]> git.proxmox.com Git - mirror_edk2.git/blame - MdePkg/Include/IndustryStandard/Tpm12.h
projects / mirror_edk2.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
MdePkg: Apply uncrustify changes
[mirror_edk2.git] / MdePkg / Include / IndustryStandard / Tpm12.h
CommitLineData
9095d37b 1/** @file\r
1919913f 2 TPM Specification data structures (TCG TPM Specification Version 1.2 Revision 103)\r
267669ba
LG		 3 See http://trustedcomputinggroup.org for latest specification updates\r
4\r
9095d37b 5 Copyright (c) 2006 - 2018, Intel Corporation. All rights reserved.<BR>\r
9344f092 6 SPDX-License-Identifier: BSD-2-Clause-Patent\r
8069d49e
LG		 7**/\r
8\r
267669ba
LG		 9#ifndef _TPM12_H_\r
10#define _TPM12_H_\r
11\r
ec8432e5 12///\r
13/// The start of TPM return codes\r
14///\r
2f88bd3a 15#define TPM_BASE 0\r
267669ba
LG		 16\r
17//\r
427987f5 18// All structures MUST be packed on a byte boundary.\r
267669ba 19//\r
766f4bc1 20\r
a04ad3f0 21#pragma pack (1)\r
267669ba
LG		 22\r
23//\r
4135253b 24// Part 2, section 2.2.3: Helper redefinitions\r
267669ba 25//\r
cc078d72 26///\r
27/// Indicates the conditions where it is required that authorization be presented\r
28///\r
2f88bd3a 29typedef UINT8 TPM_AUTH_DATA_USAGE;\r
cc078d72 30///\r
31/// The information as to what the payload is in an encrypted structure\r
32///\r
2f88bd3a 33typedef UINT8 TPM_PAYLOAD_TYPE;\r
cc078d72 34///\r
35/// The version info breakdown\r
36///\r
2f88bd3a 37typedef UINT8 TPM_VERSION_BYTE;\r
cc078d72 38///\r
1919913f 39/// The state of the dictionary attack mitigation logic\r
40///\r
2f88bd3a 41typedef UINT8 TPM_DA_STATE;\r
1919913f 42///\r
cc078d72 43/// The request or response authorization type\r
44///\r
2f88bd3a 45typedef UINT16 TPM_TAG;\r
cc078d72 46///\r
47/// The protocol in use\r
48///\r
2f88bd3a 49typedef UINT16 TPM_PROTOCOL_ID;\r
cc078d72 50///\r
51/// Indicates the start state\r
52///\r
2f88bd3a 53typedef UINT16 TPM_STARTUP_TYPE;\r
cc078d72 54///\r
55/// The definition of the encryption scheme\r
56///\r
2f88bd3a 57typedef UINT16 TPM_ENC_SCHEME;\r
cc078d72 58///\r
59/// The definition of the signature scheme\r
60///\r
2f88bd3a 61typedef UINT16 TPM_SIG_SCHEME;\r
cc078d72 62///\r
63/// The definition of the migration scheme\r
64///\r
2f88bd3a 65typedef UINT16 TPM_MIGRATE_SCHEME;\r
cc078d72 66///\r
67/// Sets the state of the physical presence mechanism\r
68///\r
2f88bd3a 69typedef UINT16 TPM_PHYSICAL_PRESENCE;\r
cc078d72 70///\r
71/// Indicates the types of entity that are supported by the TPM\r
72///\r
2f88bd3a 73typedef UINT16 TPM_ENTITY_TYPE;\r
cc078d72 74///\r
75/// Indicates the permitted usage of the key\r
76///\r
2f88bd3a 77typedef UINT16 TPM_KEY_USAGE;\r
cc078d72 78///\r
79/// The type of asymmetric encrypted structure in use by the endorsement key\r
80///\r
2f88bd3a 81typedef UINT16 TPM_EK_TYPE;\r
cc078d72 82///\r
83/// The tag for the structure\r
84///\r
2f88bd3a 85typedef UINT16 TPM_STRUCTURE_TAG;\r
cc078d72 86///\r
87/// The platform specific spec to which the information relates to\r
88///\r
2f88bd3a 89typedef UINT16 TPM_PLATFORM_SPECIFIC;\r
cc078d72 90///\r
91/// The command ordinal\r
92///\r
2f88bd3a 93typedef UINT32 TPM_COMMAND_CODE;\r
cc078d72 94///\r
95/// Identifies a TPM capability area\r
96///\r
2f88bd3a 97typedef UINT32 TPM_CAPABILITY_AREA;\r
cc078d72 98///\r
99/// Indicates information regarding a key\r
100///\r
2f88bd3a 101typedef UINT32 TPM_KEY_FLAGS;\r
cc078d72 102///\r
103/// Indicates the type of algorithm\r
104///\r
2f88bd3a 105typedef UINT32 TPM_ALGORITHM_ID;\r
cc078d72 106///\r
107/// The locality modifier\r
108///\r
2f88bd3a 109typedef UINT32 TPM_MODIFIER_INDICATOR;\r
cc078d72 110///\r
111/// The actual number of a counter\r
112///\r
2f88bd3a 113typedef UINT32 TPM_ACTUAL_COUNT;\r
cc078d72 114///\r
115/// Attributes that define what options are in use for a transport session\r
116///\r
2f88bd3a 117typedef UINT32 TPM_TRANSPORT_ATTRIBUTES;\r
cc078d72 118///\r
119/// Handle to an authorization session\r
120///\r
2f88bd3a 121typedef UINT32 TPM_AUTHHANDLE;\r
cc078d72 122///\r
123/// Index to a DIR register\r
124///\r
2f88bd3a 125typedef UINT32 TPM_DIRINDEX;\r
cc078d72 126///\r
127/// The area where a key is held assigned by the TPM\r
128///\r
2f88bd3a 129typedef UINT32 TPM_KEY_HANDLE;\r
cc078d72 130///\r
131/// Index to a PCR register\r
132///\r
2f88bd3a 133typedef UINT32 TPM_PCRINDEX;\r
cc078d72 134///\r
135/// The return code from a function\r
136///\r
2f88bd3a 137typedef UINT32 TPM_RESULT;\r
cc078d72 138///\r
139/// The types of resources that a TPM may have using internal resources\r
140///\r
2f88bd3a 141typedef UINT32 TPM_RESOURCE_TYPE;\r
cc078d72 142///\r
143/// Allows for controlling of the key when loaded and how to handle TPM_Startup issues\r
144///\r
2f88bd3a 145typedef UINT32 TPM_KEY_CONTROL;\r
cc078d72 146///\r
147/// The index into the NV storage area\r
148///\r
2f88bd3a 149typedef UINT32 TPM_NV_INDEX;\r
cc078d72 150///\r
9095d37b
LG		 151/// The family ID. Family IDs are automatically assigned a sequence number by the TPM.\r
152/// A trusted process can set the FamilyID value in an individual row to NULL, which\r
cc078d72 153/// invalidates that row. The family ID resets to NULL on each change of TPM Owner.\r
154///\r
2f88bd3a 155typedef UINT32 TPM_FAMILY_ID;\r
cc078d72 156///\r
157/// IA value used as a label for the most recent verification of this family. Set to zero when not in use.\r
158///\r
2f88bd3a 159typedef UINT32 TPM_FAMILY_VERIFICATION;\r
cc078d72 160///\r
161/// How the TPM handles var\r
162///\r
2f88bd3a 163typedef UINT32 TPM_STARTUP_EFFECTS;\r
cc078d72 164///\r
165/// The mode of a symmetric encryption\r
166///\r
2f88bd3a 167typedef UINT32 TPM_SYM_MODE;\r
cc078d72 168///\r
169/// The family flags\r
170///\r
2f88bd3a 171typedef UINT32 TPM_FAMILY_FLAGS;\r
cc078d72 172///\r
173/// The index value for the delegate NV table\r
174///\r
2f88bd3a 175typedef UINT32 TPM_DELEGATE_INDEX;\r
cc078d72 176///\r
177/// The restrictions placed on delegation of CMK commands\r
178///\r
2f88bd3a 179typedef UINT32 TPM_CMK_DELEGATE;\r
cc078d72 180///\r
181/// The ID value of a monotonic counter\r
182///\r
2f88bd3a 183typedef UINT32 TPM_COUNT_ID;\r
cc078d72 184///\r
185/// A command to execute\r
186///\r
2f88bd3a 187typedef UINT32 TPM_REDIT_COMMAND;\r
cc078d72 188///\r
189/// A transport session handle\r
190///\r
2f88bd3a 191typedef UINT32 TPM_TRANSHANDLE;\r
cc078d72 192///\r
193/// A generic handle could be key, transport etc\r
194///\r
2f88bd3a 195typedef UINT32 TPM_HANDLE;\r
cc078d72 196///\r
197/// What operation is happening\r
198///\r
2f88bd3a 199typedef UINT32 TPM_FAMILY_OPERATION;\r
267669ba
LG		 200\r
201//\r
202// Part 2, section 2.2.4: Vendor specific\r
203// The following defines allow for the quick specification of a\r
204// vendor specific item.\r
205//\r
2f88bd3a
MK		 206#define TPM_Vendor_Specific32 ((UINT32) 0x00000400)\r
207#define TPM_Vendor_Specific8 ((UINT8) 0x80)\r
267669ba
LG		 208\r
209//\r
4135253b 210// Part 2, section 3.1: TPM_STRUCTURE_TAG\r
267669ba 211//\r
2f88bd3a
MK		 212#define TPM_TAG_CONTEXTBLOB ((TPM_STRUCTURE_TAG) 0x0001)\r
213#define TPM_TAG_CONTEXT_SENSITIVE ((TPM_STRUCTURE_TAG) 0x0002)\r
214#define TPM_TAG_CONTEXTPOINTER ((TPM_STRUCTURE_TAG) 0x0003)\r
215#define TPM_TAG_CONTEXTLIST ((TPM_STRUCTURE_TAG) 0x0004)\r
216#define TPM_TAG_SIGNINFO ((TPM_STRUCTURE_TAG) 0x0005)\r
217#define TPM_TAG_PCR_INFO_LONG ((TPM_STRUCTURE_TAG) 0x0006)\r
218#define TPM_TAG_PERSISTENT_FLAGS ((TPM_STRUCTURE_TAG) 0x0007)\r
219#define TPM_TAG_VOLATILE_FLAGS ((TPM_STRUCTURE_TAG) 0x0008)\r
220#define TPM_TAG_PERSISTENT_DATA ((TPM_STRUCTURE_TAG) 0x0009)\r
221#define TPM_TAG_VOLATILE_DATA ((TPM_STRUCTURE_TAG) 0x000A)\r
222#define TPM_TAG_SV_DATA ((TPM_STRUCTURE_TAG) 0x000B)\r
223#define TPM_TAG_EK_BLOB ((TPM_STRUCTURE_TAG) 0x000C)\r
224#define TPM_TAG_EK_BLOB_AUTH ((TPM_STRUCTURE_TAG) 0x000D)\r
225#define TPM_TAG_COUNTER_VALUE ((TPM_STRUCTURE_TAG) 0x000E)\r
226#define TPM_TAG_TRANSPORT_INTERNAL ((TPM_STRUCTURE_TAG) 0x000F)\r
227#define TPM_TAG_TRANSPORT_LOG_IN ((TPM_STRUCTURE_TAG) 0x0010)\r
228#define TPM_TAG_TRANSPORT_LOG_OUT ((TPM_STRUCTURE_TAG) 0x0011)\r
229#define TPM_TAG_AUDIT_EVENT_IN ((TPM_STRUCTURE_TAG) 0x0012)\r
230#define TPM_TAG_AUDIT_EVENT_OUT ((TPM_STRUCTURE_TAG) 0x0013)\r
231#define TPM_TAG_CURRENT_TICKS ((TPM_STRUCTURE_TAG) 0x0014)\r
232#define TPM_TAG_KEY ((TPM_STRUCTURE_TAG) 0x0015)\r
233#define TPM_TAG_STORED_DATA12 ((TPM_STRUCTURE_TAG) 0x0016)\r
234#define TPM_TAG_NV_ATTRIBUTES ((TPM_STRUCTURE_TAG) 0x0017)\r
235#define TPM_TAG_NV_DATA_PUBLIC ((TPM_STRUCTURE_TAG) 0x0018)\r
236#define TPM_TAG_NV_DATA_SENSITIVE ((TPM_STRUCTURE_TAG) 0x0019)\r
237#define TPM_TAG_DELEGATIONS ((TPM_STRUCTURE_TAG) 0x001A)\r
238#define TPM_TAG_DELEGATE_PUBLIC ((TPM_STRUCTURE_TAG) 0x001B)\r
239#define TPM_TAG_DELEGATE_TABLE_ROW ((TPM_STRUCTURE_TAG) 0x001C)\r
240#define TPM_TAG_TRANSPORT_AUTH ((TPM_STRUCTURE_TAG) 0x001D)\r
241#define TPM_TAG_TRANSPORT_PUBLIC ((TPM_STRUCTURE_TAG) 0x001E)\r
242#define TPM_TAG_PERMANENT_FLAGS ((TPM_STRUCTURE_TAG) 0x001F)\r
243#define TPM_TAG_STCLEAR_FLAGS ((TPM_STRUCTURE_TAG) 0x0020)\r
244#define TPM_TAG_STANY_FLAGS ((TPM_STRUCTURE_TAG) 0x0021)\r
245#define TPM_TAG_PERMANENT_DATA ((TPM_STRUCTURE_TAG) 0x0022)\r
246#define TPM_TAG_STCLEAR_DATA ((TPM_STRUCTURE_TAG) 0x0023)\r
247#define TPM_TAG_STANY_DATA ((TPM_STRUCTURE_TAG) 0x0024)\r
248#define TPM_TAG_FAMILY_TABLE_ENTRY ((TPM_STRUCTURE_TAG) 0x0025)\r
249#define TPM_TAG_DELEGATE_SENSITIVE ((TPM_STRUCTURE_TAG) 0x0026)\r
250#define TPM_TAG_DELG_KEY_BLOB ((TPM_STRUCTURE_TAG) 0x0027)\r
251#define TPM_TAG_KEY12 ((TPM_STRUCTURE_TAG) 0x0028)\r
252#define TPM_TAG_CERTIFY_INFO2 ((TPM_STRUCTURE_TAG) 0x0029)\r
253#define TPM_TAG_DELEGATE_OWNER_BLOB ((TPM_STRUCTURE_TAG) 0x002A)\r
254#define TPM_TAG_EK_BLOB_ACTIVATE ((TPM_STRUCTURE_TAG) 0x002B)\r
255#define TPM_TAG_DAA_BLOB ((TPM_STRUCTURE_TAG) 0x002C)\r
256#define TPM_TAG_DAA_CONTEXT ((TPM_STRUCTURE_TAG) 0x002D)\r
257#define TPM_TAG_DAA_ENFORCE ((TPM_STRUCTURE_TAG) 0x002E)\r
258#define TPM_TAG_DAA_ISSUER ((TPM_STRUCTURE_TAG) 0x002F)\r
259#define TPM_TAG_CAP_VERSION_INFO ((TPM_STRUCTURE_TAG) 0x0030)\r
260#define TPM_TAG_DAA_SENSITIVE ((TPM_STRUCTURE_TAG) 0x0031)\r
261#define TPM_TAG_DAA_TPM ((TPM_STRUCTURE_TAG) 0x0032)\r
262#define TPM_TAG_CMK_MIGAUTH ((TPM_STRUCTURE_TAG) 0x0033)\r
263#define TPM_TAG_CMK_SIGTICKET ((TPM_STRUCTURE_TAG) 0x0034)\r
264#define TPM_TAG_CMK_MA_APPROVAL ((TPM_STRUCTURE_TAG) 0x0035)\r
265#define TPM_TAG_QUOTE_INFO2 ((TPM_STRUCTURE_TAG) 0x0036)\r
266#define TPM_TAG_DA_INFO ((TPM_STRUCTURE_TAG) 0x0037)\r
267#define TPM_TAG_DA_LIMITED ((TPM_STRUCTURE_TAG) 0x0038)\r
268#define TPM_TAG_DA_ACTION_TYPE ((TPM_STRUCTURE_TAG) 0x0039)\r
267669ba
LG		 269\r
270//\r
271// Part 2, section 4: TPM Types\r
272//\r
273\r
274//\r
275// Part 2, section 4.1: TPM_RESOURCE_TYPE\r
276//\r
2f88bd3a
MK		 277#define TPM_RT_KEY ((TPM_RESOURCE_TYPE) 0x00000001) ///< The handle is a key handle and is the result of a LoadKey type operation\r
278#define TPM_RT_AUTH ((TPM_RESOURCE_TYPE) 0x00000002) ///< The handle is an authorization handle. Auth handles come from TPM_OIAP, TPM_OSAP and TPM_DSAP\r
279#define TPM_RT_HASH ((TPM_RESOURCE_TYPE) 0x00000003) ///< Reserved for hashes\r
280#define TPM_RT_TRANS ((TPM_RESOURCE_TYPE) 0x00000004) ///< The handle is for a transport session. Transport handles come from TPM_EstablishTransport\r
281#define TPM_RT_CONTEXT ((TPM_RESOURCE_TYPE) 0x00000005) ///< Resource wrapped and held outside the TPM using the context save/restore commands\r
282#define TPM_RT_COUNTER ((TPM_RESOURCE_TYPE) 0x00000006) ///< Reserved for counters\r
283#define TPM_RT_DELEGATE ((TPM_RESOURCE_TYPE) 0x00000007) ///< The handle is for a delegate row. These are the internal rows held in NV storage by the TPM\r
284#define TPM_RT_DAA_TPM ((TPM_RESOURCE_TYPE) 0x00000008) ///< The value is a DAA TPM specific blob\r
285#define TPM_RT_DAA_V0 ((TPM_RESOURCE_TYPE) 0x00000009) ///< The value is a DAA V0 parameter\r
286#define TPM_RT_DAA_V1 ((TPM_RESOURCE_TYPE) 0x0000000A) ///< The value is a DAA V1 parameter\r
267669ba
LG		 287\r
288//\r
289// Part 2, section 4.2: TPM_PAYLOAD_TYPE\r
290//\r
2f88bd3a
MK		 291#define TPM_PT_ASYM ((TPM_PAYLOAD_TYPE) 0x01) ///< The entity is an asymmetric key\r
292#define TPM_PT_BIND ((TPM_PAYLOAD_TYPE) 0x02) ///< The entity is bound data\r
293#define TPM_PT_MIGRATE ((TPM_PAYLOAD_TYPE) 0x03) ///< The entity is a migration blob\r
294#define TPM_PT_MAINT ((TPM_PAYLOAD_TYPE) 0x04) ///< The entity is a maintenance blob\r
295#define TPM_PT_SEAL ((TPM_PAYLOAD_TYPE) 0x05) ///< The entity is sealed data\r
296#define TPM_PT_MIGRATE_RESTRICTED ((TPM_PAYLOAD_TYPE) 0x06) ///< The entity is a restricted-migration asymmetric key\r
297#define TPM_PT_MIGRATE_EXTERNAL ((TPM_PAYLOAD_TYPE) 0x07) ///< The entity is a external migratable key\r
298#define TPM_PT_CMK_MIGRATE ((TPM_PAYLOAD_TYPE) 0x08) ///< The entity is a CMK migratable blob\r
299#define TPM_PT_VENDOR_SPECIFIC ((TPM_PAYLOAD_TYPE) 0x80) ///< 0x80 - 0xFF Vendor specific payloads\r
4135253b 300\r
301//\r
302// Part 2, section 4.3: TPM_ENTITY_TYPE\r
303//\r
2f88bd3a
MK		 304#define TPM_ET_KEYHANDLE ((UINT16) 0x0001) ///< The entity is a keyHandle or key\r
305#define TPM_ET_OWNER ((UINT16) 0x0002) ///< The entity is the TPM Owner\r
306#define TPM_ET_DATA ((UINT16) 0x0003) ///< The entity is some data\r
307#define TPM_ET_SRK ((UINT16) 0x0004) ///< The entity is the SRK\r
308#define TPM_ET_KEY ((UINT16) 0x0005) ///< The entity is a key or keyHandle\r
309#define TPM_ET_REVOKE ((UINT16) 0x0006) ///< The entity is the RevokeTrust value\r
310#define TPM_ET_DEL_OWNER_BLOB ((UINT16) 0x0007) ///< The entity is a delegate owner blob\r
311#define TPM_ET_DEL_ROW ((UINT16) 0x0008) ///< The entity is a delegate row\r
312#define TPM_ET_DEL_KEY_BLOB ((UINT16) 0x0009) ///< The entity is a delegate key blob\r
313#define TPM_ET_COUNTER ((UINT16) 0x000A) ///< The entity is a counter\r
314#define TPM_ET_NV ((UINT16) 0x000B) ///< The entity is a NV index\r
315#define TPM_ET_OPERATOR ((UINT16) 0x000C) ///< The entity is the operator\r
316#define TPM_ET_RESERVED_HANDLE ((UINT16) 0x0040) ///< Reserved. This value avoids collisions with the handle MSB setting.\r
267669ba
LG		 317//\r
318// TPM_ENTITY_TYPE MSB Values: The MSB is used to indicate the ADIP encryption sheme when applicable\r
319//\r
2f88bd3a
MK		 320#define TPM_ET_XOR ((UINT16) 0x0000) ///< ADIP encryption scheme: XOR\r
321#define TPM_ET_AES128 ((UINT16) 0x0006) ///< ADIP encryption scheme: AES 128 bits\r
267669ba
LG		 322\r
323//\r
324// Part 2, section 4.4.1: Reserved Key Handles\r
325//\r
2f88bd3a
MK		 326#define TPM_KH_SRK ((TPM_KEY_HANDLE) 0x40000000) ///< The handle points to the SRK\r
327#define TPM_KH_OWNER ((TPM_KEY_HANDLE) 0x40000001) ///< The handle points to the TPM Owner\r
328#define TPM_KH_REVOKE ((TPM_KEY_HANDLE) 0x40000002) ///< The handle points to the RevokeTrust value\r
329#define TPM_KH_TRANSPORT ((TPM_KEY_HANDLE) 0x40000003) ///< The handle points to the EstablishTransport static authorization\r
330#define TPM_KH_OPERATOR ((TPM_KEY_HANDLE) 0x40000004) ///< The handle points to the Operator auth\r
331#define TPM_KH_ADMIN ((TPM_KEY_HANDLE) 0x40000005) ///< The handle points to the delegation administration auth\r
332#define TPM_KH_EK ((TPM_KEY_HANDLE) 0x40000006) ///< The handle points to the PUBEK, only usable with TPM_OwnerReadInternalPub\r
267669ba
LG		 333\r
334//\r
335// Part 2, section 4.5: TPM_STARTUP_TYPE\r
336//\r
2f88bd3a
MK		 337#define TPM_ST_CLEAR ((TPM_STARTUP_TYPE) 0x0001) ///< The TPM is starting up from a clean state\r
338#define TPM_ST_STATE ((TPM_STARTUP_TYPE) 0x0002) ///< The TPM is starting up from a saved state\r
339#define TPM_ST_DEACTIVATED ((TPM_STARTUP_TYPE) 0x0003) ///< The TPM is to startup and set the deactivated flag to TRUE\r
267669ba
LG		 340\r
341//\r
342// Part 2, section 4.6: TPM_STATUP_EFFECTS\r
343// The table makeup is still an open issue.\r
344//\r
345\r
346//\r
347// Part 2, section 4.7: TPM_PROTOCOL_ID\r
348//\r
2f88bd3a
MK		 349#define TPM_PID_OIAP ((TPM_PROTOCOL_ID) 0x0001) ///< The OIAP protocol.\r
350#define TPM_PID_OSAP ((TPM_PROTOCOL_ID) 0x0002) ///< The OSAP protocol.\r
351#define TPM_PID_ADIP ((TPM_PROTOCOL_ID) 0x0003) ///< The ADIP protocol.\r
352#define TPM_PID_ADCP ((TPM_PROTOCOL_ID) 0x0004) ///< The ADCP protocol.\r
353#define TPM_PID_OWNER ((TPM_PROTOCOL_ID) 0x0005) ///< The protocol for taking ownership of a TPM.\r
354#define TPM_PID_DSAP ((TPM_PROTOCOL_ID) 0x0006) ///< The DSAP protocol\r
355#define TPM_PID_TRANSPORT ((TPM_PROTOCOL_ID) 0x0007) ///< The transport protocol\r
267669ba
LG		 356\r
357//\r
358// Part 2, section 4.8: TPM_ALGORITHM_ID\r
359// The TPM MUST support the algorithms TPM_ALG_RSA, TPM_ALG_SHA, TPM_ALG_HMAC,\r
360// TPM_ALG_MGF1\r
361//\r
2f88bd3a
MK		 362#define TPM_ALG_RSA ((TPM_ALGORITHM_ID) 0x00000001) ///< The RSA algorithm.\r
363#define TPM_ALG_DES ((TPM_ALGORITHM_ID) 0x00000002) ///< The DES algorithm\r
364#define TPM_ALG_3DES ((TPM_ALGORITHM_ID) 0x00000003) ///< The 3DES algorithm in EDE mode\r
365#define TPM_ALG_SHA ((TPM_ALGORITHM_ID) 0x00000004) ///< The SHA1 algorithm\r
366#define TPM_ALG_HMAC ((TPM_ALGORITHM_ID) 0x00000005) ///< The RFC 2104 HMAC algorithm\r
367#define TPM_ALG_AES128 ((TPM_ALGORITHM_ID) 0x00000006) ///< The AES algorithm, key size 128\r
368#define TPM_ALG_MGF1 ((TPM_ALGORITHM_ID) 0x00000007) ///< The XOR algorithm using MGF1 to create a string the size of the encrypted block\r
369#define TPM_ALG_AES192 ((TPM_ALGORITHM_ID) 0x00000008) ///< AES, key size 192\r
370#define TPM_ALG_AES256 ((TPM_ALGORITHM_ID) 0x00000009) ///< AES, key size 256\r
371#define TPM_ALG_XOR ((TPM_ALGORITHM_ID) 0x0000000A) ///< XOR using the rolling nonces\r
267669ba
LG		 372\r
373//\r
374// Part 2, section 4.9: TPM_PHYSICAL_PRESENCE\r
375//\r
2f88bd3a
MK		 376#define TPM_PHYSICAL_PRESENCE_HW_DISABLE ((TPM_PHYSICAL_PRESENCE) 0x0200) ///< Sets the physicalPresenceHWEnable to FALSE\r
377#define TPM_PHYSICAL_PRESENCE_CMD_DISABLE ((TPM_PHYSICAL_PRESENCE) 0x0100) ///< Sets the physicalPresenceCMDEnable to FALSE\r
378#define TPM_PHYSICAL_PRESENCE_LIFETIME_LOCK ((TPM_PHYSICAL_PRESENCE) 0x0080) ///< Sets the physicalPresenceLifetimeLock to TRUE\r
379#define TPM_PHYSICAL_PRESENCE_HW_ENABLE ((TPM_PHYSICAL_PRESENCE) 0x0040) ///< Sets the physicalPresenceHWEnable to TRUE\r
380#define TPM_PHYSICAL_PRESENCE_CMD_ENABLE ((TPM_PHYSICAL_PRESENCE) 0x0020) ///< Sets the physicalPresenceCMDEnable to TRUE\r
381#define TPM_PHYSICAL_PRESENCE_NOTPRESENT ((TPM_PHYSICAL_PRESENCE) 0x0010) ///< Sets PhysicalPresence = FALSE\r
382#define TPM_PHYSICAL_PRESENCE_PRESENT ((TPM_PHYSICAL_PRESENCE) 0x0008) ///< Sets PhysicalPresence = TRUE\r
383#define TPM_PHYSICAL_PRESENCE_LOCK ((TPM_PHYSICAL_PRESENCE) 0x0004) ///< Sets PhysicalPresenceLock = TRUE\r
267669ba
LG		 384\r
385//\r
386// Part 2, section 4.10: TPM_MIGRATE_SCHEME\r
387//\r
2f88bd3a
MK		 388#define TPM_MS_MIGRATE ((TPM_MIGRATE_SCHEME) 0x0001) ///< A public key that can be used with all TPM migration commands other than 'ReWrap' mode.\r
389#define TPM_MS_REWRAP ((TPM_MIGRATE_SCHEME) 0x0002) ///< A public key that can be used for the ReWrap mode of TPM_CreateMigrationBlob.\r
390#define TPM_MS_MAINT ((TPM_MIGRATE_SCHEME) 0x0003) ///< A public key that can be used for the Maintenance commands\r
391#define TPM_MS_RESTRICT_MIGRATE ((TPM_MIGRATE_SCHEME) 0x0004) ///< The key is to be migrated to a Migration Authority.\r
392#define TPM_MS_RESTRICT_APPROVE_DOUBLE ((TPM_MIGRATE_SCHEME) 0x0005) ///< The key is to be migrated to an entity approved by a Migration Authority using double wrapping\r
267669ba
LG		 393\r
394//\r
395// Part 2, section 4.11: TPM_EK_TYPE\r
396//\r
2f88bd3a
MK		 397#define TPM_EK_TYPE_ACTIVATE ((TPM_EK_TYPE) 0x0001) ///< The blob MUST be TPM_EK_BLOB_ACTIVATE\r
398#define TPM_EK_TYPE_AUTH ((TPM_EK_TYPE) 0x0002) ///< The blob MUST be TPM_EK_BLOB_AUTH\r
267669ba
LG		 399\r
400//\r
401// Part 2, section 4.12: TPM_PLATFORM_SPECIFIC\r
402//\r
2f88bd3a
MK		 403#define TPM_PS_PC_11 ((TPM_PLATFORM_SPECIFIC) 0x0001) ///< PC Specific version 1.1\r
404#define TPM_PS_PC_12 ((TPM_PLATFORM_SPECIFIC) 0x0002) ///< PC Specific version 1.2\r
405#define TPM_PS_PDA_12 ((TPM_PLATFORM_SPECIFIC) 0x0003) ///< PDA Specific version 1.2\r
406#define TPM_PS_Server_12 ((TPM_PLATFORM_SPECIFIC) 0x0004) ///< Server Specific version 1.2\r
407#define TPM_PS_Mobile_12 ((TPM_PLATFORM_SPECIFIC) 0x0005) ///< Mobil Specific version 1.2\r
267669ba
LG		 408\r
409//\r
410// Part 2, section 5: Basic Structures\r
411//\r
412\r
427987f5 413///\r
414/// Part 2, section 5.1: TPM_STRUCT_VER\r
415///\r
267669ba 416typedef struct tdTPM_STRUCT_VER {\r
2f88bd3a
MK		 417 UINT8 major;\r
418 UINT8 minor;\r
419 UINT8 revMajor;\r
420 UINT8 revMinor;\r
267669ba
LG		 421} TPM_STRUCT_VER;\r
422\r
427987f5 423///\r
424/// Part 2, section 5.3: TPM_VERSION\r
425///\r
267669ba 426typedef struct tdTPM_VERSION {\r
2f88bd3a
MK		 427 TPM_VERSION_BYTE major;\r
428 TPM_VERSION_BYTE minor;\r
429 UINT8 revMajor;\r
430 UINT8 revMinor;\r
267669ba
LG		 431} TPM_VERSION;\r
432\r
2f88bd3a
MK		 433#define TPM_SHA1_160_HASH_LEN 0x14\r
434#define TPM_SHA1BASED_NONCE_LEN TPM_SHA1_160_HASH_LEN\r
9cf53f00 435\r
cc078d72 436///\r
437/// Part 2, section 5.4: TPM_DIGEST\r
438///\r
2f88bd3a
MK		 439typedef struct tdTPM_DIGEST {\r
440 UINT8 digest[TPM_SHA1_160_HASH_LEN];\r
267669ba
LG		 441} TPM_DIGEST;\r
442\r
cc078d72 443///\r
444/// This SHALL be the digest of the chosen identityLabel and privacyCA for a new TPM identity\r
445///\r
2f88bd3a 446typedef TPM_DIGEST TPM_CHOSENID_HASH;\r
cc078d72 447///\r
448/// This SHALL be the hash of a list of PCR indexes and PCR values that a key or data is bound to\r
449///\r
2f88bd3a 450typedef TPM_DIGEST TPM_COMPOSITE_HASH;\r
cc078d72 451///\r
452/// This SHALL be the value of a DIR register\r
453///\r
2f88bd3a 454typedef TPM_DIGEST TPM_DIRVALUE;\r
cc078d72 455\r
2f88bd3a 456typedef TPM_DIGEST TPM_HMAC;\r
cc078d72 457///\r
458/// The value inside of the PCR\r
459///\r
2f88bd3a 460typedef TPM_DIGEST TPM_PCRVALUE;\r
cc078d72 461///\r
462/// This SHALL be the value of the current internal audit state\r
463///\r
2f88bd3a 464typedef TPM_DIGEST TPM_AUDITDIGEST;\r
267669ba 465\r
427987f5 466///\r
467/// Part 2, section 5.5: TPM_NONCE\r
468///\r
2f88bd3a
MK		 469typedef struct tdTPM_NONCE {\r
470 UINT8 nonce[20];\r
267669ba
LG		 471} TPM_NONCE;\r
472\r
1919913f 473///\r
474/// This SHALL be a random value generated by a TPM immediately after the EK is installed\r
475/// in that TPM, whenever an EK is installed in that TPM\r
476///\r
2f88bd3a 477typedef TPM_NONCE TPM_DAA_TPM_SEED;\r
1919913f 478///\r
479/// This SHALL be a random value\r
480///\r
2f88bd3a 481typedef TPM_NONCE TPM_DAA_CONTEXT_SEED;\r
1919913f 482\r
267669ba
LG		 483//\r
484// Part 2, section 5.6: TPM_AUTHDATA\r
485//\r
cc078d72 486///\r
487/// The AuthData data is the information that is saved or passed to provide proof of ownership\r
488/// 296 of an entity\r
489///\r
2f88bd3a 490typedef UINT8 tdTPM_AUTHDATA[20];\r
cc078d72 491\r
2f88bd3a 492typedef tdTPM_AUTHDATA TPM_AUTHDATA;\r
cc078d72 493///\r
494/// A secret plaintext value used in the authorization process\r
495///\r
2f88bd3a 496typedef TPM_AUTHDATA TPM_SECRET;\r
cc078d72 497///\r
498/// A ciphertext (encrypted) version of AuthData data. The encryption mechanism depends on the context\r
499///\r
2f88bd3a 500typedef TPM_AUTHDATA TPM_ENCAUTH;\r
267669ba 501\r
427987f5 502///\r
503/// Part 2, section 5.7: TPM_KEY_HANDLE_LIST\r
504/// Size of handle is loaded * sizeof(TPM_KEY_HANDLE)\r
505///\r
267669ba 506typedef struct tdTPM_KEY_HANDLE_LIST {\r
2f88bd3a
MK		 507 UINT16 loaded;\r
508 TPM_KEY_HANDLE handle[1];\r
267669ba
LG		 509} TPM_KEY_HANDLE_LIST;\r
510\r
511//\r
512// Part 2, section 5.8: TPM_KEY_USAGE values\r
513//\r
4135253b 514///\r
515/// TPM_KEY_SIGNING SHALL indicate a signing key. The [private] key SHALL be\r
516/// used for signing operations, only. This means that it MUST be a leaf of the\r
517/// Protected Storage key hierarchy.\r
518///\r
2f88bd3a 519#define TPM_KEY_SIGNING ((UINT16) 0x0010)\r
4135253b 520///\r
521/// TPM_KEY_STORAGE SHALL indicate a storage key. The key SHALL be used to wrap\r
522/// and unwrap other keys in the Protected Storage hierarchy\r
523///\r
2f88bd3a 524#define TPM_KEY_STORAGE ((UINT16) 0x0011)\r
4135253b 525///\r
526/// TPM_KEY_IDENTITY SHALL indicate an identity key. The key SHALL be used for\r
527/// operations that require a TPM identity, only.\r
528///\r
2f88bd3a 529#define TPM_KEY_IDENTITY ((UINT16) 0x0012)\r
4135253b 530///\r
531/// TPM_KEY_AUTHCHANGE SHALL indicate an ephemeral key that is in use during\r
532/// the ChangeAuthAsym process, only.\r
533///\r
2f88bd3a 534#define TPM_KEY_AUTHCHANGE ((UINT16) 0x0013)\r
4135253b 535///\r
536/// TPM_KEY_BIND SHALL indicate a key that can be used for TPM_Bind and\r
537/// TPM_Unbind operations only.\r
538///\r
2f88bd3a 539#define TPM_KEY_BIND ((UINT16) 0x0014)\r
4135253b 540///\r
541/// TPM_KEY_LEGACY SHALL indicate a key that can perform signing and binding\r
542/// operations. The key MAY be used for both signing and binding operations.\r
543/// The TPM_KEY_LEGACY key type is to allow for use by applications where both\r
544/// signing and encryption operations occur with the same key. The use of this\r
545/// key type is not recommended TPM_KEY_MIGRATE 0x0016 This SHALL indicate a\r
546/// key in use for TPM_MigrateKey\r
547///\r
2f88bd3a 548#define TPM_KEY_LEGACY ((UINT16) 0x0015)\r
4135253b 549///\r
550/// TPM_KEY_MIGRAGE SHALL indicate a key in use for TPM_MigrateKey\r
551///\r
2f88bd3a 552#define TPM_KEY_MIGRATE ((UINT16) 0x0016)\r
267669ba
LG		 553\r
554//\r
4135253b 555// Part 2, section 5.8.1: Mandatory Key Usage Schemes\r
267669ba
LG		 556//\r
557\r
558#define TPM_ES_NONE ((TPM_ENC_SCHEME) 0x0001)\r
559#define TPM_ES_RSAESPKCSv15 ((TPM_ENC_SCHEME) 0x0002)\r
560#define TPM_ES_RSAESOAEP_SHA1_MGF1 ((TPM_ENC_SCHEME) 0x0003)\r
1919913f 561#define TPM_ES_SYM_CNT ((TPM_ENC_SCHEME) 0x0004) ///< rev94 defined\r
562#define TPM_ES_SYM_CTR ((TPM_ENC_SCHEME) 0x0004)\r
267669ba
LG		 563#define TPM_ES_SYM_OFB ((TPM_ENC_SCHEME) 0x0005)\r
564\r
565#define TPM_SS_NONE ((TPM_SIG_SCHEME) 0x0001)\r
566#define TPM_SS_RSASSAPKCS1v15_SHA1 ((TPM_SIG_SCHEME) 0x0002)\r
567#define TPM_SS_RSASSAPKCS1v15_DER ((TPM_SIG_SCHEME) 0x0003)\r
568#define TPM_SS_RSASSAPKCS1v15_INFO ((TPM_SIG_SCHEME) 0x0004)\r
569\r
570//\r
571// Part 2, section 5.9: TPM_AUTH_DATA_USAGE values\r
572//\r
2f88bd3a
MK		 573#define TPM_AUTH_NEVER ((TPM_AUTH_DATA_USAGE) 0x00)\r
574#define TPM_AUTH_ALWAYS ((TPM_AUTH_DATA_USAGE) 0x01)\r
575#define TPM_AUTH_PRIV_USE_ONLY ((TPM_AUTH_DATA_USAGE) 0x03)\r
267669ba 576\r
427987f5 577///\r
578/// Part 2, section 5.10: TPM_KEY_FLAGS\r
579///\r
373b5cf9 580typedef enum tdTPM_KEY_FLAGS {\r
2f88bd3a
MK		 581 redirection = 0x00000001,\r
582 migratable = 0x00000002,\r
583 isVolatile = 0x00000004,\r
584 pcrIgnoredOnRead = 0x00000008,\r
585 migrateAuthority = 0x00000010\r
3e7b340f 586} TPM_KEY_FLAGS_BITS;\r
267669ba 587\r
427987f5 588///\r
589/// Part 2, section 5.11: TPM_CHANGEAUTH_VALIDATE\r
590///\r
267669ba 591typedef struct tdTPM_CHANGEAUTH_VALIDATE {\r
2f88bd3a
MK		 592 TPM_SECRET newAuthSecret;\r
593 TPM_NONCE n1;\r
267669ba
LG		 594} TPM_CHANGEAUTH_VALIDATE;\r
595\r
427987f5 596///\r
597/// Part 2, section 5.12: TPM_MIGRATIONKEYAUTH\r
b219e2cd 598/// declared after section 10 to catch declaration of TPM_PUBKEY\r
427987f5 599///\r
600/// Part 2 section 10.1: TPM_KEY_PARMS\r
601/// [size_is(parmSize)] BYTE* parms;\r
602///\r
267669ba 603typedef struct tdTPM_KEY_PARMS {\r
2f88bd3a
MK		 604 TPM_ALGORITHM_ID algorithmID;\r
605 TPM_ENC_SCHEME encScheme;\r
606 TPM_SIG_SCHEME sigScheme;\r
607 UINT32 parmSize;\r
608 UINT8 *parms;\r
267669ba
LG		 609} TPM_KEY_PARMS;\r
610\r
427987f5 611///\r
612/// Part 2, section 10.4: TPM_STORE_PUBKEY\r
613///\r
267669ba 614typedef struct tdTPM_STORE_PUBKEY {\r
2f88bd3a
MK		 615 UINT32 keyLength;\r
616 UINT8 key[1];\r
267669ba
LG		 617} TPM_STORE_PUBKEY;\r
618\r
427987f5 619///\r
620/// Part 2, section 10.5: TPM_PUBKEY\r
621///\r
2f88bd3a
MK		 622typedef struct tdTPM_PUBKEY {\r
623 TPM_KEY_PARMS algorithmParms;\r
624 TPM_STORE_PUBKEY pubKey;\r
267669ba
LG		 625} TPM_PUBKEY;\r
626\r
427987f5 627///\r
628/// Part 2, section 5.12: TPM_MIGRATIONKEYAUTH\r
629///\r
2f88bd3a
MK		 630typedef struct tdTPM_MIGRATIONKEYAUTH {\r
631 TPM_PUBKEY migrationKey;\r
632 TPM_MIGRATE_SCHEME migrationScheme;\r
633 TPM_DIGEST digest;\r
267669ba
LG		 634} TPM_MIGRATIONKEYAUTH;\r
635\r
427987f5 636///\r
637/// Part 2, section 5.13: TPM_COUNTER_VALUE\r
638///\r
2f88bd3a
MK		 639typedef struct tdTPM_COUNTER_VALUE {\r
640 TPM_STRUCTURE_TAG tag;\r
641 UINT8 label[4];\r
642 TPM_ACTUAL_COUNT counter;\r
267669ba
LG		 643} TPM_COUNTER_VALUE;\r
644\r
427987f5 645///\r
646/// Part 2, section 5.14: TPM_SIGN_INFO\r
647/// Size of data indicated by dataLen\r
648///\r
267669ba 649typedef struct tdTPM_SIGN_INFO {\r
2f88bd3a
MK		 650 TPM_STRUCTURE_TAG tag;\r
651 UINT8 fixed[4];\r
652 TPM_NONCE replay;\r
653 UINT32 dataLen;\r
654 UINT8 *data;\r
267669ba
LG		 655} TPM_SIGN_INFO;\r
656\r
427987f5 657///\r
658/// Part 2, section 5.15: TPM_MSA_COMPOSITE\r
659/// Number of migAuthDigest indicated by MSAlist\r
660///\r
267669ba 661typedef struct tdTPM_MSA_COMPOSITE {\r
2f88bd3a
MK		 662 UINT32 MSAlist;\r
663 TPM_DIGEST migAuthDigest[1];\r
267669ba
LG		 664} TPM_MSA_COMPOSITE;\r
665\r
427987f5 666///\r
667/// Part 2, section 5.16: TPM_CMK_AUTH\r
668///\r
2f88bd3a
MK		 669typedef struct tdTPM_CMK_AUTH {\r
670 TPM_DIGEST migrationAuthorityDigest;\r
671 TPM_DIGEST destinationKeyDigest;\r
672 TPM_DIGEST sourceKeyDigest;\r
267669ba
LG		 673} TPM_CMK_AUTH;\r
674\r
675//\r
676// Part 2, section 5.17: TPM_CMK_DELEGATE\r
677//\r
2f88bd3a
MK		 678#define TPM_CMK_DELEGATE_SIGNING ((TPM_CMK_DELEGATE) BIT31)\r
679#define TPM_CMK_DELEGATE_STORAGE ((TPM_CMK_DELEGATE) BIT30)\r
680#define TPM_CMK_DELEGATE_BIND ((TPM_CMK_DELEGATE) BIT29)\r
681#define TPM_CMK_DELEGATE_LEGACY ((TPM_CMK_DELEGATE) BIT28)\r
682#define TPM_CMK_DELEGATE_MIGRATE ((TPM_CMK_DELEGATE) BIT27)\r
267669ba 683\r
427987f5 684///\r
685/// Part 2, section 5.18: TPM_SELECT_SIZE\r
686///\r
267669ba 687typedef struct tdTPM_SELECT_SIZE {\r
2f88bd3a
MK		 688 UINT8 major;\r
689 UINT8 minor;\r
690 UINT16 reqSize;\r
267669ba
LG		 691} TPM_SELECT_SIZE;\r
692\r
427987f5 693///\r
694/// Part 2, section 5,19: TPM_CMK_MIGAUTH\r
695///\r
2f88bd3a
MK		 696typedef struct tdTPM_CMK_MIGAUTH {\r
697 TPM_STRUCTURE_TAG tag;\r
698 TPM_DIGEST msaDigest;\r
699 TPM_DIGEST pubKeyDigest;\r
267669ba
LG		 700} TPM_CMK_MIGAUTH;\r
701\r
427987f5 702///\r
703/// Part 2, section 5.20: TPM_CMK_SIGTICKET\r
704///\r
2f88bd3a
MK		 705typedef struct tdTPM_CMK_SIGTICKET {\r
706 TPM_STRUCTURE_TAG tag;\r
707 TPM_DIGEST verKeyDigest;\r
708 TPM_DIGEST signedData;\r
267669ba
LG		 709} TPM_CMK_SIGTICKET;\r
710\r
427987f5 711///\r
712/// Part 2, section 5.21: TPM_CMK_MA_APPROVAL\r
713///\r
2f88bd3a
MK		 714typedef struct tdTPM_CMK_MA_APPROVAL {\r
715 TPM_STRUCTURE_TAG tag;\r
716 TPM_DIGEST migrationAuthorityDigest;\r
267669ba
LG		 717} TPM_CMK_MA_APPROVAL;\r
718\r
719//\r
720// Part 2, section 6: Command Tags\r
721//\r
2f88bd3a
MK		 722#define TPM_TAG_RQU_COMMAND ((TPM_STRUCTURE_TAG) 0x00C1)\r
723#define TPM_TAG_RQU_AUTH1_COMMAND ((TPM_STRUCTURE_TAG) 0x00C2)\r
724#define TPM_TAG_RQU_AUTH2_COMMAND ((TPM_STRUCTURE_TAG) 0x00C3)\r
725#define TPM_TAG_RSP_COMMAND ((TPM_STRUCTURE_TAG) 0x00C4)\r
726#define TPM_TAG_RSP_AUTH1_COMMAND ((TPM_STRUCTURE_TAG) 0x00C5)\r
727#define TPM_TAG_RSP_AUTH2_COMMAND ((TPM_STRUCTURE_TAG) 0x00C6)\r
267669ba 728\r
427987f5 729///\r
730/// Part 2, section 7.1: TPM_PERMANENT_FLAGS\r
731///\r
2f88bd3a
MK		 732typedef struct tdTPM_PERMANENT_FLAGS {\r
733 TPM_STRUCTURE_TAG tag;\r
734 BOOLEAN disable;\r
735 BOOLEAN ownership;\r
736 BOOLEAN deactivated;\r
737 BOOLEAN readPubek;\r
738 BOOLEAN disableOwnerClear;\r
739 BOOLEAN allowMaintenance;\r
740 BOOLEAN physicalPresenceLifetimeLock;\r
741 BOOLEAN physicalPresenceHWEnable;\r
742 BOOLEAN physicalPresenceCMDEnable;\r
743 BOOLEAN CEKPUsed;\r
744 BOOLEAN TPMpost;\r
745 BOOLEAN TPMpostLock;\r
746 BOOLEAN FIPS;\r
267669ba
LG		 747 BOOLEAN operator;\r
748 BOOLEAN enableRevokeEK;\r
2f88bd3a
MK		 749 BOOLEAN nvLocked;\r
750 BOOLEAN readSRKPub;\r
751 BOOLEAN tpmEstablished;\r
752 BOOLEAN maintenanceDone;\r
753 BOOLEAN disableFullDALogicInfo;\r
267669ba
LG		 754} TPM_PERMANENT_FLAGS;\r
755\r
756//\r
4135253b 757// Part 2, section 7.1.1: Flag Restrictions (of TPM_PERMANENT_FLAGS)\r
267669ba 758//\r
2f88bd3a
MK		 759#define TPM_PF_DISABLE ((TPM_CAPABILITY_AREA) 1)\r
760#define TPM_PF_OWNERSHIP ((TPM_CAPABILITY_AREA) 2)\r
761#define TPM_PF_DEACTIVATED ((TPM_CAPABILITY_AREA) 3)\r
762#define TPM_PF_READPUBEK ((TPM_CAPABILITY_AREA) 4)\r
763#define TPM_PF_DISABLEOWNERCLEAR ((TPM_CAPABILITY_AREA) 5)\r
764#define TPM_PF_ALLOWMAINTENANCE ((TPM_CAPABILITY_AREA) 6)\r
765#define TPM_PF_PHYSICALPRESENCELIFETIMELOCK ((TPM_CAPABILITY_AREA) 7)\r
766#define TPM_PF_PHYSICALPRESENCEHWENABLE ((TPM_CAPABILITY_AREA) 8)\r
767#define TPM_PF_PHYSICALPRESENCECMDENABLE ((TPM_CAPABILITY_AREA) 9)\r
768#define TPM_PF_CEKPUSED ((TPM_CAPABILITY_AREA) 10)\r
769#define TPM_PF_TPMPOST ((TPM_CAPABILITY_AREA) 11)\r
770#define TPM_PF_TPMPOSTLOCK ((TPM_CAPABILITY_AREA) 12)\r
771#define TPM_PF_FIPS ((TPM_CAPABILITY_AREA) 13)\r
772#define TPM_PF_OPERATOR ((TPM_CAPABILITY_AREA) 14)\r
773#define TPM_PF_ENABLEREVOKEEK ((TPM_CAPABILITY_AREA) 15)\r
774#define TPM_PF_NV_LOCKED ((TPM_CAPABILITY_AREA) 16)\r
775#define TPM_PF_READSRKPUB ((TPM_CAPABILITY_AREA) 17)\r
776#define TPM_PF_TPMESTABLISHED ((TPM_CAPABILITY_AREA) 18)\r
777#define TPM_PF_MAINTENANCEDONE ((TPM_CAPABILITY_AREA) 19)\r
778#define TPM_PF_DISABLEFULLDALOGICINFO ((TPM_CAPABILITY_AREA) 20)\r
267669ba 779\r
427987f5 780///\r
781/// Part 2, section 7.2: TPM_STCLEAR_FLAGS\r
782///\r
2f88bd3a
MK		 783typedef struct tdTPM_STCLEAR_FLAGS {\r
784 TPM_STRUCTURE_TAG tag;\r
785 BOOLEAN deactivated;\r
786 BOOLEAN disableForceClear;\r
787 BOOLEAN physicalPresence;\r
788 BOOLEAN physicalPresenceLock;\r
789 BOOLEAN bGlobalLock;\r
267669ba
LG		 790} TPM_STCLEAR_FLAGS;\r
791\r
792//\r
4135253b 793// Part 2, section 7.2.1: Flag Restrictions (of TPM_STCLEAR_FLAGS)\r
267669ba 794//\r
2f88bd3a
MK		 795#define TPM_SF_DEACTIVATED ((TPM_CAPABILITY_AREA) 1)\r
796#define TPM_SF_DISABLEFORCECLEAR ((TPM_CAPABILITY_AREA) 2)\r
797#define TPM_SF_PHYSICALPRESENCE ((TPM_CAPABILITY_AREA) 3)\r
798#define TPM_SF_PHYSICALPRESENCELOCK ((TPM_CAPABILITY_AREA) 4)\r
799#define TPM_SF_BGLOBALLOCK ((TPM_CAPABILITY_AREA) 5)\r
267669ba 800\r
427987f5 801///\r
802/// Part 2, section 7.3: TPM_STANY_FLAGS\r
803///\r
2f88bd3a
MK		 804typedef struct tdTPM_STANY_FLAGS {\r
805 TPM_STRUCTURE_TAG tag;\r
806 BOOLEAN postInitialise;\r
807 TPM_MODIFIER_INDICATOR localityModifier;\r
808 BOOLEAN transportExclusive;\r
809 BOOLEAN TOSPresent;\r
267669ba
LG		 810} TPM_STANY_FLAGS;\r
811\r
812//\r
4135253b 813// Part 2, section 7.3.1: Flag Restrictions (of TPM_STANY_FLAGS)\r
267669ba 814//\r
2f88bd3a
MK		 815#define TPM_AF_POSTINITIALISE ((TPM_CAPABILITY_AREA) 1)\r
816#define TPM_AF_LOCALITYMODIFIER ((TPM_CAPABILITY_AREA) 2)\r
817#define TPM_AF_TRANSPORTEXCLUSIVE ((TPM_CAPABILITY_AREA) 3)\r
818#define TPM_AF_TOSPRESENT ((TPM_CAPABILITY_AREA) 4)\r
267669ba
LG		 819\r
820//\r
9095d37b 821// All those structures defined in section 7.4, 7.5, 7.6 are not normative and\r
267669ba
LG		 822// thus no definitions here\r
823//\r
1919913f 824// Part 2, section 7.4: TPM_PERMANENT_DATA\r
825//\r
2f88bd3a
MK		 826#define TPM_MIN_COUNTERS 4 ///< the minimum number of counters is 4\r
827#define TPM_DELEGATE_KEY TPM_KEY\r
828#define TPM_NUM_PCR 16\r
829#define TPM_MAX_NV_WRITE_NOOWNER 64\r
1919913f 830\r
831//\r
832// Part 2, section 7.4.1: PERMANENT_DATA Subcap for SetCapability\r
833//\r
834#define TPM_PD_REVMAJOR ((TPM_CAPABILITY_AREA) 1)\r
835#define TPM_PD_REVMINOR ((TPM_CAPABILITY_AREA) 2)\r
836#define TPM_PD_TPMPROOF ((TPM_CAPABILITY_AREA) 3)\r
837#define TPM_PD_OWNERAUTH ((TPM_CAPABILITY_AREA) 4)\r
838#define TPM_PD_OPERATORAUTH ((TPM_CAPABILITY_AREA) 5)\r
839#define TPM_PD_MANUMAINTPUB ((TPM_CAPABILITY_AREA) 6)\r
840#define TPM_PD_ENDORSEMENTKEY ((TPM_CAPABILITY_AREA) 7)\r
841#define TPM_PD_SRK ((TPM_CAPABILITY_AREA) 8)\r
842#define TPM_PD_DELEGATEKEY ((TPM_CAPABILITY_AREA) 9)\r
843#define TPM_PD_CONTEXTKEY ((TPM_CAPABILITY_AREA) 10)\r
844#define TPM_PD_AUDITMONOTONICCOUNTER ((TPM_CAPABILITY_AREA) 11)\r
845#define TPM_PD_MONOTONICCOUNTER ((TPM_CAPABILITY_AREA) 12)\r
846#define TPM_PD_PCRATTRIB ((TPM_CAPABILITY_AREA) 13)\r
847#define TPM_PD_ORDINALAUDITSTATUS ((TPM_CAPABILITY_AREA) 14)\r
848#define TPM_PD_AUTHDIR ((TPM_CAPABILITY_AREA) 15)\r
849#define TPM_PD_RNGSTATE ((TPM_CAPABILITY_AREA) 16)\r
850#define TPM_PD_FAMILYTABLE ((TPM_CAPABILITY_AREA) 17)\r
851#define TPM_DELEGATETABLE ((TPM_CAPABILITY_AREA) 18)\r
852#define TPM_PD_EKRESET ((TPM_CAPABILITY_AREA) 19)\r
853#define TPM_PD_MAXNVBUFSIZE ((TPM_CAPABILITY_AREA) 20)\r
854#define TPM_PD_LASTFAMILYID ((TPM_CAPABILITY_AREA) 21)\r
855#define TPM_PD_NOOWNERNVWRITE ((TPM_CAPABILITY_AREA) 22)\r
856#define TPM_PD_RESTRICTDELEGATE ((TPM_CAPABILITY_AREA) 23)\r
857#define TPM_PD_TPMDAASEED ((TPM_CAPABILITY_AREA) 24)\r
858#define TPM_PD_DAAPROOF ((TPM_CAPABILITY_AREA) 25)\r
859\r
860///\r
861/// Part 2, section 7.5: TPM_STCLEAR_DATA\r
862/// available inside TPM only\r
863///\r
2f88bd3a
MK		 864typedef struct tdTPM_STCLEAR_DATA {\r
865 TPM_STRUCTURE_TAG tag;\r
866 TPM_NONCE contextNonceKey;\r
867 TPM_COUNT_ID countID;\r
868 UINT32 ownerReference;\r
869 BOOLEAN disableResetLock;\r
870 TPM_PCRVALUE PCR[TPM_NUM_PCR];\r
871 UINT32 deferredPhysicalPresence;\r
872} TPM_STCLEAR_DATA;\r
1919913f 873\r
874//\r
875// Part 2, section 7.5.1: STCLEAR_DATA Subcap for SetCapability\r
876//\r
2f88bd3a
MK		 877#define TPM_SD_CONTEXTNONCEKEY ((TPM_CAPABILITY_AREA)0x00000001)\r
878#define TPM_SD_COUNTID ((TPM_CAPABILITY_AREA)0x00000002)\r
879#define TPM_SD_OWNERREFERENCE ((TPM_CAPABILITY_AREA)0x00000003)\r
880#define TPM_SD_DISABLERESETLOCK ((TPM_CAPABILITY_AREA)0x00000004)\r
881#define TPM_SD_PCR ((TPM_CAPABILITY_AREA)0x00000005)\r
882#define TPM_SD_DEFERREDPHYSICALPRESENCE ((TPM_CAPABILITY_AREA)0x00000006)\r
1919913f 883\r
884//\r
885// Part 2, section 7.6.1: STANY_DATA Subcap for SetCapability\r
886//\r
2f88bd3a
MK		 887#define TPM_AD_CONTEXTNONCESESSION ((TPM_CAPABILITY_AREA) 1)\r
888#define TPM_AD_AUDITDIGEST ((TPM_CAPABILITY_AREA) 2)\r
889#define TPM_AD_CURRENTTICKS ((TPM_CAPABILITY_AREA) 3)\r
890#define TPM_AD_CONTEXTCOUNT ((TPM_CAPABILITY_AREA) 4)\r
891#define TPM_AD_CONTEXTLIST ((TPM_CAPABILITY_AREA) 5)\r
892#define TPM_AD_SESSIONS ((TPM_CAPABILITY_AREA) 6)\r
267669ba
LG		 893\r
894//\r
895// Part 2, section 8: PCR Structures\r
9095d37b 896//\r
267669ba 897\r
427987f5 898///\r
899/// Part 2, section 8.1: TPM_PCR_SELECTION\r
900/// Size of pcrSelect[] indicated by sizeOfSelect\r
901///\r
267669ba 902typedef struct tdTPM_PCR_SELECTION {\r
2f88bd3a
MK		 903 UINT16 sizeOfSelect;\r
904 UINT8 pcrSelect[1];\r
267669ba
LG		 905} TPM_PCR_SELECTION;\r
906\r
427987f5 907///\r
908/// Part 2, section 8.2: TPM_PCR_COMPOSITE\r
909/// Size of pcrValue[] indicated by valueSize\r
910///\r
267669ba 911typedef struct tdTPM_PCR_COMPOSITE {\r
2f88bd3a
MK		 912 TPM_PCR_SELECTION select;\r
913 UINT32 valueSize;\r
914 TPM_PCRVALUE pcrValue[1];\r
267669ba
LG		 915} TPM_PCR_COMPOSITE;\r
916\r
427987f5 917///\r
918/// Part 2, section 8.3: TPM_PCR_INFO\r
919///\r
267669ba 920typedef struct tdTPM_PCR_INFO {\r
2f88bd3a
MK		 921 TPM_PCR_SELECTION pcrSelection;\r
922 TPM_COMPOSITE_HASH digestAtRelease;\r
923 TPM_COMPOSITE_HASH digestAtCreation;\r
267669ba
LG		 924} TPM_PCR_INFO;\r
925\r
427987f5 926///\r
927/// Part 2, section 8.6: TPM_LOCALITY_SELECTION\r
928///\r
2f88bd3a 929typedef UINT8 TPM_LOCALITY_SELECTION;\r
267669ba 930\r
2f88bd3a
MK		 931#define TPM_LOC_FOUR ((UINT8) 0x10)\r
932#define TPM_LOC_THREE ((UINT8) 0x08)\r
933#define TPM_LOC_TWO ((UINT8) 0x04)\r
934#define TPM_LOC_ONE ((UINT8) 0x02)\r
935#define TPM_LOC_ZERO ((UINT8) 0x01)\r
267669ba 936\r
427987f5 937///\r
938/// Part 2, section 8.4: TPM_PCR_INFO_LONG\r
939///\r
267669ba 940typedef struct tdTPM_PCR_INFO_LONG {\r
2f88bd3a
MK		 941 TPM_STRUCTURE_TAG tag;\r
942 TPM_LOCALITY_SELECTION localityAtCreation;\r
943 TPM_LOCALITY_SELECTION localityAtRelease;\r
944 TPM_PCR_SELECTION creationPCRSelection;\r
945 TPM_PCR_SELECTION releasePCRSelection;\r
946 TPM_COMPOSITE_HASH digestAtCreation;\r
947 TPM_COMPOSITE_HASH digestAtRelease;\r
267669ba
LG		 948} TPM_PCR_INFO_LONG;\r
949\r
427987f5 950///\r
951/// Part 2, section 8.5: TPM_PCR_INFO_SHORT\r
952///\r
2f88bd3a
MK		 953typedef struct tdTPM_PCR_INFO_SHORT {\r
954 TPM_PCR_SELECTION pcrSelection;\r
955 TPM_LOCALITY_SELECTION localityAtRelease;\r
956 TPM_COMPOSITE_HASH digestAtRelease;\r
267669ba
LG		 957} TPM_PCR_INFO_SHORT;\r
958\r
427987f5 959///\r
960/// Part 2, section 8.8: TPM_PCR_ATTRIBUTES\r
961///\r
2f88bd3a
MK		 962typedef struct tdTPM_PCR_ATTRIBUTES {\r
963 BOOLEAN pcrReset;\r
964 TPM_LOCALITY_SELECTION pcrExtendLocal;\r
965 TPM_LOCALITY_SELECTION pcrResetLocal;\r
267669ba
LG		 966} TPM_PCR_ATTRIBUTES;\r
967\r
968//\r
969// Part 2, section 9: Storage Structures\r
970//\r
971\r
427987f5 972///\r
973/// Part 2, section 9.1: TPM_STORED_DATA\r
974/// [size_is(sealInfoSize)] BYTE* sealInfo;\r
975/// [size_is(encDataSize)] BYTE* encData;\r
976///\r
267669ba 977typedef struct tdTPM_STORED_DATA {\r
2f88bd3a
MK		 978 TPM_STRUCT_VER ver;\r
979 UINT32 sealInfoSize;\r
980 UINT8 *sealInfo;\r
981 UINT32 encDataSize;\r
982 UINT8 *encData;\r
267669ba
LG		 983} TPM_STORED_DATA;\r
984\r
427987f5 985///\r
986/// Part 2, section 9.2: TPM_STORED_DATA12\r
987/// [size_is(sealInfoSize)] BYTE* sealInfo;\r
988/// [size_is(encDataSize)] BYTE* encData;\r
989///\r
267669ba 990typedef struct tdTPM_STORED_DATA12 {\r
2f88bd3a
MK		 991 TPM_STRUCTURE_TAG tag;\r
992 TPM_ENTITY_TYPE et;\r
993 UINT32 sealInfoSize;\r
994 UINT8 *sealInfo;\r
995 UINT32 encDataSize;\r
996 UINT8 *encData;\r
267669ba
LG		 997} TPM_STORED_DATA12;\r
998\r
427987f5 999///\r
1000/// Part 2, section 9.3: TPM_SEALED_DATA\r
1001/// [size_is(dataSize)] BYTE* data;\r
1002///\r
267669ba 1003typedef struct tdTPM_SEALED_DATA {\r
2f88bd3a
MK		 1004 TPM_PAYLOAD_TYPE payload;\r
1005 TPM_SECRET authData;\r
1006 TPM_NONCE tpmProof;\r
1007 TPM_DIGEST storedDigest;\r
1008 UINT32 dataSize;\r
1009 UINT8 *data;\r
267669ba
LG		 1010} TPM_SEALED_DATA;\r
1011\r
427987f5 1012///\r
1013/// Part 2, section 9.4: TPM_SYMMETRIC_KEY\r
1014/// [size_is(size)] BYTE* data;\r
1015///\r
267669ba 1016typedef struct tdTPM_SYMMETRIC_KEY {\r
2f88bd3a
MK		 1017 TPM_ALGORITHM_ID algId;\r
1018 TPM_ENC_SCHEME encScheme;\r
1019 UINT16 dataSize;\r
1020 UINT8 *data;\r
267669ba
LG		 1021} TPM_SYMMETRIC_KEY;\r
1022\r
427987f5 1023///\r
1024/// Part 2, section 9.5: TPM_BOUND_DATA\r
1025///\r
267669ba 1026typedef struct tdTPM_BOUND_DATA {\r
2f88bd3a
MK		 1027 TPM_STRUCT_VER ver;\r
1028 TPM_PAYLOAD_TYPE payload;\r
1029 UINT8 payloadData[1];\r
267669ba
LG		 1030} TPM_BOUND_DATA;\r
1031\r
1032//\r
1033// Part 2 section 10: TPM_KEY complex\r
9095d37b 1034//\r
267669ba 1035\r
4135253b 1036//\r
1037// Section 10.1, 10.4, and 10.5 have been defined previously\r
1038//\r
1039\r
427987f5 1040///\r
1041/// Part 2, section 10.2: TPM_KEY\r
1042/// [size_is(encDataSize)] BYTE* encData;\r
1043///\r
2f88bd3a
MK		 1044typedef struct tdTPM_KEY {\r
1045 TPM_STRUCT_VER ver;\r
1046 TPM_KEY_USAGE keyUsage;\r
1047 TPM_KEY_FLAGS keyFlags;\r
1048 TPM_AUTH_DATA_USAGE authDataUsage;\r
1049 TPM_KEY_PARMS algorithmParms;\r
1050 UINT32 PCRInfoSize;\r
1051 UINT8 *PCRInfo;\r
1052 TPM_STORE_PUBKEY pubKey;\r
1053 UINT32 encDataSize;\r
1054 UINT8 *encData;\r
267669ba
LG		 1055} TPM_KEY;\r
1056\r
427987f5 1057///\r
1058/// Part 2, section 10.3: TPM_KEY12\r
1059/// [size_is(encDataSize)] BYTE* encData;\r
1060///\r
2f88bd3a
MK		 1061typedef struct tdTPM_KEY12 {\r
1062 TPM_STRUCTURE_TAG tag;\r
1063 UINT16 fill;\r
1064 TPM_KEY_USAGE keyUsage;\r
1065 TPM_KEY_FLAGS keyFlags;\r
1066 TPM_AUTH_DATA_USAGE authDataUsage;\r
1067 TPM_KEY_PARMS algorithmParms;\r
1068 UINT32 PCRInfoSize;\r
1069 UINT8 *PCRInfo;\r
1070 TPM_STORE_PUBKEY pubKey;\r
1071 UINT32 encDataSize;\r
1072 UINT8 *encData;\r
267669ba
LG		 1073} TPM_KEY12;\r
1074\r
427987f5 1075///\r
1076/// Part 2, section 10.7: TPM_STORE_PRIVKEY\r
1077/// [size_is(keyLength)] BYTE* key;\r
1078///\r
267669ba 1079typedef struct tdTPM_STORE_PRIVKEY {\r
2f88bd3a
MK		 1080 UINT32 keyLength;\r
1081 UINT8 *key;\r
267669ba
LG		 1082} TPM_STORE_PRIVKEY;\r
1083\r
427987f5 1084///\r
1085/// Part 2, section 10.6: TPM_STORE_ASYMKEY\r
1086///\r
2f88bd3a
MK		 1087typedef struct tdTPM_STORE_ASYMKEY {\r
1088 // pos len total\r
1089 TPM_PAYLOAD_TYPE payload; // 0 1 1\r
1090 TPM_SECRET usageAuth; // 1 20 21\r
1091 TPM_SECRET migrationAuth; // 21 20 41\r
1092 TPM_DIGEST pubDataDigest; // 41 20 61\r
1093 TPM_STORE_PRIVKEY privKey; // 61 132-151 193-214\r
267669ba
LG		 1094} TPM_STORE_ASYMKEY;\r
1095\r
427987f5 1096///\r
1097/// Part 2, section 10.8: TPM_MIGRATE_ASYMKEY\r
1098/// [size_is(partPrivKeyLen)] BYTE* partPrivKey;\r
1099///\r
2f88bd3a
MK		 1100typedef struct tdTPM_MIGRATE_ASYMKEY {\r
1101 // pos len total\r
1102 TPM_PAYLOAD_TYPE payload; // 0 1 1\r
1103 TPM_SECRET usageAuth; // 1 20 21\r
1104 TPM_DIGEST pubDataDigest; // 21 20 41\r
1105 UINT32 partPrivKeyLen; // 41 4 45\r
1106 UINT8 *partPrivKey; // 45 112-127 157-172\r
267669ba
LG		 1107} TPM_MIGRATE_ASYMKEY;\r
1108\r
427987f5 1109///\r
1110/// Part 2, section 10.9: TPM_KEY_CONTROL\r
1111///\r
2f88bd3a 1112#define TPM_KEY_CONTROL_OWNER_EVICT ((UINT32) 0x00000001)\r
267669ba
LG		 1113\r
1114//\r
1115// Part 2, section 11: Signed Structures\r
1116//\r
1117\r
427987f5 1118///\r
1119/// Part 2, section 11.1: TPM_CERTIFY_INFO Structure\r
1120///\r
4135253b 1121typedef struct tdTPM_CERTIFY_INFO {\r
2f88bd3a
MK		 1122 TPM_STRUCT_VER version;\r
1123 TPM_KEY_USAGE keyUsage;\r
1124 TPM_KEY_FLAGS keyFlags;\r
1125 TPM_AUTH_DATA_USAGE authDataUsage;\r
1126 TPM_KEY_PARMS algorithmParms;\r
1127 TPM_DIGEST pubkeyDigest;\r
1128 TPM_NONCE data;\r
1129 BOOLEAN parentPCRStatus;\r
1130 UINT32 PCRInfoSize;\r
1131 UINT8 *PCRInfo;\r
267669ba
LG		 1132} TPM_CERTIFY_INFO;\r
1133\r
427987f5 1134///\r
1135/// Part 2, section 11.2: TPM_CERTIFY_INFO2 Structure\r
1136///\r
4135253b 1137typedef struct tdTPM_CERTIFY_INFO2 {\r
2f88bd3a
MK		 1138 TPM_STRUCTURE_TAG tag;\r
1139 UINT8 fill;\r
1140 TPM_PAYLOAD_TYPE payloadType;\r
1141 TPM_KEY_USAGE keyUsage;\r
1142 TPM_KEY_FLAGS keyFlags;\r
1143 TPM_AUTH_DATA_USAGE authDataUsage;\r
1144 TPM_KEY_PARMS algorithmParms;\r
1145 TPM_DIGEST pubkeyDigest;\r
1146 TPM_NONCE data;\r
1147 BOOLEAN parentPCRStatus;\r
1148 UINT32 PCRInfoSize;\r
1149 UINT8 *PCRInfo;\r
1150 UINT32 migrationAuthoritySize;\r
1151 UINT8 *migrationAuthority;\r
267669ba
LG		 1152} TPM_CERTIFY_INFO2;\r
1153\r
427987f5 1154///\r
1155/// Part 2, section 11.3 TPM_QUOTE_INFO Structure\r
1156///\r
4135253b 1157typedef struct tdTPM_QUOTE_INFO {\r
2f88bd3a
MK		 1158 TPM_STRUCT_VER version;\r
1159 UINT8 fixed[4];\r
1160 TPM_COMPOSITE_HASH digestValue;\r
1161 TPM_NONCE externalData;\r
267669ba
LG		 1162} TPM_QUOTE_INFO;\r
1163\r
427987f5 1164///\r
1165/// Part 2, section 11.4 TPM_QUOTE_INFO2 Structure\r
1166///\r
4135253b 1167typedef struct tdTPM_QUOTE_INFO2 {\r
2f88bd3a
MK		 1168 TPM_STRUCTURE_TAG tag;\r
1169 UINT8 fixed[4];\r
1170 TPM_NONCE externalData;\r
1171 TPM_PCR_INFO_SHORT infoShort;\r
267669ba
LG		 1172} TPM_QUOTE_INFO2;\r
1173\r
1174//\r
1175// Part 2, section 12: Identity Structures\r
1176//\r
1177\r
427987f5 1178///\r
1179/// Part 2, section 12.1 TPM_EK_BLOB\r
1180///\r
4135253b 1181typedef struct tdTPM_EK_BLOB {\r
2f88bd3a
MK		 1182 TPM_STRUCTURE_TAG tag;\r
1183 TPM_EK_TYPE ekType;\r
1184 UINT32 blobSize;\r
1185 UINT8 *blob;\r
267669ba
LG		 1186} TPM_EK_BLOB;\r
1187\r
427987f5 1188///\r
1189/// Part 2, section 12.2 TPM_EK_BLOB_ACTIVATE\r
1190///\r
4135253b 1191typedef struct tdTPM_EK_BLOB_ACTIVATE {\r
2f88bd3a
MK		 1192 TPM_STRUCTURE_TAG tag;\r
1193 TPM_SYMMETRIC_KEY sessionKey;\r
1194 TPM_DIGEST idDigest;\r
1195 TPM_PCR_INFO_SHORT pcrInfo;\r
267669ba
LG		 1196} TPM_EK_BLOB_ACTIVATE;\r
1197\r
427987f5 1198///\r
1199/// Part 2, section 12.3 TPM_EK_BLOB_AUTH\r
1200///\r
4135253b 1201typedef struct tdTPM_EK_BLOB_AUTH {\r
2f88bd3a
MK		 1202 TPM_STRUCTURE_TAG tag;\r
1203 TPM_SECRET authValue;\r
267669ba
LG		 1204} TPM_EK_BLOB_AUTH;\r
1205\r
427987f5 1206///\r
1207/// Part 2, section 12.5 TPM_IDENTITY_CONTENTS\r
1208///\r
4135253b 1209typedef struct tdTPM_IDENTITY_CONTENTS {\r
2f88bd3a
MK		 1210 TPM_STRUCT_VER ver;\r
1211 UINT32 ordinal;\r
1212 TPM_CHOSENID_HASH labelPrivCADigest;\r
1213 TPM_PUBKEY identityPubKey;\r
267669ba
LG		 1214} TPM_IDENTITY_CONTENTS;\r
1215\r
427987f5 1216///\r
1217/// Part 2, section 12.6 TPM_IDENTITY_REQ\r
1218///\r
4135253b 1219typedef struct tdTPM_IDENTITY_REQ {\r
2f88bd3a
MK		 1220 UINT32 asymSize;\r
1221 UINT32 symSize;\r
1222 TPM_KEY_PARMS asymAlgorithm;\r
1223 TPM_KEY_PARMS symAlgorithm;\r
1224 UINT8 *asymBlob;\r
1225 UINT8 *symBlob;\r
267669ba
LG		 1226} TPM_IDENTITY_REQ;\r
1227\r
427987f5 1228///\r
1229/// Part 2, section 12.7 TPM_IDENTITY_PROOF\r
1230///\r
4135253b 1231typedef struct tdTPM_IDENTITY_PROOF {\r
2f88bd3a
MK		 1232 TPM_STRUCT_VER ver;\r
1233 UINT32 labelSize;\r
1234 UINT32 identityBindingSize;\r
1235 UINT32 endorsementSize;\r
1236 UINT32 platformSize;\r
1237 UINT32 conformanceSize;\r
1238 TPM_PUBKEY identityKey;\r
1239 UINT8 *labelArea;\r
1240 UINT8 *identityBinding;\r
1241 UINT8 *endorsementCredential;\r
1242 UINT8 *platformCredential;\r
1243 UINT8 *conformanceCredential;\r
267669ba
LG		 1244} TPM_IDENTITY_PROOF;\r
1245\r
427987f5 1246///\r
1247/// Part 2, section 12.8 TPM_ASYM_CA_CONTENTS\r
1248///\r
4135253b 1249typedef struct tdTPM_ASYM_CA_CONTENTS {\r
2f88bd3a
MK		 1250 TPM_SYMMETRIC_KEY sessionKey;\r
1251 TPM_DIGEST idDigest;\r
267669ba
LG		 1252} TPM_ASYM_CA_CONTENTS;\r
1253\r
427987f5 1254///\r
1255/// Part 2, section 12.9 TPM_SYM_CA_ATTESTATION\r
1256///\r
4135253b 1257typedef struct tdTPM_SYM_CA_ATTESTATION {\r
2f88bd3a
MK		 1258 UINT32 credSize;\r
1259 TPM_KEY_PARMS algorithm;\r
1260 UINT8 *credential;\r
267669ba
LG		 1261} TPM_SYM_CA_ATTESTATION;\r
1262\r
427987f5 1263///\r
1264/// Part 2, section 15: Tick Structures\r
1265/// Placed here out of order because definitions are used in section 13.\r
1266///\r
267669ba 1267typedef struct tdTPM_CURRENT_TICKS {\r
2f88bd3a
MK		 1268 TPM_STRUCTURE_TAG tag;\r
1269 UINT64 currentTicks;\r
1270 UINT16 tickRate;\r
1271 TPM_NONCE tickNonce;\r
267669ba
LG		 1272} TPM_CURRENT_TICKS;\r
1273\r
427987f5 1274///\r
1275/// Part 2, section 13: Transport structures\r
1276///\r
267669ba 1277\r
427987f5 1278///\r
1279/// Part 2, section 13.1: TPM _TRANSPORT_PUBLIC\r
1280///\r
4135253b 1281typedef struct tdTPM_TRANSPORT_PUBLIC {\r
2f88bd3a
MK		 1282 TPM_STRUCTURE_TAG tag;\r
1283 TPM_TRANSPORT_ATTRIBUTES transAttributes;\r
1284 TPM_ALGORITHM_ID algId;\r
1285 TPM_ENC_SCHEME encScheme;\r
4135253b 1286} TPM_TRANSPORT_PUBLIC;\r
1287\r
1288//\r
1289// Part 2, section 13.1.1 TPM_TRANSPORT_ATTRIBUTES Definitions\r
1290//\r
2f88bd3a
MK		 1291#define TPM_TRANSPORT_ENCRYPT ((UINT32)BIT0)\r
1292#define TPM_TRANSPORT_LOG ((UINT32)BIT1)\r
1293#define TPM_TRANSPORT_EXCLUSIVE ((UINT32)BIT2)\r
267669ba 1294\r
427987f5 1295///\r
1296/// Part 2, section 13.2 TPM_TRANSPORT_INTERNAL\r
1297///\r
4135253b 1298typedef struct tdTPM_TRANSPORT_INTERNAL {\r
2f88bd3a
MK		 1299 TPM_STRUCTURE_TAG tag;\r
1300 TPM_AUTHDATA authData;\r
1301 TPM_TRANSPORT_PUBLIC transPublic;\r
1302 TPM_TRANSHANDLE transHandle;\r
1303 TPM_NONCE transNonceEven;\r
1304 TPM_DIGEST transDigest;\r
267669ba
LG		 1305} TPM_TRANSPORT_INTERNAL;\r
1306\r
427987f5 1307///\r
1308/// Part 2, section 13.3 TPM_TRANSPORT_LOG_IN structure\r
1309///\r
4135253b 1310typedef struct tdTPM_TRANSPORT_LOG_IN {\r
2f88bd3a
MK		 1311 TPM_STRUCTURE_TAG tag;\r
1312 TPM_DIGEST parameters;\r
1313 TPM_DIGEST pubKeyHash;\r
267669ba
LG		 1314} TPM_TRANSPORT_LOG_IN;\r
1315\r
427987f5 1316///\r
1317/// Part 2, section 13.4 TPM_TRANSPORT_LOG_OUT structure\r
1318///\r
4135253b 1319typedef struct tdTPM_TRANSPORT_LOG_OUT {\r
2f88bd3a
MK		 1320 TPM_STRUCTURE_TAG tag;\r
1321 TPM_CURRENT_TICKS currentTicks;\r
1322 TPM_DIGEST parameters;\r
1323 TPM_MODIFIER_INDICATOR locality;\r
267669ba
LG		 1324} TPM_TRANSPORT_LOG_OUT;\r
1325\r
427987f5 1326///\r
1327/// Part 2, section 13.5 TPM_TRANSPORT_AUTH structure\r
1328///\r
4135253b 1329typedef struct tdTPM_TRANSPORT_AUTH {\r
2f88bd3a
MK		 1330 TPM_STRUCTURE_TAG tag;\r
1331 TPM_AUTHDATA authData;\r
267669ba
LG		 1332} TPM_TRANSPORT_AUTH;\r
1333\r
1334//\r
1335// Part 2, section 14: Audit Structures\r
1336//\r
1337\r
427987f5 1338///\r
1339/// Part 2, section 14.1 TPM_AUDIT_EVENT_IN structure\r
1340///\r
4135253b 1341typedef struct tdTPM_AUDIT_EVENT_IN {\r
2f88bd3a
MK		 1342 TPM_STRUCTURE_TAG tag;\r
1343 TPM_DIGEST inputParms;\r
1344 TPM_COUNTER_VALUE auditCount;\r
267669ba
LG		 1345} TPM_AUDIT_EVENT_IN;\r
1346\r
427987f5 1347///\r
1348/// Part 2, section 14.2 TPM_AUDIT_EVENT_OUT structure\r
1349///\r
4135253b 1350typedef struct tdTPM_AUDIT_EVENT_OUT {\r
2f88bd3a
MK		 1351 TPM_STRUCTURE_TAG tag;\r
1352 TPM_COMMAND_CODE ordinal;\r
1353 TPM_DIGEST outputParms;\r
1354 TPM_COUNTER_VALUE auditCount;\r
1355 TPM_RESULT returnCode;\r
267669ba
LG		 1356} TPM_AUDIT_EVENT_OUT;\r
1357\r
1358//\r
1359// Part 2, section 16: Return Codes\r
1360//\r
267669ba 1361\r
2f88bd3a
MK		 1362#define TPM_VENDOR_ERROR TPM_Vendor_Specific32\r
1363#define TPM_NON_FATAL 0x00000800\r
267669ba
LG		 1364\r
1365#define TPM_SUCCESS ((TPM_RESULT) TPM_BASE)\r
1366#define TPM_AUTHFAIL ((TPM_RESULT) (TPM_BASE + 1))\r
1367#define TPM_BADINDEX ((TPM_RESULT) (TPM_BASE + 2))\r
1368#define TPM_BAD_PARAMETER ((TPM_RESULT) (TPM_BASE + 3))\r
1369#define TPM_AUDITFAILURE ((TPM_RESULT) (TPM_BASE + 4))\r
1370#define TPM_CLEAR_DISABLED ((TPM_RESULT) (TPM_BASE + 5))\r
1371#define TPM_DEACTIVATED ((TPM_RESULT) (TPM_BASE + 6))\r
1372#define TPM_DISABLED ((TPM_RESULT) (TPM_BASE + 7))\r
1373#define TPM_DISABLED_CMD ((TPM_RESULT) (TPM_BASE + 8))\r
1374#define TPM_FAIL ((TPM_RESULT) (TPM_BASE + 9))\r
1375#define TPM_BAD_ORDINAL ((TPM_RESULT) (TPM_BASE + 10))\r
1376#define TPM_INSTALL_DISABLED ((TPM_RESULT) (TPM_BASE + 11))\r
1377#define TPM_INVALID_KEYHANDLE ((TPM_RESULT) (TPM_BASE + 12))\r
1378#define TPM_KEYNOTFOUND ((TPM_RESULT) (TPM_BASE + 13))\r
1379#define TPM_INAPPROPRIATE_ENC ((TPM_RESULT) (TPM_BASE + 14))\r
1380#define TPM_MIGRATEFAIL ((TPM_RESULT) (TPM_BASE + 15))\r
1381#define TPM_INVALID_PCR_INFO ((TPM_RESULT) (TPM_BASE + 16))\r
1382#define TPM_NOSPACE ((TPM_RESULT) (TPM_BASE + 17))\r
1383#define TPM_NOSRK ((TPM_RESULT) (TPM_BASE + 18))\r
1384#define TPM_NOTSEALED_BLOB ((TPM_RESULT) (TPM_BASE + 19))\r
1385#define TPM_OWNER_SET ((TPM_RESULT) (TPM_BASE + 20))\r
1386#define TPM_RESOURCES ((TPM_RESULT) (TPM_BASE + 21))\r
1387#define TPM_SHORTRANDOM ((TPM_RESULT) (TPM_BASE + 22))\r
1388#define TPM_SIZE ((TPM_RESULT) (TPM_BASE + 23))\r
1389#define TPM_WRONGPCRVAL ((TPM_RESULT) (TPM_BASE + 24))\r
1390#define TPM_BAD_PARAM_SIZE ((TPM_RESULT) (TPM_BASE + 25))\r
1391#define TPM_SHA_THREAD ((TPM_RESULT) (TPM_BASE + 26))\r
1392#define TPM_SHA_ERROR ((TPM_RESULT) (TPM_BASE + 27))\r
1393#define TPM_FAILEDSELFTEST ((TPM_RESULT) (TPM_BASE + 28))\r
1394#define TPM_AUTH2FAIL ((TPM_RESULT) (TPM_BASE + 29))\r
1395#define TPM_BADTAG ((TPM_RESULT) (TPM_BASE + 30))\r
1396#define TPM_IOERROR ((TPM_RESULT) (TPM_BASE + 31))\r
1397#define TPM_ENCRYPT_ERROR ((TPM_RESULT) (TPM_BASE + 32))\r
1398#define TPM_DECRYPT_ERROR ((TPM_RESULT) (TPM_BASE + 33))\r
1399#define TPM_INVALID_AUTHHANDLE ((TPM_RESULT) (TPM_BASE + 34))\r
1400#define TPM_NO_ENDORSEMENT ((TPM_RESULT) (TPM_BASE + 35))\r
1401#define TPM_INVALID_KEYUSAGE ((TPM_RESULT) (TPM_BASE + 36))\r
1402#define TPM_WRONG_ENTITYTYPE ((TPM_RESULT) (TPM_BASE + 37))\r
1403#define TPM_INVALID_POSTINIT ((TPM_RESULT) (TPM_BASE + 38))\r
1404#define TPM_INAPPROPRIATE_SIG ((TPM_RESULT) (TPM_BASE + 39))\r
1405#define TPM_BAD_KEY_PROPERTY ((TPM_RESULT) (TPM_BASE + 40))\r
1406#define TPM_BAD_MIGRATION ((TPM_RESULT) (TPM_BASE + 41))\r
1407#define TPM_BAD_SCHEME ((TPM_RESULT) (TPM_BASE + 42))\r
1408#define TPM_BAD_DATASIZE ((TPM_RESULT) (TPM_BASE + 43))\r
1409#define TPM_BAD_MODE ((TPM_RESULT) (TPM_BASE + 44))\r
1410#define TPM_BAD_PRESENCE ((TPM_RESULT) (TPM_BASE + 45))\r
1411#define TPM_BAD_VERSION ((TPM_RESULT) (TPM_BASE + 46))\r
1412#define TPM_NO_WRAP_TRANSPORT ((TPM_RESULT) (TPM_BASE + 47))\r
1413#define TPM_AUDITFAIL_UNSUCCESSFUL ((TPM_RESULT) (TPM_BASE + 48))\r
1414#define TPM_AUDITFAIL_SUCCESSFUL ((TPM_RESULT) (TPM_BASE + 49))\r
1415#define TPM_NOTRESETABLE ((TPM_RESULT) (TPM_BASE + 50))\r
1416#define TPM_NOTLOCAL ((TPM_RESULT) (TPM_BASE + 51))\r
1417#define TPM_BAD_TYPE ((TPM_RESULT) (TPM_BASE + 52))\r
1418#define TPM_INVALID_RESOURCE ((TPM_RESULT) (TPM_BASE + 53))\r
1419#define TPM_NOTFIPS ((TPM_RESULT) (TPM_BASE + 54))\r
1420#define TPM_INVALID_FAMILY ((TPM_RESULT) (TPM_BASE + 55))\r
1421#define TPM_NO_NV_PERMISSION ((TPM_RESULT) (TPM_BASE + 56))\r
1422#define TPM_REQUIRES_SIGN ((TPM_RESULT) (TPM_BASE + 57))\r
1423#define TPM_KEY_NOTSUPPORTED ((TPM_RESULT) (TPM_BASE + 58))\r
1424#define TPM_AUTH_CONFLICT ((TPM_RESULT) (TPM_BASE + 59))\r
1425#define TPM_AREA_LOCKED ((TPM_RESULT) (TPM_BASE + 60))\r
1426#define TPM_BAD_LOCALITY ((TPM_RESULT) (TPM_BASE + 61))\r
1427#define TPM_READ_ONLY ((TPM_RESULT) (TPM_BASE + 62))\r
1428#define TPM_PER_NOWRITE ((TPM_RESULT) (TPM_BASE + 63))\r
1429#define TPM_FAMILYCOUNT ((TPM_RESULT) (TPM_BASE + 64))\r
1430#define TPM_WRITE_LOCKED ((TPM_RESULT) (TPM_BASE + 65))\r
1431#define TPM_BAD_ATTRIBUTES ((TPM_RESULT) (TPM_BASE + 66))\r
1432#define TPM_INVALID_STRUCTURE ((TPM_RESULT) (TPM_BASE + 67))\r
1433#define TPM_KEY_OWNER_CONTROL ((TPM_RESULT) (TPM_BASE + 68))\r
1434#define TPM_BAD_COUNTER ((TPM_RESULT) (TPM_BASE + 69))\r
1435#define TPM_NOT_FULLWRITE ((TPM_RESULT) (TPM_BASE + 70))\r
1436#define TPM_CONTEXT_GAP ((TPM_RESULT) (TPM_BASE + 71))\r
1437#define TPM_MAXNVWRITES ((TPM_RESULT) (TPM_BASE + 72))\r
1438#define TPM_NOOPERATOR ((TPM_RESULT) (TPM_BASE + 73))\r
1439#define TPM_RESOURCEMISSING ((TPM_RESULT) (TPM_BASE + 74))\r
1440#define TPM_DELEGATE_LOCK ((TPM_RESULT) (TPM_BASE + 75))\r
1441#define TPM_DELEGATE_FAMILY ((TPM_RESULT) (TPM_BASE + 76))\r
1442#define TPM_DELEGATE_ADMIN ((TPM_RESULT) (TPM_BASE + 77))\r
1443#define TPM_TRANSPORT_NOTEXCLUSIVE ((TPM_RESULT) (TPM_BASE + 78))\r
1444#define TPM_OWNER_CONTROL ((TPM_RESULT) (TPM_BASE + 79))\r
1445#define TPM_DAA_RESOURCES ((TPM_RESULT) (TPM_BASE + 80))\r
1446#define TPM_DAA_INPUT_DATA0 ((TPM_RESULT) (TPM_BASE + 81))\r
1447#define TPM_DAA_INPUT_DATA1 ((TPM_RESULT) (TPM_BASE + 82))\r
1448#define TPM_DAA_ISSUER_SETTINGS ((TPM_RESULT) (TPM_BASE + 83))\r
1449#define TPM_DAA_TPM_SETTINGS ((TPM_RESULT) (TPM_BASE + 84))\r
1450#define TPM_DAA_STAGE ((TPM_RESULT) (TPM_BASE + 85))\r
1451#define TPM_DAA_ISSUER_VALIDITY ((TPM_RESULT) (TPM_BASE + 86))\r
1452#define TPM_DAA_WRONG_W ((TPM_RESULT) (TPM_BASE + 87))\r
1453#define TPM_BAD_HANDLE ((TPM_RESULT) (TPM_BASE + 88))\r
1454#define TPM_BAD_DELEGATE ((TPM_RESULT) (TPM_BASE + 89))\r
1455#define TPM_BADCONTEXT ((TPM_RESULT) (TPM_BASE + 90))\r
1456#define TPM_TOOMANYCONTEXTS ((TPM_RESULT) (TPM_BASE + 91))\r
1457#define TPM_MA_TICKET_SIGNATURE ((TPM_RESULT) (TPM_BASE + 92))\r
1458#define TPM_MA_DESTINATION ((TPM_RESULT) (TPM_BASE + 93))\r
1459#define TPM_MA_SOURCE ((TPM_RESULT) (TPM_BASE + 94))\r
1460#define TPM_MA_AUTHORITY ((TPM_RESULT) (TPM_BASE + 95))\r
1461#define TPM_PERMANENTEK ((TPM_RESULT) (TPM_BASE + 97))\r
1462#define TPM_BAD_SIGNATURE ((TPM_RESULT) (TPM_BASE + 98))\r
1463#define TPM_NOCONTEXTSPACE ((TPM_RESULT) (TPM_BASE + 99))\r
1464\r
2f88bd3a
MK		 1465#define TPM_RETRY ((TPM_RESULT) (TPM_BASE + TPM_NON_FATAL))\r
1466#define TPM_NEEDS_SELFTEST ((TPM_RESULT) (TPM_BASE + TPM_NON_FATAL + 1))\r
1467#define TPM_DOING_SELFTEST ((TPM_RESULT) (TPM_BASE + TPM_NON_FATAL + 2))\r
1468#define TPM_DEFEND_LOCK_RUNNING ((TPM_RESULT) (TPM_BASE + TPM_NON_FATAL + 3))\r
267669ba
LG		 1469\r
1470//\r
1471// Part 2, section 17: Ordinals\r
1472//\r
1473// Ordinals are 32 bit values. The upper byte contains values that serve as\r
1474// flag indicators, the next byte contains values indicating what committee\r
1475// designated the ordinal, and the final two bytes contain the Command\r
1476// Ordinal Index.\r
1477// 3 2 1\r
1478// 1 0 9 8 7 6 5 4 3 2 1 0 9 8 7 6 5 4 3 2 1 0 9 8 7 6 5 4 3 2 1 0\r
1479// +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r
1480// |P|C|V| Reserved| Purview | Command Ordinal Index |\r
1481// +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r
1482//\r
1483// Where:\r
1484//\r
1485// * P is Protected/Unprotected command. When 0 the command is a Protected\r
1486// command, when 1 the command is an Unprotected command.\r
1487//\r
1488// * C is Non-Connection/Connection related command. When 0 this command\r
1489// passes through to either the protected (TPM) or unprotected (TSS)\r
1490// components.\r
1491//\r
1492// * V is TPM/Vendor command. When 0 the command is TPM defined, when 1 the\r
1493// command is vendor defined.\r
1494//\r
1495// * All reserved area bits are set to 0.\r
1496//\r
1497\r
2f88bd3a
MK		 1498#define TPM_ORD_ActivateIdentity ((TPM_COMMAND_CODE) 0x0000007A)\r
1499#define TPM_ORD_AuthorizeMigrationKey ((TPM_COMMAND_CODE) 0x0000002B)\r
1500#define TPM_ORD_CertifyKey ((TPM_COMMAND_CODE) 0x00000032)\r
1501#define TPM_ORD_CertifyKey2 ((TPM_COMMAND_CODE) 0x00000033)\r
1502#define TPM_ORD_CertifySelfTest ((TPM_COMMAND_CODE) 0x00000052)\r
1503#define TPM_ORD_ChangeAuth ((TPM_COMMAND_CODE) 0x0000000C)\r
1504#define TPM_ORD_ChangeAuthAsymFinish ((TPM_COMMAND_CODE) 0x0000000F)\r
1505#define TPM_ORD_ChangeAuthAsymStart ((TPM_COMMAND_CODE) 0x0000000E)\r
1506#define TPM_ORD_ChangeAuthOwner ((TPM_COMMAND_CODE) 0x00000010)\r
1507#define TPM_ORD_CMK_ApproveMA ((TPM_COMMAND_CODE) 0x0000001D)\r
1508#define TPM_ORD_CMK_ConvertMigration ((TPM_COMMAND_CODE) 0x00000024)\r
1509#define TPM_ORD_CMK_CreateBlob ((TPM_COMMAND_CODE) 0x0000001B)\r
1510#define TPM_ORD_CMK_CreateKey ((TPM_COMMAND_CODE) 0x00000013)\r
1511#define TPM_ORD_CMK_CreateTicket ((TPM_COMMAND_CODE) 0x00000012)\r
1512#define TPM_ORD_CMK_SetRestrictions ((TPM_COMMAND_CODE) 0x0000001C)\r
1513#define TPM_ORD_ContinueSelfTest ((TPM_COMMAND_CODE) 0x00000053)\r
1514#define TPM_ORD_ConvertMigrationBlob ((TPM_COMMAND_CODE) 0x0000002A)\r
1515#define TPM_ORD_CreateCounter ((TPM_COMMAND_CODE) 0x000000DC)\r
1516#define TPM_ORD_CreateEndorsementKeyPair ((TPM_COMMAND_CODE) 0x00000078)\r
1517#define TPM_ORD_CreateMaintenanceArchive ((TPM_COMMAND_CODE) 0x0000002C)\r
1518#define TPM_ORD_CreateMigrationBlob ((TPM_COMMAND_CODE) 0x00000028)\r
1519#define TPM_ORD_CreateRevocableEK ((TPM_COMMAND_CODE) 0x0000007F)\r
1520#define TPM_ORD_CreateWrapKey ((TPM_COMMAND_CODE) 0x0000001F)\r
1521#define TPM_ORD_DAA_JOIN ((TPM_COMMAND_CODE) 0x00000029)\r
1522#define TPM_ORD_DAA_SIGN ((TPM_COMMAND_CODE) 0x00000031)\r
1523#define TPM_ORD_Delegate_CreateKeyDelegation ((TPM_COMMAND_CODE) 0x000000D4)\r
1524#define TPM_ORD_Delegate_CreateOwnerDelegation ((TPM_COMMAND_CODE) 0x000000D5)\r
1525#define TPM_ORD_Delegate_LoadOwnerDelegation ((TPM_COMMAND_CODE) 0x000000D8)\r
1526#define TPM_ORD_Delegate_Manage ((TPM_COMMAND_CODE) 0x000000D2)\r
1527#define TPM_ORD_Delegate_ReadTable ((TPM_COMMAND_CODE) 0x000000DB)\r
1528#define TPM_ORD_Delegate_UpdateVerification ((TPM_COMMAND_CODE) 0x000000D1)\r
1529#define TPM_ORD_Delegate_VerifyDelegation ((TPM_COMMAND_CODE) 0x000000D6)\r
1530#define TPM_ORD_DirRead ((TPM_COMMAND_CODE) 0x0000001A)\r
1531#define TPM_ORD_DirWriteAuth ((TPM_COMMAND_CODE) 0x00000019)\r
1532#define TPM_ORD_DisableForceClear ((TPM_COMMAND_CODE) 0x0000005E)\r
1533#define TPM_ORD_DisableOwnerClear ((TPM_COMMAND_CODE) 0x0000005C)\r
1534#define TPM_ORD_DisablePubekRead ((TPM_COMMAND_CODE) 0x0000007E)\r
1535#define TPM_ORD_DSAP ((TPM_COMMAND_CODE) 0x00000011)\r
1536#define TPM_ORD_EstablishTransport ((TPM_COMMAND_CODE) 0x000000E6)\r
1537#define TPM_ORD_EvictKey ((TPM_COMMAND_CODE) 0x00000022)\r
1538#define TPM_ORD_ExecuteTransport ((TPM_COMMAND_CODE) 0x000000E7)\r
1539#define TPM_ORD_Extend ((TPM_COMMAND_CODE) 0x00000014)\r
1540#define TPM_ORD_FieldUpgrade ((TPM_COMMAND_CODE) 0x000000AA)\r
1541#define TPM_ORD_FlushSpecific ((TPM_COMMAND_CODE) 0x000000BA)\r
1542#define TPM_ORD_ForceClear ((TPM_COMMAND_CODE) 0x0000005D)\r
1543#define TPM_ORD_GetAuditDigest ((TPM_COMMAND_CODE) 0x00000085)\r
1544#define TPM_ORD_GetAuditDigestSigned ((TPM_COMMAND_CODE) 0x00000086)\r
1545#define TPM_ORD_GetAuditEvent ((TPM_COMMAND_CODE) 0x00000082)\r
1546#define TPM_ORD_GetAuditEventSigned ((TPM_COMMAND_CODE) 0x00000083)\r
1547#define TPM_ORD_GetCapability ((TPM_COMMAND_CODE) 0x00000065)\r
1548#define TPM_ORD_GetCapabilityOwner ((TPM_COMMAND_CODE) 0x00000066)\r
1549#define TPM_ORD_GetCapabilitySigned ((TPM_COMMAND_CODE) 0x00000064)\r
1550#define TPM_ORD_GetOrdinalAuditStatus ((TPM_COMMAND_CODE) 0x0000008C)\r
1551#define TPM_ORD_GetPubKey ((TPM_COMMAND_CODE) 0x00000021)\r
1552#define TPM_ORD_GetRandom ((TPM_COMMAND_CODE) 0x00000046)\r
1553#define TPM_ORD_GetTestResult ((TPM_COMMAND_CODE) 0x00000054)\r
1554#define TPM_ORD_GetTicks ((TPM_COMMAND_CODE) 0x000000F1)\r
1555#define TPM_ORD_IncrementCounter ((TPM_COMMAND_CODE) 0x000000DD)\r
1556#define TPM_ORD_Init ((TPM_COMMAND_CODE) 0x00000097)\r
1557#define TPM_ORD_KeyControlOwner ((TPM_COMMAND_CODE) 0x00000023)\r
1558#define TPM_ORD_KillMaintenanceFeature ((TPM_COMMAND_CODE) 0x0000002E)\r
1559#define TPM_ORD_LoadAuthContext ((TPM_COMMAND_CODE) 0x000000B7)\r
1560#define TPM_ORD_LoadContext ((TPM_COMMAND_CODE) 0x000000B9)\r
1561#define TPM_ORD_LoadKey ((TPM_COMMAND_CODE) 0x00000020)\r
1562#define TPM_ORD_LoadKey2 ((TPM_COMMAND_CODE) 0x00000041)\r
1563#define TPM_ORD_LoadKeyContext ((TPM_COMMAND_CODE) 0x000000B5)\r
1564#define TPM_ORD_LoadMaintenanceArchive ((TPM_COMMAND_CODE) 0x0000002D)\r
1565#define TPM_ORD_LoadManuMaintPub ((TPM_COMMAND_CODE) 0x0000002F)\r
1566#define TPM_ORD_MakeIdentity ((TPM_COMMAND_CODE) 0x00000079)\r
1567#define TPM_ORD_MigrateKey ((TPM_COMMAND_CODE) 0x00000025)\r
1568#define TPM_ORD_NV_DefineSpace ((TPM_COMMAND_CODE) 0x000000CC)\r
1569#define TPM_ORD_NV_ReadValue ((TPM_COMMAND_CODE) 0x000000CF)\r
1570#define TPM_ORD_NV_ReadValueAuth ((TPM_COMMAND_CODE) 0x000000D0)\r
1571#define TPM_ORD_NV_WriteValue ((TPM_COMMAND_CODE) 0x000000CD)\r
1572#define TPM_ORD_NV_WriteValueAuth ((TPM_COMMAND_CODE) 0x000000CE)\r
1573#define TPM_ORD_OIAP ((TPM_COMMAND_CODE) 0x0000000A)\r
1574#define TPM_ORD_OSAP ((TPM_COMMAND_CODE) 0x0000000B)\r
1575#define TPM_ORD_OwnerClear ((TPM_COMMAND_CODE) 0x0000005B)\r
1576#define TPM_ORD_OwnerReadInternalPub ((TPM_COMMAND_CODE) 0x00000081)\r
1577#define TPM_ORD_OwnerReadPubek ((TPM_COMMAND_CODE) 0x0000007D)\r
1578#define TPM_ORD_OwnerSetDisable ((TPM_COMMAND_CODE) 0x0000006E)\r
1579#define TPM_ORD_PCR_Reset ((TPM_COMMAND_CODE) 0x000000C8)\r
1580#define TPM_ORD_PcrRead ((TPM_COMMAND_CODE) 0x00000015)\r
1581#define TPM_ORD_PhysicalDisable ((TPM_COMMAND_CODE) 0x00000070)\r
1582#define TPM_ORD_PhysicalEnable ((TPM_COMMAND_CODE) 0x0000006F)\r
1583#define TPM_ORD_PhysicalSetDeactivated ((TPM_COMMAND_CODE) 0x00000072)\r
1584#define TPM_ORD_Quote ((TPM_COMMAND_CODE) 0x00000016)\r
1585#define TPM_ORD_Quote2 ((TPM_COMMAND_CODE) 0x0000003E)\r
1586#define TPM_ORD_ReadCounter ((TPM_COMMAND_CODE) 0x000000DE)\r
1587#define TPM_ORD_ReadManuMaintPub ((TPM_COMMAND_CODE) 0x00000030)\r
1588#define TPM_ORD_ReadPubek ((TPM_COMMAND_CODE) 0x0000007C)\r
1589#define TPM_ORD_ReleaseCounter ((TPM_COMMAND_CODE) 0x000000DF)\r
1590#define TPM_ORD_ReleaseCounterOwner ((TPM_COMMAND_CODE) 0x000000E0)\r
1591#define TPM_ORD_ReleaseTransportSigned ((TPM_COMMAND_CODE) 0x000000E8)\r
1592#define TPM_ORD_Reset ((TPM_COMMAND_CODE) 0x0000005A)\r
1593#define TPM_ORD_ResetLockValue ((TPM_COMMAND_CODE) 0x00000040)\r
1594#define TPM_ORD_RevokeTrust ((TPM_COMMAND_CODE) 0x00000080)\r
1595#define TPM_ORD_SaveAuthContext ((TPM_COMMAND_CODE) 0x000000B6)\r
1596#define TPM_ORD_SaveContext ((TPM_COMMAND_CODE) 0x000000B8)\r
1597#define TPM_ORD_SaveKeyContext ((TPM_COMMAND_CODE) 0x000000B4)\r
1598#define TPM_ORD_SaveState ((TPM_COMMAND_CODE) 0x00000098)\r
1599#define TPM_ORD_Seal ((TPM_COMMAND_CODE) 0x00000017)\r
1600#define TPM_ORD_Sealx ((TPM_COMMAND_CODE) 0x0000003D)\r
1601#define TPM_ORD_SelfTestFull ((TPM_COMMAND_CODE) 0x00000050)\r
1602#define TPM_ORD_SetCapability ((TPM_COMMAND_CODE) 0x0000003F)\r
1603#define TPM_ORD_SetOperatorAuth ((TPM_COMMAND_CODE) 0x00000074)\r
1604#define TPM_ORD_SetOrdinalAuditStatus ((TPM_COMMAND_CODE) 0x0000008D)\r
1605#define TPM_ORD_SetOwnerInstall ((TPM_COMMAND_CODE) 0x00000071)\r
1606#define TPM_ORD_SetOwnerPointer ((TPM_COMMAND_CODE) 0x00000075)\r
1607#define TPM_ORD_SetRedirection ((TPM_COMMAND_CODE) 0x0000009A)\r
1608#define TPM_ORD_SetTempDeactivated ((TPM_COMMAND_CODE) 0x00000073)\r
1609#define TPM_ORD_SHA1Complete ((TPM_COMMAND_CODE) 0x000000A2)\r
1610#define TPM_ORD_SHA1CompleteExtend ((TPM_COMMAND_CODE) 0x000000A3)\r
1611#define TPM_ORD_SHA1Start ((TPM_COMMAND_CODE) 0x000000A0)\r
1612#define TPM_ORD_SHA1Update ((TPM_COMMAND_CODE) 0x000000A1)\r
1613#define TPM_ORD_Sign ((TPM_COMMAND_CODE) 0x0000003C)\r
1614#define TPM_ORD_Startup ((TPM_COMMAND_CODE) 0x00000099)\r
1615#define TPM_ORD_StirRandom ((TPM_COMMAND_CODE) 0x00000047)\r
1616#define TPM_ORD_TakeOwnership ((TPM_COMMAND_CODE) 0x0000000D)\r
1617#define TPM_ORD_Terminate_Handle ((TPM_COMMAND_CODE) 0x00000096)\r
1618#define TPM_ORD_TickStampBlob ((TPM_COMMAND_CODE) 0x000000F2)\r
1619#define TPM_ORD_UnBind ((TPM_COMMAND_CODE) 0x0000001E)\r
1620#define TPM_ORD_Unseal ((TPM_COMMAND_CODE) 0x00000018)\r
1621#define TSC_ORD_PhysicalPresence ((TPM_COMMAND_CODE) 0x4000000A)\r
1622#define TSC_ORD_ResetEstablishmentBit ((TPM_COMMAND_CODE) 0x4000000B)\r
267669ba
LG		 1623\r
1624//\r
1625// Part 2, section 18: Context structures\r
1626//\r
1627\r
427987f5 1628///\r
1629/// Part 2, section 18.1: TPM_CONTEXT_BLOB\r
1630///\r
4135253b 1631typedef struct tdTPM_CONTEXT_BLOB {\r
2f88bd3a
MK		 1632 TPM_STRUCTURE_TAG tag;\r
1633 TPM_RESOURCE_TYPE resourceType;\r
1634 TPM_HANDLE handle;\r
1635 UINT8 label[16];\r
1636 UINT32 contextCount;\r
1637 TPM_DIGEST integrityDigest;\r
1638 UINT32 additionalSize;\r
1639 UINT8 *additionalData;\r
1640 UINT32 sensitiveSize;\r
1641 UINT8 *sensitiveData;\r
267669ba
LG		 1642} TPM_CONTEXT_BLOB;\r
1643\r
427987f5 1644///\r
1645/// Part 2, section 18.2 TPM_CONTEXT_SENSITIVE\r
1646///\r
4135253b 1647typedef struct tdTPM_CONTEXT_SENSITIVE {\r
2f88bd3a
MK		 1648 TPM_STRUCTURE_TAG tag;\r
1649 TPM_NONCE contextNonce;\r
1650 UINT32 internalSize;\r
1651 UINT8 *internalData;\r
267669ba
LG		 1652} TPM_CONTEXT_SENSITIVE;\r
1653\r
1654//\r
1655// Part 2, section 19: NV Structures\r
1656//\r
1657\r
4135253b 1658//\r
1659// Part 2, section 19.1.1: Required TPM_NV_INDEX values\r
1660//\r
2f88bd3a
MK		 1661#define TPM_NV_INDEX_LOCK ((UINT32)0xffffffff)\r
1662#define TPM_NV_INDEX0 ((UINT32)0x00000000)\r
1663#define TPM_NV_INDEX_DIR ((UINT32)0x10000001)\r
1664#define TPM_NV_INDEX_EKCert ((UINT32)0x0000f000)\r
1665#define TPM_NV_INDEX_TPM_CC ((UINT32)0x0000f001)\r
1666#define TPM_NV_INDEX_PlatformCert ((UINT32)0x0000f002)\r
1667#define TPM_NV_INDEX_Platform_CC ((UINT32)0x0000f003)\r
4135253b 1668//\r
1669// Part 2, section 19.1.2: Reserved Index values\r
1670//\r
2f88bd3a
MK		 1671#define TPM_NV_INDEX_TSS_BASE ((UINT32)0x00011100)\r
1672#define TPM_NV_INDEX_PC_BASE ((UINT32)0x00011200)\r
1673#define TPM_NV_INDEX_SERVER_BASE ((UINT32)0x00011300)\r
1674#define TPM_NV_INDEX_MOBILE_BASE ((UINT32)0x00011400)\r
1675#define TPM_NV_INDEX_PERIPHERAL_BASE ((UINT32)0x00011500)\r
1676#define TPM_NV_INDEX_GROUP_RESV_BASE ((UINT32)0x00010000)\r
267669ba 1677\r
427987f5 1678///\r
1679/// Part 2, section 19.2: TPM_NV_ATTRIBUTES\r
1680///\r
1681typedef struct tdTPM_NV_ATTRIBUTES {\r
2f88bd3a
MK		 1682 TPM_STRUCTURE_TAG tag;\r
1683 UINT32 attributes;\r
427987f5 1684} TPM_NV_ATTRIBUTES;\r
1685\r
2f88bd3a
MK		 1686#define TPM_NV_PER_READ_STCLEAR (BIT31)\r
1687#define TPM_NV_PER_AUTHREAD (BIT18)\r
1688#define TPM_NV_PER_OWNERREAD (BIT17)\r
1689#define TPM_NV_PER_PPREAD (BIT16)\r
1690#define TPM_NV_PER_GLOBALLOCK (BIT15)\r
1691#define TPM_NV_PER_WRITE_STCLEAR (BIT14)\r
1692#define TPM_NV_PER_WRITEDEFINE (BIT13)\r
1693#define TPM_NV_PER_WRITEALL (BIT12)\r
1694#define TPM_NV_PER_AUTHWRITE (BIT2)\r
1695#define TPM_NV_PER_OWNERWRITE (BIT1)\r
1696#define TPM_NV_PER_PPWRITE (BIT0)\r
267669ba 1697\r
427987f5 1698///\r
1699/// Part 2, section 19.3: TPM_NV_DATA_PUBLIC\r
1700///\r
4135253b 1701typedef struct tdTPM_NV_DATA_PUBLIC {\r
2f88bd3a
MK		 1702 TPM_STRUCTURE_TAG tag;\r
1703 TPM_NV_INDEX nvIndex;\r
1704 TPM_PCR_INFO_SHORT pcrInfoRead;\r
1705 TPM_PCR_INFO_SHORT pcrInfoWrite;\r
1706 TPM_NV_ATTRIBUTES permission;\r
1707 BOOLEAN bReadSTClear;\r
1708 BOOLEAN bWriteSTClear;\r
1709 BOOLEAN bWriteDefine;\r
1710 UINT32 dataSize;\r
4135253b 1711} TPM_NV_DATA_PUBLIC;\r
267669ba 1712\r
4135253b 1713//\r
1714// Part 2, section 20: Delegate Structures\r
1715//\r
267669ba 1716\r
2f88bd3a
MK		 1717#define TPM_DEL_OWNER_BITS ((UINT32)0x00000001)\r
1718#define TPM_DEL_KEY_BITS ((UINT32)0x00000002)\r
cc078d72 1719///\r
1720/// Part 2, section 20.2: Delegate Definitions\r
1721///\r
4135253b 1722typedef struct tdTPM_DELEGATIONS {\r
2f88bd3a
MK		 1723 TPM_STRUCTURE_TAG tag;\r
1724 UINT32 delegateType;\r
1725 UINT32 per1;\r
1726 UINT32 per2;\r
4135253b 1727} TPM_DELEGATIONS;\r
267669ba 1728\r
4135253b 1729//\r
1730// Part 2, section 20.2.1: Owner Permission Settings\r
1731//\r
2f88bd3a
MK		 1732#define TPM_DELEGATE_SetOrdinalAuditStatus (BIT30)\r
1733#define TPM_DELEGATE_DirWriteAuth (BIT29)\r
1734#define TPM_DELEGATE_CMK_ApproveMA (BIT28)\r
1735#define TPM_DELEGATE_NV_WriteValue (BIT27)\r
1736#define TPM_DELEGATE_CMK_CreateTicket (BIT26)\r
1737#define TPM_DELEGATE_NV_ReadValue (BIT25)\r
1738#define TPM_DELEGATE_Delegate_LoadOwnerDelegation (BIT24)\r
1739#define TPM_DELEGATE_DAA_Join (BIT23)\r
1740#define TPM_DELEGATE_AuthorizeMigrationKey (BIT22)\r
1741#define TPM_DELEGATE_CreateMaintenanceArchive (BIT21)\r
1742#define TPM_DELEGATE_LoadMaintenanceArchive (BIT20)\r
1743#define TPM_DELEGATE_KillMaintenanceFeature (BIT19)\r
1744#define TPM_DELEGATE_OwnerReadInteralPub (BIT18)\r
1745#define TPM_DELEGATE_ResetLockValue (BIT17)\r
1746#define TPM_DELEGATE_OwnerClear (BIT16)\r
1747#define TPM_DELEGATE_DisableOwnerClear (BIT15)\r
1748#define TPM_DELEGATE_NV_DefineSpace (BIT14)\r
1749#define TPM_DELEGATE_OwnerSetDisable (BIT13)\r
1750#define TPM_DELEGATE_SetCapability (BIT12)\r
1751#define TPM_DELEGATE_MakeIdentity (BIT11)\r
1752#define TPM_DELEGATE_ActivateIdentity (BIT10)\r
1753#define TPM_DELEGATE_OwnerReadPubek (BIT9)\r
1754#define TPM_DELEGATE_DisablePubekRead (BIT8)\r
1755#define TPM_DELEGATE_SetRedirection (BIT7)\r
1756#define TPM_DELEGATE_FieldUpgrade (BIT6)\r
1757#define TPM_DELEGATE_Delegate_UpdateVerification (BIT5)\r
1758#define TPM_DELEGATE_CreateCounter (BIT4)\r
1759#define TPM_DELEGATE_ReleaseCounterOwner (BIT3)\r
1760#define TPM_DELEGATE_DelegateManage (BIT2)\r
1761#define TPM_DELEGATE_Delegate_CreateOwnerDelegation (BIT1)\r
1762#define TPM_DELEGATE_DAA_Sign (BIT0)\r
4135253b 1763\r
1764//\r
1765// Part 2, section 20.2.3: Key Permission settings\r
1766//\r
2f88bd3a
MK		 1767#define TPM_KEY_DELEGATE_CMK_ConvertMigration (BIT28)\r
1768#define TPM_KEY_DELEGATE_TickStampBlob (BIT27)\r
1769#define TPM_KEY_DELEGATE_ChangeAuthAsymStart (BIT26)\r
1770#define TPM_KEY_DELEGATE_ChangeAuthAsymFinish (BIT25)\r
1771#define TPM_KEY_DELEGATE_CMK_CreateKey (BIT24)\r
1772#define TPM_KEY_DELEGATE_MigrateKey (BIT23)\r
1773#define TPM_KEY_DELEGATE_LoadKey2 (BIT22)\r
1774#define TPM_KEY_DELEGATE_EstablishTransport (BIT21)\r
1775#define TPM_KEY_DELEGATE_ReleaseTransportSigned (BIT20)\r
1776#define TPM_KEY_DELEGATE_Quote2 (BIT19)\r
1777#define TPM_KEY_DELEGATE_Sealx (BIT18)\r
1778#define TPM_KEY_DELEGATE_MakeIdentity (BIT17)\r
1779#define TPM_KEY_DELEGATE_ActivateIdentity (BIT16)\r
1780#define TPM_KEY_DELEGATE_GetAuditDigestSigned (BIT15)\r
1781#define TPM_KEY_DELEGATE_Sign (BIT14)\r
1782#define TPM_KEY_DELEGATE_CertifyKey2 (BIT13)\r
1783#define TPM_KEY_DELEGATE_CertifyKey (BIT12)\r
1784#define TPM_KEY_DELEGATE_CreateWrapKey (BIT11)\r
1785#define TPM_KEY_DELEGATE_CMK_CreateBlob (BIT10)\r
1786#define TPM_KEY_DELEGATE_CreateMigrationBlob (BIT9)\r
1787#define TPM_KEY_DELEGATE_ConvertMigrationBlob (BIT8)\r
1788#define TPM_KEY_DELEGATE_CreateKeyDelegation (BIT7)\r
1789#define TPM_KEY_DELEGATE_ChangeAuth (BIT6)\r
1790#define TPM_KEY_DELEGATE_GetPubKey (BIT5)\r
1791#define TPM_KEY_DELEGATE_UnBind (BIT4)\r
1792#define TPM_KEY_DELEGATE_Quote (BIT3)\r
1793#define TPM_KEY_DELEGATE_Unseal (BIT2)\r
1794#define TPM_KEY_DELEGATE_Seal (BIT1)\r
1795#define TPM_KEY_DELEGATE_LoadKey (BIT0)\r
4135253b 1796\r
1797//\r
1798// Part 2, section 20.3: TPM_FAMILY_FLAGS\r
1799//\r
2f88bd3a
MK		 1800#define TPM_DELEGATE_ADMIN_LOCK (BIT1)\r
1801#define TPM_FAMFLAG_ENABLE (BIT0)\r
4135253b 1802\r
427987f5 1803///\r
1804/// Part 2, section 20.4: TPM_FAMILY_LABEL\r
1805///\r
4135253b 1806typedef struct tdTPM_FAMILY_LABEL {\r
2f88bd3a 1807 UINT8 label;\r
267669ba
LG		 1808} TPM_FAMILY_LABEL;\r
1809\r
427987f5 1810///\r
1811/// Part 2, section 20.5: TPM_FAMILY_TABLE_ENTRY\r
1812///\r
4135253b 1813typedef struct tdTPM_FAMILY_TABLE_ENTRY {\r
2f88bd3a
MK		 1814 TPM_STRUCTURE_TAG tag;\r
1815 TPM_FAMILY_LABEL label;\r
1816 TPM_FAMILY_ID familyID;\r
1817 TPM_FAMILY_VERIFICATION verificationCount;\r
1818 TPM_FAMILY_FLAGS flags;\r
267669ba
LG		 1819} TPM_FAMILY_TABLE_ENTRY;\r
1820\r
4135253b 1821//\r
1822// Part 2, section 20.6: TPM_FAMILY_TABLE\r
1823//\r
2f88bd3a 1824#define TPM_NUM_FAMILY_TABLE_ENTRY_MIN 8\r
267669ba 1825\r
2f88bd3a
MK		 1826typedef struct tdTPM_FAMILY_TABLE {\r
1827 TPM_FAMILY_TABLE_ENTRY famTableRow[TPM_NUM_FAMILY_TABLE_ENTRY_MIN];\r
4135253b 1828} TPM_FAMILY_TABLE;\r
267669ba 1829\r
427987f5 1830///\r
1831/// Part 2, section 20.7: TPM_DELEGATE_LABEL\r
1832///\r
4135253b 1833typedef struct tdTPM_DELEGATE_LABEL {\r
2f88bd3a 1834 UINT8 label;\r
267669ba
LG		 1835} TPM_DELEGATE_LABEL;\r
1836\r
427987f5 1837///\r
1838/// Part 2, section 20.8: TPM_DELEGATE_PUBLIC\r
1839///\r
4135253b 1840typedef struct tdTPM_DELEGATE_PUBLIC {\r
2f88bd3a
MK		 1841 TPM_STRUCTURE_TAG tag;\r
1842 TPM_DELEGATE_LABEL label;\r
1843 TPM_PCR_INFO_SHORT pcrInfo;\r
1844 TPM_DELEGATIONS permissions;\r
1845 TPM_FAMILY_ID familyID;\r
1846 TPM_FAMILY_VERIFICATION verificationCount;\r
267669ba
LG		 1847} TPM_DELEGATE_PUBLIC;\r
1848\r
427987f5 1849///\r
1850/// Part 2, section 20.9: TPM_DELEGATE_TABLE_ROW\r
1851///\r
4135253b 1852typedef struct tdTPM_DELEGATE_TABLE_ROW {\r
2f88bd3a
MK		 1853 TPM_STRUCTURE_TAG tag;\r
1854 TPM_DELEGATE_PUBLIC pub;\r
1855 TPM_SECRET authValue;\r
267669ba
LG		 1856} TPM_DELEGATE_TABLE_ROW;\r
1857\r
4135253b 1858//\r
1859// Part 2, section 20.10: TPM_DELEGATE_TABLE\r
1860//\r
2f88bd3a 1861#define TPM_NUM_DELEGATE_TABLE_ENTRY_MIN 2\r
4135253b 1862\r
2f88bd3a
MK		 1863typedef struct tdTPM_DELEGATE_TABLE {\r
1864 TPM_DELEGATE_TABLE_ROW delRow[TPM_NUM_DELEGATE_TABLE_ENTRY_MIN];\r
4135253b 1865} TPM_DELEGATE_TABLE;\r
1866\r
427987f5 1867///\r
1868/// Part 2, section 20.11: TPM_DELEGATE_SENSITIVE\r
1869///\r
4135253b 1870typedef struct tdTPM_DELEGATE_SENSITIVE {\r
2f88bd3a
MK		 1871 TPM_STRUCTURE_TAG tag;\r
1872 TPM_SECRET authValue;\r
267669ba
LG		 1873} TPM_DELEGATE_SENSITIVE;\r
1874\r
427987f5 1875///\r
1876/// Part 2, section 20.12: TPM_DELEGATE_OWNER_BLOB\r
1877///\r
4135253b 1878typedef struct tdTPM_DELEGATE_OWNER_BLOB {\r
2f88bd3a
MK		 1879 TPM_STRUCTURE_TAG tag;\r
1880 TPM_DELEGATE_PUBLIC pub;\r
1881 TPM_DIGEST integrityDigest;\r
1882 UINT32 additionalSize;\r
1883 UINT8 *additionalArea;\r
1884 UINT32 sensitiveSize;\r
1885 UINT8 *sensitiveArea;\r
267669ba
LG		 1886} TPM_DELEGATE_OWNER_BLOB;\r
1887\r
427987f5 1888///\r
1889/// Part 2, section 20.13: TTPM_DELEGATE_KEY_BLOB\r
1890///\r
4135253b 1891typedef struct tdTPM_DELEGATE_KEY_BLOB {\r
2f88bd3a
MK		 1892 TPM_STRUCTURE_TAG tag;\r
1893 TPM_DELEGATE_PUBLIC pub;\r
1894 TPM_DIGEST integrityDigest;\r
1895 TPM_DIGEST pubKeyDigest;\r
1896 UINT32 additionalSize;\r
1897 UINT8 *additionalArea;\r
1898 UINT32 sensitiveSize;\r
1899 UINT8 *sensitiveArea;\r
267669ba
LG		 1900} TPM_DELEGATE_KEY_BLOB;\r
1901\r
4135253b 1902//\r
1903// Part 2, section 20.14: TPM_FAMILY_OPERATION Values\r
1904//\r
2f88bd3a
MK		 1905#define TPM_FAMILY_CREATE ((UINT32)0x00000001)\r
1906#define TPM_FAMILY_ENABLE ((UINT32)0x00000002)\r
1907#define TPM_FAMILY_ADMIN ((UINT32)0x00000003)\r
1908#define TPM_FAMILY_INVALIDATE ((UINT32)0x00000004)\r
4135253b 1909\r
267669ba
LG		 1910//\r
1911// Part 2, section 21.1: TPM_CAPABILITY_AREA for GetCapability\r
1912//\r
2f88bd3a
MK		 1913#define TPM_CAP_ORD ((TPM_CAPABILITY_AREA) 0x00000001)\r
1914#define TPM_CAP_ALG ((TPM_CAPABILITY_AREA) 0x00000002)\r
1915#define TPM_CAP_PID ((TPM_CAPABILITY_AREA) 0x00000003)\r
1916#define TPM_CAP_FLAG ((TPM_CAPABILITY_AREA) 0x00000004)\r
1917#define TPM_CAP_PROPERTY ((TPM_CAPABILITY_AREA) 0x00000005)\r
1918#define TPM_CAP_VERSION ((TPM_CAPABILITY_AREA) 0x00000006)\r
1919#define TPM_CAP_KEY_HANDLE ((TPM_CAPABILITY_AREA) 0x00000007)\r
1920#define TPM_CAP_CHECK_LOADED ((TPM_CAPABILITY_AREA) 0x00000008)\r
1921#define TPM_CAP_SYM_MODE ((TPM_CAPABILITY_AREA) 0x00000009)\r
1922#define TPM_CAP_KEY_STATUS ((TPM_CAPABILITY_AREA) 0x0000000C)\r
1923#define TPM_CAP_NV_LIST ((TPM_CAPABILITY_AREA) 0x0000000D)\r
1924#define TPM_CAP_MFR ((TPM_CAPABILITY_AREA) 0x00000010)\r
1925#define TPM_CAP_NV_INDEX ((TPM_CAPABILITY_AREA) 0x00000011)\r
1926#define TPM_CAP_TRANS_ALG ((TPM_CAPABILITY_AREA) 0x00000012)\r
1927#define TPM_CAP_HANDLE ((TPM_CAPABILITY_AREA) 0x00000014)\r
1928#define TPM_CAP_TRANS_ES ((TPM_CAPABILITY_AREA) 0x00000015)\r
1929#define TPM_CAP_AUTH_ENCRYPT ((TPM_CAPABILITY_AREA) 0x00000017)\r
1930#define TPM_CAP_SELECT_SIZE ((TPM_CAPABILITY_AREA) 0x00000018)\r
1931#define TPM_CAP_VERSION_VAL ((TPM_CAPABILITY_AREA) 0x0000001A)\r
1932\r
1933#define TPM_CAP_FLAG_PERMANENT ((TPM_CAPABILITY_AREA) 0x00000108)\r
1934#define TPM_CAP_FLAG_VOLATILE ((TPM_CAPABILITY_AREA) 0x00000109)\r
267669ba
LG		 1935\r
1936//\r
1937// Part 2, section 21.2: CAP_PROPERTY Subcap values for GetCapability\r
1938//\r
2f88bd3a
MK		 1939#define TPM_CAP_PROP_PCR ((TPM_CAPABILITY_AREA) 0x00000101)\r
1940#define TPM_CAP_PROP_DIR ((TPM_CAPABILITY_AREA) 0x00000102)\r
1941#define TPM_CAP_PROP_MANUFACTURER ((TPM_CAPABILITY_AREA) 0x00000103)\r
1942#define TPM_CAP_PROP_KEYS ((TPM_CAPABILITY_AREA) 0x00000104)\r
1943#define TPM_CAP_PROP_MIN_COUNTER ((TPM_CAPABILITY_AREA) 0x00000107)\r
1944#define TPM_CAP_PROP_AUTHSESS ((TPM_CAPABILITY_AREA) 0x0000010A)\r
1945#define TPM_CAP_PROP_TRANSESS ((TPM_CAPABILITY_AREA) 0x0000010B)\r
1946#define TPM_CAP_PROP_COUNTERS ((TPM_CAPABILITY_AREA) 0x0000010C)\r
1947#define TPM_CAP_PROP_MAX_AUTHSESS ((TPM_CAPABILITY_AREA) 0x0000010D)\r
1948#define TPM_CAP_PROP_MAX_TRANSESS ((TPM_CAPABILITY_AREA) 0x0000010E)\r
1949#define TPM_CAP_PROP_MAX_COUNTERS ((TPM_CAPABILITY_AREA) 0x0000010F)\r
1950#define TPM_CAP_PROP_MAX_KEYS ((TPM_CAPABILITY_AREA) 0x00000110)\r
1951#define TPM_CAP_PROP_OWNER ((TPM_CAPABILITY_AREA) 0x00000111)\r
1952#define TPM_CAP_PROP_CONTEXT ((TPM_CAPABILITY_AREA) 0x00000112)\r
1953#define TPM_CAP_PROP_MAX_CONTEXT ((TPM_CAPABILITY_AREA) 0x00000113)\r
1954#define TPM_CAP_PROP_FAMILYROWS ((TPM_CAPABILITY_AREA) 0x00000114)\r
1955#define TPM_CAP_PROP_TIS_TIMEOUT ((TPM_CAPABILITY_AREA) 0x00000115)\r
1956#define TPM_CAP_PROP_STARTUP_EFFECT ((TPM_CAPABILITY_AREA) 0x00000116)\r
1957#define TPM_CAP_PROP_DELEGATE_ROW ((TPM_CAPABILITY_AREA) 0x00000117)\r
1958#define TPM_CAP_PROP_DAA_MAX ((TPM_CAPABILITY_AREA) 0x00000119)\r
1959#define CAP_PROP_SESSION_DAA ((TPM_CAPABILITY_AREA) 0x0000011A)\r
1960#define TPM_CAP_PROP_CONTEXT_DIST ((TPM_CAPABILITY_AREA) 0x0000011B)\r
1961#define TPM_CAP_PROP_DAA_INTERRUPT ((TPM_CAPABILITY_AREA) 0x0000011C)\r
1962#define TPM_CAP_PROP_SESSIONS ((TPM_CAPABILITY_AREA) 0x0000011D)\r
1963#define TPM_CAP_PROP_MAX_SESSIONS ((TPM_CAPABILITY_AREA) 0x0000011E)\r
1964#define TPM_CAP_PROP_CMK_RESTRICTION ((TPM_CAPABILITY_AREA) 0x0000011F)\r
1965#define TPM_CAP_PROP_DURATION ((TPM_CAPABILITY_AREA) 0x00000120)\r
1966#define TPM_CAP_PROP_ACTIVE_COUNTER ((TPM_CAPABILITY_AREA) 0x00000122)\r
1967#define TPM_CAP_PROP_MAX_NV_AVAILABLE ((TPM_CAPABILITY_AREA) 0x00000123)\r
1968#define TPM_CAP_PROP_INPUT_BUFFER ((TPM_CAPABILITY_AREA) 0x00000124)\r
267669ba 1969\r
1919913f 1970//\r
1971// Part 2, section 21.4: TPM_CAPABILITY_AREA for SetCapability\r
1972//\r
2f88bd3a
MK		 1973#define TPM_SET_PERM_FLAGS ((TPM_CAPABILITY_AREA) 0x00000001)\r
1974#define TPM_SET_PERM_DATA ((TPM_CAPABILITY_AREA) 0x00000002)\r
1975#define TPM_SET_STCLEAR_FLAGS ((TPM_CAPABILITY_AREA) 0x00000003)\r
1976#define TPM_SET_STCLEAR_DATA ((TPM_CAPABILITY_AREA) 0x00000004)\r
1977#define TPM_SET_STANY_FLAGS ((TPM_CAPABILITY_AREA) 0x00000005)\r
1978#define TPM_SET_STANY_DATA ((TPM_CAPABILITY_AREA) 0x00000006)\r
1919913f 1979\r
427987f5 1980///\r
1981/// Part 2, section 21.6: TPM_CAP_VERSION_INFO\r
1982/// [size_is(vendorSpecificSize)] BYTE* vendorSpecific;\r
1983///\r
267669ba 1984typedef struct tdTPM_CAP_VERSION_INFO {\r
2f88bd3a
MK		 1985 TPM_STRUCTURE_TAG tag;\r
1986 TPM_VERSION version;\r
1987 UINT16 specLevel;\r
1988 UINT8 errataRev;\r
1989 UINT8 tpmVendorID[4];\r
1990 UINT16 vendorSpecificSize;\r
1991 UINT8 *vendorSpecific;\r
267669ba
LG		 1992} TPM_CAP_VERSION_INFO;\r
1993\r
1919913f 1994///\r
1995/// Part 2, section 21.10: TPM_DA_ACTION_TYPE\r
1996///\r
1997typedef struct tdTPM_DA_ACTION_TYPE {\r
2f88bd3a
MK		 1998 TPM_STRUCTURE_TAG tag;\r
1999 UINT32 actions;\r
1919913f 2000} TPM_DA_ACTION_TYPE;\r
2001\r
2f88bd3a
MK		 2002#define TPM_DA_ACTION_FAILURE_MODE (((UINT32)1)<<3)\r
2003#define TPM_DA_ACTION_DEACTIVATE (((UINT32)1)<<2)\r
2004#define TPM_DA_ACTION_DISABLE (((UINT32)1)<<1)\r
2005#define TPM_DA_ACTION_TIMEOUT (((UINT32)1)<<0)\r
1919913f 2006\r
2007///\r
2008/// Part 2, section 21.7: TPM_DA_INFO\r
2009///\r
2010typedef struct tdTPM_DA_INFO {\r
2f88bd3a
MK		 2011 TPM_STRUCTURE_TAG tag;\r
2012 TPM_DA_STATE state;\r
2013 UINT16 currentCount;\r
2014 UINT16 thresholdCount;\r
2015 TPM_DA_ACTION_TYPE actionAtThreshold;\r
2016 UINT32 actionDependValue;\r
2017 UINT32 vendorDataSize;\r
2018 UINT8 *vendorData;\r
1919913f 2019} TPM_DA_INFO;\r
2020\r
2021///\r
2022/// Part 2, section 21.8: TPM_DA_INFO_LIMITED\r
2023///\r
2024typedef struct tdTPM_DA_INFO_LIMITED {\r
2f88bd3a
MK		 2025 TPM_STRUCTURE_TAG tag;\r
2026 TPM_DA_STATE state;\r
2027 TPM_DA_ACTION_TYPE actionAtThreshold;\r
2028 UINT32 vendorDataSize;\r
2029 UINT8 *vendorData;\r
1919913f 2030} TPM_DA_INFO_LIMITED;\r
2031\r
2032//\r
2033// Part 2, section 21.9: CAP_PROPERTY Subcap values for GetCapability\r
2034//\r
2f88bd3a
MK		 2035#define TPM_DA_STATE_INACTIVE ((UINT8)0x00)\r
2036#define TPM_DA_STATE_ACTIVE ((UINT8)0x01)\r
1919913f 2037\r
267669ba
LG		 2038//\r
2039// Part 2, section 22: DAA Structures\r
2040//\r
2041\r
4135253b 2042//\r
2043// Part 2, section 22.1: Size definitions\r
2044//\r
2f88bd3a
MK		 2045#define TPM_DAA_SIZE_r0 (43)\r
2046#define TPM_DAA_SIZE_r1 (43)\r
2047#define TPM_DAA_SIZE_r2 (128)\r
2048#define TPM_DAA_SIZE_r3 (168)\r
2049#define TPM_DAA_SIZE_r4 (219)\r
2050#define TPM_DAA_SIZE_NT (20)\r
2051#define TPM_DAA_SIZE_v0 (128)\r
2052#define TPM_DAA_SIZE_v1 (192)\r
2053#define TPM_DAA_SIZE_NE (256)\r
2054#define TPM_DAA_SIZE_w (256)\r
2055#define TPM_DAA_SIZE_issuerModulus (256)\r
4135253b 2056//\r
2057// Part 2, section 22.2: Constant definitions\r
2058//\r
2f88bd3a
MK		 2059#define TPM_DAA_power0 (104)\r
2060#define TPM_DAA_power1 (1024)\r
267669ba 2061\r
427987f5 2062///\r
2063/// Part 2, section 22.3: TPM_DAA_ISSUER\r
2064///\r
4135253b 2065typedef struct tdTPM_DAA_ISSUER {\r
2f88bd3a
MK		 2066 TPM_STRUCTURE_TAG tag;\r
2067 TPM_DIGEST DAA_digest_R0;\r
2068 TPM_DIGEST DAA_digest_R1;\r
2069 TPM_DIGEST DAA_digest_S0;\r
2070 TPM_DIGEST DAA_digest_S1;\r
2071 TPM_DIGEST DAA_digest_n;\r
2072 TPM_DIGEST DAA_digest_gamma;\r
2073 UINT8 DAA_generic_q[26];\r
267669ba
LG		 2074} TPM_DAA_ISSUER;\r
2075\r
427987f5 2076///\r
2077/// Part 2, section 22.4: TPM_DAA_TPM\r
2078///\r
4135253b 2079typedef struct tdTPM_DAA_TPM {\r
2f88bd3a
MK		 2080 TPM_STRUCTURE_TAG tag;\r
2081 TPM_DIGEST DAA_digestIssuer;\r
2082 TPM_DIGEST DAA_digest_v0;\r
2083 TPM_DIGEST DAA_digest_v1;\r
2084 TPM_DIGEST DAA_rekey;\r
2085 UINT32 DAA_count;\r
267669ba
LG		 2086} TPM_DAA_TPM;\r
2087\r
427987f5 2088///\r
2089/// Part 2, section 22.5: TPM_DAA_CONTEXT\r
2090///\r
4135253b 2091typedef struct tdTPM_DAA_CONTEXT {\r
2f88bd3a
MK		 2092 TPM_STRUCTURE_TAG tag;\r
2093 TPM_DIGEST DAA_digestContext;\r
2094 TPM_DIGEST DAA_digest;\r
2095 TPM_DAA_CONTEXT_SEED DAA_contextSeed;\r
2096 UINT8 DAA_scratch[256];\r
2097 UINT8 DAA_stage;\r
267669ba
LG		 2098} TPM_DAA_CONTEXT;\r
2099\r
427987f5 2100///\r
2101/// Part 2, section 22.6: TPM_DAA_JOINDATA\r
2102///\r
4135253b 2103typedef struct tdTPM_DAA_JOINDATA {\r
2f88bd3a
MK		 2104 UINT8 DAA_join_u0[128];\r
2105 UINT8 DAA_join_u1[138];\r
2106 TPM_DIGEST DAA_digest_n0;\r
267669ba
LG		 2107} TPM_DAA_JOINDATA;\r
2108\r
427987f5 2109///\r
2110/// Part 2, section 22.8: TPM_DAA_BLOB\r
2111///\r
4135253b 2112typedef struct tdTPM_DAA_BLOB {\r
2f88bd3a
MK		 2113 TPM_STRUCTURE_TAG tag;\r
2114 TPM_RESOURCE_TYPE resourceType;\r
2115 UINT8 label[16];\r
2116 TPM_DIGEST blobIntegrity;\r
2117 UINT32 additionalSize;\r
2118 UINT8 *additionalData;\r
2119 UINT32 sensitiveSize;\r
2120 UINT8 *sensitiveData;\r
267669ba
LG		 2121} TPM_DAA_BLOB;\r
2122\r
427987f5 2123///\r
2124/// Part 2, section 22.9: TPM_DAA_SENSITIVE\r
2125///\r
4135253b 2126typedef struct tdTPM_DAA_SENSITIVE {\r
2f88bd3a
MK		 2127 TPM_STRUCTURE_TAG tag;\r
2128 UINT32 internalSize;\r
2129 UINT8 *internalData;\r
267669ba
LG		 2130} TPM_DAA_SENSITIVE;\r
2131\r
267669ba
LG		 2132//\r
2133// Part 2, section 23: Redirection\r
2134//\r
2135\r
427987f5 2136///\r
2137/// Part 2 section 23.1: TPM_REDIR_COMMAND\r
2138/// This section defines exactly one value but does not\r
2139/// give it a name. The definition of TPM_SetRedirection in Part3\r
2140/// refers to exactly one name but does not give its value. We join\r
2141/// them here.\r
2142///\r
2f88bd3a 2143#define TPM_REDIR_GPIO (0x00000001)\r
267669ba 2144\r
427987f5 2145///\r
cc078d72 2146/// TPM Command Headers defined in Part 3\r
427987f5 2147///\r
267669ba 2148typedef struct tdTPM_RQU_COMMAND_HDR {\r
2f88bd3a
MK		 2149 TPM_STRUCTURE_TAG tag;\r
2150 UINT32 paramSize;\r
2151 TPM_COMMAND_CODE ordinal;\r
267669ba
LG		 2152} TPM_RQU_COMMAND_HDR;\r
2153\r
cc078d72 2154///\r
2155/// TPM Response Headers defined in Part 3\r
2156///\r
267669ba 2157typedef struct tdTPM_RSP_COMMAND_HDR {\r
2f88bd3a
MK		 2158 TPM_STRUCTURE_TAG tag;\r
2159 UINT32 paramSize;\r
2160 TPM_RESULT returnCode;\r
267669ba
LG		 2161} TPM_RSP_COMMAND_HDR;\r
2162\r
a04ad3f0 2163#pragma pack ()\r
267669ba 2164\r
4135253b 2165#endif\r
EFI Development Kit II mirror for PVE