1 /* Microsoft Reference Implementation for TPM 2.0
2 *
3 * The copyright in this software is being made available under the BSD License,
4 * included below. This software may be subject to other third party and
5 * contributor rights, including patent rights, and no such rights are granted
6 * under this license.
7 *
8 * Copyright (c) Microsoft Corporation
9 *
10 * All rights reserved.
11 *
12 * BSD License
13 *
14 * Redistribution and use in source and binary forms, with or without modification,
15 * are permitted provided that the following conditions are met:
16 *
17 * Redistributions of source code must retain the above copyright notice, this list
18 * of conditions and the following disclaimer.
19 *
20 * Redistributions in binary form must reproduce the above copyright notice, this
21 * list of conditions and the following disclaimer in the documentation and/or
22 * other materials provided with the distribution.
23 *
24 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS ""AS IS""
25 * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
26 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
27 * DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR
28 * ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
29 * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
30 * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON
31 * ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
32 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
33 * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
34 */
35 #include "Tpm.h"
36 #include "ObjectChangeAuth_fp.h"
37
38 #if CC_ObjectChangeAuth // Conditional expansion of this file
39
40 #include "Object_spt_fp.h"
41
42 /*(See part 3 specification)
43 // Create an object
44 */
45 // Return Type: TPM_RC
46 // TPM_RC_SIZE 'newAuth' is larger than the size of the digest
47 // of the Name algorithm of 'objectHandle'
48 // TPM_RC_TYPE the key referenced by 'parentHandle' is not the
49 // parent of the object referenced by 'objectHandle';
50 // or 'objectHandle' is a sequence object.
51 TPM_RC
TPM2_ObjectChangeAuth(ObjectChangeAuth_In * in,ObjectChangeAuth_Out * out)52 TPM2_ObjectChangeAuth(
53 ObjectChangeAuth_In *in, // IN: input parameter list
54 ObjectChangeAuth_Out *out // OUT: output parameter list
55 )
56 {
57 TPMT_SENSITIVE sensitive;
58
59 OBJECT *object = HandleToObject(in->objectHandle);
60 TPM2B_NAME QNCompare;
61
62 // Input Validation
63
64 // Can not change authorization on sequence object
65 if(ObjectIsSequence(object))
66 return TPM_RCS_TYPE + RC_ObjectChangeAuth_objectHandle;
67
68 // Make sure that the authorization value is consistent with the nameAlg
69 if(!AdjustAuthSize(&in->newAuth, object->publicArea.nameAlg))
70 return TPM_RCS_SIZE + RC_ObjectChangeAuth_newAuth;
71
72 // Parent handle should be the parent of object handle. In this
73 // implementation we verify this by checking the QN of object. Other
74 // implementation may choose different method to verify this attribute.
75 ComputeQualifiedName(in->parentHandle,
76 object->publicArea.nameAlg,
77 &object->name, &QNCompare);
78 if(!MemoryEqual2B(&object->qualifiedName.b, &QNCompare.b))
79 return TPM_RCS_TYPE + RC_ObjectChangeAuth_parentHandle;
80
81 // Command Output
82 // Prepare the sensitive area with the new authorization value
83 sensitive = object->sensitive;
84 sensitive.authValue = in->newAuth;
85
86 // Protect the sensitive area
87 SensitiveToPrivate(&sensitive, &object->name, HandleToObject(in->parentHandle),
88 object->publicArea.nameAlg,
89 &out->outPrivate);
90 return TPM_RC_SUCCESS;
91 }
92
93 #endif // CC_ObjectChangeAuth