1 /* Microsoft Reference Implementation for TPM 2.0
2 *
3 * The copyright in this software is being made available under the BSD License,
4 * included below. This software may be subject to other third party and
5 * contributor rights, including patent rights, and no such rights are granted
6 * under this license.
7 *
8 * Copyright (c) Microsoft Corporation
9 *
10 * All rights reserved.
11 *
12 * BSD License
13 *
14 * Redistribution and use in source and binary forms, with or without modification,
15 * are permitted provided that the following conditions are met:
16 *
17 * Redistributions of source code must retain the above copyright notice, this list
18 * of conditions and the following disclaimer.
19 *
20 * Redistributions in binary form must reproduce the above copyright notice, this
21 * list of conditions and the following disclaimer in the documentation and/or
22 * other materials provided with the distribution.
23 *
24 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS ""AS IS""
25 * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
26 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
27 * DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR
28 * ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
29 * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
30 * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON
31 * ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
32 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
33 * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
34 */
35 #include "Tpm.h"
36 #include "Attest_spt_fp.h"
37 #include "GetSessionAuditDigest_fp.h"
38
39 #if CC_GetSessionAuditDigest // Conditional expansion of this file
40
41 /*(See part 3 specification)
42 // Get audit session digest
43 */
44 // Return Type: TPM_RC
45 // TPM_RC_KEY key referenced by 'signHandle' is not a signing key
46 // TPM_RC_SCHEME 'inScheme' is incompatible with 'signHandle' type; or
47 // both 'scheme' and key's default scheme are empty; or
48 // 'scheme' is empty while key's default scheme requires
49 // explicit input scheme (split signing); or
50 // non-empty default key scheme differs from 'scheme'
51 // TPM_RC_TYPE 'sessionHandle' does not reference an audit session
52 // TPM_RC_VALUE digest generated for the given 'scheme' is greater than
53 // the modulus of 'signHandle' (for an RSA key);
54 // invalid commit status or failed to generate "r" value
55 // (for an ECC key)
56 TPM_RC
TPM2_GetSessionAuditDigest(GetSessionAuditDigest_In * in,GetSessionAuditDigest_Out * out)57 TPM2_GetSessionAuditDigest(
58 GetSessionAuditDigest_In *in, // IN: input parameter list
59 GetSessionAuditDigest_Out *out // OUT: output parameter list
60 )
61 {
62 SESSION *session = SessionGet(in->sessionHandle);
63 TPMS_ATTEST auditInfo;
64 OBJECT *signObject = HandleToObject(in->signHandle);
65 // Input Validation
66 if(!IsSigningObject(signObject))
67 return TPM_RCS_KEY + RC_GetSessionAuditDigest_signHandle;
68 if(!CryptSelectSignScheme(signObject, &in->inScheme))
69 return TPM_RCS_SCHEME + RC_GetSessionAuditDigest_inScheme;
70
71 // session must be an audit session
72 if(session->attributes.isAudit == CLEAR)
73 return TPM_RCS_TYPE + RC_GetSessionAuditDigest_sessionHandle;
74
75 // Command Output
76 // Fill in attest information common fields
77 FillInAttestInfo(in->signHandle, &in->inScheme, &in->qualifyingData,
78 &auditInfo);
79
80 // SessionAuditDigest specific fields
81 auditInfo.type = TPM_ST_ATTEST_SESSION_AUDIT;
82 auditInfo.attested.sessionAudit.sessionDigest = session->u2.auditDigest;
83
84 // Exclusive audit session
85 auditInfo.attested.sessionAudit.exclusiveSession
86 = (g_exclusiveAuditSession == in->sessionHandle);
87
88 // Sign attestation structure. A NULL signature will be returned if
89 // signObject is NULL.
90 return SignAttestInfo(signObject, &in->inScheme, &auditInfo,
91 &in->qualifyingData, &out->auditInfo,
92 &out->signature);
93 }
94
95 #endif // CC_GetSessionAuditDigest