projects / mirror_edk2.git / blame
| Commit | Line | Data |
|---|---|---|
| 8069d49e LG |
1 | /** \r |
| 2 | @file \r | |
| 267669ba | 3 | TPM Specification data structures (TCG TPM Specification Version 1.2 Revision 94)\r |
| 267669ba LG |
4 | See http://trustedcomputinggroup.org for latest specification updates\r |
| 5 | \r | |
| 8069d49e LG |
6 | Copyright (c) 2006 - 2007, Intel Corporation\r |
| 7 | All rights reserved. This program and the accompanying materials \r | |
| 8 | are licensed and made available under the terms and conditions of the BSD License \r | |
| 9 | which accompanies this distribution. The full text of the license may be found at \r | |
| 10 | http://opensource.org/licenses/bsd-license.php \r | |
| 11 | \r | |
| 12 | THE PROGRAM IS DISTRIBUTED UNDER THE BSD LICENSE ON AN "AS IS" BASIS, \r | |
| 13 | WITHOUT WARRANTIES OR REPRESENTATIONS OF ANY KIND, EITHER EXPRESS OR IMPLIED. \r | |
| 14 | **/\r | |
| 15 | \r | |
| 267669ba LG |
16 | \r |
| 17 | #ifndef _TPM12_H_\r | |
| 18 | #define _TPM12_H_\r | |
| 19 | \r | |
| 20 | //\r | |
| 21 | // The start of TPM return codes\r | |
| 22 | //\r | |
| 23 | #define TPM_BASE (EFI_MAX_BIT + (EFI_MAX_BIT >> 1))\r | |
| 24 | \r | |
| 25 | //\r | |
| 26 | // Structures are all packed on 1-byte alignment\r | |
| 27 | //\r | |
| 28 | \r | |
| 29 | #pragma pack (push)\r | |
| 30 | #pragma pack (1)\r | |
| 31 | \r | |
| 32 | //\r | |
| 33 | // Part 2, section 2.2: Basic types & Helper redefinitions\r | |
| 34 | //\r | |
| 35 | typedef UINT8 TPM_AUTH_DATA_USAGE;\r | |
| 36 | typedef UINT8 TPM_PAYLOAD_TYPE;\r | |
| 37 | typedef UINT8 TPM_VERSION_BYTE;\r | |
| 38 | typedef UINT16 TPM_TAG;\r | |
| 39 | typedef UINT16 TPM_PROTOCOL_ID;\r | |
| 40 | typedef UINT16 TPM_STARTUP_TYPE;\r | |
| 41 | typedef UINT16 TPM_ENC_SCHEME;\r | |
| 42 | typedef UINT16 TPM_SIG_SCHEME;\r | |
| 43 | typedef UINT16 TPM_MIGRATE_SCHEME;\r | |
| 44 | typedef UINT16 TPM_PHYSICAL_PRESENCE;\r | |
| 45 | typedef UINT16 TPM_ENTITY_TYPE;\r | |
| 46 | typedef UINT16 TPM_KEY_USAGE;\r | |
| 47 | typedef UINT16 TPM_EK_TYPE;\r | |
| 48 | typedef UINT16 TPM_STRUCTURE_TAG;\r | |
| 49 | typedef UINT16 TPM_PLATFORM_SPECIFIC;\r | |
| 50 | typedef UINT32 TPM_COMMAND_CODE;\r | |
| 51 | typedef UINT32 TPM_CAPABILITY_AREA;\r | |
| 52 | typedef UINT32 TPM_KEY_FLAGS;\r | |
| 53 | typedef UINT32 TPM_ALGORITHM_ID;\r | |
| 54 | typedef UINT32 TPM_MODIFIER_INDICATOR;\r | |
| 55 | typedef UINT32 TPM_ACTUAL_COUNT;\r | |
| 56 | typedef UINT32 TPM_TRANSPORT_ATTRIBUTES;\r | |
| 57 | typedef UINT32 TPM_AUTHHANDLE;\r | |
| 58 | typedef UINT32 TPM_DIRINDEX;\r | |
| 59 | typedef UINT32 TPM_KEY_HANDLE;\r | |
| 60 | typedef UINT32 TPM_PCRINDEX;\r | |
| 61 | typedef UINT32 TPM_RESULT;\r | |
| 62 | typedef UINT32 TPM_RESOURCE_TYPE;\r | |
| 63 | typedef UINT32 TPM_KEY_CONTROL;\r | |
| 64 | typedef UINT32 TPM_NV_INDEX;\r | |
| 65 | typedef UINT32 TPM_FAMILY_ID;\r | |
| 66 | typedef UINT32 TPM_FAMILY_VERIFICATION;\r | |
| 67 | typedef UINT32 TPM_STARTUP_EFFECTS;\r | |
| 68 | typedef UINT32 TPM_SYM_MODE;\r | |
| 69 | typedef UINT32 TPM_FAMILY_FLAGS;\r | |
| 70 | typedef UINT32 TPM_DELEGATE_INDEX;\r | |
| 71 | typedef UINT32 TPM_CMK_DELEGATE;\r | |
| 72 | typedef UINT32 TPM_COUNT_ID;\r | |
| 73 | typedef UINT32 TPM_REDIT_COMMAND;\r | |
| 74 | typedef UINT32 TPM_TRANSHANDLE;\r | |
| 75 | typedef UINT32 TPM_HANDLE;\r | |
| 76 | typedef UINT32 TPM_FAMILY_OPERATION;\r | |
| 77 | \r | |
| 78 | //\r | |
| 79 | // Part 2, section 2.2.4: Vendor specific\r | |
| 80 | // The following defines allow for the quick specification of a\r | |
| 81 | // vendor specific item.\r | |
| 82 | //\r | |
| 83 | #define TPM_Vendor_Specific32 ((UINT32) 0x00000400)\r | |
| 84 | #define TPM_Vendor_Specific8 ((UINT8) 0x80)\r | |
| 85 | \r | |
| 86 | //\r | |
| 87 | // Part 2, section 3.1: Structure TAGs\r | |
| 88 | //\r | |
| 89 | #define TPM_TAG_CONTEXTBLOB ((TPM_STRUCTURE_TAG) 0x0001)\r | |
| 90 | #define TPM_TAG_CONTEXT_SENSITIVE ((TPM_STRUCTURE_TAG) 0x0002)\r | |
| 91 | #define TPM_TAG_CONTEXTPOINTER ((TPM_STRUCTURE_TAG) 0x0003)\r | |
| 92 | #define TPM_TAG_CONTEXTLIST ((TPM_STRUCTURE_TAG) 0x0004)\r | |
| 93 | #define TPM_TAG_SIGNINFO ((TPM_STRUCTURE_TAG) 0x0005)\r | |
| 94 | #define TPM_TAG_PCR_INFO_LONG ((TPM_STRUCTURE_TAG) 0x0006)\r | |
| 95 | #define TPM_TAG_PERSISTENT_FLAGS ((TPM_STRUCTURE_TAG) 0x0007)\r | |
| 96 | #define TPM_TAG_VOLATILE_FLAGS ((TPM_STRUCTURE_TAG) 0x0008)\r | |
| 97 | #define TPM_TAG_PERSISTENT_DATA ((TPM_STRUCTURE_TAG) 0x0009)\r | |
| 98 | #define TPM_TAG_VOLATILE_DATA ((TPM_STRUCTURE_TAG) 0x000A)\r | |
| 99 | #define TPM_TAG_SV_DATA ((TPM_STRUCTURE_TAG) 0x000B)\r | |
| 100 | #define TPM_TAG_EK_BLOB ((TPM_STRUCTURE_TAG) 0x000C)\r | |
| 101 | #define TPM_TAG_EK_BLOB_AUTH ((TPM_STRUCTURE_TAG) 0x000D)\r | |
| 102 | #define TPM_TAG_COUNTER_VALUE ((TPM_STRUCTURE_TAG) 0x000E)\r | |
| 103 | #define TPM_TAG_TRANSPORT_INTERNAL ((TPM_STRUCTURE_TAG) 0x000F)\r | |
| 104 | #define TPM_TAG_TRANSPORT_LOG_IN ((TPM_STRUCTURE_TAG) 0x0010)\r | |
| 105 | #define TPM_TAG_TRANSPORT_LOG_OUT ((TPM_STRUCTURE_TAG) 0x0011)\r | |
| 106 | #define TPM_TAG_AUDIT_EVENT_IN ((TPM_STRUCTURE_TAG) 0x0012)\r | |
| 107 | #define TPM_TAG_AUDIT_EVENT_OUT ((TPM_STRUCTURE_TAG) 0x0013)\r | |
| 108 | #define TPM_TAG_CURRENT_TICKS ((TPM_STRUCTURE_TAG) 0x0014)\r | |
| 109 | #define TPM_TAG_KEY ((TPM_STRUCTURE_TAG) 0x0015)\r | |
| 110 | #define TPM_TAG_STORED_DATA12 ((TPM_STRUCTURE_TAG) 0x0016)\r | |
| 111 | #define TPM_TAG_NV_ATTRIBUTES ((TPM_STRUCTURE_TAG) 0x0017)\r | |
| 112 | #define TPM_TAG_NV_DATA_PUBLIC ((TPM_STRUCTURE_TAG) 0x0018)\r | |
| 113 | #define TPM_TAG_NV_DATA_SENSITIVE ((TPM_STRUCTURE_TAG) 0x0019)\r | |
| 114 | #define TPM_TAG_DELEGATIONS ((TPM_STRUCTURE_TAG) 0x001A)\r | |
| 115 | #define TPM_TAG_DELEGATE_PUBLIC ((TPM_STRUCTURE_TAG) 0x001B)\r | |
| 116 | #define TPM_TAG_DELEGATE_TABLE_ROW ((TPM_STRUCTURE_TAG) 0x001C)\r | |
| 117 | #define TPM_TAG_TRANSPORT_AUTH ((TPM_STRUCTURE_TAG) 0x001D)\r | |
| 118 | #define TPM_TAG_TRANSPORT_PUBLIC ((TPM_STRUCTURE_TAG) 0x001E)\r | |
| 119 | #define TPM_TAG_PERMANENT_FLAGS ((TPM_STRUCTURE_TAG) 0x001F)\r | |
| 120 | #define TPM_TAG_STCLEAR_FLAGS ((TPM_STRUCTURE_TAG) 0x0020)\r | |
| 121 | #define TPM_TAG_STANY_FLAGS ((TPM_STRUCTURE_TAG) 0x0021)\r | |
| 122 | #define TPM_TAG_PERMANENT_DATA ((TPM_STRUCTURE_TAG) 0x0022)\r | |
| 123 | #define TPM_TAG_STCLEAR_DATA ((TPM_STRUCTURE_TAG) 0x0023)\r | |
| 124 | #define TPM_TAG_STANY_DATA ((TPM_STRUCTURE_TAG) 0x0024)\r | |
| 125 | #define TPM_TAG_FAMILY_TABLE_ENTRY ((TPM_STRUCTURE_TAG) 0x0025)\r | |
| 126 | #define TPM_TAG_DELEGATE_SENSITIVE ((TPM_STRUCTURE_TAG) 0x0026)\r | |
| 127 | #define TPM_TAG_DELG_KEY_BLOB ((TPM_STRUCTURE_TAG) 0x0027)\r | |
| 128 | #define TPM_TAG_KEY12 ((TPM_STRUCTURE_TAG) 0x0028)\r | |
| 129 | #define TPM_TAG_CERTIFY_INFO2 ((TPM_STRUCTURE_TAG) 0x0029)\r | |
| 130 | #define TPM_TAG_DELEGATE_OWNER_BLOB ((TPM_STRUCTURE_TAG) 0x002A)\r | |
| 131 | #define TPM_TAG_EK_BLOB_ACTIVATE ((TPM_STRUCTURE_TAG) 0x002B)\r | |
| 132 | #define TPM_TAG_DAA_BLOB ((TPM_STRUCTURE_TAG) 0x002C)\r | |
| 133 | #define TPM_TAG_DAA_CONTEXT ((TPM_STRUCTURE_TAG) 0x002D)\r | |
| 134 | #define TPM_TAG_DAA_ENFORCE ((TPM_STRUCTURE_TAG) 0x002E)\r | |
| 135 | #define TPM_TAG_DAA_ISSUER ((TPM_STRUCTURE_TAG) 0x002F)\r | |
| 136 | #define TPM_TAG_CAP_VERSION_INFO ((TPM_STRUCTURE_TAG) 0x0030)\r | |
| 137 | #define TPM_TAG_DAA_SENSITIVE ((TPM_STRUCTURE_TAG) 0x0031)\r | |
| 138 | #define TPM_TAG_DAA_TPM ((TPM_STRUCTURE_TAG) 0x0032)\r | |
| 139 | #define TPM_TAG_CMK_MIGAUTH ((TPM_STRUCTURE_TAG) 0x0033)\r | |
| 140 | #define TPM_TAG_CMK_SIGTICKET ((TPM_STRUCTURE_TAG) 0x0034)\r | |
| 141 | #define TPM_TAG_CMK_MA_APPROVAL ((TPM_STRUCTURE_TAG) 0x0035)\r | |
| 142 | #define TPM_TAG_QUOTE_INFO2 ((TPM_STRUCTURE_TAG) 0x0036)\r | |
| 143 | \r | |
| 144 | //\r | |
| 145 | // Part 2, section 4: TPM Types\r | |
| 146 | //\r | |
| 147 | \r | |
| 148 | //\r | |
| 149 | // Part 2, section 4.1: TPM_RESOURCE_TYPE\r | |
| 150 | //\r | |
| 151 | #define TPM_RT_KEY ((TPM_RESOURCE_TYPE) 0x00000001) // The handle is a key handle and is the result of a LoadKey type operation\r | |
| 152 | #define TPM_RT_AUTH ((TPM_RESOURCE_TYPE) 0x00000002) // The handle is an authorization handle. Auth handles come from TPM_OIAP, TPM_OSAP and TPM_DSAP\r | |
| 153 | #define TPM_RT_HASH ((TPM_RESOURCE_TYPE) 0x00000003) // Reserved for hashes\r | |
| 154 | #define TPM_RT_TRANS ((TPM_RESOURCE_TYPE) 0x00000004) // The handle is for a transport session. Transport handles come from TPM_EstablishTransport\r | |
| 155 | #define TPM_RT_CONTEXT ((TPM_RESOURCE_TYPE) 0x00000005) // Resource wrapped and held outside the TPM using the context save/restore commands\r | |
| 156 | #define TPM_RT_COUNTER ((TPM_RESOURCE_TYPE) 0x00000006) // Reserved for counters\r | |
| 157 | #define TPM_RT_DELEGATE ((TPM_RESOURCE_TYPE) 0x00000007) // The handle is for a delegate row. These are the internal rows held in NV storage by the TPM\r | |
| 158 | #define TPM_RT_DAA_TPM ((TPM_RESOURCE_TYPE) 0x00000008) // The value is a DAA TPM specific blob\r | |
| 159 | #define TPM_RT_DAA_V0 ((TPM_RESOURCE_TYPE) 0x00000009) // The value is a DAA V0 parameter\r | |
| 160 | #define TPM_RT_DAA_V1 ((TPM_RESOURCE_TYPE) 0x0000000A) // The value is a DAA V1 parameter\r | |
| 161 | \r | |
| 162 | //\r | |
| 163 | // Part 2, section 4.2: TPM_PAYLOAD_TYPE\r | |
| 164 | //\r | |
| 165 | #define TPM_PT_ASYM ((TPM_PAYLOAD_TYPE) 0x01) // The entity is an asymmetric key\r | |
| 166 | #define TPM_PT_BIND ((TPM_PAYLOAD_TYPE) 0x02) // The entity is bound data\r | |
| 167 | #define TPM_PT_MIGRATE ((TPM_PAYLOAD_TYPE) 0x03) // The entity is a migration blob\r | |
| 168 | #define TPM_PT_MAINT ((TPM_PAYLOAD_TYPE) 0x04) // The entity is a maintenance blob\r | |
| 169 | #define TPM_PT_SEAL ((TPM_PAYLOAD_TYPE) 0x05) // The entity is sealed data\r | |
| 170 | #define TPM_PT_MIGRATE_RESTRICTED ((TPM_PAYLOAD_TYPE) 0x06) // The entity is a restricted-migration asymmetric key\r | |
| 171 | #define TPM_PT_MIGRATE_EXTERNAL ((TPM_PAYLOAD_TYPE) 0x07) // The entity is a external migratable key\r | |
| 172 | #define TPM_PT_CMK_MIGRATE ((TPM_PAYLOAD_TYPE) 0x08) // The entity is a CMK migratable blob\r | |
| 173 | #define TPM_PT_VENDOR_SPECIFIC ((TPM_PAYLOAD_TYPE) 0x80) // 0x80 - 0xFF Vendor specific payloads\r | |
| 174 | \r | |
| 175 | //\r | |
| 176 | // Part 2, section 4.3: TPM_ENTIRY_TYPE\r | |
| 177 | //\r | |
| 178 | #define TPM_ET_KEYHANDLE ((UINT16) 0x0001) // The entity is a keyHandle or key\r | |
| 179 | #define TPM_ET_OWNER ((UINT16) 0x0002) // The entity is the TPM Owner\r | |
| 180 | #define TPM_ET_DATA ((UINT16) 0x0003) // The entity is some data\r | |
| 181 | #define TPM_ET_SRK ((UINT16) 0x0004) // The entity is the SRK\r | |
| 182 | #define TPM_ET_KEY ((UINT16) 0x0005) // The entity is a key or keyHandle\r | |
| 183 | #define TPM_ET_REVOKE ((UINT16) 0x0006) // The entity is the RevokeTrust value\r | |
| 184 | #define TPM_ET_DEL_OWNER_BLOB ((UINT16) 0x0007) // The entity is a delegate owner blob\r | |
| 185 | #define TPM_ET_DEL_ROW ((UINT16) 0x0008) // The entity is a delegate row\r | |
| 186 | #define TPM_ET_DEL_KEY_BLOB ((UINT16) 0x0009) // The entity is a delegate key blob\r | |
| 187 | #define TPM_ET_COUNTER ((UINT16) 0x000A) // The entity is a counter\r | |
| 188 | #define TPM_ET_NV ((UINT16) 0x000B) // The entity is a NV index\r | |
| 189 | #define TPM_ET_RESERVED_HANDLE ((UINT16) 0x0040) // Reserved. This value avoids collisions with the handle MSB setting.\r | |
| 190 | //\r | |
| 191 | // TPM_ENTITY_TYPE MSB Values: The MSB is used to indicate the ADIP encryption sheme when applicable\r | |
| 192 | //\r | |
| 193 | #define TPM_ET_XOR ((UINT16) 0x0000) // ADIP encryption scheme: XOR\r | |
| 194 | #define TPM_ET_AES128 ((UINT16) 0x0006) // ADIP encryption scheme: AES 128 bits\r | |
| 195 | \r | |
| 196 | //\r | |
| 197 | // Part 2, section 4.4.1: Reserved Key Handles\r | |
| 198 | //\r | |
| 199 | #define TPM_KH_SRK ((TPM_KEY_HANDLE) 0x40000000) // The handle points to the SRK\r | |
| 200 | #define TPM_KH_OWNER ((TPM_KEY_HANDLE) 0x40000001) // The handle points to the TPM Owner\r | |
| 201 | #define TPM_KH_REVOKE ((TPM_KEY_HANDLE) 0x40000002) // The handle points to the RevokeTrust value\r | |
| 202 | #define TPM_KH_TRANSPORT ((TPM_KEY_HANDLE) 0x40000003) // The handle points to the EstablishTransport static authorization\r | |
| 203 | #define TPM_KH_OPERATOR ((TPM_KEY_HANDLE) 0x40000004) // The handle points to the Operator auth\r | |
| 204 | #define TPM_KH_ADMIN ((TPM_KEY_HANDLE) 0x40000005) // The handle points to the delegation administration auth\r | |
| 205 | #define TPM_KH_EK ((TPM_KEY_HANDLE) 0x40000006) // The handle points to the PUBEK, only usable with TPM_OwnerReadInternalPub\r | |
| 206 | \r | |
| 207 | //\r | |
| 208 | // Part 2, section 4.5: TPM_STARTUP_TYPE\r | |
| 209 | //\r | |
| 210 | #define TPM_ST_CLEAR ((TPM_STARTUP_TYPE) 0x0001) // The TPM is starting up from a clean state\r | |
| 211 | #define TPM_ST_STATE ((TPM_STARTUP_TYPE) 0x0002) // The TPM is starting up from a saved state\r | |
| 212 | #define TPM_ST_DEACTIVATED ((TPM_STARTUP_TYPE) 0x0003) // The TPM is to startup and set the deactivated flag to TRUE\r | |
| 213 | \r | |
| 214 | //\r | |
| 215 | // Part 2, section 4.6: TPM_STATUP_EFFECTS\r | |
| 216 | // The table makeup is still an open issue.\r | |
| 217 | //\r | |
| 218 | \r | |
| 219 | //\r | |
| 220 | // Part 2, section 4.7: TPM_PROTOCOL_ID\r | |
| 221 | //\r | |
| 222 | #define TPM_PID_OIAP ((TPM_PROTOCOL_ID) 0x0001) // The OIAP protocol.\r | |
| 223 | #define TPM_PID_OSAP ((TPM_PROTOCOL_ID) 0x0002) // The OSAP protocol.\r | |
| 224 | #define TPM_PID_ADIP ((TPM_PROTOCOL_ID) 0x0003) // The ADIP protocol.\r | |
| 225 | #define TPM_PID_ADCP ((TPM_PROTOCOL_ID) 0x0004) // The ADCP protocol.\r | |
| 226 | #define TPM_PID_OWNER ((TPM_PROTOCOL_ID) 0x0005) // The protocol for taking ownership of a TPM.\r | |
| 227 | #define TPM_PID_DSAP ((TPM_PROTOCOL_ID) 0x0006) // The DSAP protocol\r | |
| 228 | #define TPM_PID_TRANSPORT ((TPM_PROTOCOL_ID) 0x0007) // The transport protocol\r | |
| 229 | \r | |
| 230 | //\r | |
| 231 | // Part 2, section 4.8: TPM_ALGORITHM_ID\r | |
| 232 | // The TPM MUST support the algorithms TPM_ALG_RSA, TPM_ALG_SHA, TPM_ALG_HMAC,\r | |
| 233 | // TPM_ALG_MGF1\r | |
| 234 | //\r | |
| 235 | #define TPM_ALG_RSA ((TPM_ALGORITHM_ID) 0x00000001) // The RSA algorithm.\r | |
| 236 | #define TPM_ALG_DES ((TPM_ALGORITHM_ID) 0x00000002) // The DES algorithm\r | |
| 237 | #define TPM_ALG_3DES ((TPM_ALGORITHM_ID) 0x00000003) // The 3DES algorithm in EDE mode\r | |
| 238 | #define TPM_ALG_SHA ((TPM_ALGORITHM_ID) 0x00000004) // The SHA1 algorithm\r | |
| 239 | #define TPM_ALG_HMAC ((TPM_ALGORITHM_ID) 0x00000005) // The RFC 2104 HMAC algorithm\r | |
| 240 | #define TPM_ALG_AES128 ((TPM_ALGORITHM_ID) 0x00000006) // The AES algorithm, key size 128\r | |
| 241 | #define TPM_ALG_MGF1 ((TPM_ALGORITHM_ID) 0x00000007) // The XOR algorithm using MGF1 to create a string the size of the encrypted block\r | |
| 242 | #define TPM_ALG_AES192 ((TPM_ALGORITHM_ID) 0x00000008) // AES, key size 192\r | |
| 243 | #define TPM_ALG_AES256 ((TPM_ALGORITHM_ID) 0x00000009) // AES, key size 256\r | |
| 244 | #define TPM_ALG_XOR ((TPM_ALGORITHM_ID) 0x0000000A) // XOR using the rolling nonces\r | |
| 245 | \r | |
| 246 | //\r | |
| 247 | // Part 2, section 4.9: TPM_PHYSICAL_PRESENCE\r | |
| 248 | //\r | |
| 249 | #define TPM_PHYSICAL_PRESENCE_HW_DISABLE ((TPM_PHYSICAL_PRESENCE) 0x0200) // Sets the physicalPresenceHWEnable to FALSE\r | |
| 250 | #define TPM_PHYSICAL_PRESENCE_CMD_DISABLE ((TPM_PHYSICAL_PRESENCE) 0x0100) // Sets the physicalPresenceCMDEnable to FALSE\r | |
| 251 | #define TPM_PHYSICAL_PRESENCE_LIFETIME_LOCK ((TPM_PHYSICAL_PRESENCE) 0x0080) // Sets the physicalPresenceLifetimeLock to TRUE\r | |
| 252 | #define TPM_PHYSICAL_PRESENCE_HW_ENABLE ((TPM_PHYSICAL_PRESENCE) 0x0040) // Sets the physicalPresenceHWEnable to TRUE\r | |
| 253 | #define TPM_PHYSICAL_PRESENCE_CMD_ENABLE ((TPM_PHYSICAL_PRESENCE) 0x0020) // Sets the physicalPresenceCMDEnable to TRUE\r | |
| 254 | #define TPM_PHYSICAL_PRESENCE_NOTPRESENT ((TPM_PHYSICAL_PRESENCE) 0x0010) // Sets PhysicalPresence = FALSE\r | |
| 255 | #define TPM_PHYSICAL_PRESENCE_PRESENT ((TPM_PHYSICAL_PRESENCE) 0x0008) // Sets PhysicalPresence = TRUE\r | |
| 256 | #define TPM_PHYSICAL_PRESENCE_LOCK ((TPM_PHYSICAL_PRESENCE) 0x0004) // Sets PhysicalPresenceLock = TRUE\r | |
| 257 | \r | |
| 258 | //\r | |
| 259 | // Part 2, section 4.10: TPM_MIGRATE_SCHEME\r | |
| 260 | //\r | |
| 261 | #define TPM_MS_MIGRATE ((TPM_MIGRATE_SCHEME) 0x0001) // A public key that can be used with all TPM migration commands other than 'ReWrap' mode.\r | |
| 262 | #define TPM_MS_REWRAP ((TPM_MIGRATE_SCHEME) 0x0002) // A public key that can be used for the ReWrap mode of TPM_CreateMigrationBlob.\r | |
| 263 | #define TPM_MS_MAINT ((TPM_MIGRATE_SCHEME) 0x0003) // A public key that can be used for the Maintenance commands\r | |
| 264 | #define TPM_MS_RESTRICT_MIGRATE ((TPM_MIGRATE_SCHEME) 0x0004) // The key is to be migrated to a Migration Authority.\r | |
| 265 | #define TPM_MS_RESTRICT_APPROVE_DOUBLE ((TPM_MIGRATE_SCHEME) 0x0005) // The key is to be migrated to an entity approved by a Migration Authority using double wrapping\r | |
| 266 | \r | |
| 267 | //\r | |
| 268 | // Part 2, section 4.11: TPM_EK_TYPE\r | |
| 269 | //\r | |
| 270 | #define TPM_EK_TYPE_ACTIVATE ((TPM_EK_TYPE) 0x0001) // The blob MUST be TPM_EK_BLOB_ACTIVATE\r | |
| 271 | #define TPM_EK_TYPE_AUTH ((TPM_EK_TYPE) 0x0002) // The blob MUST be TPM_EK_BLOB_AUTH\r | |
| 272 | \r | |
| 273 | //\r | |
| 274 | // Part 2, section 4.12: TPM_PLATFORM_SPECIFIC\r | |
| 275 | //\r | |
| 276 | #define TPM_PS_PC_11 ((TPM_PLATFORM_SPECIFIC) 0x0001) // PC Specific version 1.1\r | |
| 277 | #define TPM_PS_PC_12 ((TPM_PLATFORM_SPECIFIC) 0x0002) // PC Specific version 1.2\r | |
| 278 | #define TPM_PS_PDA_12 ((TPM_PLATFORM_SPECIFIC) 0x0003) // PDA Specific version 1.2\r | |
| 279 | #define TPM_PS_Server_12 ((TPM_PLATFORM_SPECIFIC) 0x0004) // Server Specific version 1.2\r | |
| 280 | #define TPM_PS_Mobile_12 ((TPM_PLATFORM_SPECIFIC) 0x0005) // Mobil Specific version 1.2\r | |
| 281 | \r | |
| 282 | //\r | |
| 283 | // Part 2, section 5: Basic Structures\r | |
| 284 | //\r | |
| 285 | \r | |
| 286 | //\r | |
| 287 | // Part 2, section 5.1: TPM_STRUCT_VER\r | |
| 288 | //\r | |
| 289 | typedef struct tdTPM_STRUCT_VER {\r | |
| 290 | UINT8 major;\r | |
| 291 | UINT8 minor;\r | |
| 292 | UINT8 revMajor;\r | |
| 293 | UINT8 revMinor;\r | |
| 294 | } TPM_STRUCT_VER;\r | |
| 295 | \r | |
| 296 | //\r | |
| 297 | // Part 2, section 5.3: TPM_VERSION\r | |
| 298 | //\r | |
| 299 | typedef struct tdTPM_VERSION {\r | |
| 300 | TPM_VERSION_BYTE major;\r | |
| 301 | TPM_VERSION_BYTE minor;\r | |
| 302 | UINT8 revMajor;\r | |
| 303 | UINT8 revMinor;\r | |
| 304 | } TPM_VERSION;\r | |
| 305 | \r | |
| 306 | //\r | |
| 307 | // Part 2, section 5.4: TPM_DIGEST\r | |
| 308 | //\r | |
| 309 | #define TPM_SHA1_160_HASH_LEN 0x14\r | |
| 310 | #define TPM_SHA1BASED_NONCE_LEN TPM_SHA1_160_HASH_LEN\r | |
| 311 | \r | |
| 312 | typedef struct tdTPM_DIGEST{\r | |
| 313 | UINT8 digest[TPM_SHA1_160_HASH_LEN];\r | |
| 314 | } TPM_DIGEST;\r | |
| 315 | \r | |
| 316 | typedef TPM_DIGEST TPM_CHOSENID_HASH; // This SHALL be the digest of the chosen identityLabel and privacyCA for a new TPM identity.\r | |
| 317 | typedef TPM_DIGEST TPM_COMPOSITE_HASH; // This SHALL be the hash of a list of PCR indexes and PCR values that a key or data is bound to.\r | |
| 318 | typedef TPM_DIGEST TPM_DIRVALUE; // This SHALL be the value of a DIR register\r | |
| 319 | typedef TPM_DIGEST TPM_HMAC;\r | |
| 320 | typedef TPM_DIGEST TPM_PCRVALUE; // The value inside of the PCR\r | |
| 321 | typedef TPM_DIGEST TPM_AUDITDIGEST; // This SHALL be the value of the current internal audit state\r | |
| 322 | typedef TPM_DIGEST TPM_DAA_TPM_SEED; // This SHALL be a random value generated by a TPM immediately after the EK is installed in that TPM, whenever an EK is installed in that TPM\r | |
| 323 | typedef TPM_DIGEST TPM_DAA_CONTEXT_SEED; // This SHALL be a random value\r | |
| 324 | \r | |
| 325 | //\r | |
| 326 | // Part 2, section 5.5: TPM_NONCE\r | |
| 327 | //\r | |
| 328 | typedef struct tdTPM_NONCE{\r | |
| 329 | UINT8 nonce[20];\r | |
| 330 | } TPM_NONCE;\r | |
| 331 | \r | |
| 332 | //\r | |
| 333 | // Part 2, section 5.6: TPM_AUTHDATA\r | |
| 334 | //\r | |
| 335 | typedef UINT8 tdTPM_AUTHDATA[20];\r | |
| 336 | typedef tdTPM_AUTHDATA TPM_AUTHDATA;\r | |
| 337 | typedef TPM_AUTHDATA TPM_SECRET;\r | |
| 338 | typedef TPM_AUTHDATA TPM_ENCAUTH;\r | |
| 339 | \r | |
| 340 | //\r | |
| 341 | // Part 2, section 5.7: TPM_KEY_HANDLE_LIST\r | |
| 342 | // Size of handle is loaded * sizeof(TPM_KEY_HANDLE)\r | |
| 343 | //\r | |
| 344 | typedef struct tdTPM_KEY_HANDLE_LIST {\r | |
| 345 | UINT16 loaded;\r | |
| 346 | TPM_KEY_HANDLE handle[1];\r | |
| 347 | } TPM_KEY_HANDLE_LIST;\r | |
| 348 | \r | |
| 349 | //\r | |
| 350 | // Part 2, section 5.8: TPM_KEY_USAGE values\r | |
| 351 | //\r | |
| 352 | \r | |
| 353 | #define TPM_KEY_SIGNING ((UINT16) 0x0010)\r | |
| 354 | // TPM_KEY_SIGNING SHALL indicate a signing key. The [private] key SHALL be\r | |
| 355 | // used for signing operations, only. This means that it MUST be a leaf of the\r | |
| 356 | // Protected Storage key hierarchy.\r | |
| 357 | \r | |
| 358 | #define TPM_KEY_STORAGE ((UINT16) 0x0011)\r | |
| 359 | // TPM_KEY_STORAGE SHALL indicate a storage key. The key SHALL be used to wrap\r | |
| 360 | // and unwrap other keys in the Protected Storage hierarchy\r | |
| 361 | \r | |
| 362 | #define TPM_KEY_IDENTITY ((UINT16) 0x0012)\r | |
| 363 | // TPM_KEY_IDENTITY SHALL indicate an identity key. The key SHALL be used for\r | |
| 364 | // operations that require a TPM identity, only.\r | |
| 365 | \r | |
| 366 | #define TPM_KEY_AUTHCHANGE ((UINT16) 0x0013)\r | |
| 367 | // TPM_KEY_AUTHCHANGE SHALL indicate an ephemeral key that is in use during\r | |
| 368 | // the ChangeAuthAsym process, only.\r | |
| 369 | \r | |
| 370 | #define TPM_KEY_BIND ((UINT16) 0x0014)\r | |
| 371 | // TPM_KEY_BIND SHALL indicate a key that can be used for TPM_Bind and\r | |
| 372 | // TPM_Unbind operations only.\r | |
| 373 | \r | |
| 374 | #define TPM_KEY_LEGACY ((UINT16) 0x0015)\r | |
| 375 | // TPM_KEY_LEGACY SHALL indicate a key that can perform signing and binding\r | |
| 376 | // operations. The key MAY be used for both signing and binding operations.\r | |
| 377 | // The TPM_KEY_LEGACY key type is to allow for use by applications where both\r | |
| 378 | // signing and encryption operations occur with the same key. The use of this\r | |
| 379 | // key type is not recommended TPM_KEY_MIGRATE 0x0016 This SHALL indicate a\r | |
| 380 | // key in use for TPM_MigrateKey\r | |
| 381 | \r | |
| 382 | #define TPM_KEY_MIGRATE ((UINT16) 0x0016)\r | |
| 383 | // TPM_KEY_MIGRAGE SHALL indicate a key in use for TPM_MigrateKey\r | |
| 384 | \r | |
| 385 | //\r | |
| 386 | // Part 2, section 5.8.1: Encryption/Signature schemes\r | |
| 387 | //\r | |
| 388 | \r | |
| 389 | #define TPM_ES_NONE ((TPM_ENC_SCHEME) 0x0001)\r | |
| 390 | #define TPM_ES_RSAESPKCSv15 ((TPM_ENC_SCHEME) 0x0002)\r | |
| 391 | #define TPM_ES_RSAESOAEP_SHA1_MGF1 ((TPM_ENC_SCHEME) 0x0003)\r | |
| 392 | #define TPM_ES_SYM_CNT ((TPM_ENC_SCHEME) 0x0004)\r | |
| 393 | #define TPM_ES_SYM_OFB ((TPM_ENC_SCHEME) 0x0005)\r | |
| 394 | \r | |
| 395 | #define TPM_SS_NONE ((TPM_SIG_SCHEME) 0x0001)\r | |
| 396 | #define TPM_SS_RSASSAPKCS1v15_SHA1 ((TPM_SIG_SCHEME) 0x0002)\r | |
| 397 | #define TPM_SS_RSASSAPKCS1v15_DER ((TPM_SIG_SCHEME) 0x0003)\r | |
| 398 | #define TPM_SS_RSASSAPKCS1v15_INFO ((TPM_SIG_SCHEME) 0x0004)\r | |
| 399 | \r | |
| 400 | //\r | |
| 401 | // Part 2, section 5.9: TPM_AUTH_DATA_USAGE values\r | |
| 402 | //\r | |
| 403 | #define TPM_AUTH_NEVER ((TPM_AUTH_DATA_USAGE) 0x00)\r | |
| 404 | #define TPM_AUTH_ALWAYS ((TPM_AUTH_DATA_USAGE) 0x01)\r | |
| 405 | #define TPM_AUTH_PRIV_USE_ONLY ((TPM_AUTH_DATA_USAGE) 0x03)\r | |
| 406 | \r | |
| 407 | //\r | |
| 408 | // Part 2, section 5.10: TPM_KEY_FLAGS\r | |
| 409 | //\r | |
| 410 | enum tdTPM_KEY_FLAGS {\r | |
| 411 | redirection = 0x00000001,\r | |
| 412 | migratable = 0x00000002,\r | |
| 413 | isVolatile = 0x00000004,\r | |
| 414 | pcrIgnoredOnRead = 0x00000008,\r | |
| 415 | migrateAuthority = 0x00000010\r | |
| 416 | };\r | |
| 417 | \r | |
| 418 | //\r | |
| 419 | // Part 2, section 5.11: TPM_CHANGEAUTH_VALIDATE\r | |
| 420 | //\r | |
| 421 | typedef struct tdTPM_CHANGEAUTH_VALIDATE {\r | |
| 422 | TPM_SECRET newAuthSecret;\r | |
| 423 | TPM_NONCE n1;\r | |
| 424 | } TPM_CHANGEAUTH_VALIDATE;\r | |
| 425 | \r | |
| 426 | //\r | |
| 427 | // Part 2, section 5.12: TPM_MIGRATIONKEYAUTH\r | |
| 428 | // decalared after section 10 to catch declaration of TPM_PUBKEY\r | |
| 429 | //\r | |
| 430 | // Part 2 section 10.1: TPM_KEY_PARMS\r | |
| 431 | // [size_is(parmSize)] BYTE* parms;\r | |
| 432 | //\r | |
| 433 | typedef struct tdTPM_KEY_PARMS {\r | |
| 434 | TPM_ALGORITHM_ID algorithmID;\r | |
| 435 | TPM_ENC_SCHEME encScheme;\r | |
| 436 | TPM_SIG_SCHEME sigScheme;\r | |
| 437 | UINT32 parmSize;\r | |
| 438 | UINT8 *parms;\r | |
| 439 | } TPM_KEY_PARMS;\r | |
| 440 | \r | |
| 441 | //\r | |
| 442 | // Part 2, section 10.4: TPM_STORE_PUBKEY\r | |
| 443 | //\r | |
| 444 | typedef struct tdTPM_STORE_PUBKEY {\r | |
| 445 | UINT32 keyLength;\r | |
| 446 | UINT8 key[1];\r | |
| 447 | } TPM_STORE_PUBKEY;\r | |
| 448 | \r | |
| 449 | //\r | |
| 450 | // Part 2, section 10.5: TPM_PUBKEY\r | |
| 451 | //\r | |
| 452 | typedef struct tdTPM_PUBKEY{\r | |
| 453 | TPM_KEY_PARMS algorithmParms;\r | |
| 454 | TPM_STORE_PUBKEY pubKey;\r | |
| 455 | } TPM_PUBKEY;\r | |
| 456 | \r | |
| 457 | //\r | |
| 458 | // Part 2, section 5.12: TPM_MIGRATIONKEYAUTH\r | |
| 459 | //\r | |
| 460 | typedef struct tdTPM_MIGRATIONKEYAUTH{\r | |
| 461 | TPM_PUBKEY migrationKey;\r | |
| 462 | TPM_MIGRATE_SCHEME migrationScheme;\r | |
| 463 | TPM_DIGEST digest;\r | |
| 464 | } TPM_MIGRATIONKEYAUTH;\r | |
| 465 | \r | |
| 466 | //\r | |
| 467 | // Part 2, section 5.13: TPM_COUNTER_VALUE\r | |
| 468 | //\r | |
| 469 | typedef struct tdTPM_COUNTER_VALUE{\r | |
| 470 | TPM_STRUCTURE_TAG tag;\r | |
| 471 | UINT8 label[4];\r | |
| 472 | TPM_ACTUAL_COUNT counter;\r | |
| 473 | } TPM_COUNTER_VALUE;\r | |
| 474 | \r | |
| 475 | //\r | |
| 476 | // Part 2, section 5.14: TPM_SIGN_INFO\r | |
| 477 | // Size of data indicated by dataLen\r | |
| 478 | //\r | |
| 479 | typedef struct tdTPM_SIGN_INFO {\r | |
| 480 | TPM_STRUCTURE_TAG tag;\r | |
| 481 | UINT8 fixed[4];\r | |
| 482 | TPM_NONCE replay;\r | |
| 483 | UINT32 dataLen;\r | |
| 484 | UINT8 *data;\r | |
| 485 | } TPM_SIGN_INFO;\r | |
| 486 | \r | |
| 487 | //\r | |
| 488 | // Part 2, section 5.15: TPM_MSA_COMPOSITE\r | |
| 489 | // Number of migAuthDigest indicated by MSAlist\r | |
| 490 | //\r | |
| 491 | typedef struct tdTPM_MSA_COMPOSITE {\r | |
| 492 | UINT32 MSAlist;\r | |
| 493 | TPM_DIGEST migAuthDigest[1];\r | |
| 494 | } TPM_MSA_COMPOSITE;\r | |
| 495 | \r | |
| 496 | //\r | |
| 497 | // Part 2, section 5.16: TPM_CMK_AUTH\r | |
| 498 | //\r | |
| 499 | typedef struct tdTPM_CMK_AUTH{\r | |
| 500 | TPM_DIGEST migrationAuthorityDigest;\r | |
| 501 | TPM_DIGEST destinationKeyDigest;\r | |
| 502 | TPM_DIGEST sourceKeyDigest;\r | |
| 503 | } TPM_CMK_AUTH;\r | |
| 504 | \r | |
| 505 | //\r | |
| 506 | // Part 2, section 5.17: TPM_CMK_DELEGATE\r | |
| 507 | //\r | |
| 508 | #define TPM_CMK_DELEGATE_SIGNING (((TPM_CMK_DELEGATE)1) << 31)\r | |
| 509 | #define TPM_CMK_DELEGATE_STORAGE (((TPM_CMK_DELEGATE)1) << 30)\r | |
| 510 | #define TPM_CMK_DELEGATE_BIND (((TPM_CMK_DELEGATE)1) << 29)\r | |
| 511 | #define TPM_CMK_DELEGATE_LEGACY (((TPM_CMK_DELEGATE)1) << 28)\r | |
| 512 | #define TPM_CMK_DELEGATE_MIGRATE (((TPM_CMK_DELEGATE)1) << 27)\r | |
| 513 | \r | |
| 514 | //\r | |
| 515 | // Part 2, section 5.18: TPM_SELECT_SIZE\r | |
| 516 | //\r | |
| 517 | typedef struct tdTPM_SELECT_SIZE {\r | |
| 518 | UINT8 major;\r | |
| 519 | UINT8 minor;\r | |
| 520 | UINT16 reqSize;\r | |
| 521 | } TPM_SELECT_SIZE;\r | |
| 522 | \r | |
| 523 | //\r | |
| 524 | // Part 2, section 5,19: TPM_CMK_MIGAUTH\r | |
| 525 | //\r | |
| 526 | typedef struct tdTPM_CMK_MIGAUTH{\r | |
| 527 | TPM_STRUCTURE_TAG tag;\r | |
| 528 | TPM_DIGEST msaDigest;\r | |
| 529 | TPM_DIGEST pubKeyDigest;\r | |
| 530 | } TPM_CMK_MIGAUTH;\r | |
| 531 | \r | |
| 532 | //\r | |
| 533 | // Part 2, section 5.20: TPM_CMK_SIGTICKET\r | |
| 534 | //\r | |
| 535 | typedef struct tdTPM_CMK_SIGTICKET{\r | |
| 536 | TPM_STRUCTURE_TAG tag;\r | |
| 537 | TPM_DIGEST verKeyDigest;\r | |
| 538 | TPM_DIGEST signedData;\r | |
| 539 | } TPM_CMK_SIGTICKET;\r | |
| 540 | \r | |
| 541 | //\r | |
| 542 | // Part 2, section 5.21: TPM_CMK_MA_APPROVAL\r | |
| 543 | //\r | |
| 544 | typedef struct tdTPM_CMK_MA_APPROVAL{\r | |
| 545 | TPM_STRUCTURE_TAG tag;\r | |
| 546 | TPM_DIGEST migrationAuthorityDigest;\r | |
| 547 | } TPM_CMK_MA_APPROVAL;\r | |
| 548 | \r | |
| 549 | //\r | |
| 550 | // Part 2, section 6: Command Tags\r | |
| 551 | //\r | |
| 552 | #define TPM_TAG_RQU_COMMAND ((TPM_STRUCTURE_TAG) 0x00C1)\r | |
| 553 | #define TPM_TAG_RQU_AUTH1_COMMAND ((TPM_STRUCTURE_TAG) 0x00C2)\r | |
| 554 | #define TPM_TAG_RQU_AUTH2_COMMAND ((TPM_STRUCTURE_TAG) 0x00C3)\r | |
| 555 | #define TPM_TAG_RSP_COMMAND ((TPM_STRUCTURE_TAG) 0x00C4)\r | |
| 556 | #define TPM_TAG_RSP_AUTH1_COMMAND ((TPM_STRUCTURE_TAG) 0x00C5)\r | |
| 557 | #define TPM_TAG_RSP_AUTH2_COMMAND ((TPM_STRUCTURE_TAG) 0x00C6)\r | |
| 558 | \r | |
| 559 | //\r | |
| 560 | // Part 2, section 7.1: TPM_PERMANENT_FLAGS\r | |
| 561 | //\r | |
| 562 | typedef struct tdTPM_PERMANENT_FLAGS{\r | |
| 563 | TPM_STRUCTURE_TAG tag;\r | |
| 564 | BOOLEAN disable;\r | |
| 565 | BOOLEAN ownership;\r | |
| 566 | BOOLEAN deactivated;\r | |
| 567 | BOOLEAN readPubek;\r | |
| 568 | BOOLEAN disableOwnerClear;\r | |
| 569 | BOOLEAN allowMaintenance;\r | |
| 570 | BOOLEAN physicalPresenceLifetimeLock;\r | |
| 571 | BOOLEAN physicalPresenceHWEnable;\r | |
| 572 | BOOLEAN physicalPresenceCMDEnable;\r | |
| 573 | BOOLEAN CEKPUsed;\r | |
| 574 | BOOLEAN TPMpost;\r | |
| 575 | BOOLEAN TPMpostLock;\r | |
| 576 | BOOLEAN FIPS;\r | |
| 577 | BOOLEAN operator;\r | |
| 578 | BOOLEAN enableRevokeEK;\r | |
| 579 | BOOLEAN nvLocked;\r | |
| 580 | BOOLEAN readSRKPub;\r | |
| 581 | BOOLEAN tpmEstablished;\r | |
| 582 | BOOLEAN maintenanceDone;\r | |
| 583 | } TPM_PERMANENT_FLAGS;\r | |
| 584 | \r | |
| 585 | //\r | |
| 586 | // Part 2, section 7.1.1: PERMANENT_FLAGS Subcap for SetCapability\r | |
| 587 | //\r | |
| 588 | #define TPM_PF_DISABLE ((TPM_CAPABILITY_AREA) 1)\r | |
| 589 | #define TPM_PF_OWNERSHIP ((TPM_CAPABILITY_AREA) 2)\r | |
| 590 | #define TPM_PF_DEACTIVATED ((TPM_CAPABILITY_AREA) 3)\r | |
| 591 | #define TPM_PF_READPUBEK ((TPM_CAPABILITY_AREA) 4)\r | |
| 592 | #define TPM_PF_DISABLEOWNERCLEAR ((TPM_CAPABILITY_AREA) 5)\r | |
| 593 | #define TPM_PF_ALLOWMAINTENANCE ((TPM_CAPABILITY_AREA) 6)\r | |
| 594 | #define TPM_PF_PHYSICALPRESENCELIFETIMELOCK ((TPM_CAPABILITY_AREA) 7)\r | |
| 595 | #define TPM_PF_PHYSICALPRESENCEHWENABLE ((TPM_CAPABILITY_AREA) 8)\r | |
| 596 | #define TPM_PF_PHYSICALPRESENCECMDENABLE ((TPM_CAPABILITY_AREA) 9)\r | |
| 597 | #define TPM_PF_CEKPUSED ((TPM_CAPABILITY_AREA) 10)\r | |
| 598 | #define TPM_PF_TPMPOST ((TPM_CAPABILITY_AREA) 11)\r | |
| 599 | #define TPM_PF_TPMPOSTLOCK ((TPM_CAPABILITY_AREA) 12)\r | |
| 600 | #define TPM_PF_FIPS ((TPM_CAPABILITY_AREA) 13)\r | |
| 601 | #define TPM_PF_OPERATOR ((TPM_CAPABILITY_AREA) 14)\r | |
| 602 | #define TPM_PF_ENABLEREVOKEEK ((TPM_CAPABILITY_AREA) 15)\r | |
| 603 | #define TPM_PF_NV_LOCKED ((TPM_CAPABILITY_AREA) 16)\r | |
| 604 | #define TPM_PF_READSRKPUB ((TPM_CAPABILITY_AREA) 17)\r | |
| 605 | #define TPM_PF_TPMESTABLISHED ((TPM_CAPABILITY_AREA) 18)\r | |
| 606 | #define TPM_PF_MAINTENANCEDONE ((TPM_CAPABILITY_AREA) 19)\r | |
| 607 | \r | |
| 608 | //\r | |
| 609 | // Part 2, section 7.2: TPM_STCLEAR_FLAGS\r | |
| 610 | //\r | |
| 611 | typedef struct tdTPM_STCLEAR_FLAGS{\r | |
| 612 | TPM_STRUCTURE_TAG tag;\r | |
| 613 | BOOLEAN deactivated;\r | |
| 614 | BOOLEAN disableForceClear;\r | |
| 615 | BOOLEAN physicalPresence;\r | |
| 616 | BOOLEAN physicalPresenceLock;\r | |
| 617 | BOOLEAN bGlobalLock;\r | |
| 618 | } TPM_STCLEAR_FLAGS;\r | |
| 619 | \r | |
| 620 | //\r | |
| 621 | // Part 2, section 7.2.1: STCLEAR_FLAGS Subcap for SetCapability\r | |
| 622 | //\r | |
| 623 | #define TPM_SF_DEACTIVATED ((TPM_CAPABILITY_AREA) 1)\r | |
| 624 | #define TPM_SF_DISABLEFORCECLEAR ((TPM_CAPABILITY_AREA) 2)\r | |
| 625 | #define TPM_SF_PHYSICALPRESENCE ((TPM_CAPABILITY_AREA) 3)\r | |
| 626 | #define TPM_SF_PHYSICALPRESENCELOCK ((TPM_CAPABILITY_AREA) 4)\r | |
| 627 | #define TPM_SF_BGLOBALLOCK ((TPM_CAPABILITY_AREA) 5)\r | |
| 628 | \r | |
| 629 | //\r | |
| 630 | // Part 2, section 7.3: TPM_STANY_FLAGS\r | |
| 631 | //\r | |
| 632 | typedef struct tdTPM_STANY_FLAGS{\r | |
| 633 | TPM_STRUCTURE_TAG tag;\r | |
| 634 | BOOLEAN postInitialise;\r | |
| 635 | TPM_MODIFIER_INDICATOR localityModifier;\r | |
| 636 | BOOLEAN transportExclusive;\r | |
| 637 | BOOLEAN TOSPresent;\r | |
| 638 | } TPM_STANY_FLAGS;\r | |
| 639 | \r | |
| 640 | //\r | |
| 641 | // Part 2, section 7.3.1: STANY_FLAGS Subcap for SetCapability\r | |
| 642 | //\r | |
| 643 | #define TPM_AF_POSTINITIALISE ((TPM_CAPABILITY_AREA) 1)\r | |
| 644 | #define TPM_AF_LOCALITYMODIFIER ((TPM_CAPABILITY_AREA) 2)\r | |
| 645 | #define TPM_AF_TRANSPORTEXCLUSIVE ((TPM_CAPABILITY_AREA) 3)\r | |
| 646 | #define TPM_AF_TOSPRESENT ((TPM_CAPABILITY_AREA) 4)\r | |
| 647 | \r | |
| 648 | //\r | |
| 649 | // All those structures (section 7.4, 7.5, 7.6) are not normative and \r | |
| 650 | // thus no definitions here\r | |
| 651 | //\r | |
| 652 | // Part 2, section 7.4: TPM_PERMANENT_DATA\r | |
| 653 | //\r | |
| 654 | //#define TPM_MIN_COUNTERS 4 // the minimum number of counters is 4\r | |
| 655 | //#define TPM_DELEGATE_KEY TPM_KEY\r | |
| 656 | //#define TPM_NUM_PCR 16\r | |
| 657 | //#define TPM_MAX_NV_WRITE_NOOWNER 64\r | |
| 658 | //typedef struct tdTPM_PERMANENT_DATA\r | |
| 659 | //{\r | |
| 660 | // TPM_STRUCTURE_TAG tag;\r | |
| 661 | // UINT8 revMajor;\r | |
| 662 | // UINT8 revMinor;\r | |
| 663 | // TPM_NONCE tpmProof;\r | |
| 664 | // TPM_NONCE ekReset;\r | |
| 665 | // TPM_SECRET ownerAuth;\r | |
| 666 | // TPM_SECRET operatorAuth;\r | |
| 667 | // TPM_DIRVALUE authDIR[1];\r | |
| 668 | // TPM_PUBKEY manuMaintPub;\r | |
| 669 | // TPM_KEY endorsementKey;\r | |
| 670 | // TPM_KEY srk;\r | |
| 671 | // TPM_KEY contextKey;\r | |
| 672 | // TPM_KEY delegateKey;\r | |
| 673 | // TPM_COUNTER_VALUE auditMonotonicCounter;\r | |
| 674 | // TPM_COUNTER_VALUE monitonicCounter[TPM_MIN_COUNTERS];\r | |
| 675 | // TPM_PCR_ATTRIBUTES pcrAttrib[TPM_NUM_PCR];\r | |
| 676 | // UINT8 ordinalAuditStatus[];\r | |
| 677 | // UINT8 *rngState;\r | |
| 678 | // TPM_FAMILY_TABLE familyTable;\r | |
| 679 | // TPM_DELEGATE_TABLE delegateTable;\r | |
| 680 | // UINT32 maxNVBufSize;\r | |
| 681 | // UINT32 lastFamilyID;\r | |
| 682 | // UINT32 noOwnerNVWrite;\r | |
| 683 | // TPM_CMK_DELEGATE restrictDelegate;\r | |
| 684 | // TPM_DAA_TPM_SEED tpmDAASeed;\r | |
| 685 | //} TPM_PERMANENT_DATA;\r | |
| 686 | \r | |
| 687 | //\r | |
| 688 | // Part 2, section 7.5: TPM_STCLEAR_DATA\r | |
| 689 | // available inside TPM only\r | |
| 690 | //\r | |
| 691 | //typedef struct tdTPM_STCLEAR_DATA\r | |
| 692 | //{\r | |
| 693 | // TPM_STRUCTURE_TAG tag;\r | |
| 694 | // TPM_NONCE contextNonceKey;\r | |
| 695 | // TPM_COUNT_ID countID;\r | |
| 696 | // UINT32 ownerReference;\r | |
| 697 | // BOOLEAN disableResetLock;\r | |
| 698 | //} TPM_STCLEAR_DATA;\r | |
| 699 | \r | |
| 700 | //\r | |
| 701 | // Part 2, section 7.6: TPM_STANY_DATA\r | |
| 702 | // available inside TPM only\r | |
| 703 | //\r | |
| 704 | //typedef struct tdTPM_STANY_DATA\r | |
| 705 | //{\r | |
| 706 | // TPM_STRUCTURE_TAG tag;\r | |
| 707 | // TPM_NONCE contextNonceSession;\r | |
| 708 | // TPM_DIGEST auditDigest;\r | |
| 709 | // TPM_CURRENT_TICKS currentTicks;\r | |
| 710 | // UINT32 contextCount;\r | |
| 711 | // UINT32 contextList[TPM_MIN_SESSION_LIST];\r | |
| 712 | // TPM_SESSION_DATA sessions[TPM_MIN_SESSIONS];\r | |
| 713 | //} TPM_STANY_DATA;\r | |
| 714 | \r | |
| 715 | //\r | |
| 716 | // Part 2, section 8: PCR Structures\r | |
| 717 | // \r | |
| 718 | \r | |
| 719 | //\r | |
| 720 | // Part 2, section 8.1: TPM_PCR_SELECTION\r | |
| 721 | // Size of pcrSelect[] indicated by sizeOfSelect\r | |
| 722 | //\r | |
| 723 | typedef struct tdTPM_PCR_SELECTION {\r | |
| 724 | UINT16 sizeOfSelect;\r | |
| 725 | UINT8 pcrSelect[1];\r | |
| 726 | } TPM_PCR_SELECTION;\r | |
| 727 | \r | |
| 728 | //\r | |
| 729 | // Part 2, section 8.2: TPM_PCR_COMPOSITE\r | |
| 730 | // Size of pcrValue[] indicated by valueSize\r | |
| 731 | //\r | |
| 732 | typedef struct tdTPM_PCR_COMPOSITE {\r | |
| 733 | TPM_PCR_SELECTION select;\r | |
| 734 | UINT32 valueSize;\r | |
| 735 | TPM_PCRVALUE pcrValue[1];\r | |
| 736 | } TPM_PCR_COMPOSITE;\r | |
| 737 | \r | |
| 738 | //\r | |
| 739 | // Part 2, section 8.3: TPM_PCR_INFO\r | |
| 740 | //\r | |
| 741 | typedef struct tdTPM_PCR_INFO {\r | |
| 742 | TPM_PCR_SELECTION pcrSelection;\r | |
| 743 | TPM_COMPOSITE_HASH digestAtRelease;\r | |
| 744 | TPM_COMPOSITE_HASH digestAtCreation;\r | |
| 745 | } TPM_PCR_INFO;\r | |
| 746 | \r | |
| 747 | //\r | |
| 748 | // Part 2, section 8.6: TPM_LOCALITY_SELECTION\r | |
| 749 | //\r | |
| 750 | typedef UINT8 TPM_LOCALITY_SELECTION;\r | |
| 751 | \r | |
| 752 | #define TPM_LOC_FOUR ((UINT8) 0x10)\r | |
| 753 | #define TPM_LOC_THREE ((UINT8) 0x08)\r | |
| 754 | #define TPM_LOC_TWO ((UINT8) 0x04)\r | |
| 755 | #define TPM_LOC_ONE ((UINT8) 0x02)\r | |
| 756 | #define TPM_LOC_ZERO ((UINT8) 0x01)\r | |
| 757 | \r | |
| 758 | //\r | |
| 759 | // Part 2, section 8.4: TPM_PCR_INFO_LONG\r | |
| 760 | //\r | |
| 761 | typedef struct tdTPM_PCR_INFO_LONG {\r | |
| 762 | TPM_STRUCTURE_TAG tag;\r | |
| 763 | TPM_LOCALITY_SELECTION localityAtCreation;\r | |
| 764 | TPM_LOCALITY_SELECTION localityAtRelease;\r | |
| 765 | TPM_PCR_SELECTION creationPCRSelection;\r | |
| 766 | TPM_PCR_SELECTION releasePCRSelection;\r | |
| 767 | TPM_COMPOSITE_HASH digestAtCreation;\r | |
| 768 | TPM_COMPOSITE_HASH digestAtRelease;\r | |
| 769 | } TPM_PCR_INFO_LONG;\r | |
| 770 | \r | |
| 771 | //\r | |
| 772 | // Part 2, section 8.5: TPM_PCR_INFO_SHORT\r | |
| 773 | //\r | |
| 774 | typedef struct tdTPM_PCR_INFO_SHORT{\r | |
| 775 | TPM_PCR_SELECTION pcrSelection;\r | |
| 776 | TPM_LOCALITY_SELECTION localityAtRelease;\r | |
| 777 | TPM_COMPOSITE_HASH digestAtRelease;\r | |
| 778 | } TPM_PCR_INFO_SHORT;\r | |
| 779 | \r | |
| 780 | //\r | |
| 781 | // Part 2, section 8.8: TPM_PCR_ATTRIBUTES\r | |
| 782 | //\r | |
| 783 | typedef struct tdTPM_PCR_ATTRIBUTES{\r | |
| 784 | BOOLEAN pcrReset;\r | |
| 785 | TPM_LOCALITY_SELECTION pcrExtendLocal;\r | |
| 786 | TPM_LOCALITY_SELECTION pcrResetLocal;\r | |
| 787 | } TPM_PCR_ATTRIBUTES;\r | |
| 788 | \r | |
| 789 | //\r | |
| 790 | // Part 2, section 9: Storage Structures\r | |
| 791 | //\r | |
| 792 | \r | |
| 793 | //\r | |
| 794 | // Part 2, section 9.1: TPM_STORED_DATA\r | |
| 795 | // [size_is(sealInfoSize)] BYTE* sealInfo;\r | |
| 796 | // [size_is(encDataSize)] BYTE* encData;\r | |
| 797 | //\r | |
| 798 | typedef struct tdTPM_STORED_DATA {\r | |
| 799 | TPM_STRUCT_VER ver;\r | |
| 800 | UINT32 sealInfoSize;\r | |
| 801 | UINT8 *sealInfo;\r | |
| 802 | UINT32 encDataSize;\r | |
| 803 | UINT8 *encData;\r | |
| 804 | } TPM_STORED_DATA;\r | |
| 805 | \r | |
| 806 | //\r | |
| 807 | // Part 2, section 9.2: TPM_STORED_DATA12\r | |
| 808 | // [size_is(sealInfoSize)] BYTE* sealInfo;\r | |
| 809 | // [size_is(encDataSize)] BYTE* encData;\r | |
| 810 | //\r | |
| 811 | typedef struct tdTPM_STORED_DATA12 {\r | |
| 812 | TPM_STRUCTURE_TAG tag;\r | |
| 813 | TPM_ENTITY_TYPE et;\r | |
| 814 | UINT32 sealInfoSize;\r | |
| 815 | UINT8 *sealInfo;\r | |
| 816 | UINT32 encDataSize;\r | |
| 817 | UINT8 *encData;\r | |
| 818 | } TPM_STORED_DATA12;\r | |
| 819 | \r | |
| 820 | //\r | |
| 821 | // Part 2, section 9.3: TPM_SEALED_DATA\r | |
| 822 | // [size_is(dataSize)] BYTE* data;\r | |
| 823 | //\r | |
| 824 | typedef struct tdTPM_SEALED_DATA {\r | |
| 825 | TPM_PAYLOAD_TYPE payload;\r | |
| 826 | TPM_SECRET authData;\r | |
| 827 | TPM_NONCE tpmProof;\r | |
| 828 | TPM_DIGEST storedDigest;\r | |
| 829 | UINT32 dataSize;\r | |
| 830 | UINT8 *data;\r | |
| 831 | } TPM_SEALED_DATA;\r | |
| 832 | \r | |
| 833 | //\r | |
| 834 | // Part 2, section 9.4: TPM_SYMMETRIC_KEY\r | |
| 835 | // [size_is(size)] BYTE* data;\r | |
| 836 | //\r | |
| 837 | typedef struct tdTPM_SYMMETRIC_KEY {\r | |
| 838 | TPM_ALGORITHM_ID algId;\r | |
| 839 | TPM_ENC_SCHEME encScheme;\r | |
| 840 | UINT16 dataSize;\r | |
| 841 | UINT8 *data;\r | |
| 842 | } TPM_SYMMETRIC_KEY;\r | |
| 843 | \r | |
| 844 | //\r | |
| 845 | // Part 2, section 9.5: TPM_BOUND_DATA\r | |
| 846 | //\r | |
| 847 | typedef struct tdTPM_BOUND_DATA {\r | |
| 848 | TPM_STRUCT_VER ver;\r | |
| 849 | TPM_PAYLOAD_TYPE payload;\r | |
| 850 | UINT8 payloadData[1];\r | |
| 851 | } TPM_BOUND_DATA;\r | |
| 852 | \r | |
| 853 | //\r | |
| 854 | // Part 2 section 10: TPM_KEY complex\r | |
| 855 | // \r | |
| 856 | \r | |
| 857 | //\r | |
| 858 | // Part 2, section 10.2: TPM_KEY\r | |
| 859 | // [size_is(encDataSize)] BYTE* encData;\r | |
| 860 | //\r | |
| 861 | typedef struct tdTPM_KEY{\r | |
| 862 | TPM_STRUCT_VER ver;\r | |
| 863 | TPM_KEY_USAGE keyUsage;\r | |
| 864 | TPM_KEY_FLAGS keyFlags;\r | |
| 865 | TPM_AUTH_DATA_USAGE authDataUsage;\r | |
| 866 | TPM_KEY_PARMS algorithmParms;\r | |
| 867 | UINT32 PCRInfoSize;\r | |
| 868 | UINT8 *PCRInfo;\r | |
| 869 | TPM_STORE_PUBKEY pubKey;\r | |
| 870 | UINT32 encDataSize;\r | |
| 871 | UINT8 *encData;\r | |
| 872 | } TPM_KEY;\r | |
| 873 | \r | |
| 874 | //\r | |
| 875 | // Part 2, section 10.3: TPM_KEY12\r | |
| 876 | // [size_is(encDataSize)] BYTE* encData;\r | |
| 877 | //\r | |
| 878 | typedef struct tdTPM_KEY12{\r | |
| 879 | TPM_STRUCTURE_TAG tag;\r | |
| 880 | UINT16 fill;\r | |
| 881 | TPM_KEY_USAGE keyUsage;\r | |
| 882 | TPM_KEY_FLAGS keyFlags;\r | |
| 883 | TPM_AUTH_DATA_USAGE authDataUsage;\r | |
| 884 | TPM_KEY_PARMS algorithmParms;\r | |
| 885 | UINT32 PCRInfoSize;\r | |
| 886 | UINT8 *PCRInfo;\r | |
| 887 | TPM_STORE_PUBKEY pubKey;\r | |
| 888 | UINT32 encDataSize;\r | |
| 889 | UINT8 *encData;\r | |
| 890 | } TPM_KEY12;\r | |
| 891 | \r | |
| 892 | //\r | |
| 893 | // Part 2, section 10.7: TPM_STORE_PRIVKEY\r | |
| 894 | // [size_is(keyLength)] BYTE* key;\r | |
| 895 | //\r | |
| 896 | typedef struct tdTPM_STORE_PRIVKEY {\r | |
| 897 | UINT32 keyLength;\r | |
| 898 | UINT8 *key;\r | |
| 899 | } TPM_STORE_PRIVKEY;\r | |
| 900 | \r | |
| 901 | //\r | |
| 902 | // Part 2, section 10.6: TPM_STORE_ASYMKEY\r | |
| 903 | //\r | |
| 904 | typedef struct tdTPM_STORE_ASYMKEY { // pos len total\r | |
| 905 | TPM_PAYLOAD_TYPE payload; // 0 1 1\r | |
| 906 | TPM_SECRET usageAuth; // 1 20 21\r | |
| 907 | TPM_SECRET migrationAuth; // 21 20 41\r | |
| 908 | TPM_DIGEST pubDataDigest; // 41 20 61\r | |
| 909 | TPM_STORE_PRIVKEY privKey; // 61 132-151 193-214\r | |
| 910 | } TPM_STORE_ASYMKEY;\r | |
| 911 | \r | |
| 912 | //\r | |
| 913 | // Part 2, section 10.8: TPM_MIGRATE_ASYMKEY\r | |
| 914 | // [size_is(partPrivKeyLen)] BYTE* partPrivKey;\r | |
| 915 | //\r | |
| 916 | typedef struct tdTPM_MIGRATE_ASYMKEY { // pos len total\r | |
| 917 | TPM_PAYLOAD_TYPE payload; // 0 1 1\r | |
| 918 | TPM_SECRET usageAuth; // 1 20 21\r | |
| 919 | TPM_DIGEST pubDataDigest; // 21 20 41\r | |
| 920 | UINT32 partPrivKeyLen; // 41 4 45\r | |
| 921 | UINT8 *partPrivKey; // 45 112-127 157-172\r | |
| 922 | } TPM_MIGRATE_ASYMKEY;\r | |
| 923 | \r | |
| 924 | //\r | |
| 925 | // Part 2, section 10.9: TPM_KEY_CONTROL\r | |
| 926 | //\r | |
| 927 | #define TPM_KEY_CONTROL_OWNER_EVICT ((UINT32) 0x00000001)\r | |
| 928 | \r | |
| 929 | //\r | |
| 930 | // Part 2, section 11: Signed Structures\r | |
| 931 | //\r | |
| 932 | \r | |
| 933 | typedef struct tdTPM_CERTIFY_INFO \r | |
| 934 | {\r | |
| 935 | TPM_STRUCT_VER version;\r | |
| 936 | TPM_KEY_USAGE keyUsage;\r | |
| 937 | TPM_KEY_FLAGS keyFlags;\r | |
| 938 | TPM_AUTH_DATA_USAGE authDataUsage;\r | |
| 939 | TPM_KEY_PARMS algorithmParms;\r | |
| 940 | TPM_DIGEST pubkeyDigest;\r | |
| 941 | TPM_NONCE data;\r | |
| 942 | BOOLEAN parentPCRStatus;\r | |
| 943 | UINT32 PCRInfoSize;\r | |
| 944 | UINT8 *PCRInfo;\r | |
| 945 | } TPM_CERTIFY_INFO;\r | |
| 946 | \r | |
| 947 | typedef struct tdTPM_CERTIFY_INFO2\r | |
| 948 | {\r | |
| 949 | TPM_STRUCTURE_TAG tag;\r | |
| 950 | UINT8 fill;\r | |
| 951 | TPM_PAYLOAD_TYPE payloadType;\r | |
| 952 | TPM_KEY_USAGE keyUsage;\r | |
| 953 | TPM_KEY_FLAGS keyFlags;\r | |
| 954 | TPM_AUTH_DATA_USAGE authDataUsage;\r | |
| 955 | TPM_KEY_PARMS algorithmParms;\r | |
| 956 | TPM_DIGEST pubkeyDigest;\r | |
| 957 | TPM_NONCE data;\r | |
| 958 | BOOLEAN parentPCRStatus;\r | |
| 959 | UINT32 PCRInfoSize;\r | |
| 960 | UINT8 *PCRInfo;\r | |
| 961 | UINT32 migrationAuthoritySize;\r | |
| 962 | UINT8 *migrationAuthority;\r | |
| 963 | } TPM_CERTIFY_INFO2;\r | |
| 964 | \r | |
| 965 | typedef struct tdTPM_QUOTE_INFO \r | |
| 966 | {\r | |
| 967 | TPM_STRUCT_VER version;\r | |
| 968 | UINT8 fixed[4];\r | |
| 969 | TPM_COMPOSITE_HASH digestValue;\r | |
| 970 | TPM_NONCE externalData;\r | |
| 971 | } TPM_QUOTE_INFO;\r | |
| 972 | \r | |
| 973 | typedef struct tdTPM_QUOTE_INFO2\r | |
| 974 | {\r | |
| 975 | TPM_STRUCTURE_TAG tag;\r | |
| 976 | UINT8 fixed[4];\r | |
| 977 | TPM_NONCE externalData;\r | |
| 978 | TPM_PCR_INFO_SHORT infoShort;\r | |
| 979 | } TPM_QUOTE_INFO2;\r | |
| 980 | \r | |
| 981 | //\r | |
| 982 | // Part 2, section 12: Identity Structures\r | |
| 983 | //\r | |
| 984 | \r | |
| 985 | typedef struct tdTPM_EK_BLOB\r | |
| 986 | {\r | |
| 987 | TPM_STRUCTURE_TAG tag;\r | |
| 988 | TPM_EK_TYPE ekType;\r | |
| 989 | UINT32 blobSize;\r | |
| 990 | UINT8 *blob;\r | |
| 991 | } TPM_EK_BLOB;\r | |
| 992 | \r | |
| 993 | typedef struct tdTPM_EK_BLOB_ACTIVATE\r | |
| 994 | {\r | |
| 995 | TPM_STRUCTURE_TAG tag;\r | |
| 996 | TPM_SYMMETRIC_KEY sessionKey;\r | |
| 997 | TPM_DIGEST idDigest;\r | |
| 998 | TPM_PCR_INFO_SHORT pcrInfo;\r | |
| 999 | } TPM_EK_BLOB_ACTIVATE;\r | |
| 1000 | \r | |
| 1001 | typedef struct tdTPM_EK_BLOB_AUTH\r | |
| 1002 | {\r | |
| 1003 | TPM_STRUCTURE_TAG tag;\r | |
| 1004 | TPM_SECRET authValue;\r | |
| 1005 | } TPM_EK_BLOB_AUTH;\r | |
| 1006 | \r | |
| 1007 | \r | |
| 267669ba LG |
1008 | typedef struct tdTPM_IDENTITY_CONTENTS\r |
| 1009 | {\r | |
| 1010 | TPM_STRUCT_VER ver;\r | |
| 1011 | UINT32 ordinal;\r | |
| 1012 | TPM_CHOSENID_HASH labelPrivCADigest;\r | |
| 1013 | TPM_PUBKEY identityPubKey;\r | |
| 1014 | } TPM_IDENTITY_CONTENTS;\r | |
| 1015 | \r | |
| 1016 | typedef struct tdTPM_IDENTITY_REQ \r | |
| 1017 | {\r | |
| 1018 | UINT32 asymSize;\r | |
| 1019 | UINT32 symSize;\r | |
| 1020 | TPM_KEY_PARMS asymAlgorithm;\r | |
| 1021 | TPM_KEY_PARMS symAlgorithm;\r | |
| 1022 | UINT8 *asymBlob;\r | |
| 1023 | UINT8 *symBlob;\r | |
| 1024 | } TPM_IDENTITY_REQ;\r | |
| 1025 | \r | |
| 1026 | typedef struct tdTPM_IDENTITY_PROOF \r | |
| 1027 | {\r | |
| 1028 | TPM_STRUCT_VER ver;\r | |
| 1029 | UINT32 labelSize;\r | |
| 1030 | UINT32 identityBindingSize;\r | |
| 1031 | UINT32 endorsementSize;\r | |
| 1032 | UINT32 platformSize;\r | |
| 1033 | UINT32 conformanceSize;\r | |
| 1034 | TPM_PUBKEY identityKey;\r | |
| 1035 | UINT8 *labelArea;\r | |
| 1036 | UINT8 *identityBinding;\r | |
| 1037 | UINT8 *endorsementCredential;\r | |
| 1038 | UINT8 *platformCredential;\r | |
| 1039 | UINT8 *conformanceCredential;\r | |
| 1040 | } TPM_IDENTITY_PROOF;\r | |
| 1041 | \r | |
| 1042 | typedef struct tdTPM_ASYM_CA_CONTENTS \r | |
| 1043 | {\r | |
| 1044 | TPM_SYMMETRIC_KEY sessionKey;\r | |
| 1045 | TPM_DIGEST idDigest;\r | |
| 1046 | } TPM_ASYM_CA_CONTENTS;\r | |
| 1047 | \r | |
| 1048 | typedef struct tdTPM_SYM_CA_ATTESTATION\r | |
| 1049 | {\r | |
| 1050 | UINT32 credSize;\r | |
| 1051 | TPM_KEY_PARMS algorithm;\r | |
| 1052 | UINT8 *credential;\r | |
| 1053 | } TPM_SYM_CA_ATTESTATION;\r | |
| 1054 | \r | |
| 1055 | //\r | |
| 1056 | // Part 2, section 15: TPM_CURRENT_TICKS\r | |
| 1057 | // Placed here out of order because definitions are used in section 13.\r | |
| 1058 | //\r | |
| 1059 | typedef struct tdTPM_CURRENT_TICKS {\r | |
| 1060 | TPM_STRUCTURE_TAG tag;\r | |
| 1061 | UINT64 currentTicks;\r | |
| 1062 | UINT16 tickRate;\r | |
| 1063 | TPM_NONCE tickNonce;\r | |
| 1064 | } TPM_CURRENT_TICKS;\r | |
| 1065 | \r | |
| 1066 | //\r | |
| 1067 | // Part 2, section 13: Transport structures\r | |
| 1068 | //\r | |
| 1069 | \r | |
| 1070 | #define TPM_TRANSPORT_ENCRYPT ((UINT32)0x00000001)\r | |
| 1071 | #define TPM_TRANSPORT_LOG ((UINT32)0x00000002)\r | |
| 1072 | #define TPM_TRANSPORT_EXCLUSIVE ((UINT32)0x00000004)\r | |
| 1073 | \r | |
| 1074 | typedef struct tdTPM_TRANSPORT_PUBLIC\r | |
| 1075 | {\r | |
| 1076 | TPM_STRUCTURE_TAG tag;\r | |
| 1077 | TPM_TRANSPORT_ATTRIBUTES transAttributes;\r | |
| 1078 | TPM_ALGORITHM_ID algId;\r | |
| 1079 | TPM_ENC_SCHEME encScheme;\r | |
| 1080 | } TPM_TRANSPORT_PUBLIC;\r | |
| 1081 | \r | |
| 1082 | typedef struct tdTPM_TRANSPORT_INTERNAL\r | |
| 1083 | {\r | |
| 1084 | TPM_STRUCTURE_TAG tag;\r | |
| 1085 | TPM_AUTHDATA authData;\r | |
| 1086 | TPM_TRANSPORT_PUBLIC transPublic;\r | |
| 1087 | TPM_TRANSHANDLE transHandle;\r | |
| 1088 | TPM_NONCE transNonceEven;\r | |
| 1089 | TPM_DIGEST transDigest;\r | |
| 1090 | } TPM_TRANSPORT_INTERNAL;\r | |
| 1091 | \r | |
| 1092 | typedef struct tdTPM_TRANSPORT_LOG_IN\r | |
| 1093 | {\r | |
| 1094 | TPM_STRUCTURE_TAG tag;\r | |
| 1095 | TPM_DIGEST parameters;\r | |
| 1096 | TPM_DIGEST pubKeyHash;\r | |
| 1097 | } TPM_TRANSPORT_LOG_IN;\r | |
| 1098 | \r | |
| 1099 | typedef struct tdTPM_TRANSPORT_LOG_OUT\r | |
| 1100 | {\r | |
| 1101 | TPM_STRUCTURE_TAG tag;\r | |
| 1102 | TPM_CURRENT_TICKS currentTicks;\r | |
| 1103 | TPM_DIGEST parameters;\r | |
| 1104 | TPM_MODIFIER_INDICATOR locality;\r | |
| 1105 | } TPM_TRANSPORT_LOG_OUT;\r | |
| 1106 | \r | |
| 1107 | typedef struct tdTPM_TRANSPORT_AUTH\r | |
| 1108 | {\r | |
| 1109 | TPM_STRUCTURE_TAG tag;\r | |
| 1110 | TPM_AUTHDATA authData;\r | |
| 1111 | } TPM_TRANSPORT_AUTH;\r | |
| 1112 | \r | |
| 1113 | //\r | |
| 1114 | // Part 2, section 14: Audit Structures\r | |
| 1115 | //\r | |
| 1116 | \r | |
| 1117 | typedef struct tdTPM_AUDIT_EVENT_IN\r | |
| 1118 | {\r | |
| 1119 | TPM_STRUCTURE_TAG tag;\r | |
| 1120 | TPM_DIGEST inputParms;\r | |
| 1121 | TPM_COUNTER_VALUE auditCount;\r | |
| 1122 | } TPM_AUDIT_EVENT_IN;\r | |
| 1123 | \r | |
| 1124 | typedef struct tdTPM_AUDIT_EVENT_OUT\r | |
| 1125 | {\r | |
| 1126 | TPM_STRUCTURE_TAG tag;\r | |
| 1127 | TPM_COMMAND_CODE ordinal;\r | |
| 1128 | TPM_DIGEST outputParms;\r | |
| 1129 | TPM_COUNTER_VALUE auditCount;\r | |
| 1130 | TPM_RESULT returnCode;\r | |
| 1131 | } TPM_AUDIT_EVENT_OUT;\r | |
| 1132 | \r | |
| 1133 | //\r | |
| 1134 | // Part 2, section 16: Return Codes\r | |
| 1135 | //\r | |
| 1136 | #ifndef TPM_BASE\r | |
| 1137 | #error "TPM Error Codes require definition of TPM_BASE"\r | |
| 1138 | #endif\r | |
| 1139 | \r | |
| 1140 | #define TPM_VENDOR_ERROR TPM_Vendor_Specific32\r | |
| 1141 | #define TPM_NON_FATAL 0x00000800\r | |
| 1142 | \r | |
| 1143 | #define TPM_SUCCESS ((TPM_RESULT) TPM_BASE)\r | |
| 1144 | #define TPM_AUTHFAIL ((TPM_RESULT) (TPM_BASE + 1))\r | |
| 1145 | #define TPM_BADINDEX ((TPM_RESULT) (TPM_BASE + 2))\r | |
| 1146 | #define TPM_BAD_PARAMETER ((TPM_RESULT) (TPM_BASE + 3))\r | |
| 1147 | #define TPM_AUDITFAILURE ((TPM_RESULT) (TPM_BASE + 4))\r | |
| 1148 | #define TPM_CLEAR_DISABLED ((TPM_RESULT) (TPM_BASE + 5))\r | |
| 1149 | #define TPM_DEACTIVATED ((TPM_RESULT) (TPM_BASE + 6))\r | |
| 1150 | #define TPM_DISABLED ((TPM_RESULT) (TPM_BASE + 7))\r | |
| 1151 | #define TPM_DISABLED_CMD ((TPM_RESULT) (TPM_BASE + 8))\r | |
| 1152 | #define TPM_FAIL ((TPM_RESULT) (TPM_BASE + 9))\r | |
| 1153 | #define TPM_BAD_ORDINAL ((TPM_RESULT) (TPM_BASE + 10))\r | |
| 1154 | #define TPM_INSTALL_DISABLED ((TPM_RESULT) (TPM_BASE + 11))\r | |
| 1155 | #define TPM_INVALID_KEYHANDLE ((TPM_RESULT) (TPM_BASE + 12))\r | |
| 1156 | #define TPM_KEYNOTFOUND ((TPM_RESULT) (TPM_BASE + 13))\r | |
| 1157 | #define TPM_INAPPROPRIATE_ENC ((TPM_RESULT) (TPM_BASE + 14))\r | |
| 1158 | #define TPM_MIGRATEFAIL ((TPM_RESULT) (TPM_BASE + 15))\r | |
| 1159 | #define TPM_INVALID_PCR_INFO ((TPM_RESULT) (TPM_BASE + 16))\r | |
| 1160 | #define TPM_NOSPACE ((TPM_RESULT) (TPM_BASE + 17))\r | |
| 1161 | #define TPM_NOSRK ((TPM_RESULT) (TPM_BASE + 18))\r | |
| 1162 | #define TPM_NOTSEALED_BLOB ((TPM_RESULT) (TPM_BASE + 19))\r | |
| 1163 | #define TPM_OWNER_SET ((TPM_RESULT) (TPM_BASE + 20))\r | |
| 1164 | #define TPM_RESOURCES ((TPM_RESULT) (TPM_BASE + 21))\r | |
| 1165 | #define TPM_SHORTRANDOM ((TPM_RESULT) (TPM_BASE + 22))\r | |
| 1166 | #define TPM_SIZE ((TPM_RESULT) (TPM_BASE + 23))\r | |
| 1167 | #define TPM_WRONGPCRVAL ((TPM_RESULT) (TPM_BASE + 24))\r | |
| 1168 | #define TPM_BAD_PARAM_SIZE ((TPM_RESULT) (TPM_BASE + 25))\r | |
| 1169 | #define TPM_SHA_THREAD ((TPM_RESULT) (TPM_BASE + 26))\r | |
| 1170 | #define TPM_SHA_ERROR ((TPM_RESULT) (TPM_BASE + 27))\r | |
| 1171 | #define TPM_FAILEDSELFTEST ((TPM_RESULT) (TPM_BASE + 28))\r | |
| 1172 | #define TPM_AUTH2FAIL ((TPM_RESULT) (TPM_BASE + 29))\r | |
| 1173 | #define TPM_BADTAG ((TPM_RESULT) (TPM_BASE + 30))\r | |
| 1174 | #define TPM_IOERROR ((TPM_RESULT) (TPM_BASE + 31))\r | |
| 1175 | #define TPM_ENCRYPT_ERROR ((TPM_RESULT) (TPM_BASE + 32))\r | |
| 1176 | #define TPM_DECRYPT_ERROR ((TPM_RESULT) (TPM_BASE + 33))\r | |
| 1177 | #define TPM_INVALID_AUTHHANDLE ((TPM_RESULT) (TPM_BASE + 34))\r | |
| 1178 | #define TPM_NO_ENDORSEMENT ((TPM_RESULT) (TPM_BASE + 35))\r | |
| 1179 | #define TPM_INVALID_KEYUSAGE ((TPM_RESULT) (TPM_BASE + 36))\r | |
| 1180 | #define TPM_WRONG_ENTITYTYPE ((TPM_RESULT) (TPM_BASE + 37))\r | |
| 1181 | #define TPM_INVALID_POSTINIT ((TPM_RESULT) (TPM_BASE + 38))\r | |
| 1182 | #define TPM_INAPPROPRIATE_SIG ((TPM_RESULT) (TPM_BASE + 39))\r | |
| 1183 | #define TPM_BAD_KEY_PROPERTY ((TPM_RESULT) (TPM_BASE + 40))\r | |
| 1184 | #define TPM_BAD_MIGRATION ((TPM_RESULT) (TPM_BASE + 41))\r | |
| 1185 | #define TPM_BAD_SCHEME ((TPM_RESULT) (TPM_BASE + 42))\r | |
| 1186 | #define TPM_BAD_DATASIZE ((TPM_RESULT) (TPM_BASE + 43))\r | |
| 1187 | #define TPM_BAD_MODE ((TPM_RESULT) (TPM_BASE + 44))\r | |
| 1188 | #define TPM_BAD_PRESENCE ((TPM_RESULT) (TPM_BASE + 45))\r | |
| 1189 | #define TPM_BAD_VERSION ((TPM_RESULT) (TPM_BASE + 46))\r | |
| 1190 | #define TPM_NO_WRAP_TRANSPORT ((TPM_RESULT) (TPM_BASE + 47))\r | |
| 1191 | #define TPM_AUDITFAIL_UNSUCCESSFUL ((TPM_RESULT) (TPM_BASE + 48))\r | |
| 1192 | #define TPM_AUDITFAIL_SUCCESSFUL ((TPM_RESULT) (TPM_BASE + 49))\r | |
| 1193 | #define TPM_NOTRESETABLE ((TPM_RESULT) (TPM_BASE + 50))\r | |
| 1194 | #define TPM_NOTLOCAL ((TPM_RESULT) (TPM_BASE + 51))\r | |
| 1195 | #define TPM_BAD_TYPE ((TPM_RESULT) (TPM_BASE + 52))\r | |
| 1196 | #define TPM_INVALID_RESOURCE ((TPM_RESULT) (TPM_BASE + 53))\r | |
| 1197 | #define TPM_NOTFIPS ((TPM_RESULT) (TPM_BASE + 54))\r | |
| 1198 | #define TPM_INVALID_FAMILY ((TPM_RESULT) (TPM_BASE + 55))\r | |
| 1199 | #define TPM_NO_NV_PERMISSION ((TPM_RESULT) (TPM_BASE + 56))\r | |
| 1200 | #define TPM_REQUIRES_SIGN ((TPM_RESULT) (TPM_BASE + 57))\r | |
| 1201 | #define TPM_KEY_NOTSUPPORTED ((TPM_RESULT) (TPM_BASE + 58))\r | |
| 1202 | #define TPM_AUTH_CONFLICT ((TPM_RESULT) (TPM_BASE + 59))\r | |
| 1203 | #define TPM_AREA_LOCKED ((TPM_RESULT) (TPM_BASE + 60))\r | |
| 1204 | #define TPM_BAD_LOCALITY ((TPM_RESULT) (TPM_BASE + 61))\r | |
| 1205 | #define TPM_READ_ONLY ((TPM_RESULT) (TPM_BASE + 62))\r | |
| 1206 | #define TPM_PER_NOWRITE ((TPM_RESULT) (TPM_BASE + 63))\r | |
| 1207 | #define TPM_FAMILYCOUNT ((TPM_RESULT) (TPM_BASE + 64))\r | |
| 1208 | #define TPM_WRITE_LOCKED ((TPM_RESULT) (TPM_BASE + 65))\r | |
| 1209 | #define TPM_BAD_ATTRIBUTES ((TPM_RESULT) (TPM_BASE + 66))\r | |
| 1210 | #define TPM_INVALID_STRUCTURE ((TPM_RESULT) (TPM_BASE + 67))\r | |
| 1211 | #define TPM_KEY_OWNER_CONTROL ((TPM_RESULT) (TPM_BASE + 68))\r | |
| 1212 | #define TPM_BAD_COUNTER ((TPM_RESULT) (TPM_BASE + 69))\r | |
| 1213 | #define TPM_NOT_FULLWRITE ((TPM_RESULT) (TPM_BASE + 70))\r | |
| 1214 | #define TPM_CONTEXT_GAP ((TPM_RESULT) (TPM_BASE + 71))\r | |
| 1215 | #define TPM_MAXNVWRITES ((TPM_RESULT) (TPM_BASE + 72))\r | |
| 1216 | #define TPM_NOOPERATOR ((TPM_RESULT) (TPM_BASE + 73))\r | |
| 1217 | #define TPM_RESOURCEMISSING ((TPM_RESULT) (TPM_BASE + 74))\r | |
| 1218 | #define TPM_DELEGATE_LOCK ((TPM_RESULT) (TPM_BASE + 75))\r | |
| 1219 | #define TPM_DELEGATE_FAMILY ((TPM_RESULT) (TPM_BASE + 76))\r | |
| 1220 | #define TPM_DELEGATE_ADMIN ((TPM_RESULT) (TPM_BASE + 77))\r | |
| 1221 | #define TPM_TRANSPORT_NOTEXCLUSIVE ((TPM_RESULT) (TPM_BASE + 78))\r | |
| 1222 | #define TPM_OWNER_CONTROL ((TPM_RESULT) (TPM_BASE + 79))\r | |
| 1223 | #define TPM_DAA_RESOURCES ((TPM_RESULT) (TPM_BASE + 80))\r | |
| 1224 | #define TPM_DAA_INPUT_DATA0 ((TPM_RESULT) (TPM_BASE + 81))\r | |
| 1225 | #define TPM_DAA_INPUT_DATA1 ((TPM_RESULT) (TPM_BASE + 82))\r | |
| 1226 | #define TPM_DAA_ISSUER_SETTINGS ((TPM_RESULT) (TPM_BASE + 83))\r | |
| 1227 | #define TPM_DAA_TPM_SETTINGS ((TPM_RESULT) (TPM_BASE + 84))\r | |
| 1228 | #define TPM_DAA_STAGE ((TPM_RESULT) (TPM_BASE + 85))\r | |
| 1229 | #define TPM_DAA_ISSUER_VALIDITY ((TPM_RESULT) (TPM_BASE + 86))\r | |
| 1230 | #define TPM_DAA_WRONG_W ((TPM_RESULT) (TPM_BASE + 87))\r | |
| 1231 | #define TPM_BAD_HANDLE ((TPM_RESULT) (TPM_BASE + 88))\r | |
| 1232 | #define TPM_BAD_DELEGATE ((TPM_RESULT) (TPM_BASE + 89))\r | |
| 1233 | #define TPM_BADCONTEXT ((TPM_RESULT) (TPM_BASE + 90))\r | |
| 1234 | #define TPM_TOOMANYCONTEXTS ((TPM_RESULT) (TPM_BASE + 91))\r | |
| 1235 | #define TPM_MA_TICKET_SIGNATURE ((TPM_RESULT) (TPM_BASE + 92))\r | |
| 1236 | #define TPM_MA_DESTINATION ((TPM_RESULT) (TPM_BASE + 93))\r | |
| 1237 | #define TPM_MA_SOURCE ((TPM_RESULT) (TPM_BASE + 94))\r | |
| 1238 | #define TPM_MA_AUTHORITY ((TPM_RESULT) (TPM_BASE + 95))\r | |
| 1239 | #define TPM_PERMANENTEK ((TPM_RESULT) (TPM_BASE + 97))\r | |
| 1240 | #define TPM_BAD_SIGNATURE ((TPM_RESULT) (TPM_BASE + 98))\r | |
| 1241 | #define TPM_NOCONTEXTSPACE ((TPM_RESULT) (TPM_BASE + 99))\r | |
| 1242 | \r | |
| 1243 | #define TPM_RETRY ((TPM_RESULT) (TPM_BASE + TPM_NON_FATAL))\r | |
| 1244 | #define TPM_NEEDS_SELFTEST ((TPM_RESULT) (TPM_BASE + TPM_NON_FATAL + 1))\r | |
| 1245 | #define TPM_DOING_SELFTEST ((TPM_RESULT) (TPM_BASE + TPM_NON_FATAL + 2))\r | |
| 1246 | #define TPM_DEFEND_LOCK_RUNNING ((TPM_RESULT) (TPM_BASE + TPM_NON_FATAL + 3))\r | |
| 1247 | \r | |
| 1248 | //\r | |
| 1249 | // Part 2, section 17: Ordinals\r | |
| 1250 | //\r | |
| 1251 | // Ordinals are 32 bit values. The upper byte contains values that serve as\r | |
| 1252 | // flag indicators, the next byte contains values indicating what committee\r | |
| 1253 | // designated the ordinal, and the final two bytes contain the Command\r | |
| 1254 | // Ordinal Index.\r | |
| 1255 | // 3 2 1\r | |
| 1256 | // 1 0 9 8 7 6 5 4 3 2 1 0 9 8 7 6 5 4 3 2 1 0 9 8 7 6 5 4 3 2 1 0\r | |
| 1257 | // +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r | |
| 1258 | // |P|C|V| Reserved| Purview | Command Ordinal Index |\r | |
| 1259 | // +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r | |
| 1260 | //\r | |
| 1261 | // Where:\r | |
| 1262 | //\r | |
| 1263 | // * P is Protected/Unprotected command. When 0 the command is a Protected\r | |
| 1264 | // command, when 1 the command is an Unprotected command.\r | |
| 1265 | //\r | |
| 1266 | // * C is Non-Connection/Connection related command. When 0 this command\r | |
| 1267 | // passes through to either the protected (TPM) or unprotected (TSS)\r | |
| 1268 | // components.\r | |
| 1269 | //\r | |
| 1270 | // * V is TPM/Vendor command. When 0 the command is TPM defined, when 1 the\r | |
| 1271 | // command is vendor defined.\r | |
| 1272 | //\r | |
| 1273 | // * All reserved area bits are set to 0.\r | |
| 1274 | //\r | |
| 1275 | \r | |
| 1276 | #define TPM_ORD_ActivateIdentity ((TPM_COMMAND_CODE) 0x0000007A)\r | |
| 1277 | #define TPM_ORD_AuthorizeMigrationKey ((TPM_COMMAND_CODE) 0x0000002B)\r | |
| 1278 | #define TPM_ORD_CertifyKey ((TPM_COMMAND_CODE) 0x00000032)\r | |
| 1279 | #define TPM_ORD_CertifyKey2 ((TPM_COMMAND_CODE) 0x00000033)\r | |
| 1280 | #define TPM_ORD_CertifySelfTest ((TPM_COMMAND_CODE) 0x00000052)\r | |
| 1281 | #define TPM_ORD_ChangeAuth ((TPM_COMMAND_CODE) 0x0000000C)\r | |
| 1282 | #define TPM_ORD_ChangeAuthAsymFinish ((TPM_COMMAND_CODE) 0x0000000F)\r | |
| 1283 | #define TPM_ORD_ChangeAuthAsymStart ((TPM_COMMAND_CODE) 0x0000000E)\r | |
| 1284 | #define TPM_ORD_ChangeAuthOwner ((TPM_COMMAND_CODE) 0x00000010)\r | |
| 1285 | #define TPM_ORD_CMK_ApproveMA ((TPM_COMMAND_CODE) 0x0000001D)\r | |
| 1286 | #define TPM_ORD_CMK_ConvertMigration ((TPM_COMMAND_CODE) 0x00000024)\r | |
| 1287 | #define TPM_ORD_CMK_CreateBlob ((TPM_COMMAND_CODE) 0x0000001B)\r | |
| 1288 | #define TPM_ORD_CMK_CreateKey ((TPM_COMMAND_CODE) 0x00000013)\r | |
| 1289 | #define TPM_ORD_CMK_CreateTicket ((TPM_COMMAND_CODE) 0x00000012)\r | |
| 1290 | #define TPM_ORD_CMK_SetRestrictions ((TPM_COMMAND_CODE) 0x0000001C)\r | |
| 1291 | #define TPM_ORD_ContinueSelfTest ((TPM_COMMAND_CODE) 0x00000053)\r | |
| 1292 | #define TPM_ORD_ConvertMigrationBlob ((TPM_COMMAND_CODE) 0x0000002A)\r | |
| 1293 | #define TPM_ORD_CreateCounter ((TPM_COMMAND_CODE) 0x000000DC)\r | |
| 1294 | #define TPM_ORD_CreateEndorsementKeyPair ((TPM_COMMAND_CODE) 0x00000078)\r | |
| 1295 | #define TPM_ORD_CreateMaintenanceArchive ((TPM_COMMAND_CODE) 0x0000002C)\r | |
| 1296 | #define TPM_ORD_CreateMigrationBlob ((TPM_COMMAND_CODE) 0x00000028)\r | |
| 1297 | #define TPM_ORD_CreateRevocableEK ((TPM_COMMAND_CODE) 0x0000007F)\r | |
| 1298 | #define TPM_ORD_CreateWrapKey ((TPM_COMMAND_CODE) 0x0000001F)\r | |
| 1299 | #define TPM_ORD_DAA_JOIN ((TPM_COMMAND_CODE) 0x00000029)\r | |
| 1300 | #define TPM_ORD_DAA_SIGN ((TPM_COMMAND_CODE) 0x00000031)\r | |
| 1301 | #define TPM_ORD_Delegate_CreateKeyDelegation ((TPM_COMMAND_CODE) 0x000000D4)\r | |
| 1302 | #define TPM_ORD_Delegate_CreateOwnerDelegation ((TPM_COMMAND_CODE) 0x000000D5)\r | |
| 1303 | #define TPM_ORD_Delegate_LoadOwnerDelegation ((TPM_COMMAND_CODE) 0x000000D8)\r | |
| 1304 | #define TPM_ORD_Delegate_Manage ((TPM_COMMAND_CODE) 0x000000D2)\r | |
| 1305 | #define TPM_ORD_Delegate_ReadTable ((TPM_COMMAND_CODE) 0x000000DB)\r | |
| 1306 | #define TPM_ORD_Delegate_UpdateVerification ((TPM_COMMAND_CODE) 0x000000D1)\r | |
| 1307 | #define TPM_ORD_Delegate_VerifyDelegation ((TPM_COMMAND_CODE) 0x000000D6)\r | |
| 1308 | #define TPM_ORD_DirRead ((TPM_COMMAND_CODE) 0x0000001A)\r | |
| 1309 | #define TPM_ORD_DirWriteAuth ((TPM_COMMAND_CODE) 0x00000019)\r | |
| 1310 | #define TPM_ORD_DisableForceClear ((TPM_COMMAND_CODE) 0x0000005E)\r | |
| 1311 | #define TPM_ORD_DisableOwnerClear ((TPM_COMMAND_CODE) 0x0000005C)\r | |
| 1312 | #define TPM_ORD_DisablePubekRead ((TPM_COMMAND_CODE) 0x0000007E)\r | |
| 1313 | #define TPM_ORD_DSAP ((TPM_COMMAND_CODE) 0x00000011)\r | |
| 1314 | #define TPM_ORD_EstablishTransport ((TPM_COMMAND_CODE) 0x000000E6)\r | |
| 1315 | #define TPM_ORD_EvictKey ((TPM_COMMAND_CODE) 0x00000022)\r | |
| 1316 | #define TPM_ORD_ExecuteTransport ((TPM_COMMAND_CODE) 0x000000E7)\r | |
| 1317 | #define TPM_ORD_Extend ((TPM_COMMAND_CODE) 0x00000014)\r | |
| 1318 | #define TPM_ORD_FieldUpgrade ((TPM_COMMAND_CODE) 0x000000AA)\r | |
| 1319 | #define TPM_ORD_FlushSpecific ((TPM_COMMAND_CODE) 0x000000BA)\r | |
| 1320 | #define TPM_ORD_ForceClear ((TPM_COMMAND_CODE) 0x0000005D)\r | |
| 1321 | #define TPM_ORD_GetAuditDigest ((TPM_COMMAND_CODE) 0x00000085)\r | |
| 1322 | #define TPM_ORD_GetAuditDigestSigned ((TPM_COMMAND_CODE) 0x00000086)\r | |
| 1323 | #define TPM_ORD_GetAuditEvent ((TPM_COMMAND_CODE) 0x00000082)\r | |
| 1324 | #define TPM_ORD_GetAuditEventSigned ((TPM_COMMAND_CODE) 0x00000083)\r | |
| 1325 | #define TPM_ORD_GetCapability ((TPM_COMMAND_CODE) 0x00000065)\r | |
| 1326 | #define TPM_ORD_GetCapabilityOwner ((TPM_COMMAND_CODE) 0x00000066)\r | |
| 1327 | #define TPM_ORD_GetCapabilitySigned ((TPM_COMMAND_CODE) 0x00000064)\r | |
| 1328 | #define TPM_ORD_GetOrdinalAuditStatus ((TPM_COMMAND_CODE) 0x0000008C)\r | |
| 1329 | #define TPM_ORD_GetPubKey ((TPM_COMMAND_CODE) 0x00000021)\r | |
| 1330 | #define TPM_ORD_GetRandom ((TPM_COMMAND_CODE) 0x00000046)\r | |
| 1331 | #define TPM_ORD_GetTestResult ((TPM_COMMAND_CODE) 0x00000054)\r | |
| 1332 | #define TPM_ORD_GetTicks ((TPM_COMMAND_CODE) 0x000000F1)\r | |
| 1333 | #define TPM_ORD_IncrementCounter ((TPM_COMMAND_CODE) 0x000000DD)\r | |
| 1334 | #define TPM_ORD_Init ((TPM_COMMAND_CODE) 0x00000097)\r | |
| 1335 | #define TPM_ORD_KeyControlOwner ((TPM_COMMAND_CODE) 0x00000023)\r | |
| 1336 | #define TPM_ORD_KillMaintenanceFeature ((TPM_COMMAND_CODE) 0x0000002E)\r | |
| 1337 | #define TPM_ORD_LoadAuthContext ((TPM_COMMAND_CODE) 0x000000B7)\r | |
| 1338 | #define TPM_ORD_LoadContext ((TPM_COMMAND_CODE) 0x000000B9)\r | |
| 1339 | #define TPM_ORD_LoadKey ((TPM_COMMAND_CODE) 0x00000020)\r | |
| 1340 | #define TPM_ORD_LoadKey2 ((TPM_COMMAND_CODE) 0x00000041)\r | |
| 1341 | #define TPM_ORD_LoadKeyContext ((TPM_COMMAND_CODE) 0x000000B5)\r | |
| 1342 | #define TPM_ORD_LoadMaintenanceArchive ((TPM_COMMAND_CODE) 0x0000002D)\r | |
| 1343 | #define TPM_ORD_LoadManuMaintPub ((TPM_COMMAND_CODE) 0x0000002F)\r | |
| 1344 | #define TPM_ORD_MakeIdentity ((TPM_COMMAND_CODE) 0x00000079)\r | |
| 1345 | #define TPM_ORD_MigrateKey ((TPM_COMMAND_CODE) 0x00000025)\r | |
| 1346 | #define TPM_ORD_NV_DefineSpace ((TPM_COMMAND_CODE) 0x000000CC)\r | |
| 1347 | #define TPM_ORD_NV_ReadValue ((TPM_COMMAND_CODE) 0x000000CF)\r | |
| 1348 | #define TPM_ORD_NV_ReadValueAuth ((TPM_COMMAND_CODE) 0x000000D0)\r | |
| 1349 | #define TPM_ORD_NV_WriteValue ((TPM_COMMAND_CODE) 0x000000CD)\r | |
| 1350 | #define TPM_ORD_NV_WriteValueAuth ((TPM_COMMAND_CODE) 0x000000CE)\r | |
| 1351 | #define TPM_ORD_OIAP ((TPM_COMMAND_CODE) 0x0000000A)\r | |
| 1352 | #define TPM_ORD_OSAP ((TPM_COMMAND_CODE) 0x0000000B)\r | |
| 1353 | #define TPM_ORD_OwnerClear ((TPM_COMMAND_CODE) 0x0000005B)\r | |
| 1354 | #define TPM_ORD_OwnerReadInternalPub ((TPM_COMMAND_CODE) 0x00000081)\r | |
| 1355 | #define TPM_ORD_OwnerReadPubek ((TPM_COMMAND_CODE) 0x0000007D)\r | |
| 1356 | #define TPM_ORD_OwnerSetDisable ((TPM_COMMAND_CODE) 0x0000006E)\r | |
| 1357 | #define TPM_ORD_PCR_Reset ((TPM_COMMAND_CODE) 0x000000C8)\r | |
| 1358 | #define TPM_ORD_PcrRead ((TPM_COMMAND_CODE) 0x00000015)\r | |
| 1359 | #define TPM_ORD_PhysicalDisable ((TPM_COMMAND_CODE) 0x00000070)\r | |
| 1360 | #define TPM_ORD_PhysicalEnable ((TPM_COMMAND_CODE) 0x0000006F)\r | |
| 1361 | #define TPM_ORD_PhysicalSetDeactivated ((TPM_COMMAND_CODE) 0x00000072)\r | |
| 1362 | #define TPM_ORD_Quote ((TPM_COMMAND_CODE) 0x00000016)\r | |
| 1363 | #define TPM_ORD_Quote2 ((TPM_COMMAND_CODE) 0x0000003E)\r | |
| 1364 | #define TPM_ORD_ReadCounter ((TPM_COMMAND_CODE) 0x000000DE)\r | |
| 1365 | #define TPM_ORD_ReadManuMaintPub ((TPM_COMMAND_CODE) 0x00000030)\r | |
| 1366 | #define TPM_ORD_ReadPubek ((TPM_COMMAND_CODE) 0x0000007C)\r | |
| 1367 | #define TPM_ORD_ReleaseCounter ((TPM_COMMAND_CODE) 0x000000DF)\r | |
| 1368 | #define TPM_ORD_ReleaseCounterOwner ((TPM_COMMAND_CODE) 0x000000E0)\r | |
| 1369 | #define TPM_ORD_ReleaseTransportSigned ((TPM_COMMAND_CODE) 0x000000E8)\r | |
| 1370 | #define TPM_ORD_Reset ((TPM_COMMAND_CODE) 0x0000005A)\r | |
| 1371 | #define TPM_ORD_ResetLockValue ((TPM_COMMAND_CODE) 0x00000040)\r | |
| 1372 | #define TPM_ORD_RevokeTrust ((TPM_COMMAND_CODE) 0x00000080)\r | |
| 1373 | #define TPM_ORD_SaveAuthContext ((TPM_COMMAND_CODE) 0x000000B6)\r | |
| 1374 | #define TPM_ORD_SaveContext ((TPM_COMMAND_CODE) 0x000000B8)\r | |
| 1375 | #define TPM_ORD_SaveKeyContext ((TPM_COMMAND_CODE) 0x000000B4)\r | |
| 1376 | #define TPM_ORD_SaveState ((TPM_COMMAND_CODE) 0x00000098)\r | |
| 1377 | #define TPM_ORD_Seal ((TPM_COMMAND_CODE) 0x00000017)\r | |
| 1378 | #define TPM_ORD_Sealx ((TPM_COMMAND_CODE) 0x0000003D)\r | |
| 1379 | #define TPM_ORD_SelfTestFull ((TPM_COMMAND_CODE) 0x00000050)\r | |
| 1380 | #define TPM_ORD_SetCapability ((TPM_COMMAND_CODE) 0x0000003F)\r | |
| 1381 | #define TPM_ORD_SetOperatorAuth ((TPM_COMMAND_CODE) 0x00000074)\r | |
| 1382 | #define TPM_ORD_SetOrdinalAuditStatus ((TPM_COMMAND_CODE) 0x0000008D)\r | |
| 1383 | #define TPM_ORD_SetOwnerInstall ((TPM_COMMAND_CODE) 0x00000071)\r | |
| 1384 | #define TPM_ORD_SetOwnerPointer ((TPM_COMMAND_CODE) 0x00000075)\r | |
| 1385 | #define TPM_ORD_SetRedirection ((TPM_COMMAND_CODE) 0x0000009A)\r | |
| 1386 | #define TPM_ORD_SetTempDeactivated ((TPM_COMMAND_CODE) 0x00000073)\r | |
| 1387 | #define TPM_ORD_SHA1Complete ((TPM_COMMAND_CODE) 0x000000A2)\r | |
| 1388 | #define TPM_ORD_SHA1CompleteExtend ((TPM_COMMAND_CODE) 0x000000A3)\r | |
| 1389 | #define TPM_ORD_SHA1Start ((TPM_COMMAND_CODE) 0x000000A0)\r | |
| 1390 | #define TPM_ORD_SHA1Update ((TPM_COMMAND_CODE) 0x000000A1)\r | |
| 1391 | #define TPM_ORD_Sign ((TPM_COMMAND_CODE) 0x0000003C)\r | |
| 1392 | #define TPM_ORD_Startup ((TPM_COMMAND_CODE) 0x00000099)\r | |
| 1393 | #define TPM_ORD_StirRandom ((TPM_COMMAND_CODE) 0x00000047)\r | |
| 1394 | #define TPM_ORD_TakeOwnership ((TPM_COMMAND_CODE) 0x0000000D)\r | |
| 1395 | #define TPM_ORD_Terminate_Handle ((TPM_COMMAND_CODE) 0x00000096)\r | |
| 1396 | #define TPM_ORD_TickStampBlob ((TPM_COMMAND_CODE) 0x000000F2)\r | |
| 1397 | #define TPM_ORD_UnBind ((TPM_COMMAND_CODE) 0x0000001E)\r | |
| 1398 | #define TPM_ORD_Unseal ((TPM_COMMAND_CODE) 0x00000018)\r | |
| 1399 | #define TSC_ORD_PhysicalPresence ((TPM_COMMAND_CODE) 0x4000000A)\r | |
| 1400 | #define TSC_ORD_ResetEstablishmentBit ((TPM_COMMAND_CODE) 0x4000000B)\r | |
| 1401 | \r | |
| 1402 | //\r | |
| 1403 | // Part 2, section 18: Context structures\r | |
| 1404 | //\r | |
| 1405 | \r | |
| 1406 | typedef struct tdTPM_CONTEXT_BLOB\r | |
| 1407 | {\r | |
| 1408 | TPM_STRUCTURE_TAG tag;\r | |
| 1409 | TPM_RESOURCE_TYPE resourceType;\r | |
| 1410 | TPM_HANDLE handle;\r | |
| 1411 | UINT8 label[16];\r | |
| 1412 | UINT32 contextCount;\r | |
| 1413 | TPM_DIGEST integrityDigest;\r | |
| 1414 | UINT32 additionalSize;\r | |
| 1415 | UINT8 *additionalData;\r | |
| 1416 | UINT32 sensitiveSize;\r | |
| 1417 | UINT8 *sensitiveData;\r | |
| 1418 | } TPM_CONTEXT_BLOB;\r | |
| 1419 | \r | |
| 1420 | typedef struct tdTPM_CONTEXT_SENSITIVE\r | |
| 1421 | {\r | |
| 1422 | TPM_STRUCTURE_TAG tag;\r | |
| 1423 | TPM_NONCE contextNonce;\r | |
| 1424 | UINT32 internalSize;\r | |
| 1425 | UINT8 *internalData;\r | |
| 1426 | } TPM_CONTEXT_SENSITIVE;\r | |
| 1427 | \r | |
| 1428 | //\r | |
| 1429 | // Part 2, section 19: NV Structures\r | |
| 1430 | //\r | |
| 1431 | \r | |
| 1432 | #define TPM_NV_INDEX_LOCK ((UINT32)0xffffffff)\r | |
| 1433 | #define TPM_NV_INDEX0 ((UINT32)0x00000000)\r | |
| 1434 | #define TPM_NV_INDEX_DIR ((UINT32)0x10000001)\r | |
| 1435 | #define TPM_NV_INDEX_EKCert ((UINT32)0x0000f000)\r | |
| 1436 | #define TPM_NV_INDEX_TPM_CC ((UINT32)0x0000f001)\r | |
| 1437 | #define TPM_NV_INDEX_PlatformCert ((UINT32)0x0000f002)\r | |
| 1438 | #define TPM_NV_INDEX_Platform_CC ((UINT32)0x0000f003)\r | |
| 1439 | // The following define ranges of reserved indices.\r | |
| 1440 | #define TPM_NV_INDEX_TSS_BASE ((UINT32)0x00011100)\r | |
| 1441 | #define TPM_NV_INDEX_PC_BASE ((UINT32)0x00011200)\r | |
| 1442 | #define TPM_NV_INDEX_SERVER_BASE ((UINT32)0x00011300)\r | |
| 1443 | #define TPM_NV_INDEX_MOBILE_BASE ((UINT32)0x00011400)\r | |
| 1444 | #define TPM_NV_INDEX_PERIPHERAL_BASE ((UINT32)0x00011500)\r | |
| 1445 | #define TPM_NV_INDEX_GROUP_RESV_BASE ((UINT32)0x00010000)\r | |
| 1446 | \r | |
| 1447 | typedef UINT32 TPM_NV_PER_ATTRIBUTES;\r | |
| 1448 | // The typedefs TPM_NV_PER_ATTRIBUTES (not present in TPM 1.2 Spec. have been added \r | |
| 1449 | // and structure fields that were to hold the following values\r | |
| 1450 | #define TPM_NV_PER_READ_STCLEAR (((UINT32)1)<<31)\r | |
| 1451 | #define TPM_NV_PER_AUTHREAD (((UINT32)1)<<18)\r | |
| 1452 | #define TPM_NV_PER_OWNERREAD (((UINT32)1)<<17)\r | |
| 1453 | #define TPM_NV_PER_PPREAD (((UINT32)1)<<16)\r | |
| 1454 | #define TPM_NV_PER_GLOBALLOCK (((UINT32)1)<<15)\r | |
| 1455 | #define TPM_NV_PER_WRITE_STCLEAR (((UINT32)1)<<14)\r | |
| 1456 | #define TPM_NV_PER_WRITEDEFINE (((UINT32)1)<<13)\r | |
| 1457 | #define TPM_NV_PER_WRITEALL (((UINT32)1)<<12)\r | |
| 1458 | #define TPM_NV_PER_AUTHWRITE (((UINT32)1)<<2)\r | |
| 1459 | #define TPM_NV_PER_OWNERWRITE (((UINT32)1)<<1)\r | |
| 1460 | #define TPM_NV_PER_PPWRITE (((UINT32)1)<<0)\r | |
| 1461 | \r | |
| 1462 | typedef struct tdTPM_NV_ATTRIBUTES\r | |
| 1463 | {\r | |
| 1464 | TPM_STRUCTURE_TAG tag;\r | |
| 1465 | TPM_NV_PER_ATTRIBUTES attributes;\r | |
| 1466 | } TPM_NV_ATTRIBUTES;\r | |
| 1467 | \r | |
| 1468 | \r | |
| 1469 | typedef struct tdTPM_NV_DATA_PUBLIC\r | |
| 1470 | {\r | |
| 1471 | TPM_STRUCTURE_TAG tag;\r | |
| 1472 | TPM_NV_INDEX nvIndex;\r | |
| 1473 | TPM_PCR_INFO_SHORT pcrInfoRead;\r | |
| 1474 | TPM_PCR_INFO_SHORT pcrInfoWrite;\r | |
| 1475 | TPM_NV_ATTRIBUTES permission;\r | |
| 1476 | BOOLEAN bReadSTClear;\r | |
| 1477 | BOOLEAN bWriteSTClear;\r | |
| 1478 | BOOLEAN bWriteDefine;\r | |
| 1479 | UINT32 dataSize;\r | |
| 1480 | } TPM_NV_DATA_PUBLIC;\r | |
| 1481 | \r | |
| 1482 | \r | |
| 1483 | \r | |
| 1484 | // Internal to TPM:\r | |
| 1485 | //typedef struct tdTPM_NV_DATA_SENSITIVE\r | |
| 1486 | //{\r | |
| 1487 | // TPM_STRUCTURE_TAG tag;\r | |
| 1488 | // TPM_NV_DATA_PUBLIC pubInfo;\r | |
| 1489 | // TPM_AUTHDATA authValue;\r | |
| 1490 | // UINT8 *data;\r | |
| 1491 | //} TPM_NV_DATA_SENSITIVE;\r | |
| 1492 | \r | |
| 1493 | \r | |
| 1494 | //\r | |
| 1495 | // Part 2, section 20: Delegation\r | |
| 1496 | //\r | |
| 1497 | \r | |
| 1498 | //\r | |
| 1499 | // Part 2, section 20.3: Owner Permissions Settings for per1 bits\r | |
| 1500 | //\r | |
| 1501 | #define TPM_DELEGATE_SetOrdinalAuditStatus (((UINT32)1)<<30)\r | |
| 1502 | #define TPM_DELEGATE_DirWriteAuth (((UINT32)1)<<29)\r | |
| 1503 | #define TPM_DELEGATE_CMK_ApproveMA (((UINT32)1)<<28)\r | |
| 1504 | #define TPM_DELEGATE_CMK_CreateTicket (((UINT32)1)<<26)\r | |
| 1505 | #define TPM_DELEGATE_Delegate_LoadOwnerDelegation (((UINT32)1)<<24)\r | |
| 1506 | #define TPM_DELEGATE_DAA_Join (((UINT32)1)<<23)\r | |
| 1507 | #define TPM_DELEGATE_AuthorizeMigrationKey (((UINT32)1)<<22)\r | |
| 1508 | #define TPM_DELEGATE_CreateMaintenanceArchive (((UINT32)1)<<21)\r | |
| 1509 | #define TPM_DELEGATE_LoadMaintenanceArchive (((UINT32)1)<<20)\r | |
| 1510 | #define TPM_DELEGATE_KillMaintenanceFeature (((UINT32)1)<<19)\r | |
| 1511 | #define TPM_DELEGATE_OwnerReadInteralPub (((UINT32)1)<<18)\r | |
| 1512 | #define TPM_DELEGATE_ResetLockValue (((UINT32)1)<<17)\r | |
| 1513 | #define TPM_DELEGATE_OwnerClear (((UINT32)1)<<16)\r | |
| 1514 | #define TPM_DELEGATE_DisableOwnerClear (((UINT32)1)<<15)\r | |
| 1515 | #define TPM_DELEGATE_OwnerSetDisable (((UINT32)1)<<13)\r | |
| 1516 | #define TPM_DELEGATE_SetCapability (((UINT32)1)<<12)\r | |
| 1517 | #define TPM_DELEGATE_MakeIdentity (((UINT32)1)<<11)\r | |
| 1518 | #define TPM_DELEGATE_ActivateIdentity (((UINT32)1)<<10)\r | |
| 1519 | #define TPM_DELEGATE_OwnerReadPubek (((UINT32)1)<<9)\r | |
| 1520 | #define TPM_DELEGATE_DisablePubekRead (((UINT32)1)<<8)\r | |
| 1521 | #define TPM_DELEGATE_SetRedirection (((UINT32)1)<<7)\r | |
| 1522 | #define TPM_DELEGATE_FieldUpgrade (((UINT32)1)<<6)\r | |
| 1523 | #define TPM_DELEGATE_Delegate_UpdateVerification (((UINT32)1)<<5)\r | |
| 1524 | #define TPM_DELEGATE_CreateCounter (((UINT32)1)<<4)\r | |
| 1525 | #define TPM_DELEGATE_ReleaseCounterOwner (((UINT32)1)<<3)\r | |
| 1526 | #define TPM_DELEGATE_DelegateManage (((UINT32)1)<<2)\r | |
| 1527 | #define TPM_DELEGATE_Delegate_CreateOwnerDelegation (((UINT32)1)<<1)\r | |
| 1528 | #define TPM_DELEGATE_DAA_Sign (((UINT32)1)<<0)\r | |
| 1529 | \r | |
| 1530 | //\r | |
| 1531 | // Part 2, section 20.3: Key Permissions Settings for per1 bits\r | |
| 1532 | //\r | |
| 1533 | #define TPM_KEY_DELEGATE_CMK_ConvertMigration (((UINT32)1)<<28)\r | |
| 1534 | #define TPM_KEY_DELEGATE_TickStampBlob (((UINT32)1)<<27)\r | |
| 1535 | #define TPM_KEY_DELEGATE_ChangeAuthAsymStart (((UINT32)1)<<26)\r | |
| 1536 | #define TPM_KEY_DELEGATE_ChangeAuthAsymFinish (((UINT32)1)<<25)\r | |
| 1537 | #define TPM_KEY_DELEGATE_CMK_CreateKey (((UINT32)1)<<24)\r | |
| 1538 | #define TPM_KEY_DELEGATE_MigrateKey (((UINT32)1)<<23)\r | |
| 1539 | #define TPM_KEY_DELEGATE_LoadKey2 (((UINT32)1)<<22)\r | |
| 1540 | #define TPM_KEY_DELEGATE_EstablishTransport (((UINT32)1)<<21)\r | |
| 1541 | #define TPM_KEY_DELEGATE_ReleaseTransportSigned (((UINT32)1)<<20)\r | |
| 1542 | #define TPM_KEY_DELEGATE_Quote2 (((UINT32)1)<<19)\r | |
| 1543 | #define TPM_KEY_DELEGATE_Sealx (((UINT32)1)<<18)\r | |
| 1544 | #define TPM_KEY_DELEGATE_MakeIdentity (((UINT32)1)<<17)\r | |
| 1545 | #define TPM_KEY_DELEGATE_ActivateIdentity (((UINT32)1)<<16)\r | |
| 1546 | #define TPM_KEY_DELEGATE_GetAuditDigestSigned (((UINT32)1)<<15)\r | |
| 1547 | #define TPM_KEY_DELEGATE_Sign (((UINT32)1)<<14)\r | |
| 1548 | #define TPM_KEY_DELEGATE_CertifyKey2 (((UINT32)1)<<13)\r | |
| 1549 | #define TPM_KEY_DELEGATE_CertifyKey (((UINT32)1)<<12)\r | |
| 1550 | #define TPM_KEY_DELEGATE_CreateWrapKey (((UINT32)1)<<11)\r | |
| 1551 | #define TPM_KEY_DELEGATE_CMK_CreateBlob (((UINT32)1)<<10)\r | |
| 1552 | #define TPM_KEY_DELEGATE_CreateMigrationBlob (((UINT32)1)<<9)\r | |
| 1553 | #define TPM_KEY_DELEGATE_ConvertMigrationBlob (((UINT32)1)<<8)\r | |
| 1554 | #define TPM_KEY_DELEGATE_CreateKeyDelegation (((UINT32)1)<<7)\r | |
| 1555 | #define TPM_KEY_DELEGATE_ChangeAuth (((UINT32)1)<<6)\r | |
| 1556 | #define TPM_KEY_DELEGATE_GetPubKey (((UINT32)1)<<5)\r | |
| 1557 | #define TPM_KEY_DELEGATE_UnBind (((UINT32)1)<<4)\r | |
| 1558 | #define TPM_KEY_DELEGATE_Quote (((UINT32)1)<<3)\r | |
| 1559 | #define TPM_KEY_DELEGATE_Unseal (((UINT32)1)<<2)\r | |
| 1560 | #define TPM_KEY_DELEGATE_Seal (((UINT32)1)<<1)\r | |
| 1561 | #define TPM_KEY_DELEGATE_LoadKey (((UINT32)1)<<0)\r | |
| 1562 | \r | |
| 1563 | #define TPM_FAMILY_CREATE ((UINT32)0x00000001)\r | |
| 1564 | #define TPM_FAMILY_ENABLE ((UINT32)0x00000002)\r | |
| 1565 | #define TPM_FAMILY_ADMIN ((UINT32)0x00000003)\r | |
| 1566 | #define TPM_FAMILY_INVALIDATE ((UINT32)0x00000004)\r | |
| 1567 | \r | |
| 1568 | #define TPM_FAMFLAG_DELEGATE_ADMIN_LOCK (((UINT32)1)<<1)\r | |
| 1569 | #define TPM_FAMFLAG_ENABLE (((UINT32)1)<<0)\r | |
| 1570 | \r | |
| 1571 | typedef struct tdTPM_FAMILY_LABEL\r | |
| 1572 | {\r | |
| 1573 | UINT8 label;\r | |
| 1574 | } TPM_FAMILY_LABEL;\r | |
| 1575 | \r | |
| 1576 | typedef struct tdTPM_FAMILY_TABLE_ENTRY\r | |
| 1577 | {\r | |
| 1578 | TPM_STRUCTURE_TAG tag;\r | |
| 1579 | TPM_FAMILY_LABEL label;\r | |
| 1580 | TPM_FAMILY_ID familyID;\r | |
| 1581 | TPM_FAMILY_VERIFICATION verificationCount;\r | |
| 1582 | TPM_FAMILY_FLAGS flags;\r | |
| 1583 | } TPM_FAMILY_TABLE_ENTRY;\r | |
| 1584 | \r | |
| 1585 | #define TPM_FAMILY_TABLE_ENTRY_MIN 8\r | |
| 1586 | //typedef struct tdTPM_FAMILY_TABLE\r | |
| 1587 | //{\r | |
| 1588 | // TPM_FAMILY_TABLE_ENTRY FamTableRow[TPM_NUM_FAMILY_TABLE_ENTRY_MIN];\r | |
| 1589 | //} TPM_FAMILY_TABLE;\r | |
| 1590 | \r | |
| 1591 | \r | |
| 1592 | typedef struct tdTPM_DELEGATE_LABEL\r | |
| 1593 | {\r | |
| 1594 | UINT8 label;\r | |
| 1595 | } TPM_DELEGATE_LABEL;\r | |
| 1596 | \r | |
| 1597 | \r | |
| 1598 | typedef UINT32 TPM_DELEGATE_TYPE;\r | |
| 1599 | #define TPM_DEL_OWNER_BITS ((UINT32)0x00000001)\r | |
| 1600 | #define TPM_DEL_KEY_BITS ((UINT32)0x00000002)\r | |
| 1601 | \r | |
| 1602 | typedef struct tdTPM_DELEGATIONS\r | |
| 1603 | {\r | |
| 1604 | TPM_STRUCTURE_TAG tag;\r | |
| 1605 | TPM_DELEGATE_TYPE delegateType;\r | |
| 1606 | UINT32 per1;\r | |
| 1607 | UINT32 per2;\r | |
| 1608 | } TPM_DELEGATIONS;\r | |
| 1609 | \r | |
| 1610 | typedef struct tdTPM_DELEGATE_PUBLIC\r | |
| 1611 | {\r | |
| 1612 | TPM_STRUCTURE_TAG tag;\r | |
| 1613 | TPM_DELEGATE_LABEL label;\r | |
| 1614 | TPM_PCR_INFO_SHORT pcrInfo;\r | |
| 1615 | TPM_DELEGATIONS permissions;\r | |
| 1616 | TPM_FAMILY_ID familyID;\r | |
| 1617 | TPM_FAMILY_VERIFICATION verificationCount;\r | |
| 1618 | } TPM_DELEGATE_PUBLIC;\r | |
| 1619 | \r | |
| 1620 | typedef struct tdTPM_DELEGATE_TABLE_ROW\r | |
| 1621 | {\r | |
| 1622 | TPM_STRUCTURE_TAG tag;\r | |
| 1623 | TPM_DELEGATE_PUBLIC pub;\r | |
| 1624 | TPM_SECRET authValue;\r | |
| 1625 | } TPM_DELEGATE_TABLE_ROW;\r | |
| 1626 | \r | |
| 1627 | \r | |
| 1628 | #define TPM_NUM_DELEGATE_TABLE_ENTRY_MIN 2\r | |
| 1629 | //typedef struct tdTPM_DELEGATE_TABLE\r | |
| 1630 | //{\r | |
| 1631 | // TPM_DELEGATE_TABLE_ROW delRow[TPM_NUM_DELEGATE_TABLE_ENTRY_MIN];\r | |
| 1632 | //} TPM_DELEGATE_TABLE;\r | |
| 1633 | \r | |
| 1634 | typedef struct tdTPM_DELEGATE_SENSITIVE\r | |
| 1635 | {\r | |
| 1636 | TPM_STRUCTURE_TAG tag;\r | |
| 1637 | TPM_SECRET authValue;\r | |
| 1638 | } TPM_DELEGATE_SENSITIVE;\r | |
| 1639 | \r | |
| 1640 | typedef struct tdTPM_DELEGATE_OWNER_BLOB\r | |
| 1641 | {\r | |
| 1642 | TPM_STRUCTURE_TAG tag;\r | |
| 1643 | TPM_DELEGATE_PUBLIC pub;\r | |
| 1644 | TPM_DIGEST integrityDigest;\r | |
| 1645 | UINT32 additionalSize;\r | |
| 1646 | UINT8 *additionalArea;\r | |
| 1647 | UINT32 sensitiveSize;\r | |
| 1648 | UINT8 *sensitiveArea;\r | |
| 1649 | } TPM_DELEGATE_OWNER_BLOB;\r | |
| 1650 | \r | |
| 1651 | typedef struct tdTPM_DELEGATE_KEY_BLOB\r | |
| 1652 | {\r | |
| 1653 | TPM_STRUCTURE_TAG tag;\r | |
| 1654 | TPM_DELEGATE_PUBLIC pub;\r | |
| 1655 | TPM_DIGEST integrityDigest;\r | |
| 1656 | TPM_DIGEST pubKeyDigest;\r | |
| 1657 | UINT32 additionalSize;\r | |
| 1658 | UINT8 *additionalArea;\r | |
| 1659 | UINT32 sensitiveSize;\r | |
| 1660 | UINT8 *sensitiveArea;\r | |
| 1661 | } TPM_DELEGATE_KEY_BLOB;\r | |
| 1662 | \r | |
| 1663 | //\r | |
| 1664 | // Part 2, section 21.1: TPM_CAPABILITY_AREA for GetCapability\r | |
| 1665 | //\r | |
| 1666 | #define TPM_CAP_ORD ((TPM_CAPABILITY_AREA) 0x00000001)\r | |
| 1667 | #define TPM_CAP_ALG ((TPM_CAPABILITY_AREA) 0x00000002)\r | |
| 1668 | #define TPM_CAP_PID ((TPM_CAPABILITY_AREA) 0x00000003)\r | |
| 1669 | #define TPM_CAP_FLAG ((TPM_CAPABILITY_AREA) 0x00000004)\r | |
| 1670 | #define TPM_CAP_PROPERTY ((TPM_CAPABILITY_AREA) 0x00000005)\r | |
| 1671 | #define TPM_CAP_VERSION ((TPM_CAPABILITY_AREA) 0x00000006)\r | |
| 1672 | #define TPM_CAP_KEY_HANDLE ((TPM_CAPABILITY_AREA) 0x00000007)\r | |
| 1673 | #define TPM_CAP_CHECK_LOADED ((TPM_CAPABILITY_AREA) 0x00000008)\r | |
| 1674 | #define TPM_CAP_SYM_MODE ((TPM_CAPABILITY_AREA) 0x00000009)\r | |
| 1675 | #define TPM_CAP_KEY_STATUS ((TPM_CAPABILITY_AREA) 0x0000000C)\r | |
| 1676 | #define TPM_CAP_NV_LIST ((TPM_CAPABILITY_AREA) 0x0000000D)\r | |
| 1677 | #define TPM_CAP_MFR ((TPM_CAPABILITY_AREA) 0x00000010)\r | |
| 1678 | #define TPM_CAP_NV_INDEX ((TPM_CAPABILITY_AREA) 0x00000011)\r | |
| 1679 | #define TPM_CAP_TRANS_ALG ((TPM_CAPABILITY_AREA) 0x00000012)\r | |
| 1680 | #define TPM_CAP_HANDLE ((TPM_CAPABILITY_AREA) 0x00000014)\r | |
| 1681 | #define TPM_CAP_TRANS_ES ((TPM_CAPABILITY_AREA) 0x00000015)\r | |
| 1682 | #define TPM_CAP_AUTH_ENCRYPT ((TPM_CAPABILITY_AREA) 0x00000017)\r | |
| 1683 | #define TPM_CAP_SELECT_SIZE ((TPM_CAPABILITY_AREA) 0x00000018)\r | |
| 1684 | #define TPM_CAP_VERSION_VAL ((TPM_CAPABILITY_AREA) 0x0000001A)\r | |
| 1685 | \r | |
| 1686 | #define TPM_CAP_FLAG_PERMANENT ((TPM_CAPABILITY_AREA) 0x00000108)\r | |
| 1687 | #define TPM_CAP_FLAG_VOLATILE ((TPM_CAPABILITY_AREA) 0x00000109)\r | |
| 1688 | \r | |
| 1689 | //\r | |
| 1690 | // Part 2, section 21.2: CAP_PROPERTY Subcap values for GetCapability\r | |
| 1691 | //\r | |
| 1692 | #define TPM_CAP_PROP_PCR ((TPM_CAPABILITY_AREA) 0x00000101)\r | |
| 1693 | #define TPM_CAP_PROP_DIR ((TPM_CAPABILITY_AREA) 0x00000102)\r | |
| 1694 | #define TPM_CAP_PROP_MANUFACTURER ((TPM_CAPABILITY_AREA) 0x00000103)\r | |
| 1695 | #define TPM_CAP_PROP_KEYS ((TPM_CAPABILITY_AREA) 0x00000104)\r | |
| 1696 | #define TPM_CAP_PROP_MIN_COUNTER ((TPM_CAPABILITY_AREA) 0x00000107)\r | |
| 1697 | #define TPM_CAP_PROP_AUTHSESS ((TPM_CAPABILITY_AREA) 0x0000010A)\r | |
| 1698 | #define TPM_CAP_PROP_TRANSESS ((TPM_CAPABILITY_AREA) 0x0000010B)\r | |
| 1699 | #define TPM_CAP_PROP_COUNTERS ((TPM_CAPABILITY_AREA) 0x0000010C)\r | |
| 1700 | #define TPM_CAP_PROP_MAX_AUTHSESS ((TPM_CAPABILITY_AREA) 0x0000010D)\r | |
| 1701 | #define TPM_CAP_PROP_MAX_TRANSESS ((TPM_CAPABILITY_AREA) 0x0000010E)\r | |
| 1702 | #define TPM_CAP_PROP_MAX_COUNTERS ((TPM_CAPABILITY_AREA) 0x0000010F)\r | |
| 1703 | #define TPM_CAP_PROP_MAX_KEYS ((TPM_CAPABILITY_AREA) 0x00000110)\r | |
| 1704 | #define TPM_CAP_PROP_OWNER ((TPM_CAPABILITY_AREA) 0x00000111)\r | |
| 1705 | #define TPM_CAP_PROP_CONTEXT ((TPM_CAPABILITY_AREA) 0x00000112)\r | |
| 1706 | #define TPM_CAP_PROP_MAX_CONTEXT ((TPM_CAPABILITY_AREA) 0x00000113)\r | |
| 1707 | #define TPM_CAP_PROP_FAMILYROWS ((TPM_CAPABILITY_AREA) 0x00000114)\r | |
| 1708 | #define TPM_CAP_PROP_TIS_TIMEOUT ((TPM_CAPABILITY_AREA) 0x00000115)\r | |
| 1709 | #define TPM_CAP_PROP_STARTUP_EFFECT ((TPM_CAPABILITY_AREA) 0x00000116)\r | |
| 1710 | #define TPM_CAP_PROP_DELEGATE_ROW ((TPM_CAPABILITY_AREA) 0x00000117)\r | |
| 1711 | #define TPM_CAP_PROP_DAA_MAX ((TPM_CAPABILITY_AREA) 0x00000119)\r | |
| 1712 | #define CAP_PROP_SESSION_DAA ((TPM_CAPABILITY_AREA) 0x0000011A)\r | |
| 1713 | #define TPM_CAP_PROP_CONTEXT_DIST ((TPM_CAPABILITY_AREA) 0x0000011B)\r | |
| 1714 | #define TPM_CAP_PROP_DAA_INTERRUPT ((TPM_CAPABILITY_AREA) 0x0000011C)\r | |
| 1715 | #define TPM_CAP_PROP_SESSIONS ((TPM_CAPABILITY_AREA) 0x0000011D)\r | |
| 1716 | #define TPM_CAP_PROP_MAX_SESSIONS ((TPM_CAPABILITY_AREA) 0x0000011E)\r | |
| 1717 | #define TPM_CAP_PROP_CMK_RESTRICTION ((TPM_CAPABILITY_AREA) 0x0000011F)\r | |
| 1718 | #define TPM_CAP_PROP_DURATION ((TPM_CAPABILITY_AREA) 0x00000120)\r | |
| 1719 | #define TPM_CAP_PROP_ACTIVE_COUNTER ((TPM_CAPABILITY_AREA) 0x00000122)\r | |
| 1720 | #define TPM_CAP_PROP_MAX_NV_AVAILABLE ((TPM_CAPABILITY_AREA) 0x00000123)\r | |
| 1721 | #define TPM_CAP_PROP_INPUT_BUFFER ((TPM_CAPABILITY_AREA) 0x00000124)\r | |
| 1722 | \r | |
| 1723 | //\r | |
| 1724 | // Part 2, section 21.6: TPM_CAP_VERSION_INFO\r | |
| 1725 | // [size_is(vendorSpecificSize)] BYTE* vendorSpecific;\r | |
| 1726 | //\r | |
| 1727 | typedef struct tdTPM_CAP_VERSION_INFO {\r | |
| 1728 | TPM_STRUCTURE_TAG tag;\r | |
| 1729 | TPM_VERSION version;\r | |
| 1730 | UINT16 specLevel;\r | |
| 1731 | UINT8 errataRev;\r | |
| 1732 | UINT8 tpmVendorID[4];\r | |
| 1733 | UINT16 vendorSpecificSize;\r | |
| 1734 | UINT8 *vendorSpecific;\r | |
| 1735 | } TPM_CAP_VERSION_INFO;\r | |
| 1736 | \r | |
| 1737 | //\r | |
| 1738 | // Part 2, section 22: DAA Structures\r | |
| 1739 | //\r | |
| 1740 | \r | |
| 1741 | #define TPM_DAA_SIZE_r0 (43)\r | |
| 1742 | #define TPM_DAA_SIZE_r1 (43)\r | |
| 1743 | #define TPM_DAA_SIZE_r2 (128)\r | |
| 1744 | #define TPM_DAA_SIZE_r3 (168)\r | |
| 1745 | #define TPM_DAA_SIZE_r4 (219)\r | |
| 1746 | #define TPM_DAA_SIZE_NT (20)\r | |
| 1747 | #define TPM_DAA_SIZE_v0 (128)\r | |
| 1748 | #define TPM_DAA_SIZE_v1 (192)\r | |
| 1749 | #define TPM_DAA_SIZE_NE (256)\r | |
| 1750 | #define TPM_DAA_SIZE_w (256)\r | |
| 1751 | #define TPM_DAA_SIZE_issuerModulus (256)\r | |
| 1752 | #define TPM_DAA_power0 (104)\r | |
| 1753 | #define TPM_DAA_power1 (1024)\r | |
| 1754 | \r | |
| 1755 | typedef struct tdTPM_DAA_ISSUER\r | |
| 1756 | {\r | |
| 1757 | TPM_STRUCTURE_TAG tag;\r | |
| 1758 | TPM_DIGEST DAA_digest_R0;\r | |
| 1759 | TPM_DIGEST DAA_digest_R1;\r | |
| 1760 | TPM_DIGEST DAA_digest_S0;\r | |
| 1761 | TPM_DIGEST DAA_digest_S1;\r | |
| 1762 | TPM_DIGEST DAA_digest_n;\r | |
| 1763 | TPM_DIGEST DAA_digest_gamma;\r | |
| 1764 | UINT8 DAA_generic_q[26];\r | |
| 1765 | } TPM_DAA_ISSUER;\r | |
| 1766 | \r | |
| 1767 | \r | |
| 1768 | typedef struct tdTPM_DAA_TPM\r | |
| 1769 | {\r | |
| 1770 | TPM_STRUCTURE_TAG tag;\r | |
| 1771 | TPM_DIGEST DAA_digestIssuer;\r | |
| 1772 | TPM_DIGEST DAA_digest_v0;\r | |
| 1773 | TPM_DIGEST DAA_digest_v1;\r | |
| 1774 | TPM_DIGEST DAA_rekey;\r | |
| 1775 | UINT32 DAA_count;\r | |
| 1776 | } TPM_DAA_TPM;\r | |
| 1777 | \r | |
| 1778 | typedef struct tdTPM_DAA_CONTEXT\r | |
| 1779 | {\r | |
| 1780 | TPM_STRUCTURE_TAG tag;\r | |
| 1781 | TPM_DIGEST DAA_digestContext;\r | |
| 1782 | TPM_DIGEST DAA_digest;\r | |
| 1783 | TPM_DAA_CONTEXT_SEED DAA_contextSeed;\r | |
| 1784 | UINT8 DAA_scratch[256];\r | |
| 1785 | UINT8 DAA_stage;\r | |
| 1786 | } TPM_DAA_CONTEXT;\r | |
| 1787 | \r | |
| 1788 | typedef struct tdTPM_DAA_JOINDATA\r | |
| 1789 | {\r | |
| 1790 | UINT8 DAA_join_u0[128];\r | |
| 1791 | UINT8 DAA_join_u1[138];\r | |
| 1792 | TPM_DIGEST DAA_digest_n0;\r | |
| 1793 | } TPM_DAA_JOINDATA;\r | |
| 1794 | \r | |
| 1795 | typedef struct tdTPM_DAA_BLOB\r | |
| 1796 | {\r | |
| 1797 | TPM_STRUCTURE_TAG tag;\r | |
| 1798 | TPM_RESOURCE_TYPE resourceType;\r | |
| 1799 | UINT8 label[16];\r | |
| 1800 | TPM_DIGEST blobIntegrity;\r | |
| 1801 | UINT32 additionalSize;\r | |
| 1802 | UINT8 *additionalData;\r | |
| 1803 | UINT32 sensitiveSize;\r | |
| 1804 | UINT8 *sensitiveData;\r | |
| 1805 | } TPM_DAA_BLOB;\r | |
| 1806 | \r | |
| 1807 | typedef struct tdTPM_DAA_SENSITIVE\r | |
| 1808 | {\r | |
| 1809 | TPM_STRUCTURE_TAG tag;\r | |
| 1810 | UINT32 internalSize;\r | |
| 1811 | UINT8 *internalData;\r | |
| 1812 | } TPM_DAA_SENSITIVE;\r | |
| 1813 | \r | |
| 1814 | \r | |
| 1815 | //\r | |
| 1816 | // Part 2, section 23: Redirection\r | |
| 1817 | //\r | |
| 1818 | \r | |
| 1819 | // This section of the TPM spec defines exactly one value but does not\r | |
| 1820 | // give it a name. The definition of TPM_SetRedirection in Part3\r | |
| 1821 | // refers to exactly one name but does not give its value. We join\r | |
| 1822 | // them here.\r | |
| 1823 | #define TPM_REDIR_GPIO (0x00000001)\r | |
| 1824 | \r | |
| 1825 | //\r | |
| 1826 | // TPM Command & Response Headers\r | |
| 1827 | //\r | |
| 1828 | typedef struct tdTPM_RQU_COMMAND_HDR {\r | |
| 1829 | TPM_STRUCTURE_TAG tag;\r | |
| 1830 | UINT32 paramSize;\r | |
| 1831 | TPM_COMMAND_CODE ordinal;\r | |
| 1832 | } TPM_RQU_COMMAND_HDR;\r | |
| 1833 | \r | |
| 1834 | typedef struct tdTPM_RSP_COMMAND_HDR {\r | |
| 1835 | TPM_STRUCTURE_TAG tag;\r | |
| 1836 | UINT32 paramSize;\r | |
| 1837 | TPM_RESULT returnCode;\r | |
| 1838 | } TPM_RSP_COMMAND_HDR;\r | |
| 1839 | \r | |
| 1840 | #pragma pack (pop)\r | |
| 1841 | \r | |
| 1842 | #endif // _TPM12_H_\r |