */ +#define TPM2_RH_PLATFORM_NV (0x4000000D ) /* C */ +#define TPM2_RH_AUTH_00 (0x40000010 ) /* A */ +#define TPM2_RH_AUTH_FF (0x4000010F ) /* A */ +#define TPM2_RH_LAST (0x4000010F ) /* R */ + +/* Table 29 Definition of TPM2_HANDLE TPM2_HC Constants <S> */ +typedef TPM2_HANDLE TPM2_HC; +#define TPM2_HR_HANDLE_MASK (0x00FFFFFF ) /* to mask off the HR */ +#define TPM2_HR_RANGE_MASK (0xFF000000 ) /* to mask off the variable part */ +#define TPM2_HR_SHIFT (24 ) /* */ +#define TPM2_HR_PCR (TPM2_HT_PCR << TPM2_HR_SHIFT ) /* */ +#define TPM2_HR_HMAC_SESSION (TPM2_HT_HMAC_SESSION << TPM2_HR_SHIFT ) /* */ +#define TPM2_HR_POLICY_SESSION (TPM2_HT_POLICY_SESSION << TPM2_HR_SHIFT ) /* */ +#define TPM2_HR_TRANSIENT (TPM2_HT_TRANSIENT << TPM2_HR_SHIFT ) /* */ +#define TPM2_HR_PERSISTENT (TPM2_HT_PERSISTENT << TPM2_HR_SHIFT ) /* */ +#define TPM2_HR_NV_INDEX (TPM2_HT_NV_INDEX << TPM2_HR_SHIFT ) /* */ +#define TPM2_HR_PERMANENT (TPM2_HT_PERMANENT << TPM2_HR_SHIFT ) /* */ +#define TPM2_PCR_FIRST (TPM2_HR_PCR + 0 ) /* first PCR */ +#define TPM2_PCR_LAST (TPM2_PCR_FIRST + TPM2_MAX_PCRS - 1 ) /* last PCR */ +#define TPM2_HMAC_SESSION_FIRST (TPM2_HR_HMAC_SESSION + 0 ) /* first HMAC session */ +#define TPM2_HMAC_SESSION_LAST (TPM2_HMAC_SESSION_FIRST + 0x00fffffe ) /* last HMAC session */ +#define TPM2_LOADED_SESSION_FIRST (TPM2_HMAC_SESSION_FIRST ) /* used in GetCapability */ +#define TPM2_LOADED_SESSION_LAST (TPM2_HMAC_SESSION_LAST ) /* used in GetCapability */ +#define TPM2_POLICY_SESSION_FIRST (TPM2_HR_POLICY_SESSION + 0 ) /* first policy session */ +#define TPM2_POLICY_SESSION_LAST (TPM2_POLICY_SESSION_FIRST + 0x00fffffe ) /* last policy session */ +#define TPM2_TRANSIENT_FIRST (TPM2_HR_TRANSIENT + 0 ) /* first transient object */ +#define TPM2_ACTIVE_SESSION_FIRST (TPM2_POLICY_SESSION_FIRST ) /* used in GetCapability */ +#define TPM2_ACTIVE_SESSION_LAST (TPM2_POLICY_SESSION_LAST ) /* used in GetCapability */ +#define TPM2_TRANSIENT_LAST (TPM2_TRANSIENT_FIRST + 0x00fffffe ) /* last transient object */ +#define TPM2_PERSISTENT_FIRST (TPM2_HR_PERSISTENT + 0 ) /* first persistent object */ +#define TPM2_PERSISTENT_LAST (TPM2_PERSISTENT_FIRST + 0x00FFFFFF ) /* last persistent object */ +#define TPM2_PLATFORM_PERSISTENT (TPM2_PERSISTENT_FIRST + 0x00800000 ) /* first platform persistent object */ +#define TPM2_NV_INDEX_FIRST (TPM2_HR_NV_INDEX + 0 ) /* first allowed NV Index */ +#define TPM2_NV_INDEX_LAST (TPM2_NV_INDEX_FIRST + 0x00FFFFFF ) /* last allowed NV Index */ +#define TPM2_PERMANENT_FIRST (TPM2_RH_FIRST ) /* */ +#define TPM2_PERMANENT_LAST (TPM2_RH_LAST ) /* */ /* Table 30 Definition of UINT32 TPMA_ALGORITHM Bits */ #if defined TPM_BITFIELD_LE @@ -732,7 +731,7 @@ typedef union { unsigned int adminWithPolicy : 1; /* SET 1 Approval of ADMIN role actions with this object may only be done with a policy session.CLEAR 0 Approval of ADMIN role actions with this object may be with an HMAC session or with a password using the authValue of the object or a policy session. */ unsigned int reserved3 : 2; /* shall be zero */ unsigned int noDA : 1; /* SET 1 The object is not subject to dictionary attack protections.CLEAR 0 The object is subject to dictionary attack protections. */ - unsigned int encryptedDuplication : 1; /* SET 1 If the object is duplicated then symmetricAlg shall not be TPM_ALG_NULL and newParentHandle shall not be TPM_RH_NULL.CLEAR 0 The object may be duplicated without an inner wrapper on the private portion of the object and the new parent may be TPM_RH_NULL. */ + unsigned int encryptedDuplication : 1; /* SET 1 If the object is duplicated then symmetricAlg shall not be TPM2_ALG_NULL and newParentHandle shall not be TPM2_RH_NULL.CLEAR 0 The object may be duplicated without an inner wrapper on the private portion of the object and the new parent may be TPM2_RH_NULL. */ unsigned int reserved4 : 4; /* shall be zero */ unsigned int restricted : 1; /* SET 1 Key usage is restricted to manipulate structures of known format the parent of this key shall have restricted SET.CLEAR 0 Key usage is not restricted to use on special formats. */ unsigned int decrypt : 1; /* SET 1 The private portion of the key may be used to decrypt.CLEAR 0 The private portion of the key may not be used to decrypt. */ @@ -751,7 +750,7 @@ typedef union { unsigned int decrypt : 1; /* SET 1 The private portion of the key may be used to decrypt.CLEAR 0 The private portion of the key may not be used to decrypt. */ unsigned int restricted : 1; /* SET 1 Key usage is restricted to manipulate structures of known format the parent of this key shall have restricted SET.CLEAR 0 Key usage is not restricted to use on special formats. */ unsigned int reserved2 : 4; /* shall be zero */ - unsigned int encryptedDuplication : 1; /* SET 1 If the object is duplicated then symmetricAlg shall not be TPM_ALG_NULL and newParentHandle shall not be TPM_RH_NULL.CLEAR 0 The object may be duplicated without an inner wrapper on the private portion of the object and the new parent may be TPM_RH_NULL. */ + unsigned int encryptedDuplication : 1; /* SET 1 If the object is duplicated then symmetricAlg shall not be TPM2_ALG_NULL and newParentHandle shall not be TPM2_RH_NULL.CLEAR 0 The object may be duplicated without an inner wrapper on the private portion of the object and the new parent may be TPM2_RH_NULL. */ unsigned int noDA : 1; /* SET 1 The object is not subject to dictionary attack protections.CLEAR 0 The object is subject to dictionary attack protections. */ unsigned int reserved3 : 2; /* shall be zero */ unsigned int adminWithPolicy : 1; /* SET 1 Approval of ADMIN role actions with this object may only be done with a policy session.CLEAR 0 Approval of ADMIN role actions with this object may be with an HMAC session or with a password using the authValue of the object or a policy session. */ @@ -796,8 +795,8 @@ typedef uint32_t TPMA_OBJECT; typedef union { struct { unsigned char continueSession : 1; /* SET 1 In a command this setting indicates that the session is to remain active after successful completion of the command. In a response it indicates that the session is still active. If SET in the command this attribute shall be SET in the response.CLEAR 0 In a command this setting indicates that the TPM should close the session and flush any related context when the command completes successfully. In a response it indicates that the session is closed and the context is no longer active.This attribute has no meaning for a password authorization and the TPM will allow any setting of the attribute in the command and SET the attribute in the response.This attribute will only be CLEAR in one response for a logical session. If the attribute is CLEAR the context associated with the session is no longer in use and the space is available. A session created after another session is ended may have the same handle but logically is not the same session.This attribute has no effect if the command does not complete successfully. */ - unsigned char auditExclusive : 1; /* SET 1 In a command this setting indicates that the command should only be executed if the session is exclusive at the start of the command. In a response it indicates that the session is exclusive. This setting is only allowed if the audit attribute is SET TPM_RC_ATTRIBUTES.CLEAR 0 In a command indicates that the session need not be exclusive at the start of the command. In a response indicates that the session is not exclusive.In this revision if audit is CLEAR auditExclusive must be CLEAR in the command and will be CLEAR in the response. In a future revision this bit may have a different meaning if audit is CLEAR.See Exclusive Audit Session clause in TPM 2.0 Part 1. */ - unsigned char auditReset : 1; /* SET 1 In a command this setting indicates that the audit digest of the session should be initialized and the exclusive status of the session SET. This setting is only allowed if the audit attribute is SET TPM_RC_ATTRIBUTES.CLEAR 0 In a command indicates that the audit digest should not be initialized.This bit is always CLEAR in a response.In this revision if audit is CLEAR auditReset must be clear in the command and will be CLEAR in the response. In a future revision this bit may have a different meaning if audit is CLEAR. */ + unsigned char auditExclusive : 1; /* SET 1 In a command this setting indicates that the command should only be executed if the session is exclusive at the start of the command. In a response it indicates that the session is exclusive. This setting is only allowed if the audit attribute is SET TPM2_RC_ATTRIBUTES.CLEAR 0 In a command indicates that the session need not be exclusive at the start of the command. In a response indicates that the session is not exclusive.In this revision if audit is CLEAR auditExclusive must be CLEAR in the command and will be CLEAR in the response. In a future revision this bit may have a different meaning if audit is CLEAR.See Exclusive Audit Session clause in TPM 2.0 Part 1. */ + unsigned char auditReset : 1; /* SET 1 In a command this setting indicates that the audit digest of the session should be initialized and the exclusive status of the session SET. This setting is only allowed if the audit attribute is SET TPM2_RC_ATTRIBUTES.CLEAR 0 In a command indicates that the audit digest should not be initialized.This bit is always CLEAR in a response.In this revision if audit is CLEAR auditReset must be clear in the command and will be CLEAR in the response. In a future revision this bit may have a different meaning if audit is CLEAR. */ unsigned char reserved1 : 2; /* shall be CLEAR */ unsigned char decrypt : 1; /* SET 1 In a command this setting indicates that the first parameter in the command is symmetrically encrypted using the parameter encryption scheme described in TPM 2.0 Part 1. The TPM will decrypt the parameter after performing any HMAC computations and before unmarshaling the parameter. In a response the attribute is copied from the request but has no effect on the response.CLEAR 0 Session not used for encryption.For a password authorization this attribute will be CLEAR in both the command and response.This attribute may only be SET in one session per command.This attribute may be SET in a session that is not associated with a command handle. Such a session is provided for purposes of encrypting a parameter and not for authorization.This attribute may be SET in combination with any other session attributes.This attribute may only be SET if the first parameter of the command is a sized buffer TPM2B_. */ unsigned char encrypt : 1; /* SET 1 In a command this setting indicates that the TPM should use this session to encrypt the first parameter in the response. In a response it indicates that the attribute was set in the command and that the TPM used the session to encrypt the first parameter in the response using the parameter encryption scheme described in TPM 2.0 Part 1.CLEAR 0 Session not used for encryption.For a password authorization this attribute will be CLEAR in both the command and response.This attribute may only be SET in one session per command.This attribute may be SET in a session that is not associated with a command handle. Such a session is provided for purposes of encrypting a parameter and not for authorization.This attribute may only be SET if the first parameter of a response is a sized buffer TPM2B_. */ @@ -814,8 +813,8 @@ typedef union { unsigned char encrypt : 1; /* SET 1 In a command this setting indicates that the TPM should use this session to encrypt the first parameter in the response. In a response it indicates that the attribute was set in the command and that the TPM used the session to encrypt the first parameter in the response using the parameter encryption scheme described in TPM 2.0 Part 1.CLEAR 0 Session not used for encryption.For a password authorization this attribute will be CLEAR in both the command and response.This attribute may only be SET in one session per command.This attribute may be SET in a session that is not associated with a command handle. Such a session is provided for purposes of encrypting a parameter and not for authorization.This attribute may only be SET if the first parameter of a response is a sized buffer TPM2B_. */ unsigned char decrypt : 1; /* SET 1 In a command this setting indicates that the first parameter in the command is symmetrically encrypted using the parameter encryption scheme described in TPM 2.0 Part 1. The TPM will decrypt the parameter after performing any HMAC computations and before unmarshaling the parameter. In a response the attribute is copied from the request but has no effect on the response.CLEAR 0 Session not used for encryption.For a password authorization this attribute will be CLEAR in both the command and response.This attribute may only be SET in one session per command.This attribute may be SET in a session that is not associated with a command handle. Such a session is provided for purposes of encrypting a parameter and not for authorization.This attribute may be SET in combination with any other session attributes.This attribute may only be SET if the first parameter of the command is a sized buffer TPM2B_. */ unsigned char reserved1 : 2; /* shall be CLEAR */ - unsigned char auditReset : 1; /* SET 1 In a command this setting indicates that the audit digest of the session should be initialized and the exclusive status of the session SET. This setting is only allowed if the audit attribute is SET TPM_RC_ATTRIBUTES.CLEAR 0 In a command indicates that the audit digest should not be initialized.This bit is always CLEAR in a response.In this revision if audit is CLEAR auditReset must be clear in the command and will be CLEAR in the response. In a future revision this bit may have a different meaning if audit is CLEAR. */ - unsigned char auditExclusive : 1; /* SET 1 In a command this setting indicates that the command should only be executed if the session is exclusive at the start of the command. In a response it indicates that the session is exclusive. This setting is only allowed if the audit attribute is SET TPM_RC_ATTRIBUTES.CLEAR 0 In a command indicates that the session need not be exclusive at the start of the command. In a response indicates that the session is not exclusive.In this revision if audit is CLEAR auditExclusive must be CLEAR in the command and will be CLEAR in the response. In a future revision this bit may have a different meaning if audit is CLEAR.See Exclusive Audit Session clause in TPM 2.0 Part 1. */ + unsigned char auditReset : 1; /* SET 1 In a command this setting indicates that the audit digest of the session should be initialized and the exclusive status of the session SET. This setting is only allowed if the audit attribute is SET TPM2_RC_ATTRIBUTES.CLEAR 0 In a command indicates that the audit digest should not be initialized.This bit is always CLEAR in a response.In this revision if audit is CLEAR auditReset must be clear in the command and will be CLEAR in the response. In a future revision this bit may have a different meaning if audit is CLEAR. */ + unsigned char auditExclusive : 1; /* SET 1 In a command this setting indicates that the command should only be executed if the session is exclusive at the start of the command. In a response it indicates that the session is exclusive. This setting is only allowed if the audit attribute is SET TPM2_RC_ATTRIBUTES.CLEAR 0 In a command indicates that the session need not be exclusive at the start of the command. In a response indicates that the session is not exclusive.In this revision if audit is CLEAR auditExclusive must be CLEAR in the command and will be CLEAR in the response. In a future revision this bit may have a different meaning if audit is CLEAR.See Exclusive Audit Session clause in TPM 2.0 Part 1. */ unsigned char continueSession : 1; /* SET 1 In a command this setting indicates that the session is to remain active after successful completion of the command. In a response it indicates that the session is still active. If SET in the command this attribute shall be SET in the response.CLEAR 0 In a command this setting indicates that the TPM should close the session and flush any related context when the command completes successfully. In a response it indicates that the session is closed and the context is no longer active.This attribute has no meaning for a password authorization and the TPM will allow any setting of the attribute in the command and SET the attribute in the response.This attribute will only be CLEAR in one response for a logical session. If the attribute is CLEAR the context associated with the session is no longer in use and the space is available. A session created after another session is ended may have the same handle but logically is not the same session.This attribute has no effect if the command does not complete successfully. */ }; UINT8 val; @@ -841,11 +840,11 @@ typedef UINT8 TPMA_SESSION; typedef union { struct { - unsigned char TPM_LOC_ZERO : 1; /* */ - unsigned char TPM_LOC_ONE : 1; /* */ - unsigned char TPM_LOC_TWO : 1; /* */ - unsigned char TPM_LOC_THREE : 1; /* */ - unsigned char TPM_LOC_FOUR : 1; /* */ + unsigned char TPM2_LOC_ZERO : 1; /* */ + unsigned char TPM2_LOC_ONE : 1; /* */ + unsigned char TPM2_LOC_TWO : 1; /* */ + unsigned char TPM2_LOC_THREE : 1; /* */ + unsigned char TPM2_LOC_FOUR : 1; /* */ unsigned char Extended : 3; /* If any of these bits is set an extended locality is indicated */ }; UINT8 val; @@ -856,11 +855,11 @@ typedef union { typedef union { struct { unsigned char Extended : 3; /* If any of these bits is set an extended locality is indicated */ - unsigned char TPM_LOC_FOUR : 1; /* */ - unsigned char TPM_LOC_THREE : 1; /* */ - unsigned char TPM_LOC_TWO : 1; /* */ - unsigned char TPM_LOC_ONE : 1; /* */ - unsigned char TPM_LOC_ZERO : 1; /* */ + unsigned char TPM2_LOC_FOUR : 1; /* */ + unsigned char TPM2_LOC_THREE : 1; /* */ + unsigned char TPM2_LOC_TWO : 1; /* */ + unsigned char TPM2_LOC_ONE : 1; /* */ + unsigned char TPM2_LOC_ZERO : 1; /* */ }; UINT8 val; } TPMA_LOCALITY; @@ -871,11 +870,11 @@ typedef UINT8 TPMA_LOCALITY; #endif -#define TPMA_LOCALITY_TPM_LOC_ZERO 0x00000001 -#define TPMA_LOCALITY_TPM_LOC_ONE 0x00000002 -#define TPMA_LOCALITY_TPM_LOC_TWO 0x00000004 -#define TPMA_LOCALITY_TPM_LOC_THREE 0x00000008 -#define TPMA_LOCALITY_TPM_LOC_FOUR 0x00000010 +#define TPMA_LOCALITY_TPM2_LOC_ZERO 0x00000001 +#define TPMA_LOCALITY_TPM2_LOC_ONE 0x00000002 +#define TPMA_LOCALITY_TPM2_LOC_TWO 0x00000004 +#define TPMA_LOCALITY_TPM2_LOC_THREE 0x00000008 +#define TPMA_LOCALITY_TPM2_LOC_FOUR 0x00000010 #define TPMA_LOCALITY_EXTENDED 0x000000E0 @@ -936,9 +935,9 @@ typedef union { unsigned int phEnable : 1; /* SET 1 The platform hierarchy is enabled and platformAuth or platformPolicy may be used for authorization.CLEAR 0 platformAuth and platformPolicy may not be used for authorizations and objects in the platform hierarchy including persistent objects cannot be used.NOTE See TPM2_HierarchyControl in TPM 2.0 Part 3 for details on changing this attribute. */ unsigned int shEnable : 1; /* SET 1 The Storage hierarchy is enabled and ownerAuth or ownerPolicy may be used for authorization. NV indices defined using owner authorization are accessible.CLEAR 0 ownerAuth and ownerPolicy may not be used for authorizations and objects in the Storage hierarchy persistent objects and NV indices defined using owner authorization cannot be used.NOTE See TPM2_HierarchyControl in TPM 2.0 Part 3 for details on changing this attribute. */ unsigned int ehEnable : 1; /* SET 1 The EPS hierarchy is enabled and Endorsement Authorization may be used to authorize commands.CLEAR 0 Endorsement Authorization may not be used for authorizations and objects in the endorsement hierarchy including persistent objects cannot be used.NOTE See TPM2_HierarchyControl in TPM 2.0 Part 3 for details on changing this attribute. */ - unsigned int phEnableNV : 1; /* SET 1 NV indices that have TPMA_PLATFORM_CREATE SET may be read or written. The platform can create define and undefine indices.CLEAR 0 NV indices that have TPMA_PLATFORM_CREATE SET may not be read or written TPM_RC_HANDLE. The platform cannot define TPM_RC_HIERARCHY or undefined TPM_RC_HANDLE indices.NOTE See TPM2_HierarchyControl in TPM 2.0 Part 3 for details on changing this attribute.NOTE read refers to these commands TPM2_NV_Read TPM2_NV_ReadPublic TPM_NV_Certify TPM2_PolicyNVwrite refers to these commands TPM2_NV_Write TPM2_NV_Increment TPM2_NV_Extend TPM2_NV_SetBitsNOTE The TPM must query the index TPMA_PLATFORM_CREATE attribute to determine whether phEnableNV is applicable. Since the TPM will return TPM_RC_HANDLE if the index does not exist it also returns this error code if the index is disabled. Otherwise the TPM would leak the existence of an index even when disabled. */ + unsigned int phEnableNV : 1; /* SET 1 NV indices that have TPMA_PLATFORM_CREATE SET may be read or written. The platform can create define and undefine indices.CLEAR 0 NV indices that have TPMA_PLATFORM_CREATE SET may not be read or written TPM2_RC_HANDLE. The platform cannot define TPM2_RC_HIERARCHY or undefined TPM2_RC_HANDLE indices.NOTE See TPM2_HierarchyControl in TPM 2.0 Part 3 for details on changing this attribute.NOTE read refers to these commands TPM2_NV_Read TPM2_NV_ReadPublic TPM_NV_Certify TPM2_PolicyNVwrite refers to these commands TPM2_NV_Write TPM2_NV_Increment TPM2_NV_Extend TPM2_NV_SetBitsNOTE The TPM must query the index TPMA_PLATFORM_CREATE attribute to determine whether phEnableNV is applicable. Since the TPM will return TPM2_RC_HANDLE if the index does not exist it also returns this error code if the index is disabled. Otherwise the TPM would leak the existence of an index even when disabled. */ unsigned int reserved1 : 27; /* shall be zero */ - unsigned int orderly : 1; /* SET 1 The TPM received a TPM2_Shutdown and a matching TPM2_Startup.CLEAR 0 TPM2_StartupTPM_SU_CLEAR was not preceded by a TPM2_Shutdown of any type.NOTE A shutdown is orderly if the TPM receives a TPM2_Shutdown of any type followed by a TPM2_Startup of any type. However the TPM will return an error if TPM2_StartupTPM_SU_STATE was not preceded by TPM2_State_SaveTPM_SU_STATE. */ + unsigned int orderly : 1; /* SET 1 The TPM received a TPM2_Shutdown and a matching TPM2_Startup.CLEAR 0 TPM2_StartupTPM2_SU_CLEAR was not preceded by a TPM2_Shutdown of any type.NOTE A shutdown is orderly if the TPM receives a TPM2_Shutdown of any type followed by a TPM2_Startup of any type. However the TPM will return an error if TPM2_StartupTPM2_SU_STATE was not preceded by TPM2_State_SaveTPM2_SU_STATE. */ }; UINT32 val; } TPMA_STARTUP_CLEAR; @@ -947,9 +946,9 @@ typedef union { typedef union { struct { - unsigned int orderly : 1; /* SET 1 The TPM received a TPM2_Shutdown and a matching TPM2_Startup.CLEAR 0 TPM2_StartupTPM_SU_CLEAR was not preceded by a TPM2_Shutdown of any type.NOTE A shutdown is orderly if the TPM receives a TPM2_Shutdown of any type followed by a TPM2_Startup of any type. However the TPM will return an error if TPM2_StartupTPM_SU_STATE was not preceded by TPM2_State_SaveTPM_SU_STATE. */ + unsigned int orderly : 1; /* SET 1 The TPM received a TPM2_Shutdown and a matching TPM2_Startup.CLEAR 0 TPM2_StartupTPM2_SU_CLEAR was not preceded by a TPM2_Shutdown of any type.NOTE A shutdown is orderly if the TPM receives a TPM2_Shutdown of any type followed by a TPM2_Startup of any type. However the TPM will return an error if TPM2_StartupTPM2_SU_STATE was not preceded by TPM2_State_SaveTPM2_SU_STATE. */ unsigned int reserved1 : 27; /* shall be zero */ - unsigned int phEnableNV : 1; /* SET 1 NV indices that have TPMA_PLATFORM_CREATE SET may be read or written. The platform can create define and undefine indices.CLEAR 0 NV indices that have TPMA_PLATFORM_CREATE SET may not be read or written TPM_RC_HANDLE. The platform cannot define TPM_RC_HIERARCHY or undefined TPM_RC_HANDLE indices.NOTE See TPM2_HierarchyControl in TPM 2.0 Part 3 for details on changing this attribute.NOTE read refers to these commands TPM2_NV_Read TPM2_NV_ReadPublic TPM_NV_Certify TPM2_PolicyNVwrite refers to these commands TPM2_NV_Write TPM2_NV_Increment TPM2_NV_Extend TPM2_NV_SetBitsNOTE The TPM must query the index TPMA_PLATFORM_CREATE attribute to determine whether phEnableNV is applicable. Since the TPM will return TPM_RC_HANDLE if the index does not exist it also returns this error code if the index is disabled. Otherwise the TPM would leak the existence of an index even when disabled. */ + unsigned int phEnableNV : 1; /* SET 1 NV indices that have TPMA_PLATFORM_CREATE SET may be read or written. The platform can create define and undefine indices.CLEAR 0 NV indices that have TPMA_PLATFORM_CREATE SET may not be read or written TPM2_RC_HANDLE. The platform cannot define TPM2_RC_HIERARCHY or undefined TPM2_RC_HANDLE indices.NOTE See TPM2_HierarchyControl in TPM 2.0 Part 3 for details on changing this attribute.NOTE read refers to these commands TPM2_NV_Read TPM2_NV_ReadPublic TPM_NV_Certify TPM2_PolicyNVwrite refers to these commands TPM2_NV_Write TPM2_NV_Increment TPM2_NV_Extend TPM2_NV_SetBitsNOTE The TPM must query the index TPMA_PLATFORM_CREATE attribute to determine whether phEnableNV is applicable. Since the TPM will return TPM2_RC_HANDLE if the index does not exist it also returns this error code if the index is disabled. Otherwise the TPM would leak the existence of an index even when disabled. */ unsigned int ehEnable : 1; /* SET 1 The EPS hierarchy is enabled and Endorsement Authorization may be used to authorize commands.CLEAR 0 Endorsement Authorization may not be used for authorizations and objects in the endorsement hierarchy including persistent objects cannot be used.NOTE See TPM2_HierarchyControl in TPM 2.0 Part 3 for details on changing this attribute. */ unsigned int shEnable : 1; /* SET 1 The Storage hierarchy is enabled and ownerAuth or ownerPolicy may be used for authorization. NV indices defined using owner authorization are accessible.CLEAR 0 ownerAuth and ownerPolicy may not be used for authorizations and objects in the Storage hierarchy persistent objects and NV indices defined using owner authorization cannot be used.NOTE See TPM2_HierarchyControl in TPM 2.0 Part 3 for details on changing this attribute. */ unsigned int phEnable : 1; /* SET 1 The platform hierarchy is enabled and platformAuth or platformPolicy may be used for authorization.CLEAR 0 platformAuth and platformPolicy may not be used for authorizations and objects in the platform hierarchy including persistent objects cannot be used.NOTE See TPM2_HierarchyControl in TPM 2.0 Part 3 for details on changing this attribute. */ @@ -1008,7 +1007,7 @@ typedef uint32_t TPMA_MEMORY; #define TPMA_MEMORY_RESERVED1 0xFFFFFFF8 -/* Table 37 Definition of TPM_CC TPMA_CC Bits <OUT> */ +/* Table 37 Definition of TPM2_CC TPMA_CC Bits <OUT> */ #if defined TPM_BITFIELD_LE typedef union { @@ -1094,89 +1093,89 @@ typedef uint32_t TPMA_MODES; /* Table 39 Definition of BYTE TPMI_YES_NO Type */ typedef BYTE TPMI_YES_NO; -/* Table 40 Definition of TPM_HANDLE TPMI_DH_OBJECT Type */ -typedef TPM_HANDLE TPMI_DH_OBJECT; +/* Table 40 Definition of TPM2_HANDLE TPMI_DH_OBJECT Type */ +typedef TPM2_HANDLE TPMI_DH_OBJECT; -/* Table 41 Definition of TPM_HANDLE TPMI_DH_PERSISTENT Type */ -typedef TPM_HANDLE TPMI_DH_PERSISTENT; +/* Table 41 Definition of TPM2_HANDLE TPMI_DH_PERSISTENT Type */ +typedef TPM2_HANDLE TPMI_DH_PERSISTENT; -/* Table 42 Definition of TPM_HANDLE TPMI_DH_ENTITY Type <IN> */ -typedef TPM_HANDLE TPMI_DH_ENTITY; +/* Table 42 Definition of TPM2_HANDLE TPMI_DH_ENTITY Type <IN> */ +typedef TPM2_HANDLE TPMI_DH_ENTITY; -/* Table 43 Definition of TPM_HANDLE TPMI_DH_PCR Type <IN> */ -typedef TPM_HANDLE TPMI_DH_PCR; +/* Table 43 Definition of TPM2_HANDLE TPMI_DH_PCR Type <IN> */ +typedef TPM2_HANDLE TPMI_DH_PCR; -/* Table 44 Definition of TPM_HANDLE TPMI_SH_AUTH_SESSION Type <INOUT> */ -typedef TPM_HANDLE TPMI_SH_AUTH_SESSION; +/* Table 44 Definition of TPM2_HANDLE TPMI_SH_AUTH_SESSION Type <INOUT> */ +typedef TPM2_HANDLE TPMI_SH_AUTH_SESSION; -/* Table 45 Definition of TPM_HANDLE TPMI_SH_HMAC Type <INOUT> */ -typedef TPM_HANDLE TPMI_SH_HMAC; +/* Table 45 Definition of TPM2_HANDLE TPMI_SH_HMAC Type <INOUT> */ +typedef TPM2_HANDLE TPMI_SH_HMAC; -/* Table 46 Definition of TPM_HANDLE TPMI_SH_POLICY Type <INOUT> */ -typedef TPM_HANDLE TPMI_SH_POLICY; +/* Table 46 Definition of TPM2_HANDLE TPMI_SH_POLICY Type <INOUT> */ +typedef TPM2_HANDLE TPMI_SH_POLICY; -/* Table 47 Definition of TPM_HANDLE TPMI_DH_CONTEXT Type */ -typedef TPM_HANDLE TPMI_DH_CONTEXT; +/* Table 47 Definition of TPM2_HANDLE TPMI_DH_CONTEXT Type */ +typedef TPM2_HANDLE TPMI_DH_CONTEXT; -/* Table 48 Definition of TPM_HANDLE TPMI_RH_HIERARCHY Type */ -typedef TPM_HANDLE TPMI_RH_HIERARCHY; +/* Table 48 Definition of TPM2_HANDLE TPMI_RH_HIERARCHY Type */ +typedef TPM2_HANDLE TPMI_RH_HIERARCHY; -/* Table 49 Definition of TPM_HANDLE TPMI_RH_ENABLES Type */ -typedef TPM_HANDLE TPMI_RH_ENABLES; +/* Table 49 Definition of TPM2_HANDLE TPMI_RH_ENABLES Type */ +typedef TPM2_HANDLE TPMI_RH_ENABLES; -/* Table 50 Definition of TPM_HANDLE TPMI_RH_HIERARCHY_AUTH Type <IN> */ -typedef TPM_HANDLE TPMI_RH_HIERARCHY_AUTH; +/* Table 50 Definition of TPM2_HANDLE TPMI_RH_HIERARCHY_AUTH Type <IN> */ +typedef TPM2_HANDLE TPMI_RH_HIERARCHY_AUTH; -/* Table 51 Definition of TPM_HANDLE TPMI_RH_PLATFORM Type <IN> */ -typedef TPM_HANDLE TPMI_RH_PLATFORM; +/* Table 51 Definition of TPM2_HANDLE TPMI_RH_PLATFORM Type <IN> */ +typedef TPM2_HANDLE TPMI_RH_PLATFORM; -/* Table 52 Definition of TPM_HANDLE TPMI_RH_OWNER Type <IN> */ -typedef TPM_HANDLE TPMI_RH_OWNER; +/* Table 52 Definition of TPM2_HANDLE TPMI_RH_OWNER Type <IN> */ +typedef TPM2_HANDLE TPMI_RH_OWNER; -/* Table 53 Definition of TPM_HANDLE TPMI_RH_ENDORSEMENT Type <IN> */ -typedef TPM_HANDLE TPMI_RH_ENDORSEMENT; +/* Table 53 Definition of TPM2_HANDLE TPMI_RH_ENDORSEMENT Type <IN> */ +typedef TPM2_HANDLE TPMI_RH_ENDORSEMENT; -/* Table 54 Definition of TPM_HANDLE TPMI_RH_PROVISION Type <IN> */ -typedef TPM_HANDLE TPMI_RH_PROVISION; +/* Table 54 Definition of TPM2_HANDLE TPMI_RH_PROVISION Type <IN> */ +typedef TPM2_HANDLE TPMI_RH_PROVISION; -/* Table 55 Definition of TPM_HANDLE TPMI_RH_CLEAR Type <IN> */ -typedef TPM_HANDLE TPMI_RH_CLEAR; +/* Table 55 Definition of TPM2_HANDLE TPMI_RH_CLEAR Type <IN> */ +typedef TPM2_HANDLE TPMI_RH_CLEAR; -/* Table 56 Definition of TPM_HANDLE TPMI_RH_NV_AUTH Type <IN> */ -typedef TPM_HANDLE TPMI_RH_NV_AUTH; +/* Table 56 Definition of TPM2_HANDLE TPMI_RH_NV_AUTH Type <IN> */ +typedef TPM2_HANDLE TPMI_RH_NV_AUTH; -/* Table 57 Definition of TPM_HANDLE TPMI_RH_LOCKOUT Type <IN> */ -typedef TPM_HANDLE TPMI_RH_LOCKOUT; +/* Table 57 Definition of TPM2_HANDLE TPMI_RH_LOCKOUT Type <IN> */ +typedef TPM2_HANDLE TPMI_RH_LOCKOUT; -/* Table 58 Definition of TPM_HANDLE TPMI_RH_NV_INDEX Type <INOUT> */ -typedef TPM_HANDLE TPMI_RH_NV_INDEX; +/* Table 58 Definition of TPM2_HANDLE TPMI_RH_NV_INDEX Type <INOUT> */ +typedef TPM2_HANDLE TPMI_RH_NV_INDEX; -/* Table 59 Definition of TPM_ALG_ID TPMI_ALG_HASH Type */ -typedef TPM_ALG_ID TPMI_ALG_HASH; +/* Table 59 Definition of TPM2_ALG_ID TPMI_ALG_HASH Type */ +typedef TPM2_ALG_ID TPMI_ALG_HASH; -/* Table 60 Definition of TPM_ALG_ID TPMI_ALG_ASYM Type */ -typedef TPM_ALG_ID TPMI_ALG_ASYM; +/* Table 60 Definition of TPM2_ALG_ID TPMI_ALG_ASYM Type */ +typedef TPM2_ALG_ID TPMI_ALG_ASYM; -/* Table 61 Definition of TPM_ALG_ID TPMI_ALG_SYM Type */ -typedef TPM_ALG_ID TPMI_ALG_SYM; +/* Table 61 Definition of TPM2_ALG_ID TPMI_ALG_SYM Type */ +typedef TPM2_ALG_ID TPMI_ALG_SYM; -/* Table 62 Definition of TPM_ALG_ID TPMI_ALG_SYM_OBJECT Type */ -typedef TPM_ALG_ID TPMI_ALG_SYM_OBJECT; +/* Table 62 Definition of TPM2_ALG_ID TPMI_ALG_SYM_OBJECT Type */ +typedef TPM2_ALG_ID TPMI_ALG_SYM_OBJECT; -/* Table 63 Definition of TPM_ALG_ID TPMI_ALG_SYM_MODE Type */ -typedef TPM_ALG_ID TPMI_ALG_SYM_MODE; +/* Table 63 Definition of TPM2_ALG_ID TPMI_ALG_SYM_MODE Type */ +typedef TPM2_ALG_ID TPMI_ALG_SYM_MODE; -/* Table 64 Definition of TPM_ALG_ID TPMI_ALG_KDF Type */ -typedef TPM_ALG_ID TPMI_ALG_KDF; +/* Table 64 Definition of TPM2_ALG_ID TPMI_ALG_KDF Type */ +typedef TPM2_ALG_ID TPMI_ALG_KDF; -/* Table 65 Definition of TPM_ALG_ID TPMI_ALG_SIG_SCHEME Type */ -typedef TPM_ALG_ID TPMI_ALG_SIG_SCHEME; +/* Table 65 Definition of TPM2_ALG_ID TPMI_ALG_SIG_SCHEME Type */ +typedef TPM2_ALG_ID TPMI_ALG_SIG_SCHEME; -/* Table 66 Definition of TPM_ALG_IDECC TPMI_ECC_KEY_EXCHANGE Type */ -typedef TPM_ALG_ID TPMI_ECC_KEY_EXCHANGE; +/* Table 66 Definition of TPM2_ALG_IDECC TPMI_ECC_KEY_EXCHANGE Type */ +typedef TPM2_ALG_ID TPMI_ECC_KEY_EXCHANGE; -/* Table 67 Definition of TPM_ST TPMI_ST_COMMAND_TAG Type */ -typedef TPM_ST TPMI_ST_COMMAND_TAG; +/* Table 67 Definition of TPM2_ST TPMI_ST_COMMAND_TAG Type */ +typedef TPM2_ST TPMI_ST_COMMAND_TAG; /* Table 68 Definition of TPMS_EMPTY Structure <INOUT> */ typedef struct { @@ -1185,23 +1184,23 @@ typedef struct { /* Table 69 Definition of TPMS_ALGORITHM_DESCRIPTION Structure <OUT> */ typedef struct { - TPM_ALG_ID alg; /* an algorithm */ + TPM2_ALG_ID alg; /* an algorithm */ TPMA_ALGORITHM attributes; /* the attributes of the algorithm */ } TPMS_ALGORITHM_DESCRIPTION; /* Table 70 Definition of TPMU_HA Union <INOUT S> */ typedef union { - BYTE sha1[SHA1_DIGEST_SIZE]; /* all hashes */ - BYTE sha256[SHA256_DIGEST_SIZE]; /* all hashes */ - BYTE sha384[SHA384_DIGEST_SIZE]; /* all hashes */ - BYTE sha512[SHA512_DIGEST_SIZE]; /* all hashes */ - BYTE sm3_256[SM3_256_DIGEST_SIZE]; /* all hashes */ + BYTE sha1[TPM2_SHA1_DIGEST_SIZE]; /* all hashes */ + BYTE sha256[TPM2_SHA256_DIGEST_SIZE]; /* all hashes */ + BYTE sha384[TPM2_SHA384_DIGEST_SIZE]; /* all hashes */ + BYTE sha512[TPM2_SHA512_DIGEST_SIZE]; /* all hashes */ + BYTE sm3_256[TPM2_SM3_256_DIGEST_SIZE]; /* all hashes */ char na; /* Not used. Common TPMU member only for parsing */ } TPMU_HA; /* Table 71 Definition of TPMT_HA Structure <INOUT> */ typedef struct { - TPMI_ALG_HASH hashAlg; /* selector of the hash contained in the digest that implies the size of the digestNOTE The leading + on the type indicates that this structure should pass an indication to the unmarshaling function for TPMI_ALG_HASH so that TPM_ALG_NULL will be allowed if a use of a TPMT_HA allows TPM_ALG_NULL. */ + TPMI_ALG_HASH hashAlg; /* selector of the hash contained in the digest that implies the size of the digestNOTE The leading + on the type indicates that this structure should pass an indication to the unmarshaling function for TPMI_ALG_HASH so that TPM2_ALG_NULL will be allowed if a use of a TPMT_HA allows TPM2_ALG_NULL. */ TPMU_HA digest; /* the digest data */ } TPMT_HA; @@ -1224,21 +1223,21 @@ typedef TPM2B_DIGEST TPM2B_OPERAND; /* size limited to the same as the digest s TPM2B_TYPE1( EVENT, 1024, buffer ); /* Table 78 Definition of TPM2B_MAX_BUFFER Structure */ -TPM2B_TYPE1( MAX_BUFFER, MAX_DIGEST_BUFFER, buffer ); +TPM2B_TYPE1( MAX_BUFFER, TPM2_MAX_DIGEST_BUFFER, buffer ); /* Table 79 Definition of TPM2B_MAX_NV_BUFFER Structure */ -TPM2B_TYPE1( MAX_NV_BUFFER, MAX_NV_BUFFER_SIZE, buffer ); +TPM2B_TYPE1( MAX_NV_BUFFER, TPM2_MAX_NV_BUFFER_SIZE, buffer ); /* Table 80 Definition of Types for TPM2B_TIMEOUT */ typedef TPM2B_DIGEST TPM2B_TIMEOUT; /* size limited to the same as the digest structure */ /* Table 81 Definition of TPM2B_IV Structure <INOUT> */ -TPM2B_TYPE1( IV, MAX_SYM_BLOCK_SIZE, buffer ); +TPM2B_TYPE1( IV, TPM2_MAX_SYM_BLOCK_SIZE, buffer ); /* Table 82 Definition of TPMU_NAME Union <> */ typedef union { TPMT_HA digest; /* when the Name is a digest */ - TPM_HANDLE handle; /* when the Name is a handle */ + TPM2_HANDLE handle; /* when the Name is a handle */ char na; /* Not used. Common TPMU member only for parsing */ } TPMU_NAME; @@ -1248,85 +1247,85 @@ TPM2B_TYPE1( NAME, sizeof(TPMU_NAME), name ); /* Table 84 Definition of TPMS_PCR_SELECT Structure */ typedef struct { UINT8 sizeofSelect; /* the size in octets of the pcrSelect array */ - BYTE pcrSelect[PCR_SELECT_MAX]; /* the bit map of selected PCR */ + BYTE pcrSelect[TPM2_PCR_SELECT_MAX]; /* the bit map of selected PCR */ } TPMS_PCR_SELECT; /* Table 85 Definition of TPMS_PCR_SELECTION Structure */ typedef struct { TPMI_ALG_HASH hash; /* the hash algorithm associated with the selection */ UINT8 sizeofSelect; /* the size in octets of the pcrSelect array */ - BYTE pcrSelect[PCR_SELECT_MAX]; /* the bit map of selected PCR */ + BYTE pcrSelect[TPM2_PCR_SELECT_MAX]; /* the bit map of selected PCR */ } TPMS_PCR_SELECTION; /* Table 88 Definition of TPMT_TK_CREATION Structure */ typedef struct { - TPM_ST tag; /* ticket structure tag */ + TPM2_ST tag; /* ticket structure tag */ TPMI_RH_HIERARCHY hierarchy; /* the hierarchy containing name */ TPM2B_DIGEST digest; /* This shall be the HMAC produced using a proof value of hierarchy. */ } TPMT_TK_CREATION; /* Table 89 Definition of TPMT_TK_VERIFIED Structure */ typedef struct { - TPM_ST tag; /* ticket structure tag */ + TPM2_ST tag; /* ticket structure tag */ TPMI_RH_HIERARCHY hierarchy; /* the hierarchy containing keyName */ TPM2B_DIGEST digest; /* This shall be the HMAC produced using a proof value of hierarchy. */ } TPMT_TK_VERIFIED; /* Table 90 Definition of TPMT_TK_AUTH Structure */ typedef struct { - TPM_ST tag; /* ticket structure tag */ + TPM2_ST tag; /* ticket structure tag */ TPMI_RH_HIERARCHY hierarchy; /* the hierarchy of the object used to produce the ticket */ TPM2B_DIGEST digest; /* This shall be the HMAC produced using a proof value of hierarchy. */ } TPMT_TK_AUTH; /* Table 91 Definition of TPMT_TK_HASHCHECK Structure */ typedef struct { - TPM_ST tag; /* ticket structure tag */ + TPM2_ST tag; /* ticket structure tag */ TPMI_RH_HIERARCHY hierarchy; /* the hierarchy */ TPM2B_DIGEST digest; /* This shall be the HMAC produced using a proof value of hierarchy. */ } TPMT_TK_HASHCHECK; /* Table 92 Definition of TPMS_ALG_PROPERTY Structure <OUT> */ typedef struct { - TPM_ALG_ID alg; /* an algorithm identifier */ + TPM2_ALG_ID alg; /* an algorithm identifier */ TPMA_ALGORITHM algProperties; /* the attributes of the algorithm */ } TPMS_ALG_PROPERTY; /* Table 93 Definition of TPMS_TAGGED_PROPERTY Structure <OUT> */ typedef struct { - TPM_PT property; /* a property identifier */ + TPM2_PT property; /* a property identifier */ UINT32 value; /* the value of the property */ } TPMS_TAGGED_PROPERTY; /* Table 94 Definition of TPMS_TAGGED_PCR_SELECT Structure <OUT> */ typedef struct { - TPM_PT_PCR tag; /* the property identifier */ + TPM2_PT_PCR tag; /* the property identifier */ UINT8 sizeofSelect; /* the size in octets of the pcrSelect array */ - BYTE pcrSelect[PCR_SELECT_MAX]; /* the bit map of PCR with the identified property */ + BYTE pcrSelect[TPM2_PCR_SELECT_MAX]; /* the bit map of PCR with the identified property */ } TPMS_TAGGED_PCR_SELECT; /* Table 95 Definition of TPML_CC Structure */ typedef struct { UINT32 count; /* number of commands in the commandCode list may be 0 */ - TPM_CC commandCodes[MAX_CAP_CC]; /* a list of command codesThe maximum only applies to a command code list in a command. The response size is limited only by the size of the parameter buffer. */ + TPM2_CC commandCodes[TPM2_MAX_CAP_CC]; /* a list of command codesThe maximum only applies to a command code list in a command. The response size is limited only by the size of the parameter buffer. */ } TPML_CC; /* Table 96 Definition of TPML_CCA Structure <OUT> */ typedef struct { UINT32 count; /* number of values in the commandAttributes list may be 0 */ - TPMA_CC commandAttributes[MAX_CAP_CC]; /* a list of command codes attributes */ + TPMA_CC commandAttributes[TPM2_MAX_CAP_CC]; /* a list of command codes attributes */ } TPML_CCA; /* Table 97 Definition of TPML_ALG Structure */ typedef struct { UINT32 count; /* number of algorithms in the algorithms list may be 0 */ - TPM_ALG_ID algorithms[MAX_ALG_LIST_SIZE]; /* a list of algorithm IDsThe maximum only applies to an algorithm list in a command. The response size is limited only by the size of the parameter buffer. */ + TPM2_ALG_ID algorithms[TPM2_MAX_ALG_LIST_SIZE]; /* a list of algorithm IDsThe maximum only applies to an algorithm list in a command. The response size is limited only by the size of the parameter buffer. */ } TPML_ALG; /* Table 98 Definition of TPML_HANDLE Structure <OUT> */ typedef struct { UINT32 count; /* the number of handles in the listmay have a value of 0 */ - TPM_HANDLE handle[MAX_CAP_HANDLES]; /* an array of handles */ + TPM2_HANDLE handle[TPM2_MAX_CAP_HANDLES]; /* an array of handles */ } TPML_HANDLE; /* Table 99 Definition of TPML_DIGEST Structure */ @@ -1338,7 +1337,7 @@ typedef struct { /* Table 100 Definition of TPML_DIGEST_VALUES Structure */ typedef struct { UINT32 count; /* number of digests in the list */ - TPMT_HA digests[NUM_PCR_BANKS]; /* a list of tagged digests */ + TPMT_HA digests[TPM2_NUM_PCR_BANKS]; /* a list of tagged digests */ } TPML_DIGEST_VALUES; /* Table 101 Definition of TPM2B_DIGEST_VALUES Structure */ @@ -1347,37 +1346,37 @@ TPM2B_TYPE1( DIGEST_VALUES, sizeof(TPML_DIGEST_VALUES), buffer ); /* Table 102 Definition of TPML_PCR_SELECTION Structure */ typedef struct { UINT32 count; /* number of selection structuresA value of zero is allowed. */ - TPMS_PCR_SELECTION pcrSelections[NUM_PCR_BANKS]; /* list of selections */ + TPMS_PCR_SELECTION pcrSelections[TPM2_NUM_PCR_BANKS]; /* list of selections */ } TPML_PCR_SELECTION; /* Table 103 Definition of TPML_ALG_PROPERTY Structure <OUT> */ typedef struct { UINT32 count; /* number of algorithm properties structuresA value of zero is allowed. */ - TPMS_ALG_PROPERTY algProperties[MAX_CAP_ALGS]; /* list of properties */ + TPMS_ALG_PROPERTY algProperties[TPM2_MAX_CAP_ALGS]; /* list of properties */ } TPML_ALG_PROPERTY; /* Table 104 Definition of TPML_TAGGED_TPM_PROPERTY Structure <OUT> */ typedef struct { UINT32 count; /* number of propertiesA value of zero is allowed. */ - TPMS_TAGGED_PROPERTY tpmProperty[MAX_TPM_PROPERTIES]; /* an array of tagged properties */ + TPMS_TAGGED_PROPERTY tpmProperty[TPM2_MAX_TPM_PROPERTIES]; /* an array of tagged properties */ } TPML_TAGGED_TPM_PROPERTY; /* Table 105 Definition of TPML_TAGGED_PCR_PROPERTY Structure <OUT> */ typedef struct { UINT32 count; /* number of propertiesA value of zero is allowed. */ - TPMS_TAGGED_PCR_SELECT pcrProperty[MAX_PCR_PROPERTIES]; /* a tagged PCR selection */ + TPMS_TAGGED_PCR_SELECT pcrProperty[TPM2_MAX_PCR_PROPERTIES]; /* a tagged PCR selection */ } TPML_TAGGED_PCR_PROPERTY; /* Table 106 Definition of ECC TPML_ECC_CURVE Structure <OUT> */ typedef struct { UINT32 count; /* number of curvesA value of zero is allowed. */ - TPM_ECC_CURVE eccCurves[MAX_ECC_CURVES]; /* array of ECC curve identifiers */ + TPM2_ECC_CURVE eccCurves[TPM2_MAX_ECC_CURVES]; /* array of ECC curve identifiers */ } TPML_ECC_CURVE; /* Implementation specific structure to hold Intel PTT specific property data. */ typedef struct { UINT32 count; /* number of properties zero is allowed. */ - UINT32 property[MAX_PTT_PROPERTIES]; /* property value */ + UINT32 property[TPM2_MAX_PTT_PROPERTIES]; /* property value */ } TPML_INTEL_PTT_PROPERTY; /* Table 107 Definition of TPMU_CAPABILITIES Union <OUT> */ @@ -1390,14 +1389,14 @@ typedef union { TPML_PCR_SELECTION assignedPCR; /* */ TPML_TAGGED_TPM_PROPERTY tpmProperties; /* */ TPML_TAGGED_PCR_PROPERTY pcrProperties; /* */ - TPML_ECC_CURVE eccCurves; /* TPM_ALG_ECC */ + TPML_ECC_CURVE eccCurves; /* TPM2_ALG_ECC */ TPML_INTEL_PTT_PROPERTY intelPttProperty; char na; /* Not used. Common TPMU member only for parsing */ } TPMU_CAPABILITIES; /* Table 108 Definition of TPMS_CAPABILITY_DATA Structure <OUT> */ typedef struct { - TPM_CAP capability; /* the capability */ + TPM2_CAP capability; /* the capability */ TPMU_CAPABILITIES data; /* the capability data */ } TPMS_CAPABILITY_DATA; @@ -1436,7 +1435,7 @@ typedef struct { /* Table 114 Definition of TPMS_COMMAND_AUDIT_INFO Structure <OUT> */ typedef struct { UINT64 auditCounter; /* the monotonic audit counter */ - TPM_ALG_ID digestAlg; /* hash algorithm used for the command audit */ + TPM2_ALG_ID digestAlg; /* hash algorithm used for the command audit */ TPM2B_DIGEST auditDigest; /* the current value of the audit digest */ TPM2B_DIGEST commandDigest; /* digest of the command codes being audited using digestAlg */ } TPMS_COMMAND_AUDIT_INFO; @@ -1460,8 +1459,8 @@ typedef struct { TPM2B_MAX_NV_BUFFER nvContents; /* contents of the NV Index */ } TPMS_NV_CERTIFY_INFO; -/* Table 118 Definition of TPM_ST TPMI_ST_ATTEST Type <OUT> */ -typedef TPM_ST TPMI_ST_ATTEST; +/* Table 118 Definition of TPM2_ST TPMI_ST_ATTEST Type <OUT> */ +typedef TPM2_ST TPMI_ST_ATTEST; /* Table 119 Definition of TPMU_ATTEST Union <OUT> */ typedef union { @@ -1477,7 +1476,7 @@ typedef union { /* Table 120 Definition of TPMS_ATTEST Structure <OUT> */ typedef struct { - TPM_GENERATED magic; /* the indication that this structure was created by a TPM always TPM_GENERATED_VALUE */ + TPM2_GENERATED magic; /* the indication that this structure was created by a TPM always TPM2_GENERATED_VALUE */ TPMI_ST_ATTEST type; /* type of the attestation structure */ TPM2B_NAME qualifiedSigner; /* Qualified Name of the signing key */ TPM2B_DATA extraData; /* external information supplied by callerNOTE A TPM2B_DATA structure provides room for a digest and a method indicator to indicate the components of the digest. The definition of this method indicator is outside the scope of this specification. */ @@ -1504,22 +1503,22 @@ typedef struct { TPM2B_AUTH hmac; /* either an HMAC or an EmptyAuth */ } TPMS_AUTH_RESPONSE; -/* Table 124 Definition of AES TPM_KEY_BITS TPMI_AES_KEY_BITS Type */ -typedef TPM_KEY_BITS TPMI_AES_KEY_BITS; +/* Table 124 Definition of AES TPM2_KEY_BITS TPMI_AES_KEY_BITS Type */ +typedef TPM2_KEY_BITS TPMI_AES_KEY_BITS; -/* Table 124 Definition of SM4 TPM_KEY_BITS TPMI_SM4_KEY_BITS Type */ -typedef TPM_KEY_BITS TPMI_SM4_KEY_BITS; +/* Table 124 Definition of SM4 TPM2_KEY_BITS TPMI_SM4_KEY_BITS Type */ +typedef TPM2_KEY_BITS TPMI_SM4_KEY_BITS; -/* Table 124 Definition of CAMELLIA TPM_KEY_BITS TPMI_CAMELLIA_KEY_BITS Type */ -typedef TPM_KEY_BITS TPMI_CAMELLIA_KEY_BITS; +/* Table 124 Definition of CAMELLIA TPM2_KEY_BITS TPMI_TPM2_CAMELLIA_KEY_BITS Type */ +typedef TPM2_KEY_BITS TPMI_TPM2_CAMELLIA_KEY_BITS; /* Table 125 Definition of TPMU_SYM_KEY_BITS Union */ typedef union { TPMI_AES_KEY_BITS aes; /* all symmetric algorithms */ TPMI_SM4_KEY_BITS sm4; /* all symmetric algorithms */ - TPMI_CAMELLIA_KEY_BITS camellia; /* all symmetric algorithms */ - TPM_KEY_BITS sym; /* when selector may be any of the symmetric block ciphers */ - TPMI_ALG_HASH exclusiveOr; /* overload for using xorNOTE TPM_ALG_NULL is not allowed */ + TPMI_TPM2_CAMELLIA_KEY_BITS camellia; /* all symmetric algorithms */ + TPM2_KEY_BITS sym; /* when selector may be any of the symmetric block ciphers */ + TPMI_ALG_HASH exclusiveOr; /* overload for using xorNOTE TPM2_ALG_NULL is not allowed */ char na; /* Not used. Common TPMU member only for parsing */ } TPMU_SYM_KEY_BITS; @@ -1547,7 +1546,7 @@ typedef struct { } TPMT_SYM_DEF_OBJECT; /* Table 130 Definition of TPM2B_SYM_KEY Structure */ -TPM2B_TYPE1( SYM_KEY, MAX_SYM_KEY_BYTES, buffer ); +TPM2B_TYPE1( SYM_KEY, TPM2_MAX_SYM_KEY_BYTES, buffer ); /* Table 131 Definition of TPMS_SYMCIPHER_PARMS Structure */ typedef struct { @@ -1555,7 +1554,7 @@ typedef struct { } TPMS_SYMCIPHER_PARMS; /* Table 132 Definition of TPM2B_SENSITIVE_DATA Structure */ -TPM2B_TYPE1( SENSITIVE_DATA, MAX_SYM_DATA, buffer ); +TPM2B_TYPE1( SENSITIVE_DATA, TPM2_MAX_SYM_DATA, buffer ); /* Table 133 Definition of TPMS_SENSITIVE_CREATE Structure <IN> */ typedef struct { @@ -1577,8 +1576,8 @@ typedef struct { UINT16 count; /* the counter value that is used between TPM2_Commit and the sign operation */ } TPMS_SCHEME_ECDAA; -/* Table 137 Definition of TPM_ALG_ID TPMI_ALG_KEYEDHASH_SCHEME Type */ -typedef TPM_ALG_ID TPMI_ALG_KEYEDHASH_SCHEME; +/* Table 137 Definition of TPM2_ALG_ID TPMI_ALG_KEYEDHASH_SCHEME Type */ +typedef TPM2_ALG_ID TPMI_ALG_KEYEDHASH_SCHEME; /* Table 138 Definition of Types for HMAC_SIG_SCHEME */ typedef TPMS_SCHEME_HASH TPMS_SCHEME_HMAC; /* */ @@ -1660,8 +1659,8 @@ typedef struct { TPMU_KDF_SCHEME details; /* scheme parameters */ } TPMT_KDF_SCHEME; -/* Table 151 Definition of TPM_ALG_ID TPMI_ALG_ASYM_SCHEME Type <> */ -typedef TPM_ALG_ID TPMI_ALG_ASYM_SCHEME; +/* Table 151 Definition of TPM2_ALG_ID TPMI_ALG_ASYM_SCHEME Type <> */ +typedef TPM2_ALG_ID TPMI_ALG_ASYM_SCHEME; /* Table 152 Definition of TPMU_ASYM_SCHEME Union */ typedef union { @@ -1685,8 +1684,8 @@ typedef struct { TPMU_ASYM_SCHEME details; /* scheme parameters */ } TPMT_ASYM_SCHEME; -/* Table 154 Definition of TPM_ALG_ID RSA TPMI_ALG_RSA_SCHEME Type */ -typedef TPM_ALG_ID TPMI_ALG_RSA_SCHEME; +/* Table 154 Definition of TPM2_ALG_ID RSA TPMI_ALG_RSA_SCHEME Type */ +typedef TPM2_ALG_ID TPMI_ALG_RSA_SCHEME; /* Table 155 Definition of RSA TPMT_RSA_SCHEME Structure */ typedef struct { @@ -1694,8 +1693,8 @@ typedef struct { TPMU_ASYM_SCHEME details; /* scheme parameters */ } TPMT_RSA_SCHEME; -/* Table 156 Definition of TPM_ALG_ID RSA TPMI_ALG_RSA_DECRYPT Type */ -typedef TPM_ALG_ID TPMI_ALG_RSA_DECRYPT; +/* Table 156 Definition of TPM2_ALG_ID RSA TPMI_ALG_RSA_DECRYPT Type */ +typedef TPM2_ALG_ID TPMI_ALG_RSA_DECRYPT; /* Table 157 Definition of RSA TPMT_RSA_DECRYPT Structure */ typedef struct { @@ -1704,16 +1703,16 @@ typedef struct { } TPMT_RSA_DECRYPT; /* Table 158 Definition of RSA TPM2B_PUBLIC_KEY_RSA Structure */ -TPM2B_TYPE1( PUBLIC_KEY_RSA, MAX_RSA_KEY_BYTES, buffer ); +TPM2B_TYPE1( PUBLIC_KEY_RSA, TPM2_MAX_RSA_KEY_BYTES, buffer ); -/* Table 159 Definition of RSA TPM_KEY_BITS TPMI_RSA_KEY_BITS Type */ -typedef TPM_KEY_BITS TPMI_RSA_KEY_BITS; +/* Table 159 Definition of RSA TPM2_KEY_BITS TPMI_RSA_KEY_BITS Type */ +typedef TPM2_KEY_BITS TPMI_RSA_KEY_BITS; /* Table 160 Definition of RSA TPM2B_PRIVATE_KEY_RSA Structure */ -TPM2B_TYPE1( PRIVATE_KEY_RSA, MAX_RSA_KEY_BYTES/2, buffer ); +TPM2B_TYPE1( PRIVATE_KEY_RSA, TPM2_MAX_RSA_KEY_BYTES/2, buffer ); /* Table 161 Definition of ECC TPM2B_ECC_PARAMETER Structure */ -TPM2B_TYPE1( ECC_PARAMETER, MAX_ECC_KEY_BYTES, buffer ); +TPM2B_TYPE1( ECC_PARAMETER, TPM2_MAX_ECC_KEY_BYTES, buffer ); /* Table 162 Definition of ECC TPMS_ECC_POINT Structure */ typedef struct { @@ -1724,11 +1723,11 @@ typedef struct { /* Table 163 Definition of ECC TPM2B_ECC_POINT Structure */ TPM2B_TYPE2( ECC_POINT, TPMS_ECC_POINT, point ); -/* Table 164 Definition of TPM_ALG_ID ECC TPMI_ALG_ECC_SCHEME Type */ -typedef TPM_ALG_ID TPMI_ALG_ECC_SCHEME; +/* Table 164 Definition of TPM2_ALG_ID ECC TPMI_ALG_ECC_SCHEME Type */ +typedef TPM2_ALG_ID TPMI_ALG_ECC_SCHEME; -/* Table 165 Definition of ECC TPM_ECC_CURVE TPMI_ECC_CURVE Type */ -typedef TPM_ECC_CURVE TPMI_ECC_CURVE; +/* Table 165 Definition of ECC TPM2_ECC_CURVE TPMI_ECC_CURVE Type */ +typedef TPM2_ECC_CURVE TPMI_ECC_CURVE; /* Table 166 Definition of TPMT_SIG_SCHEME ECC TPMT_ECC_SCHEME Structure */ typedef struct { @@ -1738,10 +1737,10 @@ typedef struct { /* Table 167 Definition of ECC TPMS_ALGORITHM_DETAIL_ECC Structure <OUT> */ typedef struct { - TPM_ECC_CURVE curveID; /* identifier for the curve */ + TPM2_ECC_CURVE curveID; /* identifier for the curve */ UINT16 keySize; /* Size in bits of the key */ - TPMT_KDF_SCHEME kdf; /* if not TPM_ALG_NULL the required KDF and hash algorithm used in secret sharing operations */ - TPMT_ECC_SCHEME sign; /* If not TPM_ALG_NULL this is the mandatory signature scheme that is required to be used with this curve. */ + TPMT_KDF_SCHEME kdf; /* if not TPM2_ALG_NULL the required KDF and hash algorithm used in secret sharing operations */ + TPMT_ECC_SCHEME sign; /* If not TPM2_ALG_NULL this is the mandatory signature scheme that is required to be used with this curve. */ TPM2B_ECC_PARAMETER p; /* Fp the modulus */ TPM2B_ECC_PARAMETER a; /* coefficient of the linear term in the curve equation */ TPM2B_ECC_PARAMETER b; /* constant term for curve equation */ @@ -1753,7 +1752,7 @@ typedef struct { /* Table 168 Definition of RSA TPMS_SIGNATURE_RSA Structure */ typedef struct { - TPMI_ALG_HASH hash; /* the hash algorithm used to digest the messageTPM_ALG_NULL is not allowed. */ + TPMI_ALG_HASH hash; /* the hash algorithm used to digest the messageTPM2_ALG_NULL is not allowed. */ TPM2B_PUBLIC_KEY_RSA sig; /* The signature is the size of a public key. */ } TPMS_SIGNATURE_RSA; @@ -1763,7 +1762,7 @@ typedef TPMS_SIGNATURE_RSA TPMS_SIGNATURE_RSAPSS; /* */ /* Table 170 Definition of ECC TPMS_SIGNATURE_ECC Structure */ typedef struct { - TPMI_ALG_HASH hash; /* the hash algorithm used in the signature processTPM_ALG_NULL is not allowed. */ + TPMI_ALG_HASH hash; /* the hash algorithm used in the signature processTPM2_ALG_NULL is not allowed. */ TPM2B_ECC_PARAMETER signatureR; /* */ TPM2B_ECC_PARAMETER signatureS; /* */ } TPMS_SIGNATURE_ECC; @@ -1796,7 +1795,7 @@ typedef struct { /* Table 174 Definition of TPMU_ENCRYPTED_SECRET Union <S> */ typedef union { BYTE ecc[sizeof(TPMS_ECC_POINT)]; /* */ - BYTE rsa[MAX_RSA_KEY_BYTES]; /* */ + BYTE rsa[TPM2_MAX_RSA_KEY_BYTES]; /* */ BYTE symmetric[sizeof(TPM2B_DIGEST)]; /* */ BYTE keyedHash[sizeof(TPM2B_DIGEST)]; /* Any symmetrically encrypted secret value will be limited to be no larger than a digest. */ char na; /* Not used. Common TPMU member only for parsing */ @@ -1805,8 +1804,8 @@ typedef union { /* Table 175 Definition of TPM2B_ENCRYPTED_SECRET Structure */ TPM2B_TYPE1( ENCRYPTED_SECRET, sizeof(TPMU_ENCRYPTED_SECRET), secret ); -/* Table 176 Definition of TPM_ALG_ID TPMI_ALG_PUBLIC Type */ -typedef TPM_ALG_ID TPMI_ALG_PUBLIC; +/* Table 176 Definition of TPM2_ALG_ID TPMI_ALG_PUBLIC Type */ +typedef TPM2_ALG_ID TPMI_ALG_PUBLIC; /* Table 177 Definition of TPMU_PUBLIC_ID Union <INOUT S> */ typedef union { @@ -1824,24 +1823,24 @@ typedef struct { /* Table 179 Definition of TPMS_ASYM_PARMS Structure <> */ typedef struct { - TPMT_SYM_DEF_OBJECT symmetric; /* the companion symmetric algorithm for a restricted decryption key and shall be set to a supported symmetric algorithmThis field is optional for keys that are not decryption keys and shall be set to TPM_ALG_NULL if not used. */ - TPMT_ASYM_SCHEME scheme; /* for a key with the sign attribute SET a valid signing scheme for the key typefor a key with the decrypt attribute SET a valid key exchange protocolfor a key with sign and decrypt attributes shall be TPM_ALG_NULL */ + TPMT_SYM_DEF_OBJECT symmetric; /* the companion symmetric algorithm for a restricted decryption key and shall be set to a supported symmetric algorithmThis field is optional for keys that are not decryption keys and shall be set to TPM2_ALG_NULL if not used. */ + TPMT_ASYM_SCHEME scheme; /* for a key with the sign attribute SET a valid signing scheme for the key typefor a key with the decrypt attribute SET a valid key exchange protocolfor a key with sign and decrypt attributes shall be TPM2_ALG_NULL */ } TPMS_ASYM_PARMS; /* Table 180 Definition of RSA TPMS_RSA_PARMS Structure */ typedef struct { - TPMT_SYM_DEF_OBJECT symmetric; /* for a restricted decryption key shall be set to a supported symmetric algorithm key size and mode.if the key is not a restricted decryption key this field shall be set to TPM_ALG_NULL. */ - TPMT_RSA_SCHEME scheme; /* scheme.scheme shall befor an unrestricted signing key either TPM_ALG_RSAPSS TPM_ALG_RSASSA or TPM_ALG_NULLfor a restricted signing key either TPM_ALG_RSAPSS or TPM_ALG_RSASSAfor an unrestricted decryption key TPM_ALG_RSAES TPM_ALG_OAEP or TPM_ALG_NULL unless the object also has the sign attributefor a restricted decryption key TPM_ALG_NULLNOTE When both sign and decrypt are SET restricted shall be CLEAR and scheme shall be TPM_ALG_NULL. */ + TPMT_SYM_DEF_OBJECT symmetric; /* for a restricted decryption key shall be set to a supported symmetric algorithm key size and mode.if the key is not a restricted decryption key this field shall be set to TPM2_ALG_NULL. */ + TPMT_RSA_SCHEME scheme; /* scheme.scheme shall befor an unrestricted signing key either TPM2_ALG_RSAPSS TPM2_ALG_RSASSA or TPM2_ALG_NULLfor a restricted signing key either TPM2_ALG_RSAPSS or TPM2_ALG_RSASSAfor an unrestricted decryption key TPM2_ALG_RSAES TPM2_ALG_OAEP or TPM2_ALG_NULL unless the object also has the sign attributefor a restricted decryption key TPM2_ALG_NULLNOTE When both sign and decrypt are SET restricted shall be CLEAR and scheme shall be TPM2_ALG_NULL. */ TPMI_RSA_KEY_BITS keyBits; /* number of bits in the public modulus */ UINT32 exponent; /* the public exponent A prime number greater than 2.When zero indicates that the exponent is the default of 216 + 1 */ } TPMS_RSA_PARMS; /* Table 181 Definition of ECC TPMS_ECC_PARMS Structure */ typedef struct { - TPMT_SYM_DEF_OBJECT symmetric; /* for a restricted decryption key shall be set to a supported symmetric algorithm key size. and mode.if the key is not a restricted decryption key this field shall be set to TPM_ALG_NULL. */ - TPMT_ECC_SCHEME scheme; /* If the sign attribute of the key is SET then this shall be a valid signing scheme.NOTE If the sign parameter in curveID indicates a mandatory scheme then this field shall have the same value.If the decrypt attribute of the key is SET then this shall be a valid key exchange scheme or TPM_ALG_NULL.If the key is a Storage Key then this field shall be TPM_ALG_NULL. */ + TPMT_SYM_DEF_OBJECT symmetric; /* for a restricted decryption key shall be set to a supported symmetric algorithm key size. and mode.if the key is not a restricted decryption key this field shall be set to TPM2_ALG_NULL. */ + TPMT_ECC_SCHEME scheme; /* If the sign attribute of the key is SET then this shall be a valid signing scheme.NOTE If the sign parameter in curveID indicates a mandatory scheme then this field shall have the same value.If the decrypt attribute of the key is SET then this shall be a valid key exchange scheme or TPM2_ALG_NULL.If the key is a Storage Key then this field shall be TPM2_ALG_NULL. */ TPMI_ECC_CURVE curveID; /* ECC curve ID */ - TPMT_KDF_SCHEME kdf; /* an optional key derivation scheme for generating a symmetric key from a Z valueIf the kdf parameter associated with curveID is not TPM_ALG_NULL then this is required to be NULL.NOTE There are currently no commands where this parameter has effect and in the reference code this field needs to be set to TPM_ALG_NULL. */ + TPMT_KDF_SCHEME kdf; /* an optional key derivation scheme for generating a symmetric key from a Z valueIf the kdf parameter associated with curveID is not TPM2_ALG_NULL then this is required to be NULL.NOTE There are currently no commands where this parameter has effect and in the reference code this field needs to be set to TPM2_ALG_NULL. */ } TPMS_ECC_PARMS; /* Table 182 Definition of TPMU_PUBLIC_PARMS Union <INOUT S> */ @@ -1863,7 +1862,7 @@ typedef struct { /* Table 184 Definition of TPMT_PUBLIC Structure */ typedef struct { TPMI_ALG_PUBLIC type; /* algorithm associated with this object */ - TPMI_ALG_HASH nameAlg; /* algorithm used for computing the Name of the objectNOTE The + indicates that the instance of a TPMT_PUBLIC may have a + to indicate that the nameAlg may be TPM_ALG_NULL. */ + TPMI_ALG_HASH nameAlg; /* algorithm used for computing the Name of the objectNOTE The + indicates that the instance of a TPMT_PUBLIC may have a + to indicate that the nameAlg may be TPM2_ALG_NULL. */ TPMA_OBJECT objectAttributes; /* attributes that along with type determine the manipulations of this object */ TPM2B_DIGEST authPolicy; /* optional policy for using this keyThe policy is computed using the nameAlg of the object.NOTE Shall be the Empty Policy if no authorization policy is present. */ TPMU_PUBLIC_PARMS parameters; /* the algorithm or structure details */ @@ -1874,7 +1873,7 @@ typedef struct { TPM2B_TYPE2( PUBLIC, TPMT_PUBLIC, publicArea ); /* Table 186 Definition of TPM2B_PRIVATE_VENDOR_SPECIFIC Structure<> */ -TPM2B_TYPE1( PRIVATE_VENDOR_SPECIFIC, PRIVATE_VENDOR_SPECIFIC_BYTES, buffer ); +TPM2B_TYPE1( PRIVATE_VENDOR_SPECIFIC, TPM2_PRIVATE_VENDOR_SPECIFIC_BYTES, buffer ); /* Table 187 Definition of TPMU_SENSITIVE_COMPOSITE Union <INOUT S> */ typedef union { @@ -1916,49 +1915,49 @@ typedef struct { /* Table 193 Definition of TPM2B_ID_OBJECT Structure <INOUT> */ TPM2B_TYPE1( ID_OBJECT, sizeof(_ID_OBJECT), credential ); -/* Table 194 Definition of UINT32 TPM_NV_INDEX Bits <> */ +/* Table 194 Definition of UINT32 TPM2_NV_INDEX Bits <> */ #if defined TPM_BITFIELD_LE typedef union { struct { unsigned int index : 24; /* The Index of the NV location */ - unsigned int RH_NV : 8; /* constant value of TPM_HT_NV_INDEX indicating the NV Index range */ + unsigned int RH_NV : 8; /* constant value of TPM2_HT_NV_INDEX indicating the NV Index range */ }; UINT32 val; -} TPM_NV_INDEX; +} TPM2_NV_INDEX; #elif defined TPM_BITFIELD_BE typedef union { struct { - unsigned int RH_NV : 8; /* constant value of TPM_HT_NV_INDEX indicating the NV Index range */ + unsigned int RH_NV : 8; /* constant value of TPM2_HT_NV_INDEX indicating the NV Index range */ unsigned int index : 24; /* The Index of the NV location */ }; UINT32 val; -} TPM_NV_INDEX; +} TPM2_NV_INDEX; #else -typedef uint32_t TPM_NV_INDEX; +typedef uint32_t TPM2_NV_INDEX; #endif -#define TPM_NV_INDEX_INDEX 0x00FFFFFF -#define TPM_NV_INDEX_RH_NV 0xFF000000 +#define TPM2_NV_INDEX_INDEX 0x00FFFFFF +#define TPM2_NV_INDEX_RH_NV 0xFF000000 -/* Table 195 Definition of TPM_NT Constants */ -#define TPM_NT_ORDINARY (0x0 ) /* Ordinary contains data that is opaque to the TPM that can only be modified using TPM2_NV_Write. */ -#define TPM_NT_COUNTER (0x1 ) /* Counter contains an 8octet value that is to be used as a counter and can only be modified with TPM2_NV_Increment */ -#define TPM_NT_BITS (0x2 ) /* Bit Field contains an 8octet value to be used as a bit field and can only be modified with TPM2_NV_SetBits. */ -#define TPM_NT_EXTEND (0x4 ) /* Extend contains a digestsized value used like a PCR. The Index can only be modified using TPM2_NV_Extend. The extend will use the nameAlg of the Index. */ -#define TPM_NT_PIN_FAIL (0x8 ) /* PIN Fail contains a pinCount that increments on a PIN authorization failure and a pinLimit */ -#define TPM_NT_PIN_PASS (0x9 ) /* PIN Pass contains a pinCount that increments on a PIN authorization success and a pinLimit */ +/* Table 195 Definition of TPM2_NT Constants */ +#define TPM2_NT_ORDINARY (0x0 ) /* Ordinary contains data that is opaque to the TPM that can only be modified using TPM2_NV_Write. */ +#define TPM2_NT_COUNTER (0x1 ) /* Counter contains an 8octet value that is to be used as a counter and can only be modified with TPM2_NV_Increment */ +#define TPM2_NT_BITS (0x2 ) /* Bit Field contains an 8octet value to be used as a bit field and can only be modified with TPM2_NV_SetBits. */ +#define TPM2_NT_EXTEND (0x4 ) /* Extend contains a digestsized value used like a PCR. The Index can only be modified using TPM2_NV_Extend. The extend will use the nameAlg of the Index. */ +#define TPM2_NT_PIN_FAIL (0x8 ) /* PIN Fail contains a pinCount that increments on a PIN authorization failure and a pinLimit */ +#define TPM2_NT_PIN_PASS (0x9 ) /* PIN Pass contains a pinCount that increments on a PIN authorization success and a pinLimit */ /* Table 196 Definition of TPMS_NV_PIN_COUNTER_PARAMETERS Structure */ typedef struct { - UINT32 pinCount; /* This counter shows the current number of successful authValue authorization attempts to access a TPM_NT_PIN_PASS index or the current number of unsuccessful authValue authorization attempts to access a TPM_NT_PIN_FAIL index. */ - UINT32 pinLimit; /* This threshold is the value of pinCount at which the authValue authorization of the host TPM_NT_PIN_PASS or TPM_NT_PIN_FAIL index is locked out. */ + UINT32 pinCount; /* This counter shows the current number of successful authValue authorization attempts to access a TPM2_NT_PIN_PASS index or the current number of unsuccessful authValue authorization attempts to access a TPM2_NT_PIN_FAIL index. */ + UINT32 pinLimit; /* This threshold is the value of pinCount at which the authValue authorization of the host TPM2_NT_PIN_PASS or TPM2_NT_PIN_FAIL index is locked out. */ } TPMS_NV_PIN_COUNTER_PARAMETERS; /* Table 197 Definition of UINT32 TPMA_NV Bits */ @@ -1970,7 +1969,7 @@ typedef union { unsigned int TPMA_NV_OWNERWRITE : 1; /* SET 1 The Index data can be written if Owner Authorization is provided.CLEAR 0 Writing of the Index data cannot be authorized with Owner Authorization. */ unsigned int TPMA_NV_AUTHWRITE : 1; /* SET 1 Authorizations to change the Index contents that require USER role may be provided with an HMAC session or password.CLEAR 0 Authorizations to change the Index contents that require USER role may not be provided with an HMAC session or password. */ unsigned int TPMA_NV_POLICYWRITE : 1; /* SET 1 Authorizations to change the Index contents that require USER role may be provided with a policy session.CLEAR 0 Authorizations to change the Index contents that require USER role may not be provided with a policy session.NOTE TPM2_NV_ChangeAuth always requires that authorization be provided in a policy session. */ - unsigned int TPM_NT : 4; /* The type of the index. NOTE A TPM is not required to support all TPM_NT values */ + unsigned int TPM2_NT : 4; /* The type of the index. NOTE A TPM is not required to support all TPM2_NT values */ unsigned int reserved1 : 2; /* shall be zeroreserved for future use */ unsigned int TPMA_NV_POLICY_DELETE : 1; /* SET 1 Index may not be deleted unless the authPolicy is satisfied using TPM2_NV_UndefineSpaceSpecial.CLEAR 0 Index may be deleted with proper platform or owner authorization using TPM2_NV_UndefineSpace. */ unsigned int TPMA_NV_WRITELOCKED : 1; /* SET 1 Index cannot be written.CLEAR 0 Index can be written. */ @@ -1985,7 +1984,7 @@ typedef union { unsigned int reserved2 : 5; /* shall be zeroreserved for future use */ unsigned int TPMA_NV_NO_DA : 1; /* SET 1 Authorization failures of the Index do not affect the DA logic and authorization of the Index is not blocked when the TPM is in Lockout mode.CLEAR 0 Authorization failures of the Index will increment the authorization failure counter and authorizations of this Index are not allowed when the TPM is in Lockout mode. */ unsigned int TPMA_NV_ORDERLY : 1; /* SET 1 NV Index state is only required to be saved when the TPM performs an orderly shutdown TPM2_Shutdown.CLEAR 0 NV Index state is required to be persistent after the command to update the Index completes successfully that is the NV update is synchronous with the update command. */ - unsigned int TPMA_NV_CLEAR_STCLEAR : 1; /* SET 1 TPMA_NV_WRITTEN for the Index is CLEAR by TPM Reset or TPM Restart.CLEAR 0 TPMA_NV_WRITTEN is not changed by TPM Restart.NOTE 1 This attribute may only be SET if TPM_NT is not TPM_NT_COUNTER.NOTE 2 If the TPMA_NV_ORDERLY is SET TPMA_NV_WRITTEN will be CLEAR by TPM Reset. */ + unsigned int TPMA_NV_CLEAR_STCLEAR : 1; /* SET 1 TPMA_NV_WRITTEN for the Index is CLEAR by TPM Reset or TPM Restart.CLEAR 0 TPMA_NV_WRITTEN is not changed by TPM Restart.NOTE 1 This attribute may only be SET if TPM2_NT is not TPM2_NT_COUNTER.NOTE 2 If the TPMA_NV_ORDERLY is SET TPMA_NV_WRITTEN will be CLEAR by TPM Reset. */ unsigned int TPMA_NV_READLOCKED : 1; /* SET 1 Reads of the Index are blocked until the next TPM Reset or TPM Restart.CLEAR 0 Reads of the Index are allowed if proper authorization is provided. */ unsigned int TPMA_NV_WRITTEN : 1; /* SET 1 Index has been written.CLEAR 0 Index has not been written. */ unsigned int TPMA_NV_PLATFORMCREATE : 1; /* SET 1 This Index may be undefined with Platform Authorization but not with Owner Authorization.CLEAR 0 This Index may be undefined using Owner Authorization but not with Platform Authorization. The TPM will validate that this attribute is SET when the Index is defined using Platform Authorization and will validate that this attribute is CLEAR when the Index is defined using Owner Authorization. */ @@ -2002,7 +2001,7 @@ typedef union { unsigned int TPMA_NV_PLATFORMCREATE : 1; /* SET 1 This Index may be undefined with Platform Authorization but not with Owner Authorization.CLEAR 0 This Index may be undefined using Owner Authorization but not with Platform Authorization. The TPM will validate that this attribute is SET when the Index is defined using Platform Authorization and will validate that this attribute is CLEAR when the Index is defined using Owner Authorization. */ unsigned int TPMA_NV_WRITTEN : 1; /* SET 1 Index has been written.CLEAR 0 Index has not been written. */ unsigned int TPMA_NV_READLOCKED : 1; /* SET 1 Reads of the Index are blocked until the next TPM Reset or TPM Restart.CLEAR 0 Reads of the Index are allowed if proper authorization is provided. */ - unsigned int TPMA_NV_CLEAR_STCLEAR : 1; /* SET 1 TPMA_NV_WRITTEN for the Index is CLEAR by TPM Reset or TPM Restart.CLEAR 0 TPMA_NV_WRITTEN is not changed by TPM Restart.NOTE 1 This attribute may only be SET if TPM_NT is not TPM_NT_COUNTER.NOTE 2 If the TPMA_NV_ORDERLY is SET TPMA_NV_WRITTEN will be CLEAR by TPM Reset. */ + unsigned int TPMA_NV_CLEAR_STCLEAR : 1; /* SET 1 TPMA_NV_WRITTEN for the Index is CLEAR by TPM Reset or TPM Restart.CLEAR 0 TPMA_NV_WRITTEN is not changed by TPM Restart.NOTE 1 This attribute may only be SET if TPM2_NT is not TPM2_NT_COUNTER.NOTE 2 If the TPMA_NV_ORDERLY is SET TPMA_NV_WRITTEN will be CLEAR by TPM Reset. */ unsigned int TPMA_NV_ORDERLY : 1; /* SET 1 NV Index state is only required to be saved when the TPM performs an orderly shutdown TPM2_Shutdown.CLEAR 0 NV Index state is required to be persistent after the command to update the Index completes successfully that is the NV update is synchronous with the update command. */ unsigned int TPMA_NV_NO_DA : 1; /* SET 1 Authorization failures of the Index do not affect the DA logic and authorization of the Index is not blocked when the TPM is in Lockout mode.CLEAR 0 Authorization failures of the Index will increment the authorization failure counter and authorizations of this Index are not allowed when the TPM is in Lockout mode. */ unsigned int reserved1 : 5; /* shall be zeroreserved for future use */ @@ -2017,7 +2016,7 @@ typedef union { unsigned int TPMA_NV_WRITELOCKED : 1; /* SET 1 Index cannot be written.CLEAR 0 Index can be written. */ unsigned int TPMA_NV_POLICY_DELETE : 1; /* SET 1 Index may not be deleted unless the authPolicy is satisfied using TPM2_NV_UndefineSpaceSpecial.CLEAR 0 Index may be deleted with proper platform or owner authorization using TPM2_NV_UndefineSpace. */ unsigned int reserved2 : 2; /* shall be zeroreserved for future use */ - unsigned int TPM_NT : 4; /* The type of the index. NOTE A TPM is not required to support all TPM_NT values */ + unsigned int TPM2_NT : 4; /* The type of the index. NOTE A TPM is not required to support all TPM2_NT values */ unsigned int TPMA_NV_POLICYWRITE : 1; /* SET 1 Authorizations to change the Index contents that require USER role may be provided with a policy session.CLEAR 0 Authorizations to change the Index contents that require USER role may not be provided with a policy session.NOTE TPM2_NV_ChangeAuth always requires that authorization be provided in a policy session. */ unsigned int TPMA_NV_AUTHWRITE : 1; /* SET 1 Authorizations to change the Index contents that require USER role may be provided with an HMAC session or password.CLEAR 0 Authorizations to change the Index contents that require USER role may not be provided with an HMAC session or password. */ unsigned int TPMA_NV_OWNERWRITE : 1; /* SET 1 The Index data can be written if Owner Authorization is provided.CLEAR 0 Writing of the Index data cannot be authorized with Owner Authorization. */ @@ -2036,7 +2035,7 @@ typedef uint32_t TPMA_NV; #define TPMA_NV_TPMA_NV_OWNERWRITE 0x00000002 #define TPMA_NV_TPMA_NV_AUTHWRITE 0x00000004 #define TPMA_NV_TPMA_NV_POLICYWRITE 0x00000008 -#define TPMA_NV_TPM_NT 0x000000F0 +#define TPMA_NV_TPM2_NT 0x000000F0 #define TPMA_NV_RESERVED1 0x00000300 #define TPMA_NV_TPMA_NV_POLICY_DELETE 0x00000400 #define TPMA_NV_TPMA_NV_WRITELOCKED 0x00000800 @@ -2071,7 +2070,7 @@ typedef struct { TPM2B_TYPE2( NV_PUBLIC, TPMS_NV_PUBLIC, nvPublic ); /* Table 200 Definition of TPM2B_CONTEXT_SENSITIVE Structure <INOUT> */ -TPM2B_TYPE1( CONTEXT_SENSITIVE, MAX_CONTEXT_SIZE, buffer ); +TPM2B_TYPE1( CONTEXT_SENSITIVE, TPM2_MAX_CONTEXT_SIZE, buffer ); /* Table 201 Definition of TPMS_CONTEXT_DATA Structure <INOUT S> */ typedef struct { @@ -2095,8 +2094,8 @@ typedef struct { TPML_PCR_SELECTION pcrSelect; /* list indicating the PCR included in pcrDigest */ TPM2B_DIGEST pcrDigest; /* digest of the selected PCR using nameAlg of the object for which this structure is being createdpcrDigest.size shall be zero if the pcrSelect list is empty. */ TPMA_LOCALITY locality; /* the locality at which the object was created */ - TPM_ALG_ID parentNameAlg; /* nameAlg of the parent */ - TPM2B_NAME parentName; /* Name of the parent at time of creationThe size will match digest size associated with parentNameAlg unless it is TPM_ALG_NULL in which case the size will be 4 and parentName will be the hierarchy handle. */ + TPM2_ALG_ID parentNameAlg; /* nameAlg of the parent */ + TPM2B_NAME parentName; /* Name of the parent at time of creationThe size will match digest size associated with parentNameAlg unless it is TPM2_ALG_NULL in which case the size will be 4 and parentName will be the hierarchy handle. */ TPM2B_NAME parentQualifiedName; /* Qualified Name of the parent at the time of creationSize is the same as parentName. */ TPM2B_DATA outsideInfo; /* association with additional information added by the key creatorThis will be the contents of the outsideInfo parameter in TPM2_Create or TPM2_CreatePrimary. */ } TPMS_CREATION_DATA; |