1
2 /*
3 * Licensed Materials - Property of IBM
4 *
5 * trousers - An open source TCG Software Stack
6 *
7 * (C) Copyright International Business Machines Corp. 2007
8 *
9 */
10
11
12 #include <stdlib.h>
13 #include <string.h>
14
15 #include "trousers/tss.h"
16 #include "trousers/trousers.h"
17 #include "trousers_types.h"
18 #include "spi_utils.h"
19 #include "capabilities.h"
20 #include "tsplog.h"
21 #include "obj.h"
22
23
24 #ifdef TSS_BUILD_TRANSPORT
25 TSS_RESULT
Transport_CertifyKey(TSS_HCONTEXT tspContext,TCS_KEY_HANDLE certHandle,TCS_KEY_HANDLE keyHandle,TPM_NONCE * antiReplay,TPM_AUTH * certAuth,TPM_AUTH * keyAuth,UINT32 * CertifyInfoSize,BYTE ** CertifyInfo,UINT32 * outDataSize,BYTE ** outData)26 Transport_CertifyKey(TSS_HCONTEXT tspContext, /* in */
27 TCS_KEY_HANDLE certHandle, /* in */
28 TCS_KEY_HANDLE keyHandle, /* in */
29 TPM_NONCE * antiReplay, /* in */
30 TPM_AUTH * certAuth, /* in, out */
31 TPM_AUTH * keyAuth, /* in, out */
32 UINT32 * CertifyInfoSize, /* out */
33 BYTE ** CertifyInfo, /* out */
34 UINT32 * outDataSize, /* out */
35 BYTE ** outData) /* out */
36 {
37 TSS_RESULT result;
38 UINT32 handlesLen, decLen;
39 TCS_HANDLE *handles, handle[2];
40 BYTE *dec = NULL;
41 TPM_DIGEST pubKeyHash1, pubKeyHash2;
42 Trspi_HashCtx hashCtx;
43 UINT64 offset;
44 BYTE data[sizeof(TPM_NONCE)];
45
46
47 if ((result = obj_context_transport_init(tspContext)))
48 return result;
49
50 LogDebugFn("Executing in a transport session");
51
52 if ((result = obj_tcskey_get_pubkeyhash(certHandle, pubKeyHash1.digest)))
53 return result;
54
55 if ((result = obj_tcskey_get_pubkeyhash(keyHandle, pubKeyHash2.digest)))
56 return result;
57
58 result = Trspi_HashInit(&hashCtx, TSS_HASH_SHA1);
59 result |= Trspi_Hash_DIGEST(&hashCtx, pubKeyHash1.digest);
60 result |= Trspi_Hash_DIGEST(&hashCtx, pubKeyHash2.digest);
61 if ((result |= Trspi_HashFinal(&hashCtx, pubKeyHash1.digest)))
62 return result;
63
64 handlesLen = 2;
65 handle[0] = certHandle;
66 handle[1] = keyHandle;
67 handles = &handle[0];
68
69 offset = 0;
70 Trspi_LoadBlob_NONCE(&offset, data, antiReplay);
71
72 if ((result = obj_context_transport_execute(tspContext, TPM_ORD_CertifyKey, sizeof(data),
73 data, &pubKeyHash1, &handlesLen, &handles,
74 certAuth, keyAuth, &decLen, &dec)))
75 return result;
76
77 offset = 0;
78 Trspi_UnloadBlob_CERTIFY_INFO(&offset, dec, NULL);
79 *CertifyInfoSize = offset;
80
81 if ((*CertifyInfo = malloc(*CertifyInfoSize)) == NULL) {
82 free(dec);
83 LogError("malloc of %u bytes failed", *CertifyInfoSize);
84 *CertifyInfoSize = 0;
85 return TSPERR(TSS_E_OUTOFMEMORY);
86 }
87
88 offset = 0;
89 Trspi_UnloadBlob(&offset, *CertifyInfoSize, dec, *CertifyInfo);
90 Trspi_UnloadBlob_UINT32(&offset, outDataSize, dec);
91
92 if ((*outData = malloc(*outDataSize)) == NULL) {
93 free(*CertifyInfo);
94 *CertifyInfo = NULL;
95 *CertifyInfoSize = 0;
96 free(dec);
97 LogError("malloc of %u bytes failed", *outDataSize);
98 *outDataSize = 0;
99 return TSPERR(TSS_E_OUTOFMEMORY);
100 }
101 Trspi_UnloadBlob(&offset, *outDataSize, dec, *outData);
102
103 free(dec);
104
105 return result;
106 }
107 #endif
108
109