1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
|
/* SPDX-License-Identifier: BSD-2 */
/*******************************************************************************
* Copyright 2017-2018, Fraunhofer SIT sponsored by Infineon Technologies AG
* All rights reserved.
******************************************************************************/
#ifndef ESYS_IUTIL_H
#define ESYS_IUTIL_H
#include <stdbool.h>
#include <inttypes.h>
#include <string.h>
#include "tss2_esys.h"
#include "esys_int.h"
#include "esys_crypto.h"
#ifdef __cplusplus
extern "C" {
#endif
/** An entry in a cpHash or rpHash table. */
typedef struct {
TPM2_ALG_ID alg; /**< The hash algorithm. */
size_t size; /**< The digest size. */
uint8_t digest[sizeof(TPMU_HA)]; /**< The digest. */
} HASH_TAB_ITEM;
bool cmp_UINT16 (const UINT16 *in1, const UINT16 *in2);
bool cmp_BYTE (const BYTE *in1, const BYTE *in2);
bool cmp_BYTE_array(const BYTE *in1, size_t count1, const BYTE *in2, size_t count2);
bool cmp_TPM2B_DIGEST (const TPM2B_DIGEST *in1, const TPM2B_DIGEST *in2);
bool cmp_TPM2B_NAME (const TPM2B_NAME *in1, const TPM2B_NAME *in2);
bool cmp_TPM2B_AUTH (const TPM2B_AUTH *in1, const TPM2B_AUTH *in2);
TSS2_RC init_session_tab(
ESYS_CONTEXT *esysContext,
ESYS_TR shandle1, ESYS_TR shandle2, ESYS_TR shandle3);
void iesys_DeleteAllResourceObjects(
ESYS_CONTEXT *esys_context);
TSS2_RC iesys_compute_encrypt_nonce(
ESYS_CONTEXT *esysContext,
int *encryptNonceIdx,
TPM2B_NONCE **encryptNonce);
TSS2_RC iesys_compute_cp_hashtab(
ESYS_CONTEXT *esysContext,
const TPM2B_NAME *name1,
const TPM2B_NAME *name2,
const TPM2B_NAME *name3,
HASH_TAB_ITEM cp_hash_tab[3],
uint8_t *cpHashNum);
TSS2_RC iesys_compute_rp_hashtab(
ESYS_CONTEXT *esysContext,
const uint8_t *rpBuffer,
size_t rpBuffer_size,
HASH_TAB_ITEM rp_hash_tab[3],
uint8_t *rpHashNum);
TSS2_RC esys_CreateResourceObject(
ESYS_CONTEXT *esys_context,
ESYS_TR esys_handle,
RSRC_NODE_T **node);
TSS2_RC iesys_handle_to_tpm_handle(
ESYS_TR esys_handle,
TPM2_HANDLE *tpm_handle);
TSS2_RC esys_GetResourceObject(
ESYS_CONTEXT *esys_context,
ESYS_TR rsrc_handle,
RSRC_NODE_T **node);
TPM2_HT iesys_get_handle_type(
TPM2_HANDLE handle);
TSS2_RC iesys_finalize(ESYS_CONTEXT *context);
bool iesys_compare_name(
TPM2B_PUBLIC *publicInfo,
TPM2B_NAME *name);
TSS2_RC iesys_compute_encrypted_salt(
ESYS_CONTEXT *esysContext,
RSRC_NODE_T *tpmKeyNode,
TPM2B_ENCRYPTED_SECRET *encryptedSalt);
TSS2_RC iesys_gen_caller_nonces(
ESYS_CONTEXT *esysContext);
TSS2_RC iesys_encrypt_param(
ESYS_CONTEXT *esysContext,
TPM2B_NONCE **decryptNonce,
int *decryptNonceIdx);
TSS2_RC iesys_decrypt_param(
ESYS_CONTEXT *esysContext,
const uint8_t *rpBuffer,
size_t rpBuffer_size);
TSS2_RC iesys_check_rp_hmacs(
ESYS_CONTEXT *esysContext,
TSS2L_SYS_AUTH_RESPONSE *rspAuths,
HASH_TAB_ITEM rp_hash_tab[3],
uint8_t rpHashNum);
void iesys_compute_bound_entity(
const TPM2B_NAME *name,
const TPM2B_AUTH *auth,
TPM2B_NAME *bound_entity);
bool iesys_is_object_bound(
const TPM2B_NAME * name,
const TPM2B_AUTH * auth,
RSRC_NODE_T * session);
TSS2_RC iesys_check_sequence_async(
ESYS_CONTEXT *esysContext);
TSS2_RC check_session_feasibility(
ESYS_TR shandle1,
ESYS_TR shandle2,
ESYS_TR shandle3,
int mandatory);
void iesys_compute_session_value(
RSRC_NODE_T *session,
const TPM2B_NAME *name,
const TPM2B_AUTH *auth_value);
TSS2_RC iesys_compute_hmac(
RSRC_NODE_T *session,
HASH_TAB_ITEM cp_hash_tab[3],
uint8_t cpHashNum,
TPM2B_NONCE *decryptNonce,
TPM2B_NONCE *encryptNonce,
TPMS_AUTH_COMMAND *auth);
TSS2_RC iesys_gen_auths(
ESYS_CONTEXT *esysContext,
RSRC_NODE_T *h1,
RSRC_NODE_T *h2,
RSRC_NODE_T *h3,
TSS2L_SYS_AUTH_COMMAND *auths);
TSS2_RC iesys_check_response(
ESYS_CONTEXT * esys_context);
TSS2_RC iesys_nv_get_name(
TPM2B_NV_PUBLIC *publicInfo,
TPM2B_NAME *name);
TSS2_RC iesys_get_name(
TPM2B_PUBLIC *publicInfo,
TPM2B_NAME *name);
bool iesys_tpm_error(
TSS2_RC r);
#ifdef __cplusplus
} /* extern "C" */
#endif
#endif /* ESYS_IUTIL_H */
|
