]> git.proxmox.com Git - mirror_edk2.git/blob - MdePkg/Include/IndustryStandard/Tpm12.h
projects / mirror_edk2.git / blob
? search:
summary | shortlog | log | commit | commitdiff | tree
blame | history | raw | HEAD
1, Add <Library/DevicePathLib.h> for all source that use device path utility macros
[mirror_edk2.git] / MdePkg / Include / IndustryStandard / Tpm12.h
1 /** @file
2 TPM Specification data structures (TCG TPM Specification Version 1.2 Revision 94)
3 See http://trustedcomputinggroup.org for latest specification updates
4
5 Copyright (c) 2006 - 2008, Intel Corporation
6 All rights reserved. This program and the accompanying materials
7 are licensed and made available under the terms and conditions of the BSD License
8 which accompanies this distribution. The full text of the license may be found at
9 http://opensource.org/licenses/bsd-license.php
10
11 THE PROGRAM IS DISTRIBUTED UNDER THE BSD LICENSE ON AN "AS IS" BASIS,
12 WITHOUT WARRANTIES OR REPRESENTATIONS OF ANY KIND, EITHER EXPRESS OR IMPLIED.
13 **/
14
15
16 #ifndef _TPM12_H_
17 #define _TPM12_H_
18
19 ///
20 /// The start of TPM return codes
21 ///
22 #define TPM_BASE (EFI_MAX_BIT + (EFI_MAX_BIT >> 1))
23
24 //
25 // Structures are all packed on 1-byte alignment
26 //
27 #pragma pack (1)
28
29 //
30 // Part 2, section 2.2.3: Helper redefinitions
31 //
32 typedef UINT8 TPM_AUTH_DATA_USAGE;
33 typedef UINT8 TPM_PAYLOAD_TYPE;
34 typedef UINT8 TPM_VERSION_BYTE;
35 typedef UINT16 TPM_TAG;
36 typedef UINT16 TPM_PROTOCOL_ID;
37 typedef UINT16 TPM_STARTUP_TYPE;
38 typedef UINT16 TPM_ENC_SCHEME;
39 typedef UINT16 TPM_SIG_SCHEME;
40 typedef UINT16 TPM_MIGRATE_SCHEME;
41 typedef UINT16 TPM_PHYSICAL_PRESENCE;
42 typedef UINT16 TPM_ENTITY_TYPE;
43 typedef UINT16 TPM_KEY_USAGE;
44 typedef UINT16 TPM_EK_TYPE;
45 typedef UINT16 TPM_STRUCTURE_TAG;
46 typedef UINT16 TPM_PLATFORM_SPECIFIC;
47 typedef UINT32 TPM_COMMAND_CODE;
48 typedef UINT32 TPM_CAPABILITY_AREA;
49 typedef UINT32 TPM_KEY_FLAGS;
50 typedef UINT32 TPM_ALGORITHM_ID;
51 typedef UINT32 TPM_MODIFIER_INDICATOR;
52 typedef UINT32 TPM_ACTUAL_COUNT;
53 typedef UINT32 TPM_TRANSPORT_ATTRIBUTES;
54 typedef UINT32 TPM_AUTHHANDLE;
55 typedef UINT32 TPM_DIRINDEX;
56 typedef UINT32 TPM_KEY_HANDLE;
57 typedef UINT32 TPM_PCRINDEX;
58 typedef UINT32 TPM_RESULT;
59 typedef UINT32 TPM_RESOURCE_TYPE;
60 typedef UINT32 TPM_KEY_CONTROL;
61 typedef UINT32 TPM_NV_INDEX;
62 typedef UINT32 TPM_FAMILY_ID;
63 typedef UINT32 TPM_FAMILY_VERIFICATION;
64 typedef UINT32 TPM_STARTUP_EFFECTS;
65 typedef UINT32 TPM_SYM_MODE;
66 typedef UINT32 TPM_FAMILY_FLAGS;
67 typedef UINT32 TPM_DELEGATE_INDEX;
68 typedef UINT32 TPM_CMK_DELEGATE;
69 typedef UINT32 TPM_COUNT_ID;
70 typedef UINT32 TPM_REDIT_COMMAND;
71 typedef UINT32 TPM_TRANSHANDLE;
72 typedef UINT32 TPM_HANDLE;
73 typedef UINT32 TPM_FAMILY_OPERATION;
74
75 //
76 // Part 2, section 2.2.4: Vendor specific
77 // The following defines allow for the quick specification of a
78 // vendor specific item.
79 //
80 #define TPM_Vendor_Specific32 ((UINT32) 0x00000400)
81 #define TPM_Vendor_Specific8 ((UINT8) 0x80)
82
83 //
84 // Part 2, section 3.1: TPM_STRUCTURE_TAG
85 //
86 #define TPM_TAG_CONTEXTBLOB ((TPM_STRUCTURE_TAG) 0x0001)
87 #define TPM_TAG_CONTEXT_SENSITIVE ((TPM_STRUCTURE_TAG) 0x0002)
88 #define TPM_TAG_CONTEXTPOINTER ((TPM_STRUCTURE_TAG) 0x0003)
89 #define TPM_TAG_CONTEXTLIST ((TPM_STRUCTURE_TAG) 0x0004)
90 #define TPM_TAG_SIGNINFO ((TPM_STRUCTURE_TAG) 0x0005)
91 #define TPM_TAG_PCR_INFO_LONG ((TPM_STRUCTURE_TAG) 0x0006)
92 #define TPM_TAG_PERSISTENT_FLAGS ((TPM_STRUCTURE_TAG) 0x0007)
93 #define TPM_TAG_VOLATILE_FLAGS ((TPM_STRUCTURE_TAG) 0x0008)
94 #define TPM_TAG_PERSISTENT_DATA ((TPM_STRUCTURE_TAG) 0x0009)
95 #define TPM_TAG_VOLATILE_DATA ((TPM_STRUCTURE_TAG) 0x000A)
96 #define TPM_TAG_SV_DATA ((TPM_STRUCTURE_TAG) 0x000B)
97 #define TPM_TAG_EK_BLOB ((TPM_STRUCTURE_TAG) 0x000C)
98 #define TPM_TAG_EK_BLOB_AUTH ((TPM_STRUCTURE_TAG) 0x000D)
99 #define TPM_TAG_COUNTER_VALUE ((TPM_STRUCTURE_TAG) 0x000E)
100 #define TPM_TAG_TRANSPORT_INTERNAL ((TPM_STRUCTURE_TAG) 0x000F)
101 #define TPM_TAG_TRANSPORT_LOG_IN ((TPM_STRUCTURE_TAG) 0x0010)
102 #define TPM_TAG_TRANSPORT_LOG_OUT ((TPM_STRUCTURE_TAG) 0x0011)
103 #define TPM_TAG_AUDIT_EVENT_IN ((TPM_STRUCTURE_TAG) 0x0012)
104 #define TPM_TAG_AUDIT_EVENT_OUT ((TPM_STRUCTURE_TAG) 0x0013)
105 #define TPM_TAG_CURRENT_TICKS ((TPM_STRUCTURE_TAG) 0x0014)
106 #define TPM_TAG_KEY ((TPM_STRUCTURE_TAG) 0x0015)
107 #define TPM_TAG_STORED_DATA12 ((TPM_STRUCTURE_TAG) 0x0016)
108 #define TPM_TAG_NV_ATTRIBUTES ((TPM_STRUCTURE_TAG) 0x0017)
109 #define TPM_TAG_NV_DATA_PUBLIC ((TPM_STRUCTURE_TAG) 0x0018)
110 #define TPM_TAG_NV_DATA_SENSITIVE ((TPM_STRUCTURE_TAG) 0x0019)
111 #define TPM_TAG_DELEGATIONS ((TPM_STRUCTURE_TAG) 0x001A)
112 #define TPM_TAG_DELEGATE_PUBLIC ((TPM_STRUCTURE_TAG) 0x001B)
113 #define TPM_TAG_DELEGATE_TABLE_ROW ((TPM_STRUCTURE_TAG) 0x001C)
114 #define TPM_TAG_TRANSPORT_AUTH ((TPM_STRUCTURE_TAG) 0x001D)
115 #define TPM_TAG_TRANSPORT_PUBLIC ((TPM_STRUCTURE_TAG) 0x001E)
116 #define TPM_TAG_PERMANENT_FLAGS ((TPM_STRUCTURE_TAG) 0x001F)
117 #define TPM_TAG_STCLEAR_FLAGS ((TPM_STRUCTURE_TAG) 0x0020)
118 #define TPM_TAG_STANY_FLAGS ((TPM_STRUCTURE_TAG) 0x0021)
119 #define TPM_TAG_PERMANENT_DATA ((TPM_STRUCTURE_TAG) 0x0022)
120 #define TPM_TAG_STCLEAR_DATA ((TPM_STRUCTURE_TAG) 0x0023)
121 #define TPM_TAG_STANY_DATA ((TPM_STRUCTURE_TAG) 0x0024)
122 #define TPM_TAG_FAMILY_TABLE_ENTRY ((TPM_STRUCTURE_TAG) 0x0025)
123 #define TPM_TAG_DELEGATE_SENSITIVE ((TPM_STRUCTURE_TAG) 0x0026)
124 #define TPM_TAG_DELG_KEY_BLOB ((TPM_STRUCTURE_TAG) 0x0027)
125 #define TPM_TAG_KEY12 ((TPM_STRUCTURE_TAG) 0x0028)
126 #define TPM_TAG_CERTIFY_INFO2 ((TPM_STRUCTURE_TAG) 0x0029)
127 #define TPM_TAG_DELEGATE_OWNER_BLOB ((TPM_STRUCTURE_TAG) 0x002A)
128 #define TPM_TAG_EK_BLOB_ACTIVATE ((TPM_STRUCTURE_TAG) 0x002B)
129 #define TPM_TAG_DAA_BLOB ((TPM_STRUCTURE_TAG) 0x002C)
130 #define TPM_TAG_DAA_CONTEXT ((TPM_STRUCTURE_TAG) 0x002D)
131 #define TPM_TAG_DAA_ENFORCE ((TPM_STRUCTURE_TAG) 0x002E)
132 #define TPM_TAG_DAA_ISSUER ((TPM_STRUCTURE_TAG) 0x002F)
133 #define TPM_TAG_CAP_VERSION_INFO ((TPM_STRUCTURE_TAG) 0x0030)
134 #define TPM_TAG_DAA_SENSITIVE ((TPM_STRUCTURE_TAG) 0x0031)
135 #define TPM_TAG_DAA_TPM ((TPM_STRUCTURE_TAG) 0x0032)
136 #define TPM_TAG_CMK_MIGAUTH ((TPM_STRUCTURE_TAG) 0x0033)
137 #define TPM_TAG_CMK_SIGTICKET ((TPM_STRUCTURE_TAG) 0x0034)
138 #define TPM_TAG_CMK_MA_APPROVAL ((TPM_STRUCTURE_TAG) 0x0035)
139 #define TPM_TAG_QUOTE_INFO2 ((TPM_STRUCTURE_TAG) 0x0036)
140
141 //
142 // Part 2, section 4: TPM Types
143 //
144
145 //
146 // Part 2, section 4.1: TPM_RESOURCE_TYPE
147 //
148 #define TPM_RT_KEY ((TPM_RESOURCE_TYPE) 0x00000001) ///< The handle is a key handle and is the result of a LoadKey type operation
149 #define TPM_RT_AUTH ((TPM_RESOURCE_TYPE) 0x00000002) ///< The handle is an authorization handle. Auth handles come from TPM_OIAP, TPM_OSAP and TPM_DSAP
150 #define TPM_RT_HASH ((TPM_RESOURCE_TYPE) 0x00000003) ///< Reserved for hashes
151 #define TPM_RT_TRANS ((TPM_RESOURCE_TYPE) 0x00000004) ///< The handle is for a transport session. Transport handles come from TPM_EstablishTransport
152 #define TPM_RT_CONTEXT ((TPM_RESOURCE_TYPE) 0x00000005) ///< Resource wrapped and held outside the TPM using the context save/restore commands
153 #define TPM_RT_COUNTER ((TPM_RESOURCE_TYPE) 0x00000006) ///< Reserved for counters
154 #define TPM_RT_DELEGATE ((TPM_RESOURCE_TYPE) 0x00000007) ///< The handle is for a delegate row. These are the internal rows held in NV storage by the TPM
155 #define TPM_RT_DAA_TPM ((TPM_RESOURCE_TYPE) 0x00000008) ///< The value is a DAA TPM specific blob
156 #define TPM_RT_DAA_V0 ((TPM_RESOURCE_TYPE) 0x00000009) ///< The value is a DAA V0 parameter
157 #define TPM_RT_DAA_V1 ((TPM_RESOURCE_TYPE) 0x0000000A) ///< The value is a DAA V1 parameter
158
159 //
160 // Part 2, section 4.2: TPM_PAYLOAD_TYPE
161 //
162 #define TPM_PT_ASYM ((TPM_PAYLOAD_TYPE) 0x01) ///< The entity is an asymmetric key
163 #define TPM_PT_BIND ((TPM_PAYLOAD_TYPE) 0x02) ///< The entity is bound data
164 #define TPM_PT_MIGRATE ((TPM_PAYLOAD_TYPE) 0x03) ///< The entity is a migration blob
165 #define TPM_PT_MAINT ((TPM_PAYLOAD_TYPE) 0x04) ///< The entity is a maintenance blob
166 #define TPM_PT_SEAL ((TPM_PAYLOAD_TYPE) 0x05) ///< The entity is sealed data
167 #define TPM_PT_MIGRATE_RESTRICTED ((TPM_PAYLOAD_TYPE) 0x06) ///< The entity is a restricted-migration asymmetric key
168 #define TPM_PT_MIGRATE_EXTERNAL ((TPM_PAYLOAD_TYPE) 0x07) ///< The entity is a external migratable key
169 #define TPM_PT_CMK_MIGRATE ((TPM_PAYLOAD_TYPE) 0x08) ///< The entity is a CMK migratable blob
170 #define TPM_PT_VENDOR_SPECIFIC ((TPM_PAYLOAD_TYPE) 0x80) ///< 0x80 - 0xFF Vendor specific payloads
171
172 //
173 // Part 2, section 4.3: TPM_ENTITY_TYPE
174 //
175 #define TPM_ET_KEYHANDLE ((UINT16) 0x0001) ///< The entity is a keyHandle or key
176 #define TPM_ET_OWNER ((UINT16) 0x0002) ///< The entity is the TPM Owner
177 #define TPM_ET_DATA ((UINT16) 0x0003) ///< The entity is some data
178 #define TPM_ET_SRK ((UINT16) 0x0004) ///< The entity is the SRK
179 #define TPM_ET_KEY ((UINT16) 0x0005) ///< The entity is a key or keyHandle
180 #define TPM_ET_REVOKE ((UINT16) 0x0006) ///< The entity is the RevokeTrust value
181 #define TPM_ET_DEL_OWNER_BLOB ((UINT16) 0x0007) ///< The entity is a delegate owner blob
182 #define TPM_ET_DEL_ROW ((UINT16) 0x0008) ///< The entity is a delegate row
183 #define TPM_ET_DEL_KEY_BLOB ((UINT16) 0x0009) ///< The entity is a delegate key blob
184 #define TPM_ET_COUNTER ((UINT16) 0x000A) ///< The entity is a counter
185 #define TPM_ET_NV ((UINT16) 0x000B) ///< The entity is a NV index
186 #define TPM_ET_RESERVED_HANDLE ((UINT16) 0x0040) ///< Reserved. This value avoids collisions with the handle MSB setting.
187 //
188 // TPM_ENTITY_TYPE MSB Values: The MSB is used to indicate the ADIP encryption sheme when applicable
189 //
190 #define TPM_ET_XOR ((UINT16) 0x0000) ///< ADIP encryption scheme: XOR
191 #define TPM_ET_AES128 ((UINT16) 0x0006) ///< ADIP encryption scheme: AES 128 bits
192
193 //
194 // Part 2, section 4.4.1: Reserved Key Handles
195 //
196 #define TPM_KH_SRK ((TPM_KEY_HANDLE) 0x40000000) ///< The handle points to the SRK
197 #define TPM_KH_OWNER ((TPM_KEY_HANDLE) 0x40000001) ///< The handle points to the TPM Owner
198 #define TPM_KH_REVOKE ((TPM_KEY_HANDLE) 0x40000002) ///< The handle points to the RevokeTrust value
199 #define TPM_KH_TRANSPORT ((TPM_KEY_HANDLE) 0x40000003) ///< The handle points to the EstablishTransport static authorization
200 #define TPM_KH_OPERATOR ((TPM_KEY_HANDLE) 0x40000004) ///< The handle points to the Operator auth
201 #define TPM_KH_ADMIN ((TPM_KEY_HANDLE) 0x40000005) ///< The handle points to the delegation administration auth
202 #define TPM_KH_EK ((TPM_KEY_HANDLE) 0x40000006) ///< The handle points to the PUBEK, only usable with TPM_OwnerReadInternalPub
203
204 //
205 // Part 2, section 4.5: TPM_STARTUP_TYPE
206 //
207 #define TPM_ST_CLEAR ((TPM_STARTUP_TYPE) 0x0001) ///< The TPM is starting up from a clean state
208 #define TPM_ST_STATE ((TPM_STARTUP_TYPE) 0x0002) ///< The TPM is starting up from a saved state
209 #define TPM_ST_DEACTIVATED ((TPM_STARTUP_TYPE) 0x0003) ///< The TPM is to startup and set the deactivated flag to TRUE
210
211 //
212 // Part 2, section 4.6: TPM_STATUP_EFFECTS
213 // The table makeup is still an open issue.
214 //
215
216 //
217 // Part 2, section 4.7: TPM_PROTOCOL_ID
218 //
219 #define TPM_PID_OIAP ((TPM_PROTOCOL_ID) 0x0001) ///< The OIAP protocol.
220 #define TPM_PID_OSAP ((TPM_PROTOCOL_ID) 0x0002) ///< The OSAP protocol.
221 #define TPM_PID_ADIP ((TPM_PROTOCOL_ID) 0x0003) ///< The ADIP protocol.
222 #define TPM_PID_ADCP ((TPM_PROTOCOL_ID) 0x0004) ///< The ADCP protocol.
223 #define TPM_PID_OWNER ((TPM_PROTOCOL_ID) 0x0005) ///< The protocol for taking ownership of a TPM.
224 #define TPM_PID_DSAP ((TPM_PROTOCOL_ID) 0x0006) ///< The DSAP protocol
225 #define TPM_PID_TRANSPORT ((TPM_PROTOCOL_ID) 0x0007) ///< The transport protocol
226
227 //
228 // Part 2, section 4.8: TPM_ALGORITHM_ID
229 // The TPM MUST support the algorithms TPM_ALG_RSA, TPM_ALG_SHA, TPM_ALG_HMAC,
230 // TPM_ALG_MGF1
231 //
232 #define TPM_ALG_RSA ((TPM_ALGORITHM_ID) 0x00000001) ///< The RSA algorithm.
233 #define TPM_ALG_DES ((TPM_ALGORITHM_ID) 0x00000002) ///< The DES algorithm
234 #define TPM_ALG_3DES ((TPM_ALGORITHM_ID) 0x00000003) ///< The 3DES algorithm in EDE mode
235 #define TPM_ALG_SHA ((TPM_ALGORITHM_ID) 0x00000004) ///< The SHA1 algorithm
236 #define TPM_ALG_HMAC ((TPM_ALGORITHM_ID) 0x00000005) ///< The RFC 2104 HMAC algorithm
237 #define TPM_ALG_AES128 ((TPM_ALGORITHM_ID) 0x00000006) ///< The AES algorithm, key size 128
238 #define TPM_ALG_MGF1 ((TPM_ALGORITHM_ID) 0x00000007) ///< The XOR algorithm using MGF1 to create a string the size of the encrypted block
239 #define TPM_ALG_AES192 ((TPM_ALGORITHM_ID) 0x00000008) ///< AES, key size 192
240 #define TPM_ALG_AES256 ((TPM_ALGORITHM_ID) 0x00000009) ///< AES, key size 256
241 #define TPM_ALG_XOR ((TPM_ALGORITHM_ID) 0x0000000A) ///< XOR using the rolling nonces
242
243 //
244 // Part 2, section 4.9: TPM_PHYSICAL_PRESENCE
245 //
246 #define TPM_PHYSICAL_PRESENCE_HW_DISABLE ((TPM_PHYSICAL_PRESENCE) 0x0200) ///< Sets the physicalPresenceHWEnable to FALSE
247 #define TPM_PHYSICAL_PRESENCE_CMD_DISABLE ((TPM_PHYSICAL_PRESENCE) 0x0100) ///< Sets the physicalPresenceCMDEnable to FALSE
248 #define TPM_PHYSICAL_PRESENCE_LIFETIME_LOCK ((TPM_PHYSICAL_PRESENCE) 0x0080) ///< Sets the physicalPresenceLifetimeLock to TRUE
249 #define TPM_PHYSICAL_PRESENCE_HW_ENABLE ((TPM_PHYSICAL_PRESENCE) 0x0040) ///< Sets the physicalPresenceHWEnable to TRUE
250 #define TPM_PHYSICAL_PRESENCE_CMD_ENABLE ((TPM_PHYSICAL_PRESENCE) 0x0020) ///< Sets the physicalPresenceCMDEnable to TRUE
251 #define TPM_PHYSICAL_PRESENCE_NOTPRESENT ((TPM_PHYSICAL_PRESENCE) 0x0010) ///< Sets PhysicalPresence = FALSE
252 #define TPM_PHYSICAL_PRESENCE_PRESENT ((TPM_PHYSICAL_PRESENCE) 0x0008) ///< Sets PhysicalPresence = TRUE
253 #define TPM_PHYSICAL_PRESENCE_LOCK ((TPM_PHYSICAL_PRESENCE) 0x0004) ///< Sets PhysicalPresenceLock = TRUE
254
255 //
256 // Part 2, section 4.10: TPM_MIGRATE_SCHEME
257 //
258 #define TPM_MS_MIGRATE ((TPM_MIGRATE_SCHEME) 0x0001) ///< A public key that can be used with all TPM migration commands other than 'ReWrap' mode.
259 #define TPM_MS_REWRAP ((TPM_MIGRATE_SCHEME) 0x0002) ///< A public key that can be used for the ReWrap mode of TPM_CreateMigrationBlob.
260 #define TPM_MS_MAINT ((TPM_MIGRATE_SCHEME) 0x0003) ///< A public key that can be used for the Maintenance commands
261 #define TPM_MS_RESTRICT_MIGRATE ((TPM_MIGRATE_SCHEME) 0x0004) ///< The key is to be migrated to a Migration Authority.
262 #define TPM_MS_RESTRICT_APPROVE_DOUBLE ((TPM_MIGRATE_SCHEME) 0x0005) ///< The key is to be migrated to an entity approved by a Migration Authority using double wrapping
263
264 //
265 // Part 2, section 4.11: TPM_EK_TYPE
266 //
267 #define TPM_EK_TYPE_ACTIVATE ((TPM_EK_TYPE) 0x0001) ///< The blob MUST be TPM_EK_BLOB_ACTIVATE
268 #define TPM_EK_TYPE_AUTH ((TPM_EK_TYPE) 0x0002) ///< The blob MUST be TPM_EK_BLOB_AUTH
269
270 //
271 // Part 2, section 4.12: TPM_PLATFORM_SPECIFIC
272 //
273 #define TPM_PS_PC_11 ((TPM_PLATFORM_SPECIFIC) 0x0001) ///< PC Specific version 1.1
274 #define TPM_PS_PC_12 ((TPM_PLATFORM_SPECIFIC) 0x0002) ///< PC Specific version 1.2
275 #define TPM_PS_PDA_12 ((TPM_PLATFORM_SPECIFIC) 0x0003) ///< PDA Specific version 1.2
276 #define TPM_PS_Server_12 ((TPM_PLATFORM_SPECIFIC) 0x0004) ///< Server Specific version 1.2
277 #define TPM_PS_Mobile_12 ((TPM_PLATFORM_SPECIFIC) 0x0005) ///< Mobil Specific version 1.2
278
279 //
280 // Part 2, section 5: Basic Structures
281 //
282
283 //
284 // Part 2, section 5.1: TPM_STRUCT_VER
285 //
286 typedef struct tdTPM_STRUCT_VER {
287 UINT8 major;
288 UINT8 minor;
289 UINT8 revMajor;
290 UINT8 revMinor;
291 } TPM_STRUCT_VER;
292
293 //
294 // Part 2, section 5.3: TPM_VERSION
295 //
296 typedef struct tdTPM_VERSION {
297 TPM_VERSION_BYTE major;
298 TPM_VERSION_BYTE minor;
299 UINT8 revMajor;
300 UINT8 revMinor;
301 } TPM_VERSION;
302
303 //
304 // Part 2, section 5.4: TPM_DIGEST
305 //
306 #define TPM_SHA1_160_HASH_LEN 0x14
307 #define TPM_SHA1BASED_NONCE_LEN TPM_SHA1_160_HASH_LEN
308
309 typedef struct tdTPM_DIGEST{
310 UINT8 digest[TPM_SHA1_160_HASH_LEN];
311 } TPM_DIGEST;
312
313 typedef TPM_DIGEST TPM_CHOSENID_HASH;
314 typedef TPM_DIGEST TPM_COMPOSITE_HASH;
315 typedef TPM_DIGEST TPM_DIRVALUE;
316 typedef TPM_DIGEST TPM_HMAC;
317 typedef TPM_DIGEST TPM_PCRVALUE;
318 typedef TPM_DIGEST TPM_AUDITDIGEST;
319 typedef TPM_DIGEST TPM_DAA_TPM_SEED;
320 typedef TPM_DIGEST TPM_DAA_CONTEXT_SEED;
321
322 //
323 // Part 2, section 5.5: TPM_NONCE
324 //
325 typedef struct tdTPM_NONCE{
326 UINT8 nonce[20];
327 } TPM_NONCE;
328
329 //
330 // Part 2, section 5.6: TPM_AUTHDATA
331 //
332 typedef UINT8 tdTPM_AUTHDATA[20];
333 typedef tdTPM_AUTHDATA TPM_AUTHDATA;
334 typedef TPM_AUTHDATA TPM_SECRET;
335 typedef TPM_AUTHDATA TPM_ENCAUTH;
336
337 //
338 // Part 2, section 5.7: TPM_KEY_HANDLE_LIST
339 // Size of handle is loaded * sizeof(TPM_KEY_HANDLE)
340 //
341 typedef struct tdTPM_KEY_HANDLE_LIST {
342 UINT16 loaded;
343 TPM_KEY_HANDLE handle[1];
344 } TPM_KEY_HANDLE_LIST;
345
346 //
347 // Part 2, section 5.8: TPM_KEY_USAGE values
348 //
349 ///
350 /// TPM_KEY_SIGNING SHALL indicate a signing key. The [private] key SHALL be
351 /// used for signing operations, only. This means that it MUST be a leaf of the
352 /// Protected Storage key hierarchy.
353 ///
354 #define TPM_KEY_SIGNING ((UINT16) 0x0010)
355 ///
356 /// TPM_KEY_STORAGE SHALL indicate a storage key. The key SHALL be used to wrap
357 /// and unwrap other keys in the Protected Storage hierarchy
358 ///
359 #define TPM_KEY_STORAGE ((UINT16) 0x0011)
360 ///
361 /// TPM_KEY_IDENTITY SHALL indicate an identity key. The key SHALL be used for
362 /// operations that require a TPM identity, only.
363 ///
364 #define TPM_KEY_IDENTITY ((UINT16) 0x0012)
365 ///
366 /// TPM_KEY_AUTHCHANGE SHALL indicate an ephemeral key that is in use during
367 /// the ChangeAuthAsym process, only.
368 ///
369 #define TPM_KEY_AUTHCHANGE ((UINT16) 0x0013)
370 ///
371 /// TPM_KEY_BIND SHALL indicate a key that can be used for TPM_Bind and
372 /// TPM_Unbind operations only.
373 ///
374 #define TPM_KEY_BIND ((UINT16) 0x0014)
375 ///
376 /// TPM_KEY_LEGACY SHALL indicate a key that can perform signing and binding
377 /// operations. The key MAY be used for both signing and binding operations.
378 /// The TPM_KEY_LEGACY key type is to allow for use by applications where both
379 /// signing and encryption operations occur with the same key. The use of this
380 /// key type is not recommended TPM_KEY_MIGRATE 0x0016 This SHALL indicate a
381 /// key in use for TPM_MigrateKey
382 ///
383 #define TPM_KEY_LEGACY ((UINT16) 0x0015)
384 ///
385 /// TPM_KEY_MIGRAGE SHALL indicate a key in use for TPM_MigrateKey
386 ///
387 #define TPM_KEY_MIGRATE ((UINT16) 0x0016)
388
389 //
390 // Part 2, section 5.8.1: Mandatory Key Usage Schemes
391 //
392
393 #define TPM_ES_NONE ((TPM_ENC_SCHEME) 0x0001)
394 #define TPM_ES_RSAESPKCSv15 ((TPM_ENC_SCHEME) 0x0002)
395 #define TPM_ES_RSAESOAEP_SHA1_MGF1 ((TPM_ENC_SCHEME) 0x0003)
396 #define TPM_ES_SYM_CNT ((TPM_ENC_SCHEME) 0x0004)
397 #define TPM_ES_SYM_OFB ((TPM_ENC_SCHEME) 0x0005)
398
399 #define TPM_SS_NONE ((TPM_SIG_SCHEME) 0x0001)
400 #define TPM_SS_RSASSAPKCS1v15_SHA1 ((TPM_SIG_SCHEME) 0x0002)
401 #define TPM_SS_RSASSAPKCS1v15_DER ((TPM_SIG_SCHEME) 0x0003)
402 #define TPM_SS_RSASSAPKCS1v15_INFO ((TPM_SIG_SCHEME) 0x0004)
403
404 //
405 // Part 2, section 5.9: TPM_AUTH_DATA_USAGE values
406 //
407 #define TPM_AUTH_NEVER ((TPM_AUTH_DATA_USAGE) 0x00)
408 #define TPM_AUTH_ALWAYS ((TPM_AUTH_DATA_USAGE) 0x01)
409 #define TPM_AUTH_PRIV_USE_ONLY ((TPM_AUTH_DATA_USAGE) 0x03)
410
411 //
412 // Part 2, section 5.10: TPM_KEY_FLAGS
413 //
414 typedef enum tdTPM_KEY_FLAGS {
415 redirection = 0x00000001,
416 migratable = 0x00000002,
417 isVolatile = 0x00000004,
418 pcrIgnoredOnRead = 0x00000008,
419 migrateAuthority = 0x00000010
420 } TPM_KEY_FLAGS_BITS;
421
422 //
423 // Part 2, section 5.11: TPM_CHANGEAUTH_VALIDATE
424 //
425 typedef struct tdTPM_CHANGEAUTH_VALIDATE {
426 TPM_SECRET newAuthSecret;
427 TPM_NONCE n1;
428 } TPM_CHANGEAUTH_VALIDATE;
429
430 //
431 // Part 2, section 5.12: TPM_MIGRATIONKEYAUTH
432 // decalared after section 10 to catch declaration of TPM_PUBKEY
433 //
434 // Part 2 section 10.1: TPM_KEY_PARMS
435 // [size_is(parmSize)] BYTE* parms;
436 //
437 typedef struct tdTPM_KEY_PARMS {
438 TPM_ALGORITHM_ID algorithmID;
439 TPM_ENC_SCHEME encScheme;
440 TPM_SIG_SCHEME sigScheme;
441 UINT32 parmSize;
442 UINT8 *parms;
443 } TPM_KEY_PARMS;
444
445 //
446 // Part 2, section 10.4: TPM_STORE_PUBKEY
447 //
448 typedef struct tdTPM_STORE_PUBKEY {
449 UINT32 keyLength;
450 UINT8 key[1];
451 } TPM_STORE_PUBKEY;
452
453 //
454 // Part 2, section 10.5: TPM_PUBKEY
455 //
456 typedef struct tdTPM_PUBKEY{
457 TPM_KEY_PARMS algorithmParms;
458 TPM_STORE_PUBKEY pubKey;
459 } TPM_PUBKEY;
460
461 //
462 // Part 2, section 5.12: TPM_MIGRATIONKEYAUTH
463 //
464 typedef struct tdTPM_MIGRATIONKEYAUTH{
465 TPM_PUBKEY migrationKey;
466 TPM_MIGRATE_SCHEME migrationScheme;
467 TPM_DIGEST digest;
468 } TPM_MIGRATIONKEYAUTH;
469
470 //
471 // Part 2, section 5.13: TPM_COUNTER_VALUE
472 //
473 typedef struct tdTPM_COUNTER_VALUE{
474 TPM_STRUCTURE_TAG tag;
475 UINT8 label[4];
476 TPM_ACTUAL_COUNT counter;
477 } TPM_COUNTER_VALUE;
478
479 //
480 // Part 2, section 5.14: TPM_SIGN_INFO
481 // Size of data indicated by dataLen
482 //
483 typedef struct tdTPM_SIGN_INFO {
484 TPM_STRUCTURE_TAG tag;
485 UINT8 fixed[4];
486 TPM_NONCE replay;
487 UINT32 dataLen;
488 UINT8 *data;
489 } TPM_SIGN_INFO;
490
491 //
492 // Part 2, section 5.15: TPM_MSA_COMPOSITE
493 // Number of migAuthDigest indicated by MSAlist
494 //
495 typedef struct tdTPM_MSA_COMPOSITE {
496 UINT32 MSAlist;
497 TPM_DIGEST migAuthDigest[1];
498 } TPM_MSA_COMPOSITE;
499
500 //
501 // Part 2, section 5.16: TPM_CMK_AUTH
502 //
503 typedef struct tdTPM_CMK_AUTH{
504 TPM_DIGEST migrationAuthorityDigest;
505 TPM_DIGEST destinationKeyDigest;
506 TPM_DIGEST sourceKeyDigest;
507 } TPM_CMK_AUTH;
508
509 //
510 // Part 2, section 5.17: TPM_CMK_DELEGATE
511 //
512 #define TPM_CMK_DELEGATE_SIGNING ((TPM_CMK_DELEGATE) BIT31)
513 #define TPM_CMK_DELEGATE_STORAGE ((TPM_CMK_DELEGATE) BIT30)
514 #define TPM_CMK_DELEGATE_BIND ((TPM_CMK_DELEGATE) BIT29)
515 #define TPM_CMK_DELEGATE_LEGACY ((TPM_CMK_DELEGATE) BIT28)
516 #define TPM_CMK_DELEGATE_MIGRATE ((TPM_CMK_DELEGATE) BIT27)
517
518 //
519 // Part 2, section 5.18: TPM_SELECT_SIZE
520 //
521 typedef struct tdTPM_SELECT_SIZE {
522 UINT8 major;
523 UINT8 minor;
524 UINT16 reqSize;
525 } TPM_SELECT_SIZE;
526
527 //
528 // Part 2, section 5,19: TPM_CMK_MIGAUTH
529 //
530 typedef struct tdTPM_CMK_MIGAUTH{
531 TPM_STRUCTURE_TAG tag;
532 TPM_DIGEST msaDigest;
533 TPM_DIGEST pubKeyDigest;
534 } TPM_CMK_MIGAUTH;
535
536 //
537 // Part 2, section 5.20: TPM_CMK_SIGTICKET
538 //
539 typedef struct tdTPM_CMK_SIGTICKET{
540 TPM_STRUCTURE_TAG tag;
541 TPM_DIGEST verKeyDigest;
542 TPM_DIGEST signedData;
543 } TPM_CMK_SIGTICKET;
544
545 //
546 // Part 2, section 5.21: TPM_CMK_MA_APPROVAL
547 //
548 typedef struct tdTPM_CMK_MA_APPROVAL{
549 TPM_STRUCTURE_TAG tag;
550 TPM_DIGEST migrationAuthorityDigest;
551 } TPM_CMK_MA_APPROVAL;
552
553 //
554 // Part 2, section 6: Command Tags
555 //
556 #define TPM_TAG_RQU_COMMAND ((TPM_STRUCTURE_TAG) 0x00C1)
557 #define TPM_TAG_RQU_AUTH1_COMMAND ((TPM_STRUCTURE_TAG) 0x00C2)
558 #define TPM_TAG_RQU_AUTH2_COMMAND ((TPM_STRUCTURE_TAG) 0x00C3)
559 #define TPM_TAG_RSP_COMMAND ((TPM_STRUCTURE_TAG) 0x00C4)
560 #define TPM_TAG_RSP_AUTH1_COMMAND ((TPM_STRUCTURE_TAG) 0x00C5)
561 #define TPM_TAG_RSP_AUTH2_COMMAND ((TPM_STRUCTURE_TAG) 0x00C6)
562
563 //
564 // Part 2, section 7.1: TPM_PERMANENT_FLAGS
565 //
566 typedef struct tdTPM_PERMANENT_FLAGS{
567 TPM_STRUCTURE_TAG tag;
568 BOOLEAN disable;
569 BOOLEAN ownership;
570 BOOLEAN deactivated;
571 BOOLEAN readPubek;
572 BOOLEAN disableOwnerClear;
573 BOOLEAN allowMaintenance;
574 BOOLEAN physicalPresenceLifetimeLock;
575 BOOLEAN physicalPresenceHWEnable;
576 BOOLEAN physicalPresenceCMDEnable;
577 BOOLEAN CEKPUsed;
578 BOOLEAN TPMpost;
579 BOOLEAN TPMpostLock;
580 BOOLEAN FIPS;
581 BOOLEAN operator;
582 BOOLEAN enableRevokeEK;
583 BOOLEAN nvLocked;
584 BOOLEAN readSRKPub;
585 BOOLEAN tpmEstablished;
586 BOOLEAN maintenanceDone;
587 } TPM_PERMANENT_FLAGS;
588
589 //
590 // Part 2, section 7.1.1: Flag Restrictions (of TPM_PERMANENT_FLAGS)
591 //
592 #define TPM_PF_DISABLE ((TPM_CAPABILITY_AREA) 1)
593 #define TPM_PF_OWNERSHIP ((TPM_CAPABILITY_AREA) 2)
594 #define TPM_PF_DEACTIVATED ((TPM_CAPABILITY_AREA) 3)
595 #define TPM_PF_READPUBEK ((TPM_CAPABILITY_AREA) 4)
596 #define TPM_PF_DISABLEOWNERCLEAR ((TPM_CAPABILITY_AREA) 5)
597 #define TPM_PF_ALLOWMAINTENANCE ((TPM_CAPABILITY_AREA) 6)
598 #define TPM_PF_PHYSICALPRESENCELIFETIMELOCK ((TPM_CAPABILITY_AREA) 7)
599 #define TPM_PF_PHYSICALPRESENCEHWENABLE ((TPM_CAPABILITY_AREA) 8)
600 #define TPM_PF_PHYSICALPRESENCECMDENABLE ((TPM_CAPABILITY_AREA) 9)
601 #define TPM_PF_CEKPUSED ((TPM_CAPABILITY_AREA) 10)
602 #define TPM_PF_TPMPOST ((TPM_CAPABILITY_AREA) 11)
603 #define TPM_PF_TPMPOSTLOCK ((TPM_CAPABILITY_AREA) 12)
604 #define TPM_PF_FIPS ((TPM_CAPABILITY_AREA) 13)
605 #define TPM_PF_OPERATOR ((TPM_CAPABILITY_AREA) 14)
606 #define TPM_PF_ENABLEREVOKEEK ((TPM_CAPABILITY_AREA) 15)
607 #define TPM_PF_NV_LOCKED ((TPM_CAPABILITY_AREA) 16)
608 #define TPM_PF_READSRKPUB ((TPM_CAPABILITY_AREA) 17)
609 #define TPM_PF_TPMESTABLISHED ((TPM_CAPABILITY_AREA) 18)
610 #define TPM_PF_MAINTENANCEDONE ((TPM_CAPABILITY_AREA) 19)
611
612 //
613 // Part 2, section 7.2: TPM_STCLEAR_FLAGS
614 //
615 typedef struct tdTPM_STCLEAR_FLAGS{
616 TPM_STRUCTURE_TAG tag;
617 BOOLEAN deactivated;
618 BOOLEAN disableForceClear;
619 BOOLEAN physicalPresence;
620 BOOLEAN physicalPresenceLock;
621 BOOLEAN bGlobalLock;
622 } TPM_STCLEAR_FLAGS;
623
624 //
625 // Part 2, section 7.2.1: Flag Restrictions (of TPM_STCLEAR_FLAGS)
626 //
627 #define TPM_SF_DEACTIVATED ((TPM_CAPABILITY_AREA) 1)
628 #define TPM_SF_DISABLEFORCECLEAR ((TPM_CAPABILITY_AREA) 2)
629 #define TPM_SF_PHYSICALPRESENCE ((TPM_CAPABILITY_AREA) 3)
630 #define TPM_SF_PHYSICALPRESENCELOCK ((TPM_CAPABILITY_AREA) 4)
631 #define TPM_SF_BGLOBALLOCK ((TPM_CAPABILITY_AREA) 5)
632
633 //
634 // Part 2, section 7.3: TPM_STANY_FLAGS
635 //
636 typedef struct tdTPM_STANY_FLAGS{
637 TPM_STRUCTURE_TAG tag;
638 BOOLEAN postInitialise;
639 TPM_MODIFIER_INDICATOR localityModifier;
640 BOOLEAN transportExclusive;
641 BOOLEAN TOSPresent;
642 } TPM_STANY_FLAGS;
643
644 //
645 // Part 2, section 7.3.1: Flag Restrictions (of TPM_STANY_FLAGS)
646 //
647 #define TPM_AF_POSTINITIALISE ((TPM_CAPABILITY_AREA) 1)
648 #define TPM_AF_LOCALITYMODIFIER ((TPM_CAPABILITY_AREA) 2)
649 #define TPM_AF_TRANSPORTEXCLUSIVE ((TPM_CAPABILITY_AREA) 3)
650 #define TPM_AF_TOSPRESENT ((TPM_CAPABILITY_AREA) 4)
651
652 //
653 // All those structures defined in section 7.4, 7.5, 7.6 are not normative and
654 // thus no definitions here
655 //
656
657 //
658 // Part 2, section 8: PCR Structures
659 //
660
661 //
662 // Part 2, section 8.1: TPM_PCR_SELECTION
663 // Size of pcrSelect[] indicated by sizeOfSelect
664 //
665 typedef struct tdTPM_PCR_SELECTION {
666 UINT16 sizeOfSelect;
667 UINT8 pcrSelect[1];
668 } TPM_PCR_SELECTION;
669
670 //
671 // Part 2, section 8.2: TPM_PCR_COMPOSITE
672 // Size of pcrValue[] indicated by valueSize
673 //
674 typedef struct tdTPM_PCR_COMPOSITE {
675 TPM_PCR_SELECTION select;
676 UINT32 valueSize;
677 TPM_PCRVALUE pcrValue[1];
678 } TPM_PCR_COMPOSITE;
679
680 //
681 // Part 2, section 8.3: TPM_PCR_INFO
682 //
683 typedef struct tdTPM_PCR_INFO {
684 TPM_PCR_SELECTION pcrSelection;
685 TPM_COMPOSITE_HASH digestAtRelease;
686 TPM_COMPOSITE_HASH digestAtCreation;
687 } TPM_PCR_INFO;
688
689 //
690 // Part 2, section 8.6: TPM_LOCALITY_SELECTION
691 //
692 typedef UINT8 TPM_LOCALITY_SELECTION;
693
694 #define TPM_LOC_FOUR ((UINT8) 0x10)
695 #define TPM_LOC_THREE ((UINT8) 0x08)
696 #define TPM_LOC_TWO ((UINT8) 0x04)
697 #define TPM_LOC_ONE ((UINT8) 0x02)
698 #define TPM_LOC_ZERO ((UINT8) 0x01)
699
700 //
701 // Part 2, section 8.4: TPM_PCR_INFO_LONG
702 //
703 typedef struct tdTPM_PCR_INFO_LONG {
704 TPM_STRUCTURE_TAG tag;
705 TPM_LOCALITY_SELECTION localityAtCreation;
706 TPM_LOCALITY_SELECTION localityAtRelease;
707 TPM_PCR_SELECTION creationPCRSelection;
708 TPM_PCR_SELECTION releasePCRSelection;
709 TPM_COMPOSITE_HASH digestAtCreation;
710 TPM_COMPOSITE_HASH digestAtRelease;
711 } TPM_PCR_INFO_LONG;
712
713 //
714 // Part 2, section 8.5: TPM_PCR_INFO_SHORT
715 //
716 typedef struct tdTPM_PCR_INFO_SHORT{
717 TPM_PCR_SELECTION pcrSelection;
718 TPM_LOCALITY_SELECTION localityAtRelease;
719 TPM_COMPOSITE_HASH digestAtRelease;
720 } TPM_PCR_INFO_SHORT;
721
722 //
723 // Part 2, section 8.8: TPM_PCR_ATTRIBUTES
724 //
725 typedef struct tdTPM_PCR_ATTRIBUTES{
726 BOOLEAN pcrReset;
727 TPM_LOCALITY_SELECTION pcrExtendLocal;
728 TPM_LOCALITY_SELECTION pcrResetLocal;
729 } TPM_PCR_ATTRIBUTES;
730
731 //
732 // Part 2, section 9: Storage Structures
733 //
734
735 //
736 // Part 2, section 9.1: TPM_STORED_DATA
737 // [size_is(sealInfoSize)] BYTE* sealInfo;
738 // [size_is(encDataSize)] BYTE* encData;
739 //
740 typedef struct tdTPM_STORED_DATA {
741 TPM_STRUCT_VER ver;
742 UINT32 sealInfoSize;
743 UINT8 *sealInfo;
744 UINT32 encDataSize;
745 UINT8 *encData;
746 } TPM_STORED_DATA;
747
748 //
749 // Part 2, section 9.2: TPM_STORED_DATA12
750 // [size_is(sealInfoSize)] BYTE* sealInfo;
751 // [size_is(encDataSize)] BYTE* encData;
752 //
753 typedef struct tdTPM_STORED_DATA12 {
754 TPM_STRUCTURE_TAG tag;
755 TPM_ENTITY_TYPE et;
756 UINT32 sealInfoSize;
757 UINT8 *sealInfo;
758 UINT32 encDataSize;
759 UINT8 *encData;
760 } TPM_STORED_DATA12;
761
762 //
763 // Part 2, section 9.3: TPM_SEALED_DATA
764 // [size_is(dataSize)] BYTE* data;
765 //
766 typedef struct tdTPM_SEALED_DATA {
767 TPM_PAYLOAD_TYPE payload;
768 TPM_SECRET authData;
769 TPM_NONCE tpmProof;
770 TPM_DIGEST storedDigest;
771 UINT32 dataSize;
772 UINT8 *data;
773 } TPM_SEALED_DATA;
774
775 //
776 // Part 2, section 9.4: TPM_SYMMETRIC_KEY
777 // [size_is(size)] BYTE* data;
778 //
779 typedef struct tdTPM_SYMMETRIC_KEY {
780 TPM_ALGORITHM_ID algId;
781 TPM_ENC_SCHEME encScheme;
782 UINT16 dataSize;
783 UINT8 *data;
784 } TPM_SYMMETRIC_KEY;
785
786 //
787 // Part 2, section 9.5: TPM_BOUND_DATA
788 //
789 typedef struct tdTPM_BOUND_DATA {
790 TPM_STRUCT_VER ver;
791 TPM_PAYLOAD_TYPE payload;
792 UINT8 payloadData[1];
793 } TPM_BOUND_DATA;
794
795 //
796 // Part 2 section 10: TPM_KEY complex
797 //
798
799 //
800 // Section 10.1, 10.4, and 10.5 have been defined previously
801 //
802
803 //
804 // Part 2, section 10.2: TPM_KEY
805 // [size_is(encDataSize)] BYTE* encData;
806 //
807 typedef struct tdTPM_KEY{
808 TPM_STRUCT_VER ver;
809 TPM_KEY_USAGE keyUsage;
810 TPM_KEY_FLAGS keyFlags;
811 TPM_AUTH_DATA_USAGE authDataUsage;
812 TPM_KEY_PARMS algorithmParms;
813 UINT32 PCRInfoSize;
814 UINT8 *PCRInfo;
815 TPM_STORE_PUBKEY pubKey;
816 UINT32 encDataSize;
817 UINT8 *encData;
818 } TPM_KEY;
819
820 //
821 // Part 2, section 10.3: TPM_KEY12
822 // [size_is(encDataSize)] BYTE* encData;
823 //
824 typedef struct tdTPM_KEY12{
825 TPM_STRUCTURE_TAG tag;
826 UINT16 fill;
827 TPM_KEY_USAGE keyUsage;
828 TPM_KEY_FLAGS keyFlags;
829 TPM_AUTH_DATA_USAGE authDataUsage;
830 TPM_KEY_PARMS algorithmParms;
831 UINT32 PCRInfoSize;
832 UINT8 *PCRInfo;
833 TPM_STORE_PUBKEY pubKey;
834 UINT32 encDataSize;
835 UINT8 *encData;
836 } TPM_KEY12;
837
838 //
839 // Part 2, section 10.7: TPM_STORE_PRIVKEY
840 // [size_is(keyLength)] BYTE* key;
841 //
842 typedef struct tdTPM_STORE_PRIVKEY {
843 UINT32 keyLength;
844 UINT8 *key;
845 } TPM_STORE_PRIVKEY;
846
847 //
848 // Part 2, section 10.6: TPM_STORE_ASYMKEY
849 //
850 typedef struct tdTPM_STORE_ASYMKEY { // pos len total
851 TPM_PAYLOAD_TYPE payload; // 0 1 1
852 TPM_SECRET usageAuth; // 1 20 21
853 TPM_SECRET migrationAuth; // 21 20 41
854 TPM_DIGEST pubDataDigest; // 41 20 61
855 TPM_STORE_PRIVKEY privKey; // 61 132-151 193-214
856 } TPM_STORE_ASYMKEY;
857
858 //
859 // Part 2, section 10.8: TPM_MIGRATE_ASYMKEY
860 // [size_is(partPrivKeyLen)] BYTE* partPrivKey;
861 //
862 typedef struct tdTPM_MIGRATE_ASYMKEY { // pos len total
863 TPM_PAYLOAD_TYPE payload; // 0 1 1
864 TPM_SECRET usageAuth; // 1 20 21
865 TPM_DIGEST pubDataDigest; // 21 20 41
866 UINT32 partPrivKeyLen; // 41 4 45
867 UINT8 *partPrivKey; // 45 112-127 157-172
868 } TPM_MIGRATE_ASYMKEY;
869
870 //
871 // Part 2, section 10.9: TPM_KEY_CONTROL
872 //
873 #define TPM_KEY_CONTROL_OWNER_EVICT ((UINT32) 0x00000001)
874
875 //
876 // Part 2, section 11: Signed Structures
877 //
878
879 //
880 // Part 2, section 11.1: TPM_CERTIFY_INFO Structure
881 //
882 typedef struct tdTPM_CERTIFY_INFO {
883 TPM_STRUCT_VER version;
884 TPM_KEY_USAGE keyUsage;
885 TPM_KEY_FLAGS keyFlags;
886 TPM_AUTH_DATA_USAGE authDataUsage;
887 TPM_KEY_PARMS algorithmParms;
888 TPM_DIGEST pubkeyDigest;
889 TPM_NONCE data;
890 BOOLEAN parentPCRStatus;
891 UINT32 PCRInfoSize;
892 UINT8 *PCRInfo;
893 } TPM_CERTIFY_INFO;
894
895 //
896 // Part 2, section 11.2: TPM_CERTIFY_INFO2 Structure
897 //
898 typedef struct tdTPM_CERTIFY_INFO2 {
899 TPM_STRUCTURE_TAG tag;
900 UINT8 fill;
901 TPM_PAYLOAD_TYPE payloadType;
902 TPM_KEY_USAGE keyUsage;
903 TPM_KEY_FLAGS keyFlags;
904 TPM_AUTH_DATA_USAGE authDataUsage;
905 TPM_KEY_PARMS algorithmParms;
906 TPM_DIGEST pubkeyDigest;
907 TPM_NONCE data;
908 BOOLEAN parentPCRStatus;
909 UINT32 PCRInfoSize;
910 UINT8 *PCRInfo;
911 UINT32 migrationAuthoritySize;
912 UINT8 *migrationAuthority;
913 } TPM_CERTIFY_INFO2;
914
915 //
916 // Part 2, section 11.3 TPM_QUOTE_INFO Structure
917 //
918 typedef struct tdTPM_QUOTE_INFO {
919 TPM_STRUCT_VER version;
920 UINT8 fixed[4];
921 TPM_COMPOSITE_HASH digestValue;
922 TPM_NONCE externalData;
923 } TPM_QUOTE_INFO;
924
925 //
926 // Part 2, section 11.4 TPM_QUOTE_INFO2 Structure
927 //
928 typedef struct tdTPM_QUOTE_INFO2 {
929 TPM_STRUCTURE_TAG tag;
930 UINT8 fixed[4];
931 TPM_NONCE externalData;
932 TPM_PCR_INFO_SHORT infoShort;
933 } TPM_QUOTE_INFO2;
934
935 //
936 // Part 2, section 12: Identity Structures
937 //
938
939 //
940 // Part 2, section 12.1 TPM_EK_BLOB
941 //
942 typedef struct tdTPM_EK_BLOB {
943 TPM_STRUCTURE_TAG tag;
944 TPM_EK_TYPE ekType;
945 UINT32 blobSize;
946 UINT8 *blob;
947 } TPM_EK_BLOB;
948
949 //
950 // Part 2, section 12.2 TPM_EK_BLOB_ACTIVATE
951 //
952 typedef struct tdTPM_EK_BLOB_ACTIVATE {
953 TPM_STRUCTURE_TAG tag;
954 TPM_SYMMETRIC_KEY sessionKey;
955 TPM_DIGEST idDigest;
956 TPM_PCR_INFO_SHORT pcrInfo;
957 } TPM_EK_BLOB_ACTIVATE;
958
959 //
960 // Part 2, section 12.3 TPM_EK_BLOB_AUTH
961 //
962 typedef struct tdTPM_EK_BLOB_AUTH {
963 TPM_STRUCTURE_TAG tag;
964 TPM_SECRET authValue;
965 } TPM_EK_BLOB_AUTH;
966
967
968 //
969 // Part 2, section 12.5 TPM_IDENTITY_CONTENTS
970 //
971 typedef struct tdTPM_IDENTITY_CONTENTS {
972 TPM_STRUCT_VER ver;
973 UINT32 ordinal;
974 TPM_CHOSENID_HASH labelPrivCADigest;
975 TPM_PUBKEY identityPubKey;
976 } TPM_IDENTITY_CONTENTS;
977
978 //
979 // Part 2, section 12.6 TPM_IDENTITY_REQ
980 //
981 typedef struct tdTPM_IDENTITY_REQ {
982 UINT32 asymSize;
983 UINT32 symSize;
984 TPM_KEY_PARMS asymAlgorithm;
985 TPM_KEY_PARMS symAlgorithm;
986 UINT8 *asymBlob;
987 UINT8 *symBlob;
988 } TPM_IDENTITY_REQ;
989
990 //
991 // Part 2, section 12.7 TPM_IDENTITY_PROOF
992 //
993 typedef struct tdTPM_IDENTITY_PROOF {
994 TPM_STRUCT_VER ver;
995 UINT32 labelSize;
996 UINT32 identityBindingSize;
997 UINT32 endorsementSize;
998 UINT32 platformSize;
999 UINT32 conformanceSize;
1000 TPM_PUBKEY identityKey;
1001 UINT8 *labelArea;
1002 UINT8 *identityBinding;
1003 UINT8 *endorsementCredential;
1004 UINT8 *platformCredential;
1005 UINT8 *conformanceCredential;
1006 } TPM_IDENTITY_PROOF;
1007
1008 //
1009 // Part 2, section 12.8 TPM_ASYM_CA_CONTENTS
1010 //
1011 typedef struct tdTPM_ASYM_CA_CONTENTS {
1012 TPM_SYMMETRIC_KEY sessionKey;
1013 TPM_DIGEST idDigest;
1014 } TPM_ASYM_CA_CONTENTS;
1015
1016 //
1017 // Part 2, section 12.9 TPM_SYM_CA_ATTESTATION
1018 //
1019 typedef struct tdTPM_SYM_CA_ATTESTATION {
1020 UINT32 credSize;
1021 TPM_KEY_PARMS algorithm;
1022 UINT8 *credential;
1023 } TPM_SYM_CA_ATTESTATION;
1024
1025 //
1026 // Part 2, section 15: Tick Structures
1027 // Placed here out of order because definitions are used in section 13.
1028 //
1029 typedef struct tdTPM_CURRENT_TICKS {
1030 TPM_STRUCTURE_TAG tag;
1031 UINT64 currentTicks;
1032 UINT16 tickRate;
1033 TPM_NONCE tickNonce;
1034 } TPM_CURRENT_TICKS;
1035
1036 //
1037 // Part 2, section 13: Transport structures
1038 //
1039
1040 //
1041 // Part 2, section 13.1: TPM _TRANSPORT_PUBLIC
1042 //
1043 typedef struct tdTPM_TRANSPORT_PUBLIC {
1044 TPM_STRUCTURE_TAG tag;
1045 TPM_TRANSPORT_ATTRIBUTES transAttributes;
1046 TPM_ALGORITHM_ID algId;
1047 TPM_ENC_SCHEME encScheme;
1048 } TPM_TRANSPORT_PUBLIC;
1049
1050 //
1051 // Part 2, section 13.1.1 TPM_TRANSPORT_ATTRIBUTES Definitions
1052 //
1053 #define TPM_TRANSPORT_ENCRYPT ((UINT32)0x00000001)
1054 #define TPM_TRANSPORT_LOG ((UINT32)0x00000002)
1055 #define TPM_TRANSPORT_EXCLUSIVE ((UINT32)0x00000004)
1056
1057 //
1058 // Part 2, section 13.2 TPM_TRANSPORT_INTERNAL
1059 //
1060 typedef struct tdTPM_TRANSPORT_INTERNAL {
1061 TPM_STRUCTURE_TAG tag;
1062 TPM_AUTHDATA authData;
1063 TPM_TRANSPORT_PUBLIC transPublic;
1064 TPM_TRANSHANDLE transHandle;
1065 TPM_NONCE transNonceEven;
1066 TPM_DIGEST transDigest;
1067 } TPM_TRANSPORT_INTERNAL;
1068
1069 //
1070 // Part 2, section 13.3 TPM_TRANSPORT_LOG_IN structure
1071 //
1072 typedef struct tdTPM_TRANSPORT_LOG_IN {
1073 TPM_STRUCTURE_TAG tag;
1074 TPM_DIGEST parameters;
1075 TPM_DIGEST pubKeyHash;
1076 } TPM_TRANSPORT_LOG_IN;
1077
1078 //
1079 // Part 2, section 13.4 TPM_TRANSPORT_LOG_OUT structure
1080 //
1081 typedef struct tdTPM_TRANSPORT_LOG_OUT {
1082 TPM_STRUCTURE_TAG tag;
1083 TPM_CURRENT_TICKS currentTicks;
1084 TPM_DIGEST parameters;
1085 TPM_MODIFIER_INDICATOR locality;
1086 } TPM_TRANSPORT_LOG_OUT;
1087
1088 //
1089 // Part 2, section 13.5 TPM_TRANSPORT_AUTH structure
1090 //
1091 typedef struct tdTPM_TRANSPORT_AUTH {
1092 TPM_STRUCTURE_TAG tag;
1093 TPM_AUTHDATA authData;
1094 } TPM_TRANSPORT_AUTH;
1095
1096 //
1097 // Part 2, section 14: Audit Structures
1098 //
1099
1100 //
1101 // Part 2, section 14.1 TPM_AUDIT_EVENT_IN structure
1102 //
1103 typedef struct tdTPM_AUDIT_EVENT_IN {
1104 TPM_STRUCTURE_TAG tag;
1105 TPM_DIGEST inputParms;
1106 TPM_COUNTER_VALUE auditCount;
1107 } TPM_AUDIT_EVENT_IN;
1108
1109 //
1110 // Part 2, section 14.2 TPM_AUDIT_EVENT_OUT structure
1111 //
1112 typedef struct tdTPM_AUDIT_EVENT_OUT {
1113 TPM_STRUCTURE_TAG tag;
1114 TPM_COMMAND_CODE ordinal;
1115 TPM_DIGEST outputParms;
1116 TPM_COUNTER_VALUE auditCount;
1117 TPM_RESULT returnCode;
1118 } TPM_AUDIT_EVENT_OUT;
1119
1120 //
1121 // Part 2, section 16: Return Codes
1122 //
1123
1124 #define TPM_VENDOR_ERROR TPM_Vendor_Specific32
1125 #define TPM_NON_FATAL 0x00000800
1126
1127 #define TPM_SUCCESS ((TPM_RESULT) TPM_BASE)
1128 #define TPM_AUTHFAIL ((TPM_RESULT) (TPM_BASE + 1))
1129 #define TPM_BADINDEX ((TPM_RESULT) (TPM_BASE + 2))
1130 #define TPM_BAD_PARAMETER ((TPM_RESULT) (TPM_BASE + 3))
1131 #define TPM_AUDITFAILURE ((TPM_RESULT) (TPM_BASE + 4))
1132 #define TPM_CLEAR_DISABLED ((TPM_RESULT) (TPM_BASE + 5))
1133 #define TPM_DEACTIVATED ((TPM_RESULT) (TPM_BASE + 6))
1134 #define TPM_DISABLED ((TPM_RESULT) (TPM_BASE + 7))
1135 #define TPM_DISABLED_CMD ((TPM_RESULT) (TPM_BASE + 8))
1136 #define TPM_FAIL ((TPM_RESULT) (TPM_BASE + 9))
1137 #define TPM_BAD_ORDINAL ((TPM_RESULT) (TPM_BASE + 10))
1138 #define TPM_INSTALL_DISABLED ((TPM_RESULT) (TPM_BASE + 11))
1139 #define TPM_INVALID_KEYHANDLE ((TPM_RESULT) (TPM_BASE + 12))
1140 #define TPM_KEYNOTFOUND ((TPM_RESULT) (TPM_BASE + 13))
1141 #define TPM_INAPPROPRIATE_ENC ((TPM_RESULT) (TPM_BASE + 14))
1142 #define TPM_MIGRATEFAIL ((TPM_RESULT) (TPM_BASE + 15))
1143 #define TPM_INVALID_PCR_INFO ((TPM_RESULT) (TPM_BASE + 16))
1144 #define TPM_NOSPACE ((TPM_RESULT) (TPM_BASE + 17))
1145 #define TPM_NOSRK ((TPM_RESULT) (TPM_BASE + 18))
1146 #define TPM_NOTSEALED_BLOB ((TPM_RESULT) (TPM_BASE + 19))
1147 #define TPM_OWNER_SET ((TPM_RESULT) (TPM_BASE + 20))
1148 #define TPM_RESOURCES ((TPM_RESULT) (TPM_BASE + 21))
1149 #define TPM_SHORTRANDOM ((TPM_RESULT) (TPM_BASE + 22))
1150 #define TPM_SIZE ((TPM_RESULT) (TPM_BASE + 23))
1151 #define TPM_WRONGPCRVAL ((TPM_RESULT) (TPM_BASE + 24))
1152 #define TPM_BAD_PARAM_SIZE ((TPM_RESULT) (TPM_BASE + 25))
1153 #define TPM_SHA_THREAD ((TPM_RESULT) (TPM_BASE + 26))
1154 #define TPM_SHA_ERROR ((TPM_RESULT) (TPM_BASE + 27))
1155 #define TPM_FAILEDSELFTEST ((TPM_RESULT) (TPM_BASE + 28))
1156 #define TPM_AUTH2FAIL ((TPM_RESULT) (TPM_BASE + 29))
1157 #define TPM_BADTAG ((TPM_RESULT) (TPM_BASE + 30))
1158 #define TPM_IOERROR ((TPM_RESULT) (TPM_BASE + 31))
1159 #define TPM_ENCRYPT_ERROR ((TPM_RESULT) (TPM_BASE + 32))
1160 #define TPM_DECRYPT_ERROR ((TPM_RESULT) (TPM_BASE + 33))
1161 #define TPM_INVALID_AUTHHANDLE ((TPM_RESULT) (TPM_BASE + 34))
1162 #define TPM_NO_ENDORSEMENT ((TPM_RESULT) (TPM_BASE + 35))
1163 #define TPM_INVALID_KEYUSAGE ((TPM_RESULT) (TPM_BASE + 36))
1164 #define TPM_WRONG_ENTITYTYPE ((TPM_RESULT) (TPM_BASE + 37))
1165 #define TPM_INVALID_POSTINIT ((TPM_RESULT) (TPM_BASE + 38))
1166 #define TPM_INAPPROPRIATE_SIG ((TPM_RESULT) (TPM_BASE + 39))
1167 #define TPM_BAD_KEY_PROPERTY ((TPM_RESULT) (TPM_BASE + 40))
1168 #define TPM_BAD_MIGRATION ((TPM_RESULT) (TPM_BASE + 41))
1169 #define TPM_BAD_SCHEME ((TPM_RESULT) (TPM_BASE + 42))
1170 #define TPM_BAD_DATASIZE ((TPM_RESULT) (TPM_BASE + 43))
1171 #define TPM_BAD_MODE ((TPM_RESULT) (TPM_BASE + 44))
1172 #define TPM_BAD_PRESENCE ((TPM_RESULT) (TPM_BASE + 45))
1173 #define TPM_BAD_VERSION ((TPM_RESULT) (TPM_BASE + 46))
1174 #define TPM_NO_WRAP_TRANSPORT ((TPM_RESULT) (TPM_BASE + 47))
1175 #define TPM_AUDITFAIL_UNSUCCESSFUL ((TPM_RESULT) (TPM_BASE + 48))
1176 #define TPM_AUDITFAIL_SUCCESSFUL ((TPM_RESULT) (TPM_BASE + 49))
1177 #define TPM_NOTRESETABLE ((TPM_RESULT) (TPM_BASE + 50))
1178 #define TPM_NOTLOCAL ((TPM_RESULT) (TPM_BASE + 51))
1179 #define TPM_BAD_TYPE ((TPM_RESULT) (TPM_BASE + 52))
1180 #define TPM_INVALID_RESOURCE ((TPM_RESULT) (TPM_BASE + 53))
1181 #define TPM_NOTFIPS ((TPM_RESULT) (TPM_BASE + 54))
1182 #define TPM_INVALID_FAMILY ((TPM_RESULT) (TPM_BASE + 55))
1183 #define TPM_NO_NV_PERMISSION ((TPM_RESULT) (TPM_BASE + 56))
1184 #define TPM_REQUIRES_SIGN ((TPM_RESULT) (TPM_BASE + 57))
1185 #define TPM_KEY_NOTSUPPORTED ((TPM_RESULT) (TPM_BASE + 58))
1186 #define TPM_AUTH_CONFLICT ((TPM_RESULT) (TPM_BASE + 59))
1187 #define TPM_AREA_LOCKED ((TPM_RESULT) (TPM_BASE + 60))
1188 #define TPM_BAD_LOCALITY ((TPM_RESULT) (TPM_BASE + 61))
1189 #define TPM_READ_ONLY ((TPM_RESULT) (TPM_BASE + 62))
1190 #define TPM_PER_NOWRITE ((TPM_RESULT) (TPM_BASE + 63))
1191 #define TPM_FAMILYCOUNT ((TPM_RESULT) (TPM_BASE + 64))
1192 #define TPM_WRITE_LOCKED ((TPM_RESULT) (TPM_BASE + 65))
1193 #define TPM_BAD_ATTRIBUTES ((TPM_RESULT) (TPM_BASE + 66))
1194 #define TPM_INVALID_STRUCTURE ((TPM_RESULT) (TPM_BASE + 67))
1195 #define TPM_KEY_OWNER_CONTROL ((TPM_RESULT) (TPM_BASE + 68))
1196 #define TPM_BAD_COUNTER ((TPM_RESULT) (TPM_BASE + 69))
1197 #define TPM_NOT_FULLWRITE ((TPM_RESULT) (TPM_BASE + 70))
1198 #define TPM_CONTEXT_GAP ((TPM_RESULT) (TPM_BASE + 71))
1199 #define TPM_MAXNVWRITES ((TPM_RESULT) (TPM_BASE + 72))
1200 #define TPM_NOOPERATOR ((TPM_RESULT) (TPM_BASE + 73))
1201 #define TPM_RESOURCEMISSING ((TPM_RESULT) (TPM_BASE + 74))
1202 #define TPM_DELEGATE_LOCK ((TPM_RESULT) (TPM_BASE + 75))
1203 #define TPM_DELEGATE_FAMILY ((TPM_RESULT) (TPM_BASE + 76))
1204 #define TPM_DELEGATE_ADMIN ((TPM_RESULT) (TPM_BASE + 77))
1205 #define TPM_TRANSPORT_NOTEXCLUSIVE ((TPM_RESULT) (TPM_BASE + 78))
1206 #define TPM_OWNER_CONTROL ((TPM_RESULT) (TPM_BASE + 79))
1207 #define TPM_DAA_RESOURCES ((TPM_RESULT) (TPM_BASE + 80))
1208 #define TPM_DAA_INPUT_DATA0 ((TPM_RESULT) (TPM_BASE + 81))
1209 #define TPM_DAA_INPUT_DATA1 ((TPM_RESULT) (TPM_BASE + 82))
1210 #define TPM_DAA_ISSUER_SETTINGS ((TPM_RESULT) (TPM_BASE + 83))
1211 #define TPM_DAA_TPM_SETTINGS ((TPM_RESULT) (TPM_BASE + 84))
1212 #define TPM_DAA_STAGE ((TPM_RESULT) (TPM_BASE + 85))
1213 #define TPM_DAA_ISSUER_VALIDITY ((TPM_RESULT) (TPM_BASE + 86))
1214 #define TPM_DAA_WRONG_W ((TPM_RESULT) (TPM_BASE + 87))
1215 #define TPM_BAD_HANDLE ((TPM_RESULT) (TPM_BASE + 88))
1216 #define TPM_BAD_DELEGATE ((TPM_RESULT) (TPM_BASE + 89))
1217 #define TPM_BADCONTEXT ((TPM_RESULT) (TPM_BASE + 90))
1218 #define TPM_TOOMANYCONTEXTS ((TPM_RESULT) (TPM_BASE + 91))
1219 #define TPM_MA_TICKET_SIGNATURE ((TPM_RESULT) (TPM_BASE + 92))
1220 #define TPM_MA_DESTINATION ((TPM_RESULT) (TPM_BASE + 93))
1221 #define TPM_MA_SOURCE ((TPM_RESULT) (TPM_BASE + 94))
1222 #define TPM_MA_AUTHORITY ((TPM_RESULT) (TPM_BASE + 95))
1223 #define TPM_PERMANENTEK ((TPM_RESULT) (TPM_BASE + 97))
1224 #define TPM_BAD_SIGNATURE ((TPM_RESULT) (TPM_BASE + 98))
1225 #define TPM_NOCONTEXTSPACE ((TPM_RESULT) (TPM_BASE + 99))
1226
1227 #define TPM_RETRY ((TPM_RESULT) (TPM_BASE + TPM_NON_FATAL))
1228 #define TPM_NEEDS_SELFTEST ((TPM_RESULT) (TPM_BASE + TPM_NON_FATAL + 1))
1229 #define TPM_DOING_SELFTEST ((TPM_RESULT) (TPM_BASE + TPM_NON_FATAL + 2))
1230 #define TPM_DEFEND_LOCK_RUNNING ((TPM_RESULT) (TPM_BASE + TPM_NON_FATAL + 3))
1231
1232 //
1233 // Part 2, section 17: Ordinals
1234 //
1235 // Ordinals are 32 bit values. The upper byte contains values that serve as
1236 // flag indicators, the next byte contains values indicating what committee
1237 // designated the ordinal, and the final two bytes contain the Command
1238 // Ordinal Index.
1239 // 3 2 1
1240 // 1 0 9 8 7 6 5 4 3 2 1 0 9 8 7 6 5 4 3 2 1 0 9 8 7 6 5 4 3 2 1 0
1241 // +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
1242 // |P|C|V| Reserved| Purview | Command Ordinal Index |
1243 // +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
1244 //
1245 // Where:
1246 //
1247 // * P is Protected/Unprotected command. When 0 the command is a Protected
1248 // command, when 1 the command is an Unprotected command.
1249 //
1250 // * C is Non-Connection/Connection related command. When 0 this command
1251 // passes through to either the protected (TPM) or unprotected (TSS)
1252 // components.
1253 //
1254 // * V is TPM/Vendor command. When 0 the command is TPM defined, when 1 the
1255 // command is vendor defined.
1256 //
1257 // * All reserved area bits are set to 0.
1258 //
1259
1260 #define TPM_ORD_ActivateIdentity ((TPM_COMMAND_CODE) 0x0000007A)
1261 #define TPM_ORD_AuthorizeMigrationKey ((TPM_COMMAND_CODE) 0x0000002B)
1262 #define TPM_ORD_CertifyKey ((TPM_COMMAND_CODE) 0x00000032)
1263 #define TPM_ORD_CertifyKey2 ((TPM_COMMAND_CODE) 0x00000033)
1264 #define TPM_ORD_CertifySelfTest ((TPM_COMMAND_CODE) 0x00000052)
1265 #define TPM_ORD_ChangeAuth ((TPM_COMMAND_CODE) 0x0000000C)
1266 #define TPM_ORD_ChangeAuthAsymFinish ((TPM_COMMAND_CODE) 0x0000000F)
1267 #define TPM_ORD_ChangeAuthAsymStart ((TPM_COMMAND_CODE) 0x0000000E)
1268 #define TPM_ORD_ChangeAuthOwner ((TPM_COMMAND_CODE) 0x00000010)
1269 #define TPM_ORD_CMK_ApproveMA ((TPM_COMMAND_CODE) 0x0000001D)
1270 #define TPM_ORD_CMK_ConvertMigration ((TPM_COMMAND_CODE) 0x00000024)
1271 #define TPM_ORD_CMK_CreateBlob ((TPM_COMMAND_CODE) 0x0000001B)
1272 #define TPM_ORD_CMK_CreateKey ((TPM_COMMAND_CODE) 0x00000013)
1273 #define TPM_ORD_CMK_CreateTicket ((TPM_COMMAND_CODE) 0x00000012)
1274 #define TPM_ORD_CMK_SetRestrictions ((TPM_COMMAND_CODE) 0x0000001C)
1275 #define TPM_ORD_ContinueSelfTest ((TPM_COMMAND_CODE) 0x00000053)
1276 #define TPM_ORD_ConvertMigrationBlob ((TPM_COMMAND_CODE) 0x0000002A)
1277 #define TPM_ORD_CreateCounter ((TPM_COMMAND_CODE) 0x000000DC)
1278 #define TPM_ORD_CreateEndorsementKeyPair ((TPM_COMMAND_CODE) 0x00000078)
1279 #define TPM_ORD_CreateMaintenanceArchive ((TPM_COMMAND_CODE) 0x0000002C)
1280 #define TPM_ORD_CreateMigrationBlob ((TPM_COMMAND_CODE) 0x00000028)
1281 #define TPM_ORD_CreateRevocableEK ((TPM_COMMAND_CODE) 0x0000007F)
1282 #define TPM_ORD_CreateWrapKey ((TPM_COMMAND_CODE) 0x0000001F)
1283 #define TPM_ORD_DAA_JOIN ((TPM_COMMAND_CODE) 0x00000029)
1284 #define TPM_ORD_DAA_SIGN ((TPM_COMMAND_CODE) 0x00000031)
1285 #define TPM_ORD_Delegate_CreateKeyDelegation ((TPM_COMMAND_CODE) 0x000000D4)
1286 #define TPM_ORD_Delegate_CreateOwnerDelegation ((TPM_COMMAND_CODE) 0x000000D5)
1287 #define TPM_ORD_Delegate_LoadOwnerDelegation ((TPM_COMMAND_CODE) 0x000000D8)
1288 #define TPM_ORD_Delegate_Manage ((TPM_COMMAND_CODE) 0x000000D2)
1289 #define TPM_ORD_Delegate_ReadTable ((TPM_COMMAND_CODE) 0x000000DB)
1290 #define TPM_ORD_Delegate_UpdateVerification ((TPM_COMMAND_CODE) 0x000000D1)
1291 #define TPM_ORD_Delegate_VerifyDelegation ((TPM_COMMAND_CODE) 0x000000D6)
1292 #define TPM_ORD_DirRead ((TPM_COMMAND_CODE) 0x0000001A)
1293 #define TPM_ORD_DirWriteAuth ((TPM_COMMAND_CODE) 0x00000019)
1294 #define TPM_ORD_DisableForceClear ((TPM_COMMAND_CODE) 0x0000005E)
1295 #define TPM_ORD_DisableOwnerClear ((TPM_COMMAND_CODE) 0x0000005C)
1296 #define TPM_ORD_DisablePubekRead ((TPM_COMMAND_CODE) 0x0000007E)
1297 #define TPM_ORD_DSAP ((TPM_COMMAND_CODE) 0x00000011)
1298 #define TPM_ORD_EstablishTransport ((TPM_COMMAND_CODE) 0x000000E6)
1299 #define TPM_ORD_EvictKey ((TPM_COMMAND_CODE) 0x00000022)
1300 #define TPM_ORD_ExecuteTransport ((TPM_COMMAND_CODE) 0x000000E7)
1301 #define TPM_ORD_Extend ((TPM_COMMAND_CODE) 0x00000014)
1302 #define TPM_ORD_FieldUpgrade ((TPM_COMMAND_CODE) 0x000000AA)
1303 #define TPM_ORD_FlushSpecific ((TPM_COMMAND_CODE) 0x000000BA)
1304 #define TPM_ORD_ForceClear ((TPM_COMMAND_CODE) 0x0000005D)
1305 #define TPM_ORD_GetAuditDigest ((TPM_COMMAND_CODE) 0x00000085)
1306 #define TPM_ORD_GetAuditDigestSigned ((TPM_COMMAND_CODE) 0x00000086)
1307 #define TPM_ORD_GetAuditEvent ((TPM_COMMAND_CODE) 0x00000082)
1308 #define TPM_ORD_GetAuditEventSigned ((TPM_COMMAND_CODE) 0x00000083)
1309 #define TPM_ORD_GetCapability ((TPM_COMMAND_CODE) 0x00000065)
1310 #define TPM_ORD_GetCapabilityOwner ((TPM_COMMAND_CODE) 0x00000066)
1311 #define TPM_ORD_GetCapabilitySigned ((TPM_COMMAND_CODE) 0x00000064)
1312 #define TPM_ORD_GetOrdinalAuditStatus ((TPM_COMMAND_CODE) 0x0000008C)
1313 #define TPM_ORD_GetPubKey ((TPM_COMMAND_CODE) 0x00000021)
1314 #define TPM_ORD_GetRandom ((TPM_COMMAND_CODE) 0x00000046)
1315 #define TPM_ORD_GetTestResult ((TPM_COMMAND_CODE) 0x00000054)
1316 #define TPM_ORD_GetTicks ((TPM_COMMAND_CODE) 0x000000F1)
1317 #define TPM_ORD_IncrementCounter ((TPM_COMMAND_CODE) 0x000000DD)
1318 #define TPM_ORD_Init ((TPM_COMMAND_CODE) 0x00000097)
1319 #define TPM_ORD_KeyControlOwner ((TPM_COMMAND_CODE) 0x00000023)
1320 #define TPM_ORD_KillMaintenanceFeature ((TPM_COMMAND_CODE) 0x0000002E)
1321 #define TPM_ORD_LoadAuthContext ((TPM_COMMAND_CODE) 0x000000B7)
1322 #define TPM_ORD_LoadContext ((TPM_COMMAND_CODE) 0x000000B9)
1323 #define TPM_ORD_LoadKey ((TPM_COMMAND_CODE) 0x00000020)
1324 #define TPM_ORD_LoadKey2 ((TPM_COMMAND_CODE) 0x00000041)
1325 #define TPM_ORD_LoadKeyContext ((TPM_COMMAND_CODE) 0x000000B5)
1326 #define TPM_ORD_LoadMaintenanceArchive ((TPM_COMMAND_CODE) 0x0000002D)
1327 #define TPM_ORD_LoadManuMaintPub ((TPM_COMMAND_CODE) 0x0000002F)
1328 #define TPM_ORD_MakeIdentity ((TPM_COMMAND_CODE) 0x00000079)
1329 #define TPM_ORD_MigrateKey ((TPM_COMMAND_CODE) 0x00000025)
1330 #define TPM_ORD_NV_DefineSpace ((TPM_COMMAND_CODE) 0x000000CC)
1331 #define TPM_ORD_NV_ReadValue ((TPM_COMMAND_CODE) 0x000000CF)
1332 #define TPM_ORD_NV_ReadValueAuth ((TPM_COMMAND_CODE) 0x000000D0)
1333 #define TPM_ORD_NV_WriteValue ((TPM_COMMAND_CODE) 0x000000CD)
1334 #define TPM_ORD_NV_WriteValueAuth ((TPM_COMMAND_CODE) 0x000000CE)
1335 #define TPM_ORD_OIAP ((TPM_COMMAND_CODE) 0x0000000A)
1336 #define TPM_ORD_OSAP ((TPM_COMMAND_CODE) 0x0000000B)
1337 #define TPM_ORD_OwnerClear ((TPM_COMMAND_CODE) 0x0000005B)
1338 #define TPM_ORD_OwnerReadInternalPub ((TPM_COMMAND_CODE) 0x00000081)
1339 #define TPM_ORD_OwnerReadPubek ((TPM_COMMAND_CODE) 0x0000007D)
1340 #define TPM_ORD_OwnerSetDisable ((TPM_COMMAND_CODE) 0x0000006E)
1341 #define TPM_ORD_PCR_Reset ((TPM_COMMAND_CODE) 0x000000C8)
1342 #define TPM_ORD_PcrRead ((TPM_COMMAND_CODE) 0x00000015)
1343 #define TPM_ORD_PhysicalDisable ((TPM_COMMAND_CODE) 0x00000070)
1344 #define TPM_ORD_PhysicalEnable ((TPM_COMMAND_CODE) 0x0000006F)
1345 #define TPM_ORD_PhysicalSetDeactivated ((TPM_COMMAND_CODE) 0x00000072)
1346 #define TPM_ORD_Quote ((TPM_COMMAND_CODE) 0x00000016)
1347 #define TPM_ORD_Quote2 ((TPM_COMMAND_CODE) 0x0000003E)
1348 #define TPM_ORD_ReadCounter ((TPM_COMMAND_CODE) 0x000000DE)
1349 #define TPM_ORD_ReadManuMaintPub ((TPM_COMMAND_CODE) 0x00000030)
1350 #define TPM_ORD_ReadPubek ((TPM_COMMAND_CODE) 0x0000007C)
1351 #define TPM_ORD_ReleaseCounter ((TPM_COMMAND_CODE) 0x000000DF)
1352 #define TPM_ORD_ReleaseCounterOwner ((TPM_COMMAND_CODE) 0x000000E0)
1353 #define TPM_ORD_ReleaseTransportSigned ((TPM_COMMAND_CODE) 0x000000E8)
1354 #define TPM_ORD_Reset ((TPM_COMMAND_CODE) 0x0000005A)
1355 #define TPM_ORD_ResetLockValue ((TPM_COMMAND_CODE) 0x00000040)
1356 #define TPM_ORD_RevokeTrust ((TPM_COMMAND_CODE) 0x00000080)
1357 #define TPM_ORD_SaveAuthContext ((TPM_COMMAND_CODE) 0x000000B6)
1358 #define TPM_ORD_SaveContext ((TPM_COMMAND_CODE) 0x000000B8)
1359 #define TPM_ORD_SaveKeyContext ((TPM_COMMAND_CODE) 0x000000B4)
1360 #define TPM_ORD_SaveState ((TPM_COMMAND_CODE) 0x00000098)
1361 #define TPM_ORD_Seal ((TPM_COMMAND_CODE) 0x00000017)
1362 #define TPM_ORD_Sealx ((TPM_COMMAND_CODE) 0x0000003D)
1363 #define TPM_ORD_SelfTestFull ((TPM_COMMAND_CODE) 0x00000050)
1364 #define TPM_ORD_SetCapability ((TPM_COMMAND_CODE) 0x0000003F)
1365 #define TPM_ORD_SetOperatorAuth ((TPM_COMMAND_CODE) 0x00000074)
1366 #define TPM_ORD_SetOrdinalAuditStatus ((TPM_COMMAND_CODE) 0x0000008D)
1367 #define TPM_ORD_SetOwnerInstall ((TPM_COMMAND_CODE) 0x00000071)
1368 #define TPM_ORD_SetOwnerPointer ((TPM_COMMAND_CODE) 0x00000075)
1369 #define TPM_ORD_SetRedirection ((TPM_COMMAND_CODE) 0x0000009A)
1370 #define TPM_ORD_SetTempDeactivated ((TPM_COMMAND_CODE) 0x00000073)
1371 #define TPM_ORD_SHA1Complete ((TPM_COMMAND_CODE) 0x000000A2)
1372 #define TPM_ORD_SHA1CompleteExtend ((TPM_COMMAND_CODE) 0x000000A3)
1373 #define TPM_ORD_SHA1Start ((TPM_COMMAND_CODE) 0x000000A0)
1374 #define TPM_ORD_SHA1Update ((TPM_COMMAND_CODE) 0x000000A1)
1375 #define TPM_ORD_Sign ((TPM_COMMAND_CODE) 0x0000003C)
1376 #define TPM_ORD_Startup ((TPM_COMMAND_CODE) 0x00000099)
1377 #define TPM_ORD_StirRandom ((TPM_COMMAND_CODE) 0x00000047)
1378 #define TPM_ORD_TakeOwnership ((TPM_COMMAND_CODE) 0x0000000D)
1379 #define TPM_ORD_Terminate_Handle ((TPM_COMMAND_CODE) 0x00000096)
1380 #define TPM_ORD_TickStampBlob ((TPM_COMMAND_CODE) 0x000000F2)
1381 #define TPM_ORD_UnBind ((TPM_COMMAND_CODE) 0x0000001E)
1382 #define TPM_ORD_Unseal ((TPM_COMMAND_CODE) 0x00000018)
1383 #define TSC_ORD_PhysicalPresence ((TPM_COMMAND_CODE) 0x4000000A)
1384 #define TSC_ORD_ResetEstablishmentBit ((TPM_COMMAND_CODE) 0x4000000B)
1385
1386 //
1387 // Part 2, section 18: Context structures
1388 //
1389
1390 //
1391 // Part 2, section 18.1: TPM_CONTEXT_BLOB
1392 //
1393 typedef struct tdTPM_CONTEXT_BLOB {
1394 TPM_STRUCTURE_TAG tag;
1395 TPM_RESOURCE_TYPE resourceType;
1396 TPM_HANDLE handle;
1397 UINT8 label[16];
1398 UINT32 contextCount;
1399 TPM_DIGEST integrityDigest;
1400 UINT32 additionalSize;
1401 UINT8 *additionalData;
1402 UINT32 sensitiveSize;
1403 UINT8 *sensitiveData;
1404 } TPM_CONTEXT_BLOB;
1405
1406 //
1407 // Part 2, section 18.2 TPM_CONTEXT_SENSITIVE
1408 //
1409 typedef struct tdTPM_CONTEXT_SENSITIVE {
1410 TPM_STRUCTURE_TAG tag;
1411 TPM_NONCE contextNonce;
1412 UINT32 internalSize;
1413 UINT8 *internalData;
1414 } TPM_CONTEXT_SENSITIVE;
1415
1416 //
1417 // Part 2, section 19: NV Structures
1418 //
1419
1420 //
1421 // Part 2, section 19.1.1: Required TPM_NV_INDEX values
1422 //
1423 #define TPM_NV_INDEX_LOCK ((UINT32)0xffffffff)
1424 #define TPM_NV_INDEX0 ((UINT32)0x00000000)
1425 #define TPM_NV_INDEX_DIR ((UINT32)0x10000001)
1426 #define TPM_NV_INDEX_EKCert ((UINT32)0x0000f000)
1427 #define TPM_NV_INDEX_TPM_CC ((UINT32)0x0000f001)
1428 #define TPM_NV_INDEX_PlatformCert ((UINT32)0x0000f002)
1429 #define TPM_NV_INDEX_Platform_CC ((UINT32)0x0000f003)
1430 //
1431 // Part 2, section 19.1.2: Reserved Index values
1432 //
1433 #define TPM_NV_INDEX_TSS_BASE ((UINT32)0x00011100)
1434 #define TPM_NV_INDEX_PC_BASE ((UINT32)0x00011200)
1435 #define TPM_NV_INDEX_SERVER_BASE ((UINT32)0x00011300)
1436 #define TPM_NV_INDEX_MOBILE_BASE ((UINT32)0x00011400)
1437 #define TPM_NV_INDEX_PERIPHERAL_BASE ((UINT32)0x00011500)
1438 #define TPM_NV_INDEX_GROUP_RESV_BASE ((UINT32)0x00010000)
1439
1440 //
1441 // The typedefs TPM_NV_PER_ATTRIBUTES (not present in TPM 1.2 Spec. have been added
1442 // and structure fields that were to hold the following values
1443 //
1444 typedef UINT32 TPM_NV_PER_ATTRIBUTES;
1445
1446 //
1447 // Part 2, section 19.2: TPM_NV_ATTRIBUTES
1448 //
1449 #define TPM_NV_PER_READ_STCLEAR (BIT31)
1450 #define TPM_NV_PER_AUTHREAD (BIT18)
1451 #define TPM_NV_PER_OWNERREAD (BIT17)
1452 #define TPM_NV_PER_PPREAD (BIT16)
1453 #define TPM_NV_PER_GLOBALLOCK (BIT15)
1454 #define TPM_NV_PER_WRITE_STCLEAR (BIT14)
1455 #define TPM_NV_PER_WRITEDEFINE (BIT13)
1456 #define TPM_NV_PER_WRITEALL (BIT12)
1457 #define TPM_NV_PER_AUTHWRITE (BIT2)
1458 #define TPM_NV_PER_OWNERWRITE (BIT1)
1459 #define TPM_NV_PER_PPWRITE (BIT0)
1460
1461 typedef struct tdTPM_NV_ATTRIBUTES {
1462 TPM_STRUCTURE_TAG tag;
1463 TPM_NV_PER_ATTRIBUTES attributes;
1464 } TPM_NV_ATTRIBUTES;
1465
1466 //
1467 // Part 2, section 19.3: TPM_NV_DATA_PUBLIC
1468 //
1469 typedef struct tdTPM_NV_DATA_PUBLIC {
1470 TPM_STRUCTURE_TAG tag;
1471 TPM_NV_INDEX nvIndex;
1472 TPM_PCR_INFO_SHORT pcrInfoRead;
1473 TPM_PCR_INFO_SHORT pcrInfoWrite;
1474 TPM_NV_ATTRIBUTES permission;
1475 BOOLEAN bReadSTClear;
1476 BOOLEAN bWriteSTClear;
1477 BOOLEAN bWriteDefine;
1478 UINT32 dataSize;
1479 } TPM_NV_DATA_PUBLIC;
1480
1481 //
1482 // Part 2, section 20: Delegate Structures
1483 //
1484
1485 //
1486 // Part 2, section 20.2: Delegate Definitions
1487 //
1488 #define TPM_DEL_OWNER_BITS ((UINT32)0x00000001)
1489 #define TPM_DEL_KEY_BITS ((UINT32)0x00000002)
1490
1491 typedef struct tdTPM_DELEGATIONS {
1492 TPM_STRUCTURE_TAG tag;
1493 UINT32 delegateType;
1494 UINT32 per1;
1495 UINT32 per2;
1496 } TPM_DELEGATIONS;
1497
1498 //
1499 // Part 2, section 20.2.1: Owner Permission Settings
1500 //
1501 #define TPM_DELEGATE_SetOrdinalAuditStatus (BIT30)
1502 #define TPM_DELEGATE_DirWriteAuth (BIT29)
1503 #define TPM_DELEGATE_CMK_ApproveMA (BIT28)
1504 #define TPM_DELEGATE_CMK_CreateTicket (BIT26)
1505 #define TPM_DELEGATE_Delegate_LoadOwnerDelegation (BIT24)
1506 #define TPM_DELEGATE_DAA_Join (BIT23)
1507 #define TPM_DELEGATE_AuthorizeMigrationKey (BIT22)
1508 #define TPM_DELEGATE_CreateMaintenanceArchive (BIT21)
1509 #define TPM_DELEGATE_LoadMaintenanceArchive (BIT20)
1510 #define TPM_DELEGATE_KillMaintenanceFeature (BIT19)
1511 #define TPM_DELEGATE_OwnerReadInteralPub (BIT18)
1512 #define TPM_DELEGATE_ResetLockValue (BIT17)
1513 #define TPM_DELEGATE_OwnerClear (BIT16)
1514 #define TPM_DELEGATE_DisableOwnerClear (BIT15)
1515 #define TPM_DELEGATE_OwnerSetDisable (BIT13)
1516 #define TPM_DELEGATE_SetCapability (BIT12)
1517 #define TPM_DELEGATE_MakeIdentity (BIT11)
1518 #define TPM_DELEGATE_ActivateIdentity (BIT10)
1519 #define TPM_DELEGATE_OwnerReadPubek (BIT9)
1520 #define TPM_DELEGATE_DisablePubekRead (BIT8)
1521 #define TPM_DELEGATE_SetRedirection (BIT7)
1522 #define TPM_DELEGATE_FieldUpgrade (BIT6)
1523 #define TPM_DELEGATE_Delegate_UpdateVerification (BIT5)
1524 #define TPM_DELEGATE_CreateCounter (BIT4)
1525 #define TPM_DELEGATE_ReleaseCounterOwner (BIT3)
1526 #define TPM_DELEGATE_DelegateManage (BIT2)
1527 #define TPM_DELEGATE_Delegate_CreateOwnerDelegation (BIT1)
1528 #define TPM_DELEGATE_DAA_Sign (BIT0)
1529
1530 //
1531 // Part 2, section 20.2.3: Key Permission settings
1532 //
1533 #define TPM_KEY_DELEGATE_CMK_ConvertMigration (BIT28)
1534 #define TPM_KEY_DELEGATE_TickStampBlob (BIT27)
1535 #define TPM_KEY_DELEGATE_ChangeAuthAsymStart (BIT26)
1536 #define TPM_KEY_DELEGATE_ChangeAuthAsymFinish (BIT25)
1537 #define TPM_KEY_DELEGATE_CMK_CreateKey (BIT24)
1538 #define TPM_KEY_DELEGATE_MigrateKey (BIT23)
1539 #define TPM_KEY_DELEGATE_LoadKey2 (BIT22)
1540 #define TPM_KEY_DELEGATE_EstablishTransport (BIT21)
1541 #define TPM_KEY_DELEGATE_ReleaseTransportSigned (BIT20)
1542 #define TPM_KEY_DELEGATE_Quote2 (BIT19)
1543 #define TPM_KEY_DELEGATE_Sealx (BIT18)
1544 #define TPM_KEY_DELEGATE_MakeIdentity (BIT17)
1545 #define TPM_KEY_DELEGATE_ActivateIdentity (BIT16)
1546 #define TPM_KEY_DELEGATE_GetAuditDigestSigned (BIT15)
1547 #define TPM_KEY_DELEGATE_Sign (BIT14)
1548 #define TPM_KEY_DELEGATE_CertifyKey2 (BIT13)
1549 #define TPM_KEY_DELEGATE_CertifyKey (BIT12)
1550 #define TPM_KEY_DELEGATE_CreateWrapKey (BIT11)
1551 #define TPM_KEY_DELEGATE_CMK_CreateBlob (BIT10)
1552 #define TPM_KEY_DELEGATE_CreateMigrationBlob (BIT9)
1553 #define TPM_KEY_DELEGATE_ConvertMigrationBlob (BIT8)
1554 #define TPM_KEY_DELEGATE_CreateKeyDelegation (BIT7)
1555 #define TPM_KEY_DELEGATE_ChangeAuth (BIT6)
1556 #define TPM_KEY_DELEGATE_GetPubKey (BIT5)
1557 #define TPM_KEY_DELEGATE_UnBind (BIT4)
1558 #define TPM_KEY_DELEGATE_Quote (BIT3)
1559 #define TPM_KEY_DELEGATE_Unseal (BIT2)
1560 #define TPM_KEY_DELEGATE_Seal (BIT1)
1561 #define TPM_KEY_DELEGATE_LoadKey (BIT0)
1562
1563 //
1564 // Part 2, section 20.3: TPM_FAMILY_FLAGS
1565 //
1566 #define TPM_DELEGATE_ADMIN_LOCK (BIT1)
1567 #define TPM_FAMFLAG_ENABLE (BIT0)
1568
1569 //
1570 // Part 2, section 20.4: TPM_FAMILY_LABEL
1571 //
1572 typedef struct tdTPM_FAMILY_LABEL {
1573 UINT8 label;
1574 } TPM_FAMILY_LABEL;
1575
1576 //
1577 // Part 2, section 20.5: TPM_FAMILY_TABLE_ENTRY
1578 //
1579 typedef struct tdTPM_FAMILY_TABLE_ENTRY {
1580 TPM_STRUCTURE_TAG tag;
1581 TPM_FAMILY_LABEL label;
1582 TPM_FAMILY_ID familyID;
1583 TPM_FAMILY_VERIFICATION verificationCount;
1584 TPM_FAMILY_FLAGS flags;
1585 } TPM_FAMILY_TABLE_ENTRY;
1586
1587 //
1588 // Part 2, section 20.6: TPM_FAMILY_TABLE
1589 //
1590 #define TPM_NUM_FAMILY_TABLE_ENTRY_MIN 8
1591
1592 typedef struct tdTPM_FAMILY_TABLE{
1593 TPM_FAMILY_TABLE_ENTRY famTableRow[TPM_NUM_FAMILY_TABLE_ENTRY_MIN];
1594 } TPM_FAMILY_TABLE;
1595
1596 //
1597 // Part 2, section 20.7: TPM_DELEGATE_LABEL
1598 //
1599 typedef struct tdTPM_DELEGATE_LABEL {
1600 UINT8 label;
1601 } TPM_DELEGATE_LABEL;
1602
1603 //
1604 // Part 2, section 20.8: TPM_DELEGATE_PUBLIC
1605 //
1606 typedef struct tdTPM_DELEGATE_PUBLIC {
1607 TPM_STRUCTURE_TAG tag;
1608 TPM_DELEGATE_LABEL label;
1609 TPM_PCR_INFO_SHORT pcrInfo;
1610 TPM_DELEGATIONS permissions;
1611 TPM_FAMILY_ID familyID;
1612 TPM_FAMILY_VERIFICATION verificationCount;
1613 } TPM_DELEGATE_PUBLIC;
1614
1615 //
1616 // Part 2, section 20.9: TPM_DELEGATE_TABLE_ROW
1617 //
1618 typedef struct tdTPM_DELEGATE_TABLE_ROW {
1619 TPM_STRUCTURE_TAG tag;
1620 TPM_DELEGATE_PUBLIC pub;
1621 TPM_SECRET authValue;
1622 } TPM_DELEGATE_TABLE_ROW;
1623
1624 //
1625 // Part 2, section 20.10: TPM_DELEGATE_TABLE
1626 //
1627 #define TPM_NUM_DELEGATE_TABLE_ENTRY_MIN 2
1628
1629 typedef struct tdTPM_DELEGATE_TABLE{
1630 TPM_DELEGATE_TABLE_ROW delRow[TPM_NUM_DELEGATE_TABLE_ENTRY_MIN];
1631 } TPM_DELEGATE_TABLE;
1632
1633 //
1634 // Part 2, section 20.11: TPM_DELEGATE_SENSITIVE
1635 //
1636 typedef struct tdTPM_DELEGATE_SENSITIVE {
1637 TPM_STRUCTURE_TAG tag;
1638 TPM_SECRET authValue;
1639 } TPM_DELEGATE_SENSITIVE;
1640
1641 //
1642 // Part 2, section 20.12: TPM_DELEGATE_OWNER_BLOB
1643 //
1644 typedef struct tdTPM_DELEGATE_OWNER_BLOB {
1645 TPM_STRUCTURE_TAG tag;
1646 TPM_DELEGATE_PUBLIC pub;
1647 TPM_DIGEST integrityDigest;
1648 UINT32 additionalSize;
1649 UINT8 *additionalArea;
1650 UINT32 sensitiveSize;
1651 UINT8 *sensitiveArea;
1652 } TPM_DELEGATE_OWNER_BLOB;
1653
1654 //
1655 // Part 2, section 20.13: TTPM_DELEGATE_KEY_BLOB
1656 //
1657 typedef struct tdTPM_DELEGATE_KEY_BLOB {
1658 TPM_STRUCTURE_TAG tag;
1659 TPM_DELEGATE_PUBLIC pub;
1660 TPM_DIGEST integrityDigest;
1661 TPM_DIGEST pubKeyDigest;
1662 UINT32 additionalSize;
1663 UINT8 *additionalArea;
1664 UINT32 sensitiveSize;
1665 UINT8 *sensitiveArea;
1666 } TPM_DELEGATE_KEY_BLOB;
1667
1668 //
1669 // Part 2, section 20.14: TPM_FAMILY_OPERATION Values
1670 //
1671 #define TPM_FAMILY_CREATE ((UINT32)0x00000001)
1672 #define TPM_FAMILY_ENABLE ((UINT32)0x00000002)
1673 #define TPM_FAMILY_ADMIN ((UINT32)0x00000003)
1674 #define TPM_FAMILY_INVALIDATE ((UINT32)0x00000004)
1675
1676 //
1677 // Part 2, section 21.1: TPM_CAPABILITY_AREA for GetCapability
1678 //
1679 #define TPM_CAP_ORD ((TPM_CAPABILITY_AREA) 0x00000001)
1680 #define TPM_CAP_ALG ((TPM_CAPABILITY_AREA) 0x00000002)
1681 #define TPM_CAP_PID ((TPM_CAPABILITY_AREA) 0x00000003)
1682 #define TPM_CAP_FLAG ((TPM_CAPABILITY_AREA) 0x00000004)
1683 #define TPM_CAP_PROPERTY ((TPM_CAPABILITY_AREA) 0x00000005)
1684 #define TPM_CAP_VERSION ((TPM_CAPABILITY_AREA) 0x00000006)
1685 #define TPM_CAP_KEY_HANDLE ((TPM_CAPABILITY_AREA) 0x00000007)
1686 #define TPM_CAP_CHECK_LOADED ((TPM_CAPABILITY_AREA) 0x00000008)
1687 #define TPM_CAP_SYM_MODE ((TPM_CAPABILITY_AREA) 0x00000009)
1688 #define TPM_CAP_KEY_STATUS ((TPM_CAPABILITY_AREA) 0x0000000C)
1689 #define TPM_CAP_NV_LIST ((TPM_CAPABILITY_AREA) 0x0000000D)
1690 #define TPM_CAP_MFR ((TPM_CAPABILITY_AREA) 0x00000010)
1691 #define TPM_CAP_NV_INDEX ((TPM_CAPABILITY_AREA) 0x00000011)
1692 #define TPM_CAP_TRANS_ALG ((TPM_CAPABILITY_AREA) 0x00000012)
1693 #define TPM_CAP_HANDLE ((TPM_CAPABILITY_AREA) 0x00000014)
1694 #define TPM_CAP_TRANS_ES ((TPM_CAPABILITY_AREA) 0x00000015)
1695 #define TPM_CAP_AUTH_ENCRYPT ((TPM_CAPABILITY_AREA) 0x00000017)
1696 #define TPM_CAP_SELECT_SIZE ((TPM_CAPABILITY_AREA) 0x00000018)
1697 #define TPM_CAP_VERSION_VAL ((TPM_CAPABILITY_AREA) 0x0000001A)
1698
1699 #define TPM_CAP_FLAG_PERMANENT ((TPM_CAPABILITY_AREA) 0x00000108)
1700 #define TPM_CAP_FLAG_VOLATILE ((TPM_CAPABILITY_AREA) 0x00000109)
1701
1702 //
1703 // Part 2, section 21.2: CAP_PROPERTY Subcap values for GetCapability
1704 //
1705 #define TPM_CAP_PROP_PCR ((TPM_CAPABILITY_AREA) 0x00000101)
1706 #define TPM_CAP_PROP_DIR ((TPM_CAPABILITY_AREA) 0x00000102)
1707 #define TPM_CAP_PROP_MANUFACTURER ((TPM_CAPABILITY_AREA) 0x00000103)
1708 #define TPM_CAP_PROP_KEYS ((TPM_CAPABILITY_AREA) 0x00000104)
1709 #define TPM_CAP_PROP_MIN_COUNTER ((TPM_CAPABILITY_AREA) 0x00000107)
1710 #define TPM_CAP_PROP_AUTHSESS ((TPM_CAPABILITY_AREA) 0x0000010A)
1711 #define TPM_CAP_PROP_TRANSESS ((TPM_CAPABILITY_AREA) 0x0000010B)
1712 #define TPM_CAP_PROP_COUNTERS ((TPM_CAPABILITY_AREA) 0x0000010C)
1713 #define TPM_CAP_PROP_MAX_AUTHSESS ((TPM_CAPABILITY_AREA) 0x0000010D)
1714 #define TPM_CAP_PROP_MAX_TRANSESS ((TPM_CAPABILITY_AREA) 0x0000010E)
1715 #define TPM_CAP_PROP_MAX_COUNTERS ((TPM_CAPABILITY_AREA) 0x0000010F)
1716 #define TPM_CAP_PROP_MAX_KEYS ((TPM_CAPABILITY_AREA) 0x00000110)
1717 #define TPM_CAP_PROP_OWNER ((TPM_CAPABILITY_AREA) 0x00000111)
1718 #define TPM_CAP_PROP_CONTEXT ((TPM_CAPABILITY_AREA) 0x00000112)
1719 #define TPM_CAP_PROP_MAX_CONTEXT ((TPM_CAPABILITY_AREA) 0x00000113)
1720 #define TPM_CAP_PROP_FAMILYROWS ((TPM_CAPABILITY_AREA) 0x00000114)
1721 #define TPM_CAP_PROP_TIS_TIMEOUT ((TPM_CAPABILITY_AREA) 0x00000115)
1722 #define TPM_CAP_PROP_STARTUP_EFFECT ((TPM_CAPABILITY_AREA) 0x00000116)
1723 #define TPM_CAP_PROP_DELEGATE_ROW ((TPM_CAPABILITY_AREA) 0x00000117)
1724 #define TPM_CAP_PROP_DAA_MAX ((TPM_CAPABILITY_AREA) 0x00000119)
1725 #define CAP_PROP_SESSION_DAA ((TPM_CAPABILITY_AREA) 0x0000011A)
1726 #define TPM_CAP_PROP_CONTEXT_DIST ((TPM_CAPABILITY_AREA) 0x0000011B)
1727 #define TPM_CAP_PROP_DAA_INTERRUPT ((TPM_CAPABILITY_AREA) 0x0000011C)
1728 #define TPM_CAP_PROP_SESSIONS ((TPM_CAPABILITY_AREA) 0x0000011D)
1729 #define TPM_CAP_PROP_MAX_SESSIONS ((TPM_CAPABILITY_AREA) 0x0000011E)
1730 #define TPM_CAP_PROP_CMK_RESTRICTION ((TPM_CAPABILITY_AREA) 0x0000011F)
1731 #define TPM_CAP_PROP_DURATION ((TPM_CAPABILITY_AREA) 0x00000120)
1732 #define TPM_CAP_PROP_ACTIVE_COUNTER ((TPM_CAPABILITY_AREA) 0x00000122)
1733 #define TPM_CAP_PROP_MAX_NV_AVAILABLE ((TPM_CAPABILITY_AREA) 0x00000123)
1734 #define TPM_CAP_PROP_INPUT_BUFFER ((TPM_CAPABILITY_AREA) 0x00000124)
1735
1736 //
1737 // Part 2, section 21.6: TPM_CAP_VERSION_INFO
1738 // [size_is(vendorSpecificSize)] BYTE* vendorSpecific;
1739 //
1740 typedef struct tdTPM_CAP_VERSION_INFO {
1741 TPM_STRUCTURE_TAG tag;
1742 TPM_VERSION version;
1743 UINT16 specLevel;
1744 UINT8 errataRev;
1745 UINT8 tpmVendorID[4];
1746 UINT16 vendorSpecificSize;
1747 UINT8 *vendorSpecific;
1748 } TPM_CAP_VERSION_INFO;
1749
1750 //
1751 // Part 2, section 22: DAA Structures
1752 //
1753
1754 //
1755 // Part 2, section 22.1: Size definitions
1756 //
1757 #define TPM_DAA_SIZE_r0 (43)
1758 #define TPM_DAA_SIZE_r1 (43)
1759 #define TPM_DAA_SIZE_r2 (128)
1760 #define TPM_DAA_SIZE_r3 (168)
1761 #define TPM_DAA_SIZE_r4 (219)
1762 #define TPM_DAA_SIZE_NT (20)
1763 #define TPM_DAA_SIZE_v0 (128)
1764 #define TPM_DAA_SIZE_v1 (192)
1765 #define TPM_DAA_SIZE_NE (256)
1766 #define TPM_DAA_SIZE_w (256)
1767 #define TPM_DAA_SIZE_issuerModulus (256)
1768 //
1769 // Part 2, section 22.2: Constant definitions
1770 //
1771 #define TPM_DAA_power0 (104)
1772 #define TPM_DAA_power1 (1024)
1773
1774 //
1775 // Part 2, section 22.3: TPM_DAA_ISSUER
1776 //
1777 typedef struct tdTPM_DAA_ISSUER {
1778 TPM_STRUCTURE_TAG tag;
1779 TPM_DIGEST DAA_digest_R0;
1780 TPM_DIGEST DAA_digest_R1;
1781 TPM_DIGEST DAA_digest_S0;
1782 TPM_DIGEST DAA_digest_S1;
1783 TPM_DIGEST DAA_digest_n;
1784 TPM_DIGEST DAA_digest_gamma;
1785 UINT8 DAA_generic_q[26];
1786 } TPM_DAA_ISSUER;
1787
1788 //
1789 // Part 2, section 22.4: TPM_DAA_TPM
1790 //
1791 typedef struct tdTPM_DAA_TPM {
1792 TPM_STRUCTURE_TAG tag;
1793 TPM_DIGEST DAA_digestIssuer;
1794 TPM_DIGEST DAA_digest_v0;
1795 TPM_DIGEST DAA_digest_v1;
1796 TPM_DIGEST DAA_rekey;
1797 UINT32 DAA_count;
1798 } TPM_DAA_TPM;
1799
1800 //
1801 // Part 2, section 22.5: TPM_DAA_CONTEXT
1802 //
1803 typedef struct tdTPM_DAA_CONTEXT {
1804 TPM_STRUCTURE_TAG tag;
1805 TPM_DIGEST DAA_digestContext;
1806 TPM_DIGEST DAA_digest;
1807 TPM_DAA_CONTEXT_SEED DAA_contextSeed;
1808 UINT8 DAA_scratch[256];
1809 UINT8 DAA_stage;
1810 } TPM_DAA_CONTEXT;
1811
1812 //
1813 // Part 2, section 22.6: TPM_DAA_JOINDATA
1814 //
1815 typedef struct tdTPM_DAA_JOINDATA {
1816 UINT8 DAA_join_u0[128];
1817 UINT8 DAA_join_u1[138];
1818 TPM_DIGEST DAA_digest_n0;
1819 } TPM_DAA_JOINDATA;
1820
1821 //
1822 // Part 2, section 22.8: TPM_DAA_BLOB
1823 //
1824 typedef struct tdTPM_DAA_BLOB {
1825 TPM_STRUCTURE_TAG tag;
1826 TPM_RESOURCE_TYPE resourceType;
1827 UINT8 label[16];
1828 TPM_DIGEST blobIntegrity;
1829 UINT32 additionalSize;
1830 UINT8 *additionalData;
1831 UINT32 sensitiveSize;
1832 UINT8 *sensitiveData;
1833 } TPM_DAA_BLOB;
1834
1835 //
1836 // Part 2, section 22.9: TPM_DAA_SENSITIVE
1837 //
1838 typedef struct tdTPM_DAA_SENSITIVE {
1839 TPM_STRUCTURE_TAG tag;
1840 UINT32 internalSize;
1841 UINT8 *internalData;
1842 } TPM_DAA_SENSITIVE;
1843
1844
1845 //
1846 // Part 2, section 23: Redirection
1847 //
1848
1849 //
1850 // Part 2 section 23.1: TPM_REDIR_COMMAND
1851 // This section defines exactly one value but does not
1852 // give it a name. The definition of TPM_SetRedirection in Part3
1853 // refers to exactly one name but does not give its value. We join
1854 // them here.
1855 //
1856 #define TPM_REDIR_GPIO (0x00000001)
1857
1858 //
1859 // TPM Command & Response Headers defined in Part 3
1860 //
1861 typedef struct tdTPM_RQU_COMMAND_HDR {
1862 TPM_STRUCTURE_TAG tag;
1863 UINT32 paramSize;
1864 TPM_COMMAND_CODE ordinal;
1865 } TPM_RQU_COMMAND_HDR;
1866
1867 typedef struct tdTPM_RSP_COMMAND_HDR {
1868 TPM_STRUCTURE_TAG tag;
1869 UINT32 paramSize;
1870 TPM_RESULT returnCode;
1871 } TPM_RSP_COMMAND_HDR;
1872
1873 #pragma pack ()
1874
1875 #endif
EFI Development Kit II mirror for PVE