1 /* Microsoft Reference Implementation for TPM 2.0
2 *
3 * The copyright in this software is being made available under the BSD License,
4 * included below. This software may be subject to other third party and
5 * contributor rights, including patent rights, and no such rights are granted
6 * under this license.
7 *
8 * Copyright (c) Microsoft Corporation
9 *
10 * All rights reserved.
11 *
12 * BSD License
13 *
14 * Redistribution and use in source and binary forms, with or without modification,
15 * are permitted provided that the following conditions are met:
16 *
17 * Redistributions of source code must retain the above copyright notice, this list
18 * of conditions and the following disclaimer.
19 *
20 * Redistributions in binary form must reproduce the above copyright notice, this
21 * list of conditions and the following disclaimer in the documentation and/or
22 * other materials provided with the distribution.
23 *
24 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS ""AS IS""
25 * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
26 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
27 * DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR
28 * ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
29 * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
30 * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON
31 * ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
32 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
33 * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
34 */
35 #include "Tpm.h"
36 #include "Attest_spt_fp.h"
37 #include "CertifyCreation_fp.h"
38
39 #if CC_CertifyCreation // Conditional expansion of this file
40
41 /*(See part 3 specification)
42 // Prove the association between an object and its creation data
43 */
44 // Return Type: TPM_RC
45 // TPM_RC_KEY key referenced by 'signHandle' is not a signing key
46 // TPM_RC_SCHEME 'inScheme' is not compatible with 'signHandle'
47 // TPM_RC_TICKET 'creationTicket' does not match 'objectHandle'
48 // TPM_RC_VALUE digest generated for 'inScheme' is greater or has larger
49 // size than the modulus of 'signHandle', or the buffer for
50 // the result in 'signature' is too small (for an RSA key);
51 // invalid commit status (for an ECC key with a split scheme).
52 TPM_RC
TPM2_CertifyCreation(CertifyCreation_In * in,CertifyCreation_Out * out)53 TPM2_CertifyCreation(
54 CertifyCreation_In *in, // IN: input parameter list
55 CertifyCreation_Out *out // OUT: output parameter list
56 )
57 {
58 TPMT_TK_CREATION ticket;
59 TPMS_ATTEST certifyInfo;
60 OBJECT *certified = HandleToObject(in->objectHandle);
61 OBJECT *signObject = HandleToObject(in->signHandle);
62 // Input Validation
63 if(!IsSigningObject(signObject))
64 return TPM_RCS_KEY + RC_CertifyCreation_signHandle;
65 if(!CryptSelectSignScheme(signObject, &in->inScheme))
66 return TPM_RCS_SCHEME + RC_CertifyCreation_inScheme;
67
68 // CertifyCreation specific input validation
69 // Re-compute ticket
70 TicketComputeCreation(in->creationTicket.hierarchy, &certified->name,
71 &in->creationHash, &ticket);
72 // Compare ticket
73 if(!MemoryEqual2B(&ticket.digest.b, &in->creationTicket.digest.b))
74 return TPM_RCS_TICKET + RC_CertifyCreation_creationTicket;
75
76 // Command Output
77 // Common fields
78 FillInAttestInfo(in->signHandle, &in->inScheme, &in->qualifyingData,
79 &certifyInfo);
80
81 // CertifyCreation specific fields
82 // Attestation type
83 certifyInfo.type = TPM_ST_ATTEST_CREATION;
84 certifyInfo.attested.creation.objectName = certified->name;
85
86 // Copy the creationHash
87 certifyInfo.attested.creation.creationHash = in->creationHash;
88
89 // Sign attestation structure. A NULL signature will be returned if
90 // signObject is TPM_RH_NULL. A TPM_RC_NV_UNAVAILABLE, TPM_RC_NV_RATE,
91 // TPM_RC_VALUE, TPM_RC_SCHEME or TPM_RC_ATTRIBUTES error may be returned at
92 // this point
93 return SignAttestInfo(signObject, &in->inScheme, &certifyInfo,
94 &in->qualifyingData, &out->certifyInfo,
95 &out->signature);
96 }
97
98 #endif // CC_CertifyCreation