mirror of
https://github.com/xen-project/xen.git
synced 2026-10-29 18:50:05 +01:00
Emil Condrea
83d1be544c
Enables deep quote execution for vtpmmgr which can not be started
using locality 2. Flags are used to request additional data to be
present when executing quote. They are interpreted as a bitmask of:
* VTPM_QUOTE_FLAGS_HASH_UUID
* VTPM_QUOTE_FLAGS_VTPM_MEASUREMENTS
* VTPM_QUOTE_FLAGS_GROUP_INFO
* VTPM_QUOTE_FLAGS_GROUP_PUBKEY
The externData param for TPM_Quote is calculated as:
externData = SHA1 (
extraInfoFlags
requestData
[SHA1 (
[SHA1 (UUIDs if requested)]
[SHA1 (vTPM measurements if requested)]
[SHA1 (vTPM group update policy if requested)]
[SHA1 (vTPM group public key if requested)]
) if flags !=0 ]
)
The response param pcrValues is an array containing requested hashes used
for externData calculation : UUIDs, vTPM measurements, vTPM group update
policy, group public key. At the end of these hashes the PCR values are
appended.
Signed-off-by: Emil Condrea <emilcondrea@gmail.com>
Acked-by: Daniel De Graaf <dgdegra@tycho.nsa.gov>
12 lines
484 B
C
12 lines
484 B
C
#ifndef __VTPMMGR_MGMT_AUTHORITY_H
|
|
#define __VTPMMGR_MGMT_AUTHORITY_H
|
|
|
|
struct mem_group *vtpm_new_group(const struct tpm_authdata *privCADigest);
|
|
int group_do_activate(struct mem_group *group, void* blob, int blobSize,
|
|
void* resp, unsigned int *rlen);
|
|
int vtpm_do_quote(struct mem_group *group, const uuid_t uuid,
|
|
const uint8_t* kern_hash, const struct tpm_authdata *data, TPM_PCR_SELECTION *sel, uint32_t extraInfoFlags,
|
|
void* pcr_out, uint32_t *pcr_size, void* sig_out);
|
|
|
|
#endif
|