EdkCompatibilityPkg/Foundation/Include/IndustryStandard/Tpm12.h

   1 /*++
   2
   3 Copyright (c) 2005 - 2010, Intel Corporation. All rights reserved.<BR>
   4 This program and the accompanying materials
   5 are licensed and made available under the terms and conditions of the BSD License
   6 which accompanies this distribution.  The full text of the license may be found at
   7 http://opensource.org/licenses/bsd-license.php
   8
   9 THE PROGRAM IS DISTRIBUTED UNDER THE BSD LICENSE ON AN "AS IS" BASIS,
  10 WITHOUT WARRANTIES OR REPRESENTATIONS OF ANY KIND, EITHER EXPRESS OR IMPLIED.
  11
  12 Module Name:
  13
  14   Tpm12.h
  15
  16 Abstract:
  17
  18   TPM Specification data structures (TCG TPM Specification Version 1.2 Revision 94)
  19
  20   See http://trustedcomputinggroup.org for latest specification updates
  21
  22 --*/
  23
  24 #ifndef _TPM12_H_
  25 #define _TPM12_H_
  26
  27 //
  28 // Structures are all packed on 1-byte alignment
  29 //
  30
  31 #ifndef __GNUC__
  32 #pragma pack (push)
  33 #pragma pack (1)
  34 #endif
  35
  36 //
  37 // Part 2, section 2.2: Basic types & Helper redefinitions
  38 //
  39 typedef UINT8                       TPM_AUTH_DATA_USAGE;
  40 typedef UINT8                       TPM_PAYLOAD_TYPE;
  41 typedef UINT8                       TPM_VERSION_BYTE;
  42 typedef UINT16                      TPM_TAG;
  43 typedef UINT16                      TPM_PROTOCOL_ID;
  44 typedef UINT16                      TPM_STARTUP_TYPE;
  45 typedef UINT16                      TPM_ENC_SCHEME;
  46 typedef UINT16                      TPM_SIG_SCHEME;
  47 typedef UINT16                      TPM_MIGRATE_SCHEME;
  48 typedef UINT16                      TPM_PHYSICAL_PRESENCE;
  49 typedef UINT16                      TPM_ENTITY_TYPE;
  50 typedef UINT16                      TPM_KEY_USAGE;
  51 typedef UINT16                      TPM_EK_TYPE;
  52 typedef UINT16                      TPM_STRUCTURE_TAG;
  53 typedef UINT16                      TPM_PLATFORM_SPECIFIC;
  54 typedef UINT32                      TPM_COMMAND_CODE;
  55 typedef UINT32                      TPM_CAPABILITY_AREA;
  56 typedef UINT32                      TPM_KEY_FLAGS;
  57 typedef UINT32                      TPM_ALGORITHM_ID;
  58 typedef UINT32                      TPM_MODIFIER_INDICATOR;
  59 typedef UINT32                      TPM_ACTUAL_COUNT;
  60 typedef UINT32                      TPM_TRANSPORT_ATTRIBUTES;
  61 typedef UINT32                      TPM_AUTHHANDLE;
  62 typedef UINT32                      TPM_DIRINDEX;
  63 typedef UINT32                      TPM_KEY_HANDLE;
  64 typedef UINT32                      TPM_PCRINDEX;
  65 typedef UINT32                      TPM_RESULT;
  66 typedef UINT32                      TPM_RESOURCE_TYPE;
  67 typedef UINT32                      TPM_KEY_CONTROL;
  68 typedef UINT32                      TPM_NV_INDEX;
  69 typedef UINT32                      TPM_FAMILY_ID;
  70 typedef UINT32                      TPM_FAMILY_VERIFICATION;
  71 typedef UINT32                      TPM_STARTUP_EFFECTS;
  72 typedef UINT32                      TPM_SYM_MODE;
  73 typedef UINT32                      TPM_FAMILY_FLAGS;
  74 typedef UINT32                      TPM_DELEGATE_INDEX;
  75 typedef UINT32                      TPM_CMK_DELEGATE;
  76 typedef UINT32                      TPM_COUNT_ID;
  77 typedef UINT32                      TPM_REDIT_COMMAND;
  78 typedef UINT32                      TPM_TRANSHANDLE;
  79 typedef UINT32                      TPM_HANDLE;
  80 typedef UINT32                      TPM_FAMILY_OPERATION;
  81
  82 //
  83 // Part 2, section 2.2.4: Vendor specific
  84 // The following defines allow for the quick specification of a
  85 // vendor specific item.
  86 //
  87 #define TPM_Vendor_Specific32       ((UINT32) 0x00000400)
  88 #define TPM_Vendor_Specific8        ((UINT8) 0x80)
  89
  90 //
  91 // Part 2, section 3.1: Structure TAGs
  92 //
  93 #define TPM_TAG_CONTEXTBLOB         ((TPM_STRUCTURE_TAG) 0x0001)
  94 #define TPM_TAG_CONTEXT_SENSITIVE   ((TPM_STRUCTURE_TAG) 0x0002)
  95 #define TPM_TAG_CONTEXTPOINTER      ((TPM_STRUCTURE_TAG) 0x0003)
  96 #define TPM_TAG_CONTEXTLIST         ((TPM_STRUCTURE_TAG) 0x0004)
  97 #define TPM_TAG_SIGNINFO            ((TPM_STRUCTURE_TAG) 0x0005)
  98 #define TPM_TAG_PCR_INFO_LONG       ((TPM_STRUCTURE_TAG) 0x0006)
  99 #define TPM_TAG_PERSISTENT_FLAGS    ((TPM_STRUCTURE_TAG) 0x0007)
 100 #define TPM_TAG_VOLATILE_FLAGS      ((TPM_STRUCTURE_TAG) 0x0008)
 101 #define TPM_TAG_PERSISTENT_DATA     ((TPM_STRUCTURE_TAG) 0x0009)
 102 #define TPM_TAG_VOLATILE_DATA       ((TPM_STRUCTURE_TAG) 0x000A)
 103 #define TPM_TAG_SV_DATA             ((TPM_STRUCTURE_TAG) 0x000B)
 104 #define TPM_TAG_EK_BLOB             ((TPM_STRUCTURE_TAG) 0x000C)
 105 #define TPM_TAG_EK_BLOB_AUTH        ((TPM_STRUCTURE_TAG) 0x000D)
 106 #define TPM_TAG_COUNTER_VALUE       ((TPM_STRUCTURE_TAG) 0x000E)
 107 #define TPM_TAG_TRANSPORT_INTERNAL  ((TPM_STRUCTURE_TAG) 0x000F)
 108 #define TPM_TAG_TRANSPORT_LOG_IN    ((TPM_STRUCTURE_TAG) 0x0010)
 109 #define TPM_TAG_TRANSPORT_LOG_OUT   ((TPM_STRUCTURE_TAG) 0x0011)
 110 #define TPM_TAG_AUDIT_EVENT_IN      ((TPM_STRUCTURE_TAG) 0x0012)
 111 #define TPM_TAG_AUDIT_EVENT_OUT     ((TPM_STRUCTURE_TAG) 0x0013)
 112 #define TPM_TAG_CURRENT_TICKS       ((TPM_STRUCTURE_TAG) 0x0014)
 113 #define TPM_TAG_KEY                 ((TPM_STRUCTURE_TAG) 0x0015)
 114 #define TPM_TAG_STORED_DATA12       ((TPM_STRUCTURE_TAG) 0x0016)
 115 #define TPM_TAG_NV_ATTRIBUTES       ((TPM_STRUCTURE_TAG) 0x0017)
 116 #define TPM_TAG_NV_DATA_PUBLIC      ((TPM_STRUCTURE_TAG) 0x0018)
 117 #define TPM_TAG_NV_DATA_SENSITIVE   ((TPM_STRUCTURE_TAG) 0x0019)
 118 #define TPM_TAG_DELEGATIONS         ((TPM_STRUCTURE_TAG) 0x001A)
 119 #define TPM_TAG_DELEGATE_PUBLIC     ((TPM_STRUCTURE_TAG) 0x001B)
 120 #define TPM_TAG_DELEGATE_TABLE_ROW  ((TPM_STRUCTURE_TAG) 0x001C)
 121 #define TPM_TAG_TRANSPORT_AUTH      ((TPM_STRUCTURE_TAG) 0x001D)
 122 #define TPM_TAG_TRANSPORT_PUBLIC    ((TPM_STRUCTURE_TAG) 0x001E)
 123 #define TPM_TAG_PERMANENT_FLAGS     ((TPM_STRUCTURE_TAG) 0x001F)
 124 #define TPM_TAG_STCLEAR_FLAGS       ((TPM_STRUCTURE_TAG) 0x0020)
 125 #define TPM_TAG_STANY_FLAGS         ((TPM_STRUCTURE_TAG) 0x0021)
 126 #define TPM_TAG_PERMANENT_DATA      ((TPM_STRUCTURE_TAG) 0x0022)
 127 #define TPM_TAG_STCLEAR_DATA        ((TPM_STRUCTURE_TAG) 0x0023)
 128 #define TPM_TAG_STANY_DATA          ((TPM_STRUCTURE_TAG) 0x0024)
 129 #define TPM_TAG_FAMILY_TABLE_ENTRY  ((TPM_STRUCTURE_TAG) 0x0025)
 130 #define TPM_TAG_DELEGATE_SENSITIVE  ((TPM_STRUCTURE_TAG) 0x0026)
 131 #define TPM_TAG_DELG_KEY_BLOB       ((TPM_STRUCTURE_TAG) 0x0027)
 132 #define TPM_TAG_KEY12               ((TPM_STRUCTURE_TAG) 0x0028)
 133 #define TPM_TAG_CERTIFY_INFO2       ((TPM_STRUCTURE_TAG) 0x0029)
 134 #define TPM_TAG_DELEGATE_OWNER_BLOB ((TPM_STRUCTURE_TAG) 0x002A)
 135 #define TPM_TAG_EK_BLOB_ACTIVATE    ((TPM_STRUCTURE_TAG) 0x002B)
 136 #define TPM_TAG_DAA_BLOB            ((TPM_STRUCTURE_TAG) 0x002C)
 137 #define TPM_TAG_DAA_CONTEXT         ((TPM_STRUCTURE_TAG) 0x002D)
 138 #define TPM_TAG_DAA_ENFORCE         ((TPM_STRUCTURE_TAG) 0x002E)
 139 #define TPM_TAG_DAA_ISSUER          ((TPM_STRUCTURE_TAG) 0x002F)
 140 #define TPM_TAG_CAP_VERSION_INFO    ((TPM_STRUCTURE_TAG) 0x0030)
 141 #define TPM_TAG_DAA_SENSITIVE       ((TPM_STRUCTURE_TAG) 0x0031)
 142 #define TPM_TAG_DAA_TPM             ((TPM_STRUCTURE_TAG) 0x0032)
 143 #define TPM_TAG_CMK_MIGAUTH         ((TPM_STRUCTURE_TAG) 0x0033)
 144 #define TPM_TAG_CMK_SIGTICKET       ((TPM_STRUCTURE_TAG) 0x0034)
 145 #define TPM_TAG_CMK_MA_APPROVAL     ((TPM_STRUCTURE_TAG) 0x0035)
 146 #define TPM_TAG_QUOTE_INFO2         ((TPM_STRUCTURE_TAG) 0x0036)
 147
 148 //
 149 // Part 2, section 4: TPM Types
 150 //
 151
 152 //
 153 // Part 2, section 4.1: TPM_RESOURCE_TYPE
 154 //
 155 #define TPM_RT_KEY                  ((TPM_RESOURCE_TYPE) 0x00000001) // The handle is a key handle and is the result of a LoadKey type operation
 156 #define TPM_RT_AUTH                 ((TPM_RESOURCE_TYPE) 0x00000002) // The handle is an authorization handle. Auth handles come from TPM_OIAP, TPM_OSAP and TPM_DSAP
 157 #define TPM_RT_HASH                 ((TPM_RESOURCE_TYPE) 0x00000003) // Reserved for hashes
 158 #define TPM_RT_TRANS                ((TPM_RESOURCE_TYPE) 0x00000004) // The handle is for a transport session. Transport handles come from TPM_EstablishTransport
 159 #define TPM_RT_CONTEXT              ((TPM_RESOURCE_TYPE) 0x00000005) // Resource wrapped and held outside the TPM using the context save/restore commands
 160 #define TPM_RT_COUNTER              ((TPM_RESOURCE_TYPE) 0x00000006) // Reserved for counters
 161 #define TPM_RT_DELEGATE             ((TPM_RESOURCE_TYPE) 0x00000007) // The handle is for a delegate row. These are the internal rows held in NV storage by the TPM
 162 #define TPM_RT_DAA_TPM              ((TPM_RESOURCE_TYPE) 0x00000008) // The value is a DAA TPM specific blob
 163 #define TPM_RT_DAA_V0               ((TPM_RESOURCE_TYPE) 0x00000009) // The value is a DAA V0 parameter
 164 #define TPM_RT_DAA_V1               ((TPM_RESOURCE_TYPE) 0x0000000A) // The value is a DAA V1 parameter
 165
 166 //
 167 // Part 2, section 4.2: TPM_PAYLOAD_TYPE
 168 //
 169 #define TPM_PT_ASYM                 ((TPM_PAYLOAD_TYPE) 0x01) // The entity is an asymmetric key
 170 #define TPM_PT_BIND                 ((TPM_PAYLOAD_TYPE) 0x02) // The entity is bound data
 171 #define TPM_PT_MIGRATE              ((TPM_PAYLOAD_TYPE) 0x03) // The entity is a migration blob
 172 #define TPM_PT_MAINT                ((TPM_PAYLOAD_TYPE) 0x04) // The entity is a maintenance blob
 173 #define TPM_PT_SEAL                 ((TPM_PAYLOAD_TYPE) 0x05) // The entity is sealed data
 174 #define TPM_PT_MIGRATE_RESTRICTED   ((TPM_PAYLOAD_TYPE) 0x06) // The entity is a restricted-migration asymmetric key
 175 #define TPM_PT_MIGRATE_EXTERNAL     ((TPM_PAYLOAD_TYPE) 0x07) // The entity is a external migratable key
 176 #define TPM_PT_CMK_MIGRATE          ((TPM_PAYLOAD_TYPE) 0x08) // The entity is a CMK migratable blob
 177 #define TPM_PT_VENDOR_SPECIFIC      ((TPM_PAYLOAD_TYPE) 0x80) // 0x80 - 0xFF Vendor specific payloads
 178
 179 //
 180 // Part 2, section 4.3: TPM_ENTIRY_TYPE
 181 //
 182 #define TPM_ET_KEYHANDLE            ((UINT16) 0x0001) // The entity is a keyHandle or key
 183 #define TPM_ET_OWNER                ((UINT16) 0x0002) // The entity is the TPM Owner
 184 #define TPM_ET_DATA                 ((UINT16) 0x0003) // The entity is some data
 185 #define TPM_ET_SRK                  ((UINT16) 0x0004) // The entity is the SRK
 186 #define TPM_ET_KEY                  ((UINT16) 0x0005) // The entity is a key or keyHandle
 187 #define TPM_ET_REVOKE               ((UINT16) 0x0006) // The entity is the RevokeTrust value
 188 #define TPM_ET_DEL_OWNER_BLOB       ((UINT16) 0x0007) // The entity is a delegate owner blob
 189 #define TPM_ET_DEL_ROW              ((UINT16) 0x0008) // The entity is a delegate row
 190 #define TPM_ET_DEL_KEY_BLOB         ((UINT16) 0x0009) // The entity is a delegate key blob
 191 #define TPM_ET_COUNTER              ((UINT16) 0x000A) // The entity is a counter
 192 #define TPM_ET_NV                   ((UINT16) 0x000B) // The entity is a NV index
 193 #define TPM_ET_RESERVED_HANDLE      ((UINT16) 0x0040) // Reserved. This value avoids collisions with the handle MSB setting.
 194 //
 195 // TPM_ENTITY_TYPE MSB Values: The MSB is used to indicate the ADIP encryption sheme when applicable
 196 //
 197 #define TPM_ET_XOR                  ((UINT16) 0x0000) // ADIP encryption scheme: XOR
 198 #define TPM_ET_AES128               ((UINT16) 0x0006) // ADIP encryption scheme: AES 128 bits
 199
 200 //
 201 // Part 2, section 4.4.1: Reserved Key Handles
 202 //
 203 #define TPM_KH_SRK                  ((TPM_KEY_HANDLE) 0x40000000) // The handle points to the SRK
 204 #define TPM_KH_OWNER                ((TPM_KEY_HANDLE) 0x40000001) // The handle points to the TPM Owner
 205 #define TPM_KH_REVOKE               ((TPM_KEY_HANDLE) 0x40000002) // The handle points to the RevokeTrust value
 206 #define TPM_KH_TRANSPORT            ((TPM_KEY_HANDLE) 0x40000003) // The handle points to the EstablishTransport static authorization
 207 #define TPM_KH_OPERATOR             ((TPM_KEY_HANDLE) 0x40000004) // The handle points to the Operator auth
 208 #define TPM_KH_ADMIN                ((TPM_KEY_HANDLE) 0x40000005) // The handle points to the delegation administration auth
 209 #define TPM_KH_EK                   ((TPM_KEY_HANDLE) 0x40000006) // The handle points to the PUBEK, only usable with TPM_OwnerReadInternalPub
 210
 211 //
 212 // Part 2, section 4.5: TPM_STARTUP_TYPE
 213 //
 214 #define TPM_ST_CLEAR                ((TPM_STARTUP_TYPE) 0x0001) // The TPM is starting up from a clean state
 215 #define TPM_ST_STATE                ((TPM_STARTUP_TYPE) 0x0002) // The TPM is starting up from a saved state
 216 #define TPM_ST_DEACTIVATED          ((TPM_STARTUP_TYPE) 0x0003) // The TPM is to startup and set the deactivated flag to TRUE
 217
 218 //
 219 // Part 2, section 4.6: TPM_STATUP_EFFECTS
 220 // The table makeup is still an open issue.
 221 //
 222
 223 //
 224 // Part 2, section 4.7: TPM_PROTOCOL_ID
 225 //
 226 #define TPM_PID_OIAP                ((TPM_PROTOCOL_ID) 0x0001) // The OIAP protocol.
 227 #define TPM_PID_OSAP                ((TPM_PROTOCOL_ID) 0x0002) // The OSAP protocol.
 228 #define TPM_PID_ADIP                ((TPM_PROTOCOL_ID) 0x0003) // The ADIP protocol.
 229 #define TPM_PID_ADCP                ((TPM_PROTOCOL_ID) 0x0004) // The ADCP protocol.
 230 #define TPM_PID_OWNER               ((TPM_PROTOCOL_ID) 0x0005) // The protocol for taking ownership of a TPM.
 231 #define TPM_PID_DSAP                ((TPM_PROTOCOL_ID) 0x0006) // The DSAP protocol
 232 #define TPM_PID_TRANSPORT           ((TPM_PROTOCOL_ID) 0x0007) // The transport protocol
 233
 234 //
 235 // Part 2, section 4.8: TPM_ALGORITHM_ID
 236 //   The TPM MUST support the algorithms TPM_ALG_RSA, TPM_ALG_SHA, TPM_ALG_HMAC,
 237 //   TPM_ALG_MGF1
 238 //
 239 #define TPM_ALG_RSA                 ((TPM_ALGORITHM_ID) 0x00000001) // The RSA algorithm.
 240 #define TPM_ALG_DES                 ((TPM_ALGORITHM_ID) 0x00000002) // The DES algorithm
 241 #define TPM_ALG_3DES                ((TPM_ALGORITHM_ID) 0x00000003) // The 3DES algorithm in EDE mode
 242 #define TPM_ALG_SHA                 ((TPM_ALGORITHM_ID) 0x00000004) // The SHA1 algorithm
 243 #define TPM_ALG_HMAC                ((TPM_ALGORITHM_ID) 0x00000005) // The RFC 2104 HMAC algorithm
 244 #define TPM_ALG_AES128              ((TPM_ALGORITHM_ID) 0x00000006) // The AES algorithm, key size 128
 245 #define TPM_ALG_MGF1                ((TPM_ALGORITHM_ID) 0x00000007) // The XOR algorithm using MGF1 to create a string the size of the encrypted block
 246 #define TPM_ALG_AES192              ((TPM_ALGORITHM_ID) 0x00000008) // AES, key size 192
 247 #define TPM_ALG_AES256              ((TPM_ALGORITHM_ID) 0x00000009) // AES, key size 256
 248 #define TPM_ALG_XOR                 ((TPM_ALGORITHM_ID) 0x0000000A) // XOR using the rolling nonces
 249
 250 //
 251 // Part 2, section 4.9: TPM_PHYSICAL_PRESENCE
 252 //
 253 #define TPM_PHYSICAL_PRESENCE_HW_DISABLE    ((TPM_PHYSICAL_PRESENCE) 0x0200) // Sets the physicalPresenceHWEnable to FALSE
 254 #define TPM_PHYSICAL_PRESENCE_CMD_DISABLE   ((TPM_PHYSICAL_PRESENCE) 0x0100) // Sets the physicalPresenceCMDEnable to FALSE
 255 #define TPM_PHYSICAL_PRESENCE_LIFETIME_LOCK ((TPM_PHYSICAL_PRESENCE) 0x0080) // Sets the physicalPresenceLifetimeLock to TRUE
 256 #define TPM_PHYSICAL_PRESENCE_HW_ENABLE     ((TPM_PHYSICAL_PRESENCE) 0x0040) // Sets the physicalPresenceHWEnable to TRUE
 257 #define TPM_PHYSICAL_PRESENCE_CMD_ENABLE    ((TPM_PHYSICAL_PRESENCE) 0x0020) // Sets the physicalPresenceCMDEnable to TRUE
 258 #define TPM_PHYSICAL_PRESENCE_NOTPRESENT    ((TPM_PHYSICAL_PRESENCE) 0x0010) // Sets PhysicalPresence = FALSE
 259 #define TPM_PHYSICAL_PRESENCE_PRESENT       ((TPM_PHYSICAL_PRESENCE) 0x0008) // Sets PhysicalPresence = TRUE
 260 #define TPM_PHYSICAL_PRESENCE_LOCK          ((TPM_PHYSICAL_PRESENCE) 0x0004) // Sets PhysicalPresenceLock = TRUE
 261
 262 //
 263 // Part 2, section 4.10: TPM_MIGRATE_SCHEME
 264 //
 265 #define TPM_MS_MIGRATE                      ((TPM_MIGRATE_SCHEME) 0x0001) // A public key that can be used with all TPM migration commands other than 'ReWrap' mode.
 266 #define TPM_MS_REWRAP                       ((TPM_MIGRATE_SCHEME) 0x0002) // A public key that can be used for the ReWrap mode of TPM_CreateMigrationBlob.
 267 #define TPM_MS_MAINT                        ((TPM_MIGRATE_SCHEME) 0x0003) // A public key that can be used for the Maintenance commands
 268 #define TPM_MS_RESTRICT_MIGRATE             ((TPM_MIGRATE_SCHEME) 0x0004) // The key is to be migrated to a Migration Authority.
 269 #define TPM_MS_RESTRICT_APPROVE_DOUBLE      ((TPM_MIGRATE_SCHEME) 0x0005) // The key is to be migrated to an entity approved by a Migration Authority using double wrapping
 270
 271 //
 272 // Part 2, section 4.11: TPM_EK_TYPE
 273 //
 274 #define TPM_EK_TYPE_ACTIVATE        ((TPM_EK_TYPE) 0x0001) // The blob MUST be TPM_EK_BLOB_ACTIVATE
 275 #define TPM_EK_TYPE_AUTH            ((TPM_EK_TYPE) 0x0002) // The blob MUST be TPM_EK_BLOB_AUTH
 276
 277 //
 278 // Part 2, section 4.12: TPM_PLATFORM_SPECIFIC
 279 //
 280 #define TPM_PS_PC_11                ((TPM_PLATFORM_SPECIFIC) 0x0001) // PC Specific version 1.1
 281 #define TPM_PS_PC_12                ((TPM_PLATFORM_SPECIFIC) 0x0002) // PC Specific version 1.2
 282 #define TPM_PS_PDA_12               ((TPM_PLATFORM_SPECIFIC) 0x0003) // PDA Specific version 1.2
 283 #define TPM_PS_Server_12            ((TPM_PLATFORM_SPECIFIC) 0x0004) // Server Specific version 1.2
 284 #define TPM_PS_Mobile_12            ((TPM_PLATFORM_SPECIFIC) 0x0005) // Mobil Specific version 1.2
 285
 286 //
 287 // Part 2, section 5: Basic Structures
 288 //
 289
 290 //
 291 // Part 2, section 5.1: TPM_STRUCT_VER
 292 //
 293 typedef struct tdTPM_STRUCT_VER {
 294   UINT8                             major;
 295   UINT8                             minor;
 296   UINT8                             revMajor;
 297   UINT8                             revMinor;
 298 } TPM_STRUCT_VER;
 299
 300 //
 301 // Part 2, section 5.3: TPM_VERSION
 302 //
 303 typedef struct tdTPM_VERSION {
 304   TPM_VERSION_BYTE                  major;
 305   TPM_VERSION_BYTE                  minor;
 306   UINT8                             revMajor;
 307   UINT8                             revMinor;
 308 } TPM_VERSION;
 309
 310 //
 311 // Part 2, section 5.4: TPM_DIGEST
 312 //
 313 #define TPM_SHA1_160_HASH_LEN       0x14
 314 #define TPM_SHA1BASED_NONCE_LEN     TPM_SHA1_160_HASH_LEN
 315
 316 typedef struct tdTPM_DIGEST{
 317   UINT8                             digest[TPM_SHA1_160_HASH_LEN];
 318 } TPM_DIGEST;
 319
 320 typedef TPM_DIGEST                  TPM_CHOSENID_HASH; // This SHALL be the digest of the chosen identityLabel and privacyCA for a new TPM identity.
 321 typedef TPM_DIGEST                  TPM_COMPOSITE_HASH; // This SHALL be the hash of a list of PCR indexes and PCR values that a key or data is bound to.
 322 typedef TPM_DIGEST                  TPM_DIRVALUE; // This SHALL be the value of a DIR register
 323 typedef TPM_DIGEST                  TPM_HMAC;
 324 typedef TPM_DIGEST                  TPM_PCRVALUE; // The value inside of the PCR
 325 typedef TPM_DIGEST                  TPM_AUDITDIGEST; // This SHALL be the value of the current internal audit state
 326 typedef TPM_DIGEST                  TPM_DAA_TPM_SEED; // This SHALL be a random value generated by a TPM immediately after the EK is installed in that TPM, whenever an EK is installed in that TPM
 327 typedef TPM_DIGEST                  TPM_DAA_CONTEXT_SEED; // This SHALL be a random value
 328
 329 //
 330 // Part 2, section 5.5: TPM_NONCE
 331 //
 332 typedef struct tdTPM_NONCE{
 333   UINT8                             nonce[20];
 334 } TPM_NONCE;
 335
 336 //
 337 // Part 2, section 5.6: TPM_AUTHDATA
 338 //
 339 typedef UINT8                       tdTPM_AUTHDATA[20];
 340 typedef tdTPM_AUTHDATA              TPM_AUTHDATA;
 341 typedef TPM_AUTHDATA                TPM_SECRET;
 342 typedef TPM_AUTHDATA                TPM_ENCAUTH;
 343
 344 //
 345 // Part 2, section 5.7: TPM_KEY_HANDLE_LIST
 346 // Size of handle is loaded * sizeof(TPM_KEY_HANDLE)
 347 //
 348 typedef struct tdTPM_KEY_HANDLE_LIST {
 349   UINT16                            loaded;
 350   TPM_KEY_HANDLE                    handle[1];
 351 } TPM_KEY_HANDLE_LIST;
 352
 353 //
 354 // Part 2, section 5.8: TPM_KEY_USAGE values
 355 //
 356
 357 #define TPM_KEY_SIGNING             ((UINT16) 0x0010)
 358 // TPM_KEY_SIGNING SHALL indicate a signing key. The [private] key SHALL be
 359 // used for signing operations, only. This means that it MUST be a leaf of the
 360 // Protected Storage key hierarchy.
 361
 362 #define TPM_KEY_STORAGE             ((UINT16) 0x0011)
 363 // TPM_KEY_STORAGE SHALL indicate a storage key. The key SHALL be used to wrap
 364 // and unwrap other keys in the Protected Storage hierarchy
 365
 366 #define TPM_KEY_IDENTITY            ((UINT16) 0x0012)
 367 // TPM_KEY_IDENTITY SHALL indicate an identity key. The key SHALL be used for
 368 // operations that require a TPM identity, only.
 369
 370 #define TPM_KEY_AUTHCHANGE          ((UINT16) 0x0013)
 371 // TPM_KEY_AUTHCHANGE SHALL indicate an ephemeral key that is in use during
 372 // the ChangeAuthAsym process, only.
 373
 374 #define TPM_KEY_BIND                ((UINT16) 0x0014)
 375 // TPM_KEY_BIND SHALL indicate a key that can be used for TPM_Bind and
 376 // TPM_Unbind operations only.
 377
 378 #define TPM_KEY_LEGACY              ((UINT16) 0x0015)
 379 // TPM_KEY_LEGACY SHALL indicate a key that can perform signing and binding
 380 // operations. The key MAY be used for both signing and binding operations.
 381 // The TPM_KEY_LEGACY key type is to allow for use by applications where both
 382 // signing and encryption operations occur with the same key. The use of this
 383 // key type is not recommended TPM_KEY_MIGRATE 0x0016 This SHALL indicate a
 384 // key in use for TPM_MigrateKey
 385
 386 #define TPM_KEY_MIGRATE             ((UINT16) 0x0016)
 387 // TPM_KEY_MIGRAGE SHALL indicate a key in use for TPM_MigrateKey
 388
 389 //
 390 // Part 2, section 5.8.1: Encryption/Signature schemes
 391 //
 392
 393 #define TPM_ES_NONE                 ((TPM_ENC_SCHEME) 0x0001)
 394 #define TPM_ES_RSAESPKCSv15         ((TPM_ENC_SCHEME) 0x0002)
 395 #define TPM_ES_RSAESOAEP_SHA1_MGF1  ((TPM_ENC_SCHEME) 0x0003)
 396 #define TPM_ES_SYM_CNT              ((TPM_ENC_SCHEME) 0x0004)
 397 #define TPM_ES_SYM_OFB              ((TPM_ENC_SCHEME) 0x0005)
 398
 399 #define TPM_SS_NONE                 ((TPM_SIG_SCHEME) 0x0001)
 400 #define TPM_SS_RSASSAPKCS1v15_SHA1  ((TPM_SIG_SCHEME) 0x0002)
 401 #define TPM_SS_RSASSAPKCS1v15_DER   ((TPM_SIG_SCHEME) 0x0003)
 402 #define TPM_SS_RSASSAPKCS1v15_INFO  ((TPM_SIG_SCHEME) 0x0004)
 403
 404 //
 405 // Part 2, section 5.9: TPM_AUTH_DATA_USAGE values
 406 //
 407 #define TPM_AUTH_NEVER              ((TPM_AUTH_DATA_USAGE) 0x00)
 408 #define TPM_AUTH_ALWAYS             ((TPM_AUTH_DATA_USAGE) 0x01)
 409 #define TPM_AUTH_PRIV_USE_ONLY      ((TPM_AUTH_DATA_USAGE) 0x03)
 410
 411 //
 412 // Part 2, section 5.10: TPM_KEY_FLAGS
 413 //
 414 enum tdTPM_KEY_FLAGS {
 415   redirection                       = 0x00000001,
 416   migratable                        = 0x00000002,
 417   isVolatile                        = 0x00000004,
 418   pcrIgnoredOnRead                  = 0x00000008,
 419   migrateAuthority                  = 0x00000010
 420 };
 421
 422 //
 423 // Part 2, section 5.11: TPM_CHANGEAUTH_VALIDATE
 424 //
 425 typedef struct tdTPM_CHANGEAUTH_VALIDATE {
 426   TPM_SECRET                        newAuthSecret;
 427   TPM_NONCE                         n1;
 428 } TPM_CHANGEAUTH_VALIDATE;
 429
 430 //
 431 // Part 2, section 5.12: TPM_MIGRATIONKEYAUTH
 432 //   decalared after section 10 to catch declaration of TPM_PUBKEY
 433 //
 434 // Part 2 section 10.1: TPM_KEY_PARMS
 435 //   [size_is(parmSize)] BYTE* parms;
 436 //
 437 typedef struct tdTPM_KEY_PARMS {
 438   TPM_ALGORITHM_ID                  algorithmID;
 439   TPM_ENC_SCHEME                    encScheme;
 440   TPM_SIG_SCHEME                    sigScheme;
 441   UINT32                            parmSize;
 442   UINT8                             *parms;
 443 } TPM_KEY_PARMS;
 444
 445 //
 446 // Part 2, section 10.4: TPM_STORE_PUBKEY
 447 //
 448 typedef struct tdTPM_STORE_PUBKEY {
 449   UINT32                            keyLength;
 450   UINT8                             key[1];
 451 } TPM_STORE_PUBKEY;
 452
 453 //
 454 // Part 2, section 10.5: TPM_PUBKEY
 455 //
 456 typedef struct tdTPM_PUBKEY{
 457   TPM_KEY_PARMS                     algorithmParms;
 458   TPM_STORE_PUBKEY                  pubKey;
 459 } TPM_PUBKEY;
 460
 461 //
 462 // Part 2, section 5.12: TPM_MIGRATIONKEYAUTH
 463 //
 464 typedef struct tdTPM_MIGRATIONKEYAUTH{
 465   TPM_PUBKEY                        migrationKey;
 466   TPM_MIGRATE_SCHEME                migrationScheme;
 467   TPM_DIGEST                        digest;
 468 } TPM_MIGRATIONKEYAUTH;
 469
 470 //
 471 // Part 2, section 5.13: TPM_COUNTER_VALUE
 472 //
 473 typedef struct tdTPM_COUNTER_VALUE{
 474   TPM_STRUCTURE_TAG                 tag;
 475   UINT8                             label[4];
 476   TPM_ACTUAL_COUNT                  counter;
 477 } TPM_COUNTER_VALUE;
 478
 479 //
 480 // Part 2, section 5.14: TPM_SIGN_INFO
 481 //   Size of data indicated by dataLen
 482 //
 483 typedef struct tdTPM_SIGN_INFO {
 484   TPM_STRUCTURE_TAG                 tag;
 485   UINT8                             fixed[4];
 486   TPM_NONCE                         replay;
 487   UINT32                            dataLen;
 488   UINT8                             *data;
 489 } TPM_SIGN_INFO;
 490
 491 //
 492 // Part 2, section 5.15: TPM_MSA_COMPOSITE
 493 //   Number of migAuthDigest indicated by MSAlist
 494 //
 495 typedef struct tdTPM_MSA_COMPOSITE {
 496   UINT32                            MSAlist;
 497   TPM_DIGEST                        migAuthDigest[1];
 498 } TPM_MSA_COMPOSITE;
 499
 500 //
 501 // Part 2, section 5.16: TPM_CMK_AUTH
 502 //
 503 typedef struct tdTPM_CMK_AUTH{
 504   TPM_DIGEST                        migrationAuthorityDigest;
 505   TPM_DIGEST                        destinationKeyDigest;
 506   TPM_DIGEST                        sourceKeyDigest;
 507 } TPM_CMK_AUTH;
 508
 509 //
 510 // Part 2, section 5.17: TPM_CMK_DELEGATE
 511 //
 512 #define TPM_CMK_DELEGATE_SIGNING    (((TPM_CMK_DELEGATE)1) << 31)
 513 #define TPM_CMK_DELEGATE_STORAGE    (((TPM_CMK_DELEGATE)1) << 30)
 514 #define TPM_CMK_DELEGATE_BIND       (((TPM_CMK_DELEGATE)1) << 29)
 515 #define TPM_CMK_DELEGATE_LEGACY     (((TPM_CMK_DELEGATE)1) << 28)
 516 #define TPM_CMK_DELEGATE_MIGRATE    (((TPM_CMK_DELEGATE)1) << 27)
 517
 518 //
 519 // Part 2, section 5.18: TPM_SELECT_SIZE
 520 //
 521 typedef struct tdTPM_SELECT_SIZE {
 522   UINT8                             major;
 523   UINT8                             minor;
 524   UINT16                            reqSize;
 525 } TPM_SELECT_SIZE;
 526
 527 //
 528 // Part 2, section 5,19: TPM_CMK_MIGAUTH
 529 //
 530 typedef struct tdTPM_CMK_MIGAUTH{
 531   TPM_STRUCTURE_TAG                 tag;
 532   TPM_DIGEST                        msaDigest;
 533   TPM_DIGEST                        pubKeyDigest;
 534 } TPM_CMK_MIGAUTH;
 535
 536 //
 537 // Part 2, section 5.20: TPM_CMK_SIGTICKET
 538 //
 539 typedef struct tdTPM_CMK_SIGTICKET{
 540   TPM_STRUCTURE_TAG                 tag;
 541   TPM_DIGEST                        verKeyDigest;
 542   TPM_DIGEST                        signedData;
 543 } TPM_CMK_SIGTICKET;
 544
 545 //
 546 // Part 2, section 5.21: TPM_CMK_MA_APPROVAL
 547 //
 548 typedef struct tdTPM_CMK_MA_APPROVAL{
 549   TPM_STRUCTURE_TAG                 tag;
 550   TPM_DIGEST                        migrationAuthorityDigest;
 551 } TPM_CMK_MA_APPROVAL;
 552
 553 //
 554 // Part 2, section 6: Command Tags
 555 //
 556 #define TPM_TAG_RQU_COMMAND         ((TPM_STRUCTURE_TAG) 0x00C1)
 557 #define TPM_TAG_RQU_AUTH1_COMMAND   ((TPM_STRUCTURE_TAG) 0x00C2)
 558 #define TPM_TAG_RQU_AUTH2_COMMAND   ((TPM_STRUCTURE_TAG) 0x00C3)
 559 #define TPM_TAG_RSP_COMMAND         ((TPM_STRUCTURE_TAG) 0x00C4)
 560 #define TPM_TAG_RSP_AUTH1_COMMAND   ((TPM_STRUCTURE_TAG) 0x00C5)
 561 #define TPM_TAG_RSP_AUTH2_COMMAND   ((TPM_STRUCTURE_TAG) 0x00C6)
 562
 563 //
 564 // Part 2, section 7.1: TPM_PERMANENT_FLAGS
 565 //
 566 typedef struct tdTPM_PERMANENT_FLAGS{
 567   TPM_STRUCTURE_TAG                 tag;
 568   BOOLEAN                           disable;
 569   BOOLEAN                           ownership;
 570   BOOLEAN                           deactivated;
 571   BOOLEAN                           readPubek;
 572   BOOLEAN                           disableOwnerClear;
 573   BOOLEAN                           allowMaintenance;
 574   BOOLEAN                           physicalPresenceLifetimeLock;
 575   BOOLEAN                           physicalPresenceHWEnable;
 576   BOOLEAN                           physicalPresenceCMDEnable;
 577   BOOLEAN                           CEKPUsed;
 578   BOOLEAN                           TPMpost;
 579   BOOLEAN                           TPMpostLock;
 580   BOOLEAN                           FIPS;
 581   BOOLEAN                           operator;
 582   BOOLEAN                           enableRevokeEK;
 583   BOOLEAN                           nvLocked;
 584   BOOLEAN                           readSRKPub;
 585   BOOLEAN                           tpmEstablished;
 586   BOOLEAN                           maintenanceDone;
 587 } TPM_PERMANENT_FLAGS;
 588
 589 //
 590 // Part 2, section 7.1.1: PERMANENT_FLAGS Subcap for SetCapability
 591 //
 592 #define TPM_PF_DISABLE                      ((TPM_CAPABILITY_AREA) 1)
 593 #define TPM_PF_OWNERSHIP                    ((TPM_CAPABILITY_AREA) 2)
 594 #define TPM_PF_DEACTIVATED                  ((TPM_CAPABILITY_AREA) 3)
 595 #define TPM_PF_READPUBEK                    ((TPM_CAPABILITY_AREA) 4)
 596 #define TPM_PF_DISABLEOWNERCLEAR            ((TPM_CAPABILITY_AREA) 5)
 597 #define TPM_PF_ALLOWMAINTENANCE             ((TPM_CAPABILITY_AREA) 6)
 598 #define TPM_PF_PHYSICALPRESENCELIFETIMELOCK ((TPM_CAPABILITY_AREA) 7)
 599 #define TPM_PF_PHYSICALPRESENCEHWENABLE     ((TPM_CAPABILITY_AREA) 8)
 600 #define TPM_PF_PHYSICALPRESENCECMDENABLE    ((TPM_CAPABILITY_AREA) 9)
 601 #define TPM_PF_CEKPUSED                     ((TPM_CAPABILITY_AREA) 10)
 602 #define TPM_PF_TPMPOST                      ((TPM_CAPABILITY_AREA) 11)
 603 #define TPM_PF_TPMPOSTLOCK                  ((TPM_CAPABILITY_AREA) 12)
 604 #define TPM_PF_FIPS                         ((TPM_CAPABILITY_AREA) 13)
 605 #define TPM_PF_OPERATOR                     ((TPM_CAPABILITY_AREA) 14)
 606 #define TPM_PF_ENABLEREVOKEEK               ((TPM_CAPABILITY_AREA) 15)
 607 #define TPM_PF_NV_LOCKED                    ((TPM_CAPABILITY_AREA) 16)
 608 #define TPM_PF_READSRKPUB                   ((TPM_CAPABILITY_AREA) 17)
 609 #define TPM_PF_TPMESTABLISHED               ((TPM_CAPABILITY_AREA) 18)
 610 #define TPM_PF_MAINTENANCEDONE              ((TPM_CAPABILITY_AREA) 19)
 611
 612 //
 613 // Part 2, section 7.2: TPM_STCLEAR_FLAGS
 614 //
 615 typedef struct tdTPM_STCLEAR_FLAGS{
 616   TPM_STRUCTURE_TAG                 tag;
 617   BOOLEAN                           deactivated;
 618   BOOLEAN                           disableForceClear;
 619   BOOLEAN                           physicalPresence;
 620   BOOLEAN                           physicalPresenceLock;
 621   BOOLEAN                           bGlobalLock;
 622 } TPM_STCLEAR_FLAGS;
 623
 624 //
 625 // Part 2, section 7.2.1: STCLEAR_FLAGS Subcap for SetCapability
 626 //
 627 #define TPM_SF_DEACTIVATED          ((TPM_CAPABILITY_AREA) 1)
 628 #define TPM_SF_DISABLEFORCECLEAR    ((TPM_CAPABILITY_AREA) 2)
 629 #define TPM_SF_PHYSICALPRESENCE     ((TPM_CAPABILITY_AREA) 3)
 630 #define TPM_SF_PHYSICALPRESENCELOCK ((TPM_CAPABILITY_AREA) 4)
 631 #define TPM_SF_BGLOBALLOCK          ((TPM_CAPABILITY_AREA) 5)
 632
 633 //
 634 // Part 2, section 7.3: TPM_STANY_FLAGS
 635 //
 636 typedef struct tdTPM_STANY_FLAGS{
 637   TPM_STRUCTURE_TAG                 tag;
 638   BOOLEAN                           postInitialise;
 639   TPM_MODIFIER_INDICATOR            localityModifier;
 640   BOOLEAN                           transportExclusive;
 641   BOOLEAN                           TOSPresent;
 642 } TPM_STANY_FLAGS;
 643
 644 //
 645 // Part 2, section 7.3.1: STANY_FLAGS Subcap for SetCapability
 646 //
 647 #define TPM_AF_POSTINITIALISE       ((TPM_CAPABILITY_AREA) 1)
 648 #define TPM_AF_LOCALITYMODIFIER     ((TPM_CAPABILITY_AREA) 2)
 649 #define TPM_AF_TRANSPORTEXCLUSIVE   ((TPM_CAPABILITY_AREA) 3)
 650 #define TPM_AF_TOSPRESENT           ((TPM_CAPABILITY_AREA) 4)
 651
 652 //
 653 // All those structures (section 7.4, 7.5, 7.6) are not normative and
 654 // thus no definitions here
 655 //
 656 // Part 2, section 7.4: TPM_PERMANENT_DATA
 657 //
 658 //#define TPM_MIN_COUNTERS            4   // the minimum number of counters is 4
 659 //#define TPM_DELEGATE_KEY            TPM_KEY
 660 //#define TPM_NUM_PCR                 16
 661 //#define TPM_MAX_NV_WRITE_NOOWNER    64
 662 //typedef struct tdTPM_PERMANENT_DATA
 663 //{
 664 //    TPM_STRUCTURE_TAG               tag;
 665 //    UINT8                           revMajor;
 666 //    UINT8                           revMinor;
 667 //    TPM_NONCE                       tpmProof;
 668 //    TPM_NONCE                       ekReset;
 669 //    TPM_SECRET                      ownerAuth;
 670 //    TPM_SECRET                      operatorAuth;
 671 //    TPM_DIRVALUE                    authDIR[1];
 672 //    TPM_PUBKEY                      manuMaintPub;
 673 //    TPM_KEY                         endorsementKey;
 674 //    TPM_KEY                         srk;
 675 //    TPM_KEY                         contextKey;
 676 //    TPM_KEY                         delegateKey;
 677 //    TPM_COUNTER_VALUE               auditMonotonicCounter;
 678 //    TPM_COUNTER_VALUE               monitonicCounter[TPM_MIN_COUNTERS];
 679 //    TPM_PCR_ATTRIBUTES              pcrAttrib[TPM_NUM_PCR];
 680 //    UINT8                           ordinalAuditStatus[];
 681 //    UINT8                           *rngState;
 682 //    TPM_FAMILY_TABLE                familyTable;
 683 //    TPM_DELEGATE_TABLE              delegateTable;
 684 //    UINT32                          maxNVBufSize;
 685 //    UINT32                          lastFamilyID;
 686 //    UINT32                          noOwnerNVWrite;
 687 //    TPM_CMK_DELEGATE                restrictDelegate;
 688 //    TPM_DAA_TPM_SEED                tpmDAASeed;
 689 //} TPM_PERMANENT_DATA;
 690
 691 //
 692 // Part 2, section 7.5: TPM_STCLEAR_DATA
 693 //   available inside TPM only
 694 //
 695 //typedef struct tdTPM_STCLEAR_DATA
 696 //{
 697 //    TPM_STRUCTURE_TAG               tag;
 698 //    TPM_NONCE                       contextNonceKey;
 699 //    TPM_COUNT_ID                    countID;
 700 //    UINT32                          ownerReference;
 701 //    BOOLEAN                         disableResetLock;
 702 //} TPM_STCLEAR_DATA;
 703
 704 //
 705 // Part 2, section 7.6: TPM_STANY_DATA
 706 //   available inside TPM only
 707 //
 708 //typedef struct tdTPM_STANY_DATA
 709 //{
 710 //    TPM_STRUCTURE_TAG               tag;
 711 //    TPM_NONCE                       contextNonceSession;
 712 //    TPM_DIGEST                      auditDigest;
 713 //    TPM_CURRENT_TICKS               currentTicks;
 714 //    UINT32                          contextCount;
 715 //    UINT32                          contextList[TPM_MIN_SESSION_LIST];
 716 //    TPM_SESSION_DATA                sessions[TPM_MIN_SESSIONS];
 717 //} TPM_STANY_DATA;
 718
 719 //
 720 // Part 2, section 8: PCR Structures
 721 //
 722
 723 //
 724 // Part 2, section 8.1: TPM_PCR_SELECTION
 725 //   Size of pcrSelect[] indicated by sizeOfSelect
 726 //
 727 typedef struct tdTPM_PCR_SELECTION {
 728   UINT16                            sizeOfSelect;
 729   UINT8                             pcrSelect[1];
 730 } TPM_PCR_SELECTION;
 731
 732 //
 733 // Part 2, section 8.2: TPM_PCR_COMPOSITE
 734 //   Size of pcrValue[] indicated by valueSize
 735 //
 736 typedef struct tdTPM_PCR_COMPOSITE {
 737   TPM_PCR_SELECTION                 select;
 738   UINT32                            valueSize;
 739   TPM_PCRVALUE                      pcrValue[1];
 740 } TPM_PCR_COMPOSITE;
 741
 742 //
 743 // Part 2, section 8.3: TPM_PCR_INFO
 744 //
 745 typedef struct tdTPM_PCR_INFO {
 746   TPM_PCR_SELECTION                 pcrSelection;
 747   TPM_COMPOSITE_HASH                digestAtRelease;
 748   TPM_COMPOSITE_HASH                digestAtCreation;
 749 } TPM_PCR_INFO;
 750
 751 //
 752 // Part 2, section 8.6: TPM_LOCALITY_SELECTION
 753 //
 754 typedef UINT8                       TPM_LOCALITY_SELECTION;
 755
 756 #define TPM_LOC_FOUR                ((UINT8) 0x10)
 757 #define TPM_LOC_THREE               ((UINT8) 0x08)
 758 #define TPM_LOC_TWO                 ((UINT8) 0x04)
 759 #define TPM_LOC_ONE                 ((UINT8) 0x02)
 760 #define TPM_LOC_ZERO                ((UINT8) 0x01)
 761
 762 //
 763 // Part 2, section 8.4: TPM_PCR_INFO_LONG
 764 //
 765 typedef struct tdTPM_PCR_INFO_LONG {
 766   TPM_STRUCTURE_TAG                 tag;
 767   TPM_LOCALITY_SELECTION            localityAtCreation;
 768   TPM_LOCALITY_SELECTION            localityAtRelease;
 769   TPM_PCR_SELECTION                 creationPCRSelection;
 770   TPM_PCR_SELECTION                 releasePCRSelection;
 771   TPM_COMPOSITE_HASH                digestAtCreation;
 772   TPM_COMPOSITE_HASH                digestAtRelease;
 773 } TPM_PCR_INFO_LONG;
 774
 775 //
 776 // Part 2, section 8.5: TPM_PCR_INFO_SHORT
 777 //
 778 typedef struct tdTPM_PCR_INFO_SHORT{
 779   TPM_PCR_SELECTION                 pcrSelection;
 780   TPM_LOCALITY_SELECTION            localityAtRelease;
 781   TPM_COMPOSITE_HASH                digestAtRelease;
 782 } TPM_PCR_INFO_SHORT;
 783
 784 //
 785 // Part 2, section 8.8: TPM_PCR_ATTRIBUTES
 786 //
 787 typedef struct tdTPM_PCR_ATTRIBUTES{
 788   BOOLEAN                           pcrReset;
 789   TPM_LOCALITY_SELECTION            pcrExtendLocal;
 790   TPM_LOCALITY_SELECTION            pcrResetLocal;
 791 } TPM_PCR_ATTRIBUTES;
 792
 793 //
 794 // Part 2, section 9: Storage Structures
 795 //
 796
 797 //
 798 // Part 2, section 9.1: TPM_STORED_DATA
 799 //   [size_is(sealInfoSize)] BYTE* sealInfo;
 800 //   [size_is(encDataSize)] BYTE* encData;
 801 //
 802 typedef struct tdTPM_STORED_DATA {
 803   TPM_STRUCT_VER                    ver;
 804   UINT32                            sealInfoSize;
 805   UINT8                             *sealInfo;
 806   UINT32                            encDataSize;
 807   UINT8                             *encData;
 808 } TPM_STORED_DATA;
 809
 810 //
 811 // Part 2, section 9.2: TPM_STORED_DATA12
 812 //   [size_is(sealInfoSize)] BYTE* sealInfo;
 813 //   [size_is(encDataSize)] BYTE* encData;
 814 //
 815 typedef struct tdTPM_STORED_DATA12 {
 816   TPM_STRUCTURE_TAG                 tag;
 817   TPM_ENTITY_TYPE                   et;
 818   UINT32                            sealInfoSize;
 819   UINT8                             *sealInfo;
 820   UINT32                            encDataSize;
 821   UINT8                             *encData;
 822 } TPM_STORED_DATA12;
 823
 824 //
 825 // Part 2, section 9.3: TPM_SEALED_DATA
 826 //   [size_is(dataSize)] BYTE* data;
 827 //
 828 typedef struct tdTPM_SEALED_DATA {
 829   TPM_PAYLOAD_TYPE                  payload;
 830   TPM_SECRET                        authData;
 831   TPM_NONCE                         tpmProof;
 832   TPM_DIGEST                        storedDigest;
 833   UINT32                            dataSize;
 834   UINT8                             *data;
 835 } TPM_SEALED_DATA;
 836
 837 //
 838 // Part 2, section 9.4: TPM_SYMMETRIC_KEY
 839 //   [size_is(size)] BYTE* data;
 840 //
 841 typedef struct tdTPM_SYMMETRIC_KEY {
 842   TPM_ALGORITHM_ID                  algId;
 843   TPM_ENC_SCHEME                    encScheme;
 844   UINT16                            dataSize;
 845   UINT8                             *data;
 846 } TPM_SYMMETRIC_KEY;
 847
 848 //
 849 // Part 2, section 9.5: TPM_BOUND_DATA
 850 //
 851 typedef struct tdTPM_BOUND_DATA {
 852   TPM_STRUCT_VER                    ver;
 853   TPM_PAYLOAD_TYPE                  payload;
 854   UINT8                             payloadData[1];
 855 } TPM_BOUND_DATA;
 856
 857 //
 858 // Part 2 section 10: TPM_KEY complex
 859 //
 860
 861 //
 862 // Part 2, section 10.2: TPM_KEY
 863 //   [size_is(encDataSize)] BYTE* encData;
 864 //
 865 typedef struct tdTPM_KEY{
 866   TPM_STRUCT_VER                    ver;
 867   TPM_KEY_USAGE                     keyUsage;
 868   TPM_KEY_FLAGS                     keyFlags;
 869   TPM_AUTH_DATA_USAGE               authDataUsage;
 870   TPM_KEY_PARMS                     algorithmParms;
 871   UINT32                            PCRInfoSize;
 872   UINT8                             *PCRInfo;
 873   TPM_STORE_PUBKEY                  pubKey;
 874   UINT32                            encDataSize;
 875   UINT8                             *encData;
 876 } TPM_KEY;
 877
 878 //
 879 // Part 2, section 10.3: TPM_KEY12
 880 //   [size_is(encDataSize)] BYTE* encData;
 881 //
 882 typedef struct tdTPM_KEY12{
 883   TPM_STRUCTURE_TAG                 tag;
 884   UINT16                            fill;
 885   TPM_KEY_USAGE                     keyUsage;
 886   TPM_KEY_FLAGS                     keyFlags;
 887   TPM_AUTH_DATA_USAGE               authDataUsage;
 888   TPM_KEY_PARMS                     algorithmParms;
 889   UINT32                            PCRInfoSize;
 890   UINT8                             *PCRInfo;
 891   TPM_STORE_PUBKEY                  pubKey;
 892   UINT32                            encDataSize;
 893   UINT8                             *encData;
 894 } TPM_KEY12;
 895
 896 //
 897 // Part 2, section 10.7: TPM_STORE_PRIVKEY
 898 //   [size_is(keyLength)] BYTE* key;
 899 //
 900 typedef struct tdTPM_STORE_PRIVKEY {
 901   UINT32                            keyLength;
 902   UINT8                             *key;
 903 } TPM_STORE_PRIVKEY;
 904
 905 //
 906 // Part 2, section 10.6: TPM_STORE_ASYMKEY
 907 //
 908 typedef struct tdTPM_STORE_ASYMKEY {                // pos len total
 909   TPM_PAYLOAD_TYPE                  payload;        // 0    1   1
 910   TPM_SECRET                        usageAuth;      // 1    20  21
 911   TPM_SECRET                        migrationAuth;  // 21   20  41
 912   TPM_DIGEST                        pubDataDigest;  // 41   20  61
 913   TPM_STORE_PRIVKEY                 privKey;        // 61 132-151 193-214
 914 } TPM_STORE_ASYMKEY;
 915
 916 //
 917 // Part 2, section 10.8: TPM_MIGRATE_ASYMKEY
 918 //   [size_is(partPrivKeyLen)] BYTE* partPrivKey;
 919 //
 920 typedef struct tdTPM_MIGRATE_ASYMKEY {              // pos  len  total
 921   TPM_PAYLOAD_TYPE                  payload;        //   0    1       1
 922   TPM_SECRET                        usageAuth;      //   1   20      21
 923   TPM_DIGEST                        pubDataDigest;  //  21   20      41
 924   UINT32                            partPrivKeyLen; //  41    4      45
 925   UINT8                             *partPrivKey;   //  45 112-127 157-172
 926 } TPM_MIGRATE_ASYMKEY;
 927
 928 //
 929 // Part 2, section 10.9: TPM_KEY_CONTROL
 930 //
 931 #define TPM_KEY_CONTROL_OWNER_EVICT ((UINT32) 0x00000001)
 932
 933 //
 934 // Part 2, section 11: Signed Structures
 935 //
 936
 937 typedef struct tdTPM_CERTIFY_INFO
 938 {
 939     TPM_STRUCT_VER                  version;
 940     TPM_KEY_USAGE                   keyUsage;
 941     TPM_KEY_FLAGS                   keyFlags;
 942     TPM_AUTH_DATA_USAGE             authDataUsage;
 943     TPM_KEY_PARMS                   algorithmParms;
 944     TPM_DIGEST                      pubkeyDigest;
 945     TPM_NONCE                       data;
 946     BOOLEAN                         parentPCRStatus;
 947     UINT32                          PCRInfoSize;
 948     UINT8                           *PCRInfo;
 949 } TPM_CERTIFY_INFO;
 950
 951 typedef struct tdTPM_CERTIFY_INFO2
 952 {
 953     TPM_STRUCTURE_TAG               tag;
 954     UINT8                           fill;
 955     TPM_PAYLOAD_TYPE                payloadType;
 956     TPM_KEY_USAGE                   keyUsage;
 957     TPM_KEY_FLAGS                   keyFlags;
 958     TPM_AUTH_DATA_USAGE             authDataUsage;
 959     TPM_KEY_PARMS                   algorithmParms;
 960     TPM_DIGEST                      pubkeyDigest;
 961     TPM_NONCE                       data;
 962     BOOLEAN                         parentPCRStatus;
 963     UINT32                          PCRInfoSize;
 964     UINT8                           *PCRInfo;
 965     UINT32                          migrationAuthoritySize;
 966     UINT8                           *migrationAuthority;
 967 } TPM_CERTIFY_INFO2;
 968
 969 typedef struct tdTPM_QUOTE_INFO
 970 {
 971     TPM_STRUCT_VER                  version;
 972     UINT8                           fixed[4];
 973     TPM_COMPOSITE_HASH              digestValue;
 974     TPM_NONCE                       externalData;
 975 } TPM_QUOTE_INFO;
 976
 977 typedef struct tdTPM_QUOTE_INFO2
 978 {
 979     TPM_STRUCTURE_TAG               tag;
 980     UINT8                           fixed[4];
 981     TPM_NONCE                       externalData;
 982     TPM_PCR_INFO_SHORT              infoShort;
 983 } TPM_QUOTE_INFO2;
 984
 985 //
 986 // Part 2, section 12: Identity Structures
 987 //
 988
 989 typedef struct tdTPM_EK_BLOB
 990 {
 991     TPM_STRUCTURE_TAG               tag;
 992     TPM_EK_TYPE                     ekType;
 993     UINT32                          blobSize;
 994     UINT8                           *blob;
 995 } TPM_EK_BLOB;
 996
 997 typedef struct tdTPM_EK_BLOB_ACTIVATE
 998 {
 999     TPM_STRUCTURE_TAG               tag;
1000     TPM_SYMMETRIC_KEY               sessionKey;
1001     TPM_DIGEST                      idDigest;
1002     TPM_PCR_INFO_SHORT              pcrInfo;
1003 } TPM_EK_BLOB_ACTIVATE;
1004
1005 typedef struct tdTPM_EK_BLOB_AUTH
1006 {
1007     TPM_STRUCTURE_TAG               tag;
1008     TPM_SECRET                      authValue;
1009 } TPM_EK_BLOB_AUTH;
1010
1011
1012 typedef struct tdTPM_IDENTITY_CONTENTS
1013 {
1014     TPM_STRUCT_VER                  ver;
1015     UINT32                          ordinal;
1016     TPM_CHOSENID_HASH               labelPrivCADigest;
1017     TPM_PUBKEY                      identityPubKey;
1018 } TPM_IDENTITY_CONTENTS;
1019
1020 typedef struct tdTPM_IDENTITY_REQ
1021 {
1022     UINT32                          asymSize;
1023     UINT32                          symSize;
1024     TPM_KEY_PARMS                   asymAlgorithm;
1025     TPM_KEY_PARMS                   symAlgorithm;
1026     UINT8                           *asymBlob;
1027     UINT8                           *symBlob;
1028 } TPM_IDENTITY_REQ;
1029
1030 typedef struct tdTPM_IDENTITY_PROOF
1031 {
1032     TPM_STRUCT_VER                  ver;
1033     UINT32                          labelSize;
1034     UINT32                          identityBindingSize;
1035     UINT32                          endorsementSize;
1036     UINT32                          platformSize;
1037     UINT32                          conformanceSize;
1038     TPM_PUBKEY                      identityKey;
1039     UINT8                           *labelArea;
1040     UINT8                           *identityBinding;
1041     UINT8                           *endorsementCredential;
1042     UINT8                           *platformCredential;
1043     UINT8                           *conformanceCredential;
1044 } TPM_IDENTITY_PROOF;
1045
1046 typedef struct tdTPM_ASYM_CA_CONTENTS
1047 {
1048     TPM_SYMMETRIC_KEY               sessionKey;
1049     TPM_DIGEST                      idDigest;
1050 } TPM_ASYM_CA_CONTENTS;
1051
1052 typedef struct tdTPM_SYM_CA_ATTESTATION
1053 {
1054     UINT32                          credSize;
1055     TPM_KEY_PARMS                   algorithm;
1056     UINT8                           *credential;
1057 } TPM_SYM_CA_ATTESTATION;
1058
1059 //
1060 // Part 2, section 15: TPM_CURRENT_TICKS
1061 //   Placed here out of order because definitions are used in section 13.
1062 //
1063 typedef struct tdTPM_CURRENT_TICKS {
1064   TPM_STRUCTURE_TAG                 tag;
1065   UINT64                            currentTicks;
1066   UINT16                            tickRate;
1067   TPM_NONCE                         tickNonce;
1068 } TPM_CURRENT_TICKS;
1069
1070 //
1071 // Part 2, section 13: Transport structures
1072 //
1073
1074 #define TPM_TRANSPORT_ENCRYPT       ((UINT32)0x00000001)
1075 #define TPM_TRANSPORT_LOG           ((UINT32)0x00000002)
1076 #define TPM_TRANSPORT_EXCLUSIVE     ((UINT32)0x00000004)
1077
1078 typedef struct tdTPM_TRANSPORT_PUBLIC
1079 {
1080     TPM_STRUCTURE_TAG               tag;
1081     TPM_TRANSPORT_ATTRIBUTES        transAttributes;
1082     TPM_ALGORITHM_ID                algId;
1083     TPM_ENC_SCHEME                  encScheme;
1084 } TPM_TRANSPORT_PUBLIC;
1085
1086 typedef struct tdTPM_TRANSPORT_INTERNAL
1087 {
1088     TPM_STRUCTURE_TAG               tag;
1089     TPM_AUTHDATA                    authData;
1090     TPM_TRANSPORT_PUBLIC            transPublic;
1091     TPM_TRANSHANDLE                 transHandle;
1092     TPM_NONCE                       transNonceEven;
1093     TPM_DIGEST                      transDigest;
1094 } TPM_TRANSPORT_INTERNAL;
1095
1096 typedef struct tdTPM_TRANSPORT_LOG_IN
1097 {
1098     TPM_STRUCTURE_TAG               tag;
1099     TPM_DIGEST                      parameters;
1100     TPM_DIGEST                      pubKeyHash;
1101 } TPM_TRANSPORT_LOG_IN;
1102
1103 typedef struct tdTPM_TRANSPORT_LOG_OUT
1104 {
1105     TPM_STRUCTURE_TAG               tag;
1106     TPM_CURRENT_TICKS               currentTicks;
1107     TPM_DIGEST                      parameters;
1108     TPM_MODIFIER_INDICATOR          locality;
1109 } TPM_TRANSPORT_LOG_OUT;
1110
1111 typedef struct tdTPM_TRANSPORT_AUTH
1112 {
1113     TPM_STRUCTURE_TAG               tag;
1114     TPM_AUTHDATA                    authData;
1115 } TPM_TRANSPORT_AUTH;
1116
1117 //
1118 // Part 2, section 14: Audit Structures
1119 //
1120
1121 typedef struct tdTPM_AUDIT_EVENT_IN
1122 {
1123     TPM_STRUCTURE_TAG               tag;
1124     TPM_DIGEST                      inputParms;
1125     TPM_COUNTER_VALUE               auditCount;
1126 } TPM_AUDIT_EVENT_IN;
1127
1128 typedef struct tdTPM_AUDIT_EVENT_OUT
1129 {
1130     TPM_STRUCTURE_TAG               tag;
1131     TPM_COMMAND_CODE                ordinal;
1132     TPM_DIGEST                      outputParms;
1133     TPM_COUNTER_VALUE               auditCount;
1134     TPM_RESULT                      returnCode;
1135 } TPM_AUDIT_EVENT_OUT;
1136
1137 //
1138 // Part 2, section 16: Return Codes
1139 //
1140 #define TPM_BASE                    0
1141
1142 #define TPM_VENDOR_ERROR            TPM_Vendor_Specific32
1143 #define TPM_NON_FATAL               0x00000800
1144
1145 #define TPM_SUCCESS                 ((TPM_RESULT) TPM_BASE)
1146 #define TPM_AUTHFAIL                ((TPM_RESULT) (TPM_BASE + 1))
1147 #define TPM_BADINDEX                ((TPM_RESULT) (TPM_BASE + 2))
1148 #define TPM_BAD_PARAMETER           ((TPM_RESULT) (TPM_BASE + 3))
1149 #define TPM_AUDITFAILURE            ((TPM_RESULT) (TPM_BASE + 4))
1150 #define TPM_CLEAR_DISABLED          ((TPM_RESULT) (TPM_BASE + 5))
1151 #define TPM_DEACTIVATED             ((TPM_RESULT) (TPM_BASE + 6))
1152 #define TPM_DISABLED                ((TPM_RESULT) (TPM_BASE + 7))
1153 #define TPM_DISABLED_CMD            ((TPM_RESULT) (TPM_BASE + 8))
1154 #define TPM_FAIL                    ((TPM_RESULT) (TPM_BASE + 9))
1155 #define TPM_BAD_ORDINAL             ((TPM_RESULT) (TPM_BASE + 10))
1156 #define TPM_INSTALL_DISABLED        ((TPM_RESULT) (TPM_BASE + 11))
1157 #define TPM_INVALID_KEYHANDLE       ((TPM_RESULT) (TPM_BASE + 12))
1158 #define TPM_KEYNOTFOUND             ((TPM_RESULT) (TPM_BASE + 13))
1159 #define TPM_INAPPROPRIATE_ENC       ((TPM_RESULT) (TPM_BASE + 14))
1160 #define TPM_MIGRATEFAIL             ((TPM_RESULT) (TPM_BASE + 15))
1161 #define TPM_INVALID_PCR_INFO        ((TPM_RESULT) (TPM_BASE + 16))
1162 #define TPM_NOSPACE                 ((TPM_RESULT) (TPM_BASE + 17))
1163 #define TPM_NOSRK                   ((TPM_RESULT) (TPM_BASE + 18))
1164 #define TPM_NOTSEALED_BLOB          ((TPM_RESULT) (TPM_BASE + 19))
1165 #define TPM_OWNER_SET               ((TPM_RESULT) (TPM_BASE + 20))
1166 #define TPM_RESOURCES               ((TPM_RESULT) (TPM_BASE + 21))
1167 #define TPM_SHORTRANDOM             ((TPM_RESULT) (TPM_BASE + 22))
1168 #define TPM_SIZE                    ((TPM_RESULT) (TPM_BASE + 23))
1169 #define TPM_WRONGPCRVAL             ((TPM_RESULT) (TPM_BASE + 24))
1170 #define TPM_BAD_PARAM_SIZE          ((TPM_RESULT) (TPM_BASE + 25))
1171 #define TPM_SHA_THREAD              ((TPM_RESULT) (TPM_BASE + 26))
1172 #define TPM_SHA_ERROR               ((TPM_RESULT) (TPM_BASE + 27))
1173 #define TPM_FAILEDSELFTEST          ((TPM_RESULT) (TPM_BASE + 28))
1174 #define TPM_AUTH2FAIL               ((TPM_RESULT) (TPM_BASE + 29))
1175 #define TPM_BADTAG                  ((TPM_RESULT) (TPM_BASE + 30))
1176 #define TPM_IOERROR                 ((TPM_RESULT) (TPM_BASE + 31))
1177 #define TPM_ENCRYPT_ERROR           ((TPM_RESULT) (TPM_BASE + 32))
1178 #define TPM_DECRYPT_ERROR           ((TPM_RESULT) (TPM_BASE + 33))
1179 #define TPM_INVALID_AUTHHANDLE      ((TPM_RESULT) (TPM_BASE + 34))
1180 #define TPM_NO_ENDORSEMENT          ((TPM_RESULT) (TPM_BASE + 35))
1181 #define TPM_INVALID_KEYUSAGE        ((TPM_RESULT) (TPM_BASE + 36))
1182 #define TPM_WRONG_ENTITYTYPE        ((TPM_RESULT) (TPM_BASE + 37))
1183 #define TPM_INVALID_POSTINIT        ((TPM_RESULT) (TPM_BASE + 38))
1184 #define TPM_INAPPROPRIATE_SIG       ((TPM_RESULT) (TPM_BASE + 39))
1185 #define TPM_BAD_KEY_PROPERTY        ((TPM_RESULT) (TPM_BASE + 40))
1186 #define TPM_BAD_MIGRATION           ((TPM_RESULT) (TPM_BASE + 41))
1187 #define TPM_BAD_SCHEME              ((TPM_RESULT) (TPM_BASE + 42))
1188 #define TPM_BAD_DATASIZE            ((TPM_RESULT) (TPM_BASE + 43))
1189 #define TPM_BAD_MODE                ((TPM_RESULT) (TPM_BASE + 44))
1190 #define TPM_BAD_PRESENCE            ((TPM_RESULT) (TPM_BASE + 45))
1191 #define TPM_BAD_VERSION             ((TPM_RESULT) (TPM_BASE + 46))
1192 #define TPM_NO_WRAP_TRANSPORT       ((TPM_RESULT) (TPM_BASE + 47))
1193 #define TPM_AUDITFAIL_UNSUCCESSFUL  ((TPM_RESULT) (TPM_BASE + 48))
1194 #define TPM_AUDITFAIL_SUCCESSFUL    ((TPM_RESULT) (TPM_BASE + 49))
1195 #define TPM_NOTRESETABLE            ((TPM_RESULT) (TPM_BASE + 50))
1196 #define TPM_NOTLOCAL                ((TPM_RESULT) (TPM_BASE + 51))
1197 #define TPM_BAD_TYPE                ((TPM_RESULT) (TPM_BASE + 52))
1198 #define TPM_INVALID_RESOURCE        ((TPM_RESULT) (TPM_BASE + 53))
1199 #define TPM_NOTFIPS                 ((TPM_RESULT) (TPM_BASE + 54))
1200 #define TPM_INVALID_FAMILY          ((TPM_RESULT) (TPM_BASE + 55))
1201 #define TPM_NO_NV_PERMISSION        ((TPM_RESULT) (TPM_BASE + 56))
1202 #define TPM_REQUIRES_SIGN           ((TPM_RESULT) (TPM_BASE + 57))
1203 #define TPM_KEY_NOTSUPPORTED        ((TPM_RESULT) (TPM_BASE + 58))
1204 #define TPM_AUTH_CONFLICT           ((TPM_RESULT) (TPM_BASE + 59))
1205 #define TPM_AREA_LOCKED             ((TPM_RESULT) (TPM_BASE + 60))
1206 #define TPM_BAD_LOCALITY            ((TPM_RESULT) (TPM_BASE + 61))
1207 #define TPM_READ_ONLY               ((TPM_RESULT) (TPM_BASE + 62))
1208 #define TPM_PER_NOWRITE             ((TPM_RESULT) (TPM_BASE + 63))
1209 #define TPM_FAMILYCOUNT             ((TPM_RESULT) (TPM_BASE + 64))
1210 #define TPM_WRITE_LOCKED            ((TPM_RESULT) (TPM_BASE + 65))
1211 #define TPM_BAD_ATTRIBUTES          ((TPM_RESULT) (TPM_BASE + 66))
1212 #define TPM_INVALID_STRUCTURE       ((TPM_RESULT) (TPM_BASE + 67))
1213 #define TPM_KEY_OWNER_CONTROL       ((TPM_RESULT) (TPM_BASE + 68))
1214 #define TPM_BAD_COUNTER             ((TPM_RESULT) (TPM_BASE + 69))
1215 #define TPM_NOT_FULLWRITE           ((TPM_RESULT) (TPM_BASE + 70))
1216 #define TPM_CONTEXT_GAP             ((TPM_RESULT) (TPM_BASE + 71))
1217 #define TPM_MAXNVWRITES             ((TPM_RESULT) (TPM_BASE + 72))
1218 #define TPM_NOOPERATOR              ((TPM_RESULT) (TPM_BASE + 73))
1219 #define TPM_RESOURCEMISSING         ((TPM_RESULT) (TPM_BASE + 74))
1220 #define TPM_DELEGATE_LOCK           ((TPM_RESULT) (TPM_BASE + 75))
1221 #define TPM_DELEGATE_FAMILY         ((TPM_RESULT) (TPM_BASE + 76))
1222 #define TPM_DELEGATE_ADMIN          ((TPM_RESULT) (TPM_BASE + 77))
1223 #define TPM_TRANSPORT_NOTEXCLUSIVE  ((TPM_RESULT) (TPM_BASE + 78))
1224 #define TPM_OWNER_CONTROL           ((TPM_RESULT) (TPM_BASE + 79))
1225 #define TPM_DAA_RESOURCES           ((TPM_RESULT) (TPM_BASE + 80))
1226 #define TPM_DAA_INPUT_DATA0         ((TPM_RESULT) (TPM_BASE + 81))
1227 #define TPM_DAA_INPUT_DATA1         ((TPM_RESULT) (TPM_BASE + 82))
1228 #define TPM_DAA_ISSUER_SETTINGS     ((TPM_RESULT) (TPM_BASE + 83))
1229 #define TPM_DAA_TPM_SETTINGS        ((TPM_RESULT) (TPM_BASE + 84))
1230 #define TPM_DAA_STAGE               ((TPM_RESULT) (TPM_BASE + 85))
1231 #define TPM_DAA_ISSUER_VALIDITY     ((TPM_RESULT) (TPM_BASE + 86))
1232 #define TPM_DAA_WRONG_W             ((TPM_RESULT) (TPM_BASE + 87))
1233 #define TPM_BAD_HANDLE              ((TPM_RESULT) (TPM_BASE + 88))
1234 #define TPM_BAD_DELEGATE            ((TPM_RESULT) (TPM_BASE + 89))
1235 #define TPM_BADCONTEXT              ((TPM_RESULT) (TPM_BASE + 90))
1236 #define TPM_TOOMANYCONTEXTS         ((TPM_RESULT) (TPM_BASE + 91))
1237 #define TPM_MA_TICKET_SIGNATURE     ((TPM_RESULT) (TPM_BASE + 92))
1238 #define TPM_MA_DESTINATION          ((TPM_RESULT) (TPM_BASE + 93))
1239 #define TPM_MA_SOURCE               ((TPM_RESULT) (TPM_BASE + 94))
1240 #define TPM_MA_AUTHORITY            ((TPM_RESULT) (TPM_BASE + 95))
1241 #define TPM_PERMANENTEK             ((TPM_RESULT) (TPM_BASE + 97))
1242 #define TPM_BAD_SIGNATURE           ((TPM_RESULT) (TPM_BASE + 98))
1243 #define TPM_NOCONTEXTSPACE          ((TPM_RESULT) (TPM_BASE + 99))
1244
1245 #define TPM_RETRY                   ((TPM_RESULT) (TPM_BASE + TPM_NON_FATAL))
1246 #define TPM_NEEDS_SELFTEST          ((TPM_RESULT) (TPM_BASE + TPM_NON_FATAL + 1))
1247 #define TPM_DOING_SELFTEST          ((TPM_RESULT) (TPM_BASE + TPM_NON_FATAL + 2))
1248 #define TPM_DEFEND_LOCK_RUNNING     ((TPM_RESULT) (TPM_BASE + TPM_NON_FATAL + 3))
1249
1250 //
1251 // Part 2, section 17: Ordinals
1252 //
1253 // Ordinals are 32 bit values. The upper byte contains values that serve as
1254 // flag indicators, the next byte contains values indicating what committee
1255 // designated the ordinal, and the final two bytes contain the Command
1256 // Ordinal Index.
1257 //      3                   2                   1
1258 //    1 0 9 8 7 6 5 4 3 2 1 0 9 8 7 6 5 4 3 2 1 0 9 8 7 6 5 4 3 2 1 0
1259 //   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
1260 //   |P|C|V| Reserved| Purview |     Command Ordinal Index           |
1261 //   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
1262 //
1263 //  Where:
1264 //
1265 //    * P is Protected/Unprotected command. When 0 the command is a Protected
1266 //      command, when 1 the command is an Unprotected command.
1267 //
1268 //    * C is Non-Connection/Connection related command. When 0 this command
1269 //      passes through to either the protected (TPM) or unprotected (TSS)
1270 //      components.
1271 //
1272 //    * V is TPM/Vendor command. When 0 the command is TPM defined, when 1 the
1273 //      command is vendor defined.
1274 //
1275 //    * All reserved area bits are set to 0.
1276 //
1277
1278 #define TPM_ORD_ActivateIdentity                  ((TPM_COMMAND_CODE) 0x0000007A)
1279 #define TPM_ORD_AuthorizeMigrationKey             ((TPM_COMMAND_CODE) 0x0000002B)
1280 #define TPM_ORD_CertifyKey                        ((TPM_COMMAND_CODE) 0x00000032)
1281 #define TPM_ORD_CertifyKey2                       ((TPM_COMMAND_CODE) 0x00000033)
1282 #define TPM_ORD_CertifySelfTest                   ((TPM_COMMAND_CODE) 0x00000052)
1283 #define TPM_ORD_ChangeAuth                        ((TPM_COMMAND_CODE) 0x0000000C)
1284 #define TPM_ORD_ChangeAuthAsymFinish              ((TPM_COMMAND_CODE) 0x0000000F)
1285 #define TPM_ORD_ChangeAuthAsymStart               ((TPM_COMMAND_CODE) 0x0000000E)
1286 #define TPM_ORD_ChangeAuthOwner                   ((TPM_COMMAND_CODE) 0x00000010)
1287 #define TPM_ORD_CMK_ApproveMA                     ((TPM_COMMAND_CODE) 0x0000001D)
1288 #define TPM_ORD_CMK_ConvertMigration              ((TPM_COMMAND_CODE) 0x00000024)
1289 #define TPM_ORD_CMK_CreateBlob                    ((TPM_COMMAND_CODE) 0x0000001B)
1290 #define TPM_ORD_CMK_CreateKey                     ((TPM_COMMAND_CODE) 0x00000013)
1291 #define TPM_ORD_CMK_CreateTicket                  ((TPM_COMMAND_CODE) 0x00000012)
1292 #define TPM_ORD_CMK_SetRestrictions               ((TPM_COMMAND_CODE) 0x0000001C)
1293 #define TPM_ORD_ContinueSelfTest                  ((TPM_COMMAND_CODE) 0x00000053)
1294 #define TPM_ORD_ConvertMigrationBlob              ((TPM_COMMAND_CODE) 0x0000002A)
1295 #define TPM_ORD_CreateCounter                     ((TPM_COMMAND_CODE) 0x000000DC)
1296 #define TPM_ORD_CreateEndorsementKeyPair          ((TPM_COMMAND_CODE) 0x00000078)
1297 #define TPM_ORD_CreateMaintenanceArchive          ((TPM_COMMAND_CODE) 0x0000002C)
1298 #define TPM_ORD_CreateMigrationBlob               ((TPM_COMMAND_CODE) 0x00000028)
1299 #define TPM_ORD_CreateRevocableEK                 ((TPM_COMMAND_CODE) 0x0000007F)
1300 #define TPM_ORD_CreateWrapKey                     ((TPM_COMMAND_CODE) 0x0000001F)
1301 #define TPM_ORD_DAA_JOIN                          ((TPM_COMMAND_CODE) 0x00000029)
1302 #define TPM_ORD_DAA_SIGN                          ((TPM_COMMAND_CODE) 0x00000031)
1303 #define TPM_ORD_Delegate_CreateKeyDelegation      ((TPM_COMMAND_CODE) 0x000000D4)
1304 #define TPM_ORD_Delegate_CreateOwnerDelegation    ((TPM_COMMAND_CODE) 0x000000D5)
1305 #define TPM_ORD_Delegate_LoadOwnerDelegation      ((TPM_COMMAND_CODE) 0x000000D8)
1306 #define TPM_ORD_Delegate_Manage                   ((TPM_COMMAND_CODE) 0x000000D2)
1307 #define TPM_ORD_Delegate_ReadTable                ((TPM_COMMAND_CODE) 0x000000DB)
1308 #define TPM_ORD_Delegate_UpdateVerification       ((TPM_COMMAND_CODE) 0x000000D1)
1309 #define TPM_ORD_Delegate_VerifyDelegation         ((TPM_COMMAND_CODE) 0x000000D6)
1310 #define TPM_ORD_DirRead                           ((TPM_COMMAND_CODE) 0x0000001A)
1311 #define TPM_ORD_DirWriteAuth                      ((TPM_COMMAND_CODE) 0x00000019)
1312 #define TPM_ORD_DisableForceClear                 ((TPM_COMMAND_CODE) 0x0000005E)
1313 #define TPM_ORD_DisableOwnerClear                 ((TPM_COMMAND_CODE) 0x0000005C)
1314 #define TPM_ORD_DisablePubekRead                  ((TPM_COMMAND_CODE) 0x0000007E)
1315 #define TPM_ORD_DSAP                              ((TPM_COMMAND_CODE) 0x00000011)
1316 #define TPM_ORD_EstablishTransport                ((TPM_COMMAND_CODE) 0x000000E6)
1317 #define TPM_ORD_EvictKey                          ((TPM_COMMAND_CODE) 0x00000022)
1318 #define TPM_ORD_ExecuteTransport                  ((TPM_COMMAND_CODE) 0x000000E7)
1319 #define TPM_ORD_Extend                            ((TPM_COMMAND_CODE) 0x00000014)
1320 #define TPM_ORD_FieldUpgrade                      ((TPM_COMMAND_CODE) 0x000000AA)
1321 #define TPM_ORD_FlushSpecific                     ((TPM_COMMAND_CODE) 0x000000BA)
1322 #define TPM_ORD_ForceClear                        ((TPM_COMMAND_CODE) 0x0000005D)
1323 #define TPM_ORD_GetAuditDigest                    ((TPM_COMMAND_CODE) 0x00000085)
1324 #define TPM_ORD_GetAuditDigestSigned              ((TPM_COMMAND_CODE) 0x00000086)
1325 #define TPM_ORD_GetAuditEvent                     ((TPM_COMMAND_CODE) 0x00000082)
1326 #define TPM_ORD_GetAuditEventSigned               ((TPM_COMMAND_CODE) 0x00000083)
1327 #define TPM_ORD_GetCapability                     ((TPM_COMMAND_CODE) 0x00000065)
1328 #define TPM_ORD_GetCapabilityOwner                ((TPM_COMMAND_CODE) 0x00000066)
1329 #define TPM_ORD_GetCapabilitySigned               ((TPM_COMMAND_CODE) 0x00000064)
1330 #define TPM_ORD_GetOrdinalAuditStatus             ((TPM_COMMAND_CODE) 0x0000008C)
1331 #define TPM_ORD_GetPubKey                         ((TPM_COMMAND_CODE) 0x00000021)
1332 #define TPM_ORD_GetRandom                         ((TPM_COMMAND_CODE) 0x00000046)
1333 #define TPM_ORD_GetTestResult                     ((TPM_COMMAND_CODE) 0x00000054)
1334 #define TPM_ORD_GetTicks                          ((TPM_COMMAND_CODE) 0x000000F1)
1335 #define TPM_ORD_IncrementCounter                  ((TPM_COMMAND_CODE) 0x000000DD)
1336 #define TPM_ORD_Init                              ((TPM_COMMAND_CODE) 0x00000097)
1337 #define TPM_ORD_KeyControlOwner                   ((TPM_COMMAND_CODE) 0x00000023)
1338 #define TPM_ORD_KillMaintenanceFeature            ((TPM_COMMAND_CODE) 0x0000002E)
1339 #define TPM_ORD_LoadAuthContext                   ((TPM_COMMAND_CODE) 0x000000B7)
1340 #define TPM_ORD_LoadContext                       ((TPM_COMMAND_CODE) 0x000000B9)
1341 #define TPM_ORD_LoadKey                           ((TPM_COMMAND_CODE) 0x00000020)
1342 #define TPM_ORD_LoadKey2                          ((TPM_COMMAND_CODE) 0x00000041)
1343 #define TPM_ORD_LoadKeyContext                    ((TPM_COMMAND_CODE) 0x000000B5)
1344 #define TPM_ORD_LoadMaintenanceArchive            ((TPM_COMMAND_CODE) 0x0000002D)
1345 #define TPM_ORD_LoadManuMaintPub                  ((TPM_COMMAND_CODE) 0x0000002F)
1346 #define TPM_ORD_MakeIdentity                      ((TPM_COMMAND_CODE) 0x00000079)
1347 #define TPM_ORD_MigrateKey                        ((TPM_COMMAND_CODE) 0x00000025)
1348 #define TPM_ORD_NV_DefineSpace                    ((TPM_COMMAND_CODE) 0x000000CC)
1349 #define TPM_ORD_NV_ReadValue                      ((TPM_COMMAND_CODE) 0x000000CF)
1350 #define TPM_ORD_NV_ReadValueAuth                  ((TPM_COMMAND_CODE) 0x000000D0)
1351 #define TPM_ORD_NV_WriteValue                     ((TPM_COMMAND_CODE) 0x000000CD)
1352 #define TPM_ORD_NV_WriteValueAuth                 ((TPM_COMMAND_CODE) 0x000000CE)
1353 #define TPM_ORD_OIAP                              ((TPM_COMMAND_CODE) 0x0000000A)
1354 #define TPM_ORD_OSAP                              ((TPM_COMMAND_CODE) 0x0000000B)
1355 #define TPM_ORD_OwnerClear                        ((TPM_COMMAND_CODE) 0x0000005B)
1356 #define TPM_ORD_OwnerReadInternalPub              ((TPM_COMMAND_CODE) 0x00000081)
1357 #define TPM_ORD_OwnerReadPubek                    ((TPM_COMMAND_CODE) 0x0000007D)
1358 #define TPM_ORD_OwnerSetDisable                   ((TPM_COMMAND_CODE) 0x0000006E)
1359 #define TPM_ORD_PCR_Reset                         ((TPM_COMMAND_CODE) 0x000000C8)
1360 #define TPM_ORD_PcrRead                           ((TPM_COMMAND_CODE) 0x00000015)
1361 #define TPM_ORD_PhysicalDisable                   ((TPM_COMMAND_CODE) 0x00000070)
1362 #define TPM_ORD_PhysicalEnable                    ((TPM_COMMAND_CODE) 0x0000006F)
1363 #define TPM_ORD_PhysicalSetDeactivated            ((TPM_COMMAND_CODE) 0x00000072)
1364 #define TPM_ORD_Quote                             ((TPM_COMMAND_CODE) 0x00000016)
1365 #define TPM_ORD_Quote2                            ((TPM_COMMAND_CODE) 0x0000003E)
1366 #define TPM_ORD_ReadCounter                       ((TPM_COMMAND_CODE) 0x000000DE)
1367 #define TPM_ORD_ReadManuMaintPub                  ((TPM_COMMAND_CODE) 0x00000030)
1368 #define TPM_ORD_ReadPubek                         ((TPM_COMMAND_CODE) 0x0000007C)
1369 #define TPM_ORD_ReleaseCounter                    ((TPM_COMMAND_CODE) 0x000000DF)
1370 #define TPM_ORD_ReleaseCounterOwner               ((TPM_COMMAND_CODE) 0x000000E0)
1371 #define TPM_ORD_ReleaseTransportSigned            ((TPM_COMMAND_CODE) 0x000000E8)
1372 #define TPM_ORD_Reset                             ((TPM_COMMAND_CODE) 0x0000005A)
1373 #define TPM_ORD_ResetLockValue                    ((TPM_COMMAND_CODE) 0x00000040)
1374 #define TPM_ORD_RevokeTrust                       ((TPM_COMMAND_CODE) 0x00000080)
1375 #define TPM_ORD_SaveAuthContext                   ((TPM_COMMAND_CODE) 0x000000B6)
1376 #define TPM_ORD_SaveContext                       ((TPM_COMMAND_CODE) 0x000000B8)
1377 #define TPM_ORD_SaveKeyContext                    ((TPM_COMMAND_CODE) 0x000000B4)
1378 #define TPM_ORD_SaveState                         ((TPM_COMMAND_CODE) 0x00000098)
1379 #define TPM_ORD_Seal                              ((TPM_COMMAND_CODE) 0x00000017)
1380 #define TPM_ORD_Sealx                             ((TPM_COMMAND_CODE) 0x0000003D)
1381 #define TPM_ORD_SelfTestFull                      ((TPM_COMMAND_CODE) 0x00000050)
1382 #define TPM_ORD_SetCapability                     ((TPM_COMMAND_CODE) 0x0000003F)
1383 #define TPM_ORD_SetOperatorAuth                   ((TPM_COMMAND_CODE) 0x00000074)
1384 #define TPM_ORD_SetOrdinalAuditStatus             ((TPM_COMMAND_CODE) 0x0000008D)
1385 #define TPM_ORD_SetOwnerInstall                   ((TPM_COMMAND_CODE) 0x00000071)
1386 #define TPM_ORD_SetOwnerPointer                   ((TPM_COMMAND_CODE) 0x00000075)
1387 #define TPM_ORD_SetRedirection                    ((TPM_COMMAND_CODE) 0x0000009A)
1388 #define TPM_ORD_SetTempDeactivated                ((TPM_COMMAND_CODE) 0x00000073)
1389 #define TPM_ORD_SHA1Complete                      ((TPM_COMMAND_CODE) 0x000000A2)
1390 #define TPM_ORD_SHA1CompleteExtend                ((TPM_COMMAND_CODE) 0x000000A3)
1391 #define TPM_ORD_SHA1Start                         ((TPM_COMMAND_CODE) 0x000000A0)
1392 #define TPM_ORD_SHA1Update                        ((TPM_COMMAND_CODE) 0x000000A1)
1393 #define TPM_ORD_Sign                              ((TPM_COMMAND_CODE) 0x0000003C)
1394 #define TPM_ORD_Startup                           ((TPM_COMMAND_CODE) 0x00000099)
1395 #define TPM_ORD_StirRandom                        ((TPM_COMMAND_CODE) 0x00000047)
1396 #define TPM_ORD_TakeOwnership                     ((TPM_COMMAND_CODE) 0x0000000D)
1397 #define TPM_ORD_Terminate_Handle                  ((TPM_COMMAND_CODE) 0x00000096)
1398 #define TPM_ORD_TickStampBlob                     ((TPM_COMMAND_CODE) 0x000000F2)
1399 #define TPM_ORD_UnBind                            ((TPM_COMMAND_CODE) 0x0000001E)
1400 #define TPM_ORD_Unseal                            ((TPM_COMMAND_CODE) 0x00000018)
1401 #define TSC_ORD_PhysicalPresence                  ((TPM_COMMAND_CODE) 0x4000000A)
1402 #define TSC_ORD_ResetEstablishmentBit             ((TPM_COMMAND_CODE) 0x4000000B)
1403
1404 //
1405 // Part 2, section 18: Context structures
1406 //
1407
1408 typedef struct tdTPM_CONTEXT_BLOB
1409 {
1410     TPM_STRUCTURE_TAG               tag;
1411     TPM_RESOURCE_TYPE               resourceType;
1412     TPM_HANDLE                      handle;
1413     UINT8                           label[16];
1414     UINT32                          contextCount;
1415     TPM_DIGEST                      integrityDigest;
1416     UINT32                          additionalSize;
1417     UINT8                           *additionalData;
1418     UINT32                          sensitiveSize;
1419     UINT8                           *sensitiveData;
1420 } TPM_CONTEXT_BLOB;
1421
1422 typedef struct tdTPM_CONTEXT_SENSITIVE
1423 {
1424     TPM_STRUCTURE_TAG               tag;
1425     TPM_NONCE                       contextNonce;
1426     UINT32                          internalSize;
1427     UINT8                           *internalData;
1428 } TPM_CONTEXT_SENSITIVE;
1429
1430 //
1431 // Part 2, section 19: NV Structures
1432 //
1433
1434 #define TPM_NV_INDEX_LOCK              ((UINT32)0xffffffff)
1435 #define TPM_NV_INDEX0                  ((UINT32)0x00000000)
1436 #define TPM_NV_INDEX_DIR               ((UINT32)0x10000001)
1437 #define TPM_NV_INDEX_EKCert            ((UINT32)0x0000f000)
1438 #define TPM_NV_INDEX_TPM_CC            ((UINT32)0x0000f001)
1439 #define TPM_NV_INDEX_PlatformCert      ((UINT32)0x0000f002)
1440 #define TPM_NV_INDEX_Platform_CC       ((UINT32)0x0000f003)
1441 // The following define ranges of reserved indices.
1442 #define TPM_NV_INDEX_TSS_BASE          ((UINT32)0x00011100)
1443 #define TPM_NV_INDEX_PC_BASE           ((UINT32)0x00011200)
1444 #define TPM_NV_INDEX_SERVER_BASE       ((UINT32)0x00011300)
1445 #define TPM_NV_INDEX_MOBILE_BASE       ((UINT32)0x00011400)
1446 #define TPM_NV_INDEX_PERIPHERAL_BASE   ((UINT32)0x00011500)
1447 #define TPM_NV_INDEX_GROUP_RESV_BASE   ((UINT32)0x00010000)
1448
1449 typedef UINT32 TPM_NV_PER_ATTRIBUTES;
1450 // The typedefs TPM_NV_PER_ATTRIBUTES (not present in TPM 1.2 Spec. have been added
1451 // and structure fields that were to hold the following values
1452 #define TPM_NV_PER_READ_STCLEAR        (((UINT32)1)<<31)
1453 #define TPM_NV_PER_AUTHREAD            (((UINT32)1)<<18)
1454 #define TPM_NV_PER_OWNERREAD           (((UINT32)1)<<17)
1455 #define TPM_NV_PER_PPREAD              (((UINT32)1)<<16)
1456 #define TPM_NV_PER_GLOBALLOCK          (((UINT32)1)<<15)
1457 #define TPM_NV_PER_WRITE_STCLEAR       (((UINT32)1)<<14)
1458 #define TPM_NV_PER_WRITEDEFINE         (((UINT32)1)<<13)
1459 #define TPM_NV_PER_WRITEALL            (((UINT32)1)<<12)
1460 #define TPM_NV_PER_AUTHWRITE           (((UINT32)1)<<2)
1461 #define TPM_NV_PER_OWNERWRITE          (((UINT32)1)<<1)
1462 #define TPM_NV_PER_PPWRITE             (((UINT32)1)<<0)
1463
1464 typedef struct tdTPM_NV_ATTRIBUTES
1465 {
1466     TPM_STRUCTURE_TAG               tag;
1467     TPM_NV_PER_ATTRIBUTES           attributes;
1468 } TPM_NV_ATTRIBUTES;
1469
1470
1471 typedef struct tdTPM_NV_DATA_PUBLIC
1472 {
1473     TPM_STRUCTURE_TAG               tag;
1474     TPM_NV_INDEX                    nvIndex;
1475     TPM_PCR_INFO_SHORT              pcrInfoRead;
1476     TPM_PCR_INFO_SHORT              pcrInfoWrite;
1477     TPM_NV_ATTRIBUTES               permission;
1478     BOOLEAN                         bReadSTClear;
1479     BOOLEAN                         bWriteSTClear;
1480     BOOLEAN                         bWriteDefine;
1481     UINT32                          dataSize;
1482 } TPM_NV_DATA_PUBLIC;
1483
1484
1485
1486 // Internal to TPM:
1487 //typedef struct tdTPM_NV_DATA_SENSITIVE
1488 //{
1489 //    TPM_STRUCTURE_TAG               tag;
1490 //    TPM_NV_DATA_PUBLIC              pubInfo;
1491 //   TPM_AUTHDATA                    authValue;
1492 //    UINT8                           *data;
1493 //} TPM_NV_DATA_SENSITIVE;
1494
1495
1496 //
1497 // Part 2, section 20: Delegation
1498 //
1499
1500 //
1501 // Part 2, section 20.3: Owner Permissions Settings for per1 bits
1502 //
1503 #define TPM_DELEGATE_SetOrdinalAuditStatus          (((UINT32)1)<<30)
1504 #define TPM_DELEGATE_DirWriteAuth                   (((UINT32)1)<<29)
1505 #define TPM_DELEGATE_CMK_ApproveMA                  (((UINT32)1)<<28)
1506 #define TPM_DELEGATE_CMK_CreateTicket               (((UINT32)1)<<26)
1507 #define TPM_DELEGATE_Delegate_LoadOwnerDelegation   (((UINT32)1)<<24)
1508 #define TPM_DELEGATE_DAA_Join                       (((UINT32)1)<<23)
1509 #define TPM_DELEGATE_AuthorizeMigrationKey          (((UINT32)1)<<22)
1510 #define TPM_DELEGATE_CreateMaintenanceArchive       (((UINT32)1)<<21)
1511 #define TPM_DELEGATE_LoadMaintenanceArchive         (((UINT32)1)<<20)
1512 #define TPM_DELEGATE_KillMaintenanceFeature         (((UINT32)1)<<19)
1513 #define TPM_DELEGATE_OwnerReadInteralPub            (((UINT32)1)<<18)
1514 #define TPM_DELEGATE_ResetLockValue                 (((UINT32)1)<<17)
1515 #define TPM_DELEGATE_OwnerClear                     (((UINT32)1)<<16)
1516 #define TPM_DELEGATE_DisableOwnerClear              (((UINT32)1)<<15)
1517 #define TPM_DELEGATE_OwnerSetDisable                (((UINT32)1)<<13)
1518 #define TPM_DELEGATE_SetCapability                  (((UINT32)1)<<12)
1519 #define TPM_DELEGATE_MakeIdentity                   (((UINT32)1)<<11)
1520 #define TPM_DELEGATE_ActivateIdentity               (((UINT32)1)<<10)
1521 #define TPM_DELEGATE_OwnerReadPubek                 (((UINT32)1)<<9)
1522 #define TPM_DELEGATE_DisablePubekRead               (((UINT32)1)<<8)
1523 #define TPM_DELEGATE_SetRedirection                 (((UINT32)1)<<7)
1524 #define TPM_DELEGATE_FieldUpgrade                   (((UINT32)1)<<6)
1525 #define TPM_DELEGATE_Delegate_UpdateVerification    (((UINT32)1)<<5)
1526 #define TPM_DELEGATE_CreateCounter                  (((UINT32)1)<<4)
1527 #define TPM_DELEGATE_ReleaseCounterOwner            (((UINT32)1)<<3)
1528 #define TPM_DELEGATE_DelegateManage                 (((UINT32)1)<<2)
1529 #define TPM_DELEGATE_Delegate_CreateOwnerDelegation (((UINT32)1)<<1)
1530 #define TPM_DELEGATE_DAA_Sign                       (((UINT32)1)<<0)
1531
1532 //
1533 // Part 2, section 20.3: Key Permissions Settings for per1 bits
1534 //
1535 #define TPM_KEY_DELEGATE_CMK_ConvertMigration       (((UINT32)1)<<28)
1536 #define TPM_KEY_DELEGATE_TickStampBlob              (((UINT32)1)<<27)
1537 #define TPM_KEY_DELEGATE_ChangeAuthAsymStart        (((UINT32)1)<<26)
1538 #define TPM_KEY_DELEGATE_ChangeAuthAsymFinish       (((UINT32)1)<<25)
1539 #define TPM_KEY_DELEGATE_CMK_CreateKey              (((UINT32)1)<<24)
1540 #define TPM_KEY_DELEGATE_MigrateKey                 (((UINT32)1)<<23)
1541 #define TPM_KEY_DELEGATE_LoadKey2                   (((UINT32)1)<<22)
1542 #define TPM_KEY_DELEGATE_EstablishTransport         (((UINT32)1)<<21)
1543 #define TPM_KEY_DELEGATE_ReleaseTransportSigned     (((UINT32)1)<<20)
1544 #define TPM_KEY_DELEGATE_Quote2                     (((UINT32)1)<<19)
1545 #define TPM_KEY_DELEGATE_Sealx                      (((UINT32)1)<<18)
1546 #define TPM_KEY_DELEGATE_MakeIdentity               (((UINT32)1)<<17)
1547 #define TPM_KEY_DELEGATE_ActivateIdentity           (((UINT32)1)<<16)
1548 #define TPM_KEY_DELEGATE_GetAuditDigestSigned       (((UINT32)1)<<15)
1549 #define TPM_KEY_DELEGATE_Sign                       (((UINT32)1)<<14)
1550 #define TPM_KEY_DELEGATE_CertifyKey2                (((UINT32)1)<<13)
1551 #define TPM_KEY_DELEGATE_CertifyKey                 (((UINT32)1)<<12)
1552 #define TPM_KEY_DELEGATE_CreateWrapKey              (((UINT32)1)<<11)
1553 #define TPM_KEY_DELEGATE_CMK_CreateBlob             (((UINT32)1)<<10)
1554 #define TPM_KEY_DELEGATE_CreateMigrationBlob        (((UINT32)1)<<9)
1555 #define TPM_KEY_DELEGATE_ConvertMigrationBlob       (((UINT32)1)<<8)
1556 #define TPM_KEY_DELEGATE_CreateKeyDelegation        (((UINT32)1)<<7)
1557 #define TPM_KEY_DELEGATE_ChangeAuth                 (((UINT32)1)<<6)
1558 #define TPM_KEY_DELEGATE_GetPubKey                  (((UINT32)1)<<5)
1559 #define TPM_KEY_DELEGATE_UnBind                     (((UINT32)1)<<4)
1560 #define TPM_KEY_DELEGATE_Quote                      (((UINT32)1)<<3)
1561 #define TPM_KEY_DELEGATE_Unseal                     (((UINT32)1)<<2)
1562 #define TPM_KEY_DELEGATE_Seal                       (((UINT32)1)<<1)
1563 #define TPM_KEY_DELEGATE_LoadKey                    (((UINT32)1)<<0)
1564
1565 #define TPM_FAMILY_CREATE                 ((UINT32)0x00000001)
1566 #define TPM_FAMILY_ENABLE                 ((UINT32)0x00000002)
1567 #define TPM_FAMILY_ADMIN                  ((UINT32)0x00000003)
1568 #define TPM_FAMILY_INVALIDATE             ((UINT32)0x00000004)
1569
1570 #define TPM_FAMFLAG_DELEGATE_ADMIN_LOCK   (((UINT32)1)<<1)
1571 #define TPM_FAMFLAG_ENABLE                (((UINT32)1)<<0)
1572
1573 typedef struct tdTPM_FAMILY_LABEL
1574 {
1575     UINT8                           label;
1576 } TPM_FAMILY_LABEL;
1577
1578 typedef struct tdTPM_FAMILY_TABLE_ENTRY
1579 {
1580     TPM_STRUCTURE_TAG               tag;
1581     TPM_FAMILY_LABEL                label;
1582     TPM_FAMILY_ID                   familyID;
1583     TPM_FAMILY_VERIFICATION         verificationCount;
1584     TPM_FAMILY_FLAGS                flags;
1585 } TPM_FAMILY_TABLE_ENTRY;
1586
1587 #define TPM_FAMILY_TABLE_ENTRY_MIN 8
1588 //typedef struct tdTPM_FAMILY_TABLE
1589 //{
1590 //    TPM_FAMILY_TABLE_ENTRY          FamTableRow[TPM_NUM_FAMILY_TABLE_ENTRY_MIN];
1591 //} TPM_FAMILY_TABLE;
1592
1593
1594 typedef struct tdTPM_DELEGATE_LABEL
1595 {
1596     UINT8                           label;
1597 } TPM_DELEGATE_LABEL;
1598
1599
1600 typedef UINT32 TPM_DELEGATE_TYPE;
1601 #define TPM_DEL_OWNER_BITS          ((UINT32)0x00000001)
1602 #define TPM_DEL_KEY_BITS            ((UINT32)0x00000002)
1603
1604 typedef struct tdTPM_DELEGATIONS
1605 {
1606     TPM_STRUCTURE_TAG               tag;
1607     TPM_DELEGATE_TYPE               delegateType;
1608     UINT32                          per1;
1609     UINT32                          per2;
1610 } TPM_DELEGATIONS;
1611
1612 typedef struct tdTPM_DELEGATE_PUBLIC
1613 {
1614     TPM_STRUCTURE_TAG               tag;
1615     TPM_DELEGATE_LABEL              label;
1616     TPM_PCR_INFO_SHORT              pcrInfo;
1617     TPM_DELEGATIONS                 permissions;
1618     TPM_FAMILY_ID                   familyID;
1619     TPM_FAMILY_VERIFICATION         verificationCount;
1620 } TPM_DELEGATE_PUBLIC;
1621
1622 typedef struct tdTPM_DELEGATE_TABLE_ROW
1623 {
1624     TPM_STRUCTURE_TAG               tag;
1625     TPM_DELEGATE_PUBLIC             pub;
1626     TPM_SECRET                      authValue;
1627 } TPM_DELEGATE_TABLE_ROW;
1628
1629
1630 #define TPM_NUM_DELEGATE_TABLE_ENTRY_MIN 2
1631 //typedef struct tdTPM_DELEGATE_TABLE
1632 //{
1633 //    TPM_DELEGATE_TABLE_ROW          delRow[TPM_NUM_DELEGATE_TABLE_ENTRY_MIN];
1634 //} TPM_DELEGATE_TABLE;
1635
1636 typedef struct tdTPM_DELEGATE_SENSITIVE
1637 {
1638     TPM_STRUCTURE_TAG               tag;
1639     TPM_SECRET                      authValue;
1640 } TPM_DELEGATE_SENSITIVE;
1641
1642 typedef struct tdTPM_DELEGATE_OWNER_BLOB
1643 {
1644     TPM_STRUCTURE_TAG               tag;
1645     TPM_DELEGATE_PUBLIC             pub;
1646     TPM_DIGEST                      integrityDigest;
1647     UINT32                          additionalSize;
1648     UINT8                           *additionalArea;
1649     UINT32                          sensitiveSize;
1650     UINT8                           *sensitiveArea;
1651 } TPM_DELEGATE_OWNER_BLOB;
1652
1653 typedef struct tdTPM_DELEGATE_KEY_BLOB
1654 {
1655     TPM_STRUCTURE_TAG               tag;
1656     TPM_DELEGATE_PUBLIC             pub;
1657     TPM_DIGEST                      integrityDigest;
1658     TPM_DIGEST                      pubKeyDigest;
1659     UINT32                          additionalSize;
1660     UINT8                           *additionalArea;
1661     UINT32                          sensitiveSize;
1662     UINT8                           *sensitiveArea;
1663 } TPM_DELEGATE_KEY_BLOB;
1664
1665 //
1666 // Part 2, section 21.1: TPM_CAPABILITY_AREA for GetCapability
1667 //
1668 #define TPM_CAP_ORD                     ((TPM_CAPABILITY_AREA) 0x00000001)
1669 #define TPM_CAP_ALG                     ((TPM_CAPABILITY_AREA) 0x00000002)
1670 #define TPM_CAP_PID                     ((TPM_CAPABILITY_AREA) 0x00000003)
1671 #define TPM_CAP_FLAG                    ((TPM_CAPABILITY_AREA) 0x00000004)
1672 #define TPM_CAP_PROPERTY                ((TPM_CAPABILITY_AREA) 0x00000005)
1673 #define TPM_CAP_VERSION                 ((TPM_CAPABILITY_AREA) 0x00000006)
1674 #define TPM_CAP_KEY_HANDLE              ((TPM_CAPABILITY_AREA) 0x00000007)
1675 #define TPM_CAP_CHECK_LOADED            ((TPM_CAPABILITY_AREA) 0x00000008)
1676 #define TPM_CAP_SYM_MODE                ((TPM_CAPABILITY_AREA) 0x00000009)
1677 #define TPM_CAP_KEY_STATUS              ((TPM_CAPABILITY_AREA) 0x0000000C)
1678 #define TPM_CAP_NV_LIST                 ((TPM_CAPABILITY_AREA) 0x0000000D)
1679 #define TPM_CAP_MFR                     ((TPM_CAPABILITY_AREA) 0x00000010)
1680 #define TPM_CAP_NV_INDEX                ((TPM_CAPABILITY_AREA) 0x00000011)
1681 #define TPM_CAP_TRANS_ALG               ((TPM_CAPABILITY_AREA) 0x00000012)
1682 #define TPM_CAP_HANDLE                  ((TPM_CAPABILITY_AREA) 0x00000014)
1683 #define TPM_CAP_TRANS_ES                ((TPM_CAPABILITY_AREA) 0x00000015)
1684 #define TPM_CAP_AUTH_ENCRYPT            ((TPM_CAPABILITY_AREA) 0x00000017)
1685 #define TPM_CAP_SELECT_SIZE             ((TPM_CAPABILITY_AREA) 0x00000018)
1686 #define TPM_CAP_VERSION_VAL             ((TPM_CAPABILITY_AREA) 0x0000001A)
1687
1688 #define TPM_CAP_FLAG_PERMANENT          ((TPM_CAPABILITY_AREA) 0x00000108)
1689 #define TPM_CAP_FLAG_VOLATILE           ((TPM_CAPABILITY_AREA) 0x00000109)
1690
1691 //
1692 // Part 2, section 21.2: CAP_PROPERTY Subcap values for GetCapability
1693 //
1694 #define TPM_CAP_PROP_PCR                ((TPM_CAPABILITY_AREA) 0x00000101)
1695 #define TPM_CAP_PROP_DIR                ((TPM_CAPABILITY_AREA) 0x00000102)
1696 #define TPM_CAP_PROP_MANUFACTURER       ((TPM_CAPABILITY_AREA) 0x00000103)
1697 #define TPM_CAP_PROP_KEYS               ((TPM_CAPABILITY_AREA) 0x00000104)
1698 #define TPM_CAP_PROP_MIN_COUNTER        ((TPM_CAPABILITY_AREA) 0x00000107)
1699 #define TPM_CAP_PROP_AUTHSESS           ((TPM_CAPABILITY_AREA) 0x0000010A)
1700 #define TPM_CAP_PROP_TRANSESS           ((TPM_CAPABILITY_AREA) 0x0000010B)
1701 #define TPM_CAP_PROP_COUNTERS           ((TPM_CAPABILITY_AREA) 0x0000010C)
1702 #define TPM_CAP_PROP_MAX_AUTHSESS       ((TPM_CAPABILITY_AREA) 0x0000010D)
1703 #define TPM_CAP_PROP_MAX_TRANSESS       ((TPM_CAPABILITY_AREA) 0x0000010E)
1704 #define TPM_CAP_PROP_MAX_COUNTERS       ((TPM_CAPABILITY_AREA) 0x0000010F)
1705 #define TPM_CAP_PROP_MAX_KEYS           ((TPM_CAPABILITY_AREA) 0x00000110)
1706 #define TPM_CAP_PROP_OWNER              ((TPM_CAPABILITY_AREA) 0x00000111)
1707 #define TPM_CAP_PROP_CONTEXT            ((TPM_CAPABILITY_AREA) 0x00000112)
1708 #define TPM_CAP_PROP_MAX_CONTEXT        ((TPM_CAPABILITY_AREA) 0x00000113)
1709 #define TPM_CAP_PROP_FAMILYROWS         ((TPM_CAPABILITY_AREA) 0x00000114)
1710 #define TPM_CAP_PROP_TIS_TIMEOUT        ((TPM_CAPABILITY_AREA) 0x00000115)
1711 #define TPM_CAP_PROP_STARTUP_EFFECT     ((TPM_CAPABILITY_AREA) 0x00000116)
1712 #define TPM_CAP_PROP_DELEGATE_ROW       ((TPM_CAPABILITY_AREA) 0x00000117)
1713 #define TPM_CAP_PROP_DAA_MAX            ((TPM_CAPABILITY_AREA) 0x00000119)
1714 #define CAP_PROP_SESSION_DAA            ((TPM_CAPABILITY_AREA) 0x0000011A)
1715 #define TPM_CAP_PROP_CONTEXT_DIST       ((TPM_CAPABILITY_AREA) 0x0000011B)
1716 #define TPM_CAP_PROP_DAA_INTERRUPT      ((TPM_CAPABILITY_AREA) 0x0000011C)
1717 #define TPM_CAP_PROP_SESSIONS           ((TPM_CAPABILITY_AREA) 0x0000011D)
1718 #define TPM_CAP_PROP_MAX_SESSIONS       ((TPM_CAPABILITY_AREA) 0x0000011E)
1719 #define TPM_CAP_PROP_CMK_RESTRICTION    ((TPM_CAPABILITY_AREA) 0x0000011F)
1720 #define TPM_CAP_PROP_DURATION           ((TPM_CAPABILITY_AREA) 0x00000120)
1721 #define TPM_CAP_PROP_ACTIVE_COUNTER     ((TPM_CAPABILITY_AREA) 0x00000122)
1722 #define TPM_CAP_PROP_MAX_NV_AVAILABLE   ((TPM_CAPABILITY_AREA) 0x00000123)
1723 #define TPM_CAP_PROP_INPUT_BUFFER       ((TPM_CAPABILITY_AREA) 0x00000124)
1724
1725 //
1726 // Part 2, section 21.6: TPM_CAP_VERSION_INFO
1727 //   [size_is(vendorSpecificSize)] BYTE* vendorSpecific;
1728 //
1729 typedef struct tdTPM_CAP_VERSION_INFO {
1730   TPM_STRUCTURE_TAG                 tag;
1731   TPM_VERSION                       version;
1732   UINT16                            specLevel;
1733   UINT8                             errataRev;
1734   UINT8                             tpmVendorID[4];
1735   UINT16                            vendorSpecificSize;
1736   UINT8                             *vendorSpecific;
1737 } TPM_CAP_VERSION_INFO;
1738
1739 //
1740 // Part 2, section 22: DAA Structures
1741 //
1742
1743 #define TPM_DAA_SIZE_r0                (43)
1744 #define TPM_DAA_SIZE_r1                (43)
1745 #define TPM_DAA_SIZE_r2                (128)
1746 #define TPM_DAA_SIZE_r3                (168)
1747 #define TPM_DAA_SIZE_r4                (219)
1748 #define TPM_DAA_SIZE_NT                (20)
1749 #define TPM_DAA_SIZE_v0                (128)
1750 #define TPM_DAA_SIZE_v1                (192)
1751 #define TPM_DAA_SIZE_NE                (256)
1752 #define TPM_DAA_SIZE_w                 (256)
1753 #define TPM_DAA_SIZE_issuerModulus     (256)
1754 #define TPM_DAA_power0                 (104)
1755 #define TPM_DAA_power1                 (1024)
1756
1757 typedef struct tdTPM_DAA_ISSUER
1758 {
1759     TPM_STRUCTURE_TAG               tag;
1760     TPM_DIGEST                      DAA_digest_R0;
1761     TPM_DIGEST                      DAA_digest_R1;
1762     TPM_DIGEST                      DAA_digest_S0;
1763     TPM_DIGEST                      DAA_digest_S1;
1764     TPM_DIGEST                      DAA_digest_n;
1765     TPM_DIGEST                      DAA_digest_gamma;
1766     UINT8                           DAA_generic_q[26];
1767 } TPM_DAA_ISSUER;
1768
1769
1770 typedef struct tdTPM_DAA_TPM
1771 {
1772     TPM_STRUCTURE_TAG               tag;
1773     TPM_DIGEST                      DAA_digestIssuer;
1774     TPM_DIGEST                      DAA_digest_v0;
1775     TPM_DIGEST                      DAA_digest_v1;
1776     TPM_DIGEST                      DAA_rekey;
1777     UINT32                          DAA_count;
1778 } TPM_DAA_TPM;
1779
1780 typedef struct tdTPM_DAA_CONTEXT
1781 {
1782     TPM_STRUCTURE_TAG               tag;
1783     TPM_DIGEST                      DAA_digestContext;
1784     TPM_DIGEST                      DAA_digest;
1785     TPM_DAA_CONTEXT_SEED            DAA_contextSeed;
1786     UINT8                           DAA_scratch[256];
1787     UINT8                           DAA_stage;
1788 } TPM_DAA_CONTEXT;
1789
1790 typedef struct tdTPM_DAA_JOINDATA
1791 {
1792     UINT8                           DAA_join_u0[128];
1793     UINT8                           DAA_join_u1[138];
1794     TPM_DIGEST                      DAA_digest_n0;
1795 } TPM_DAA_JOINDATA;
1796
1797 typedef struct tdTPM_DAA_BLOB
1798 {
1799     TPM_STRUCTURE_TAG               tag;
1800     TPM_RESOURCE_TYPE               resourceType;
1801     UINT8                           label[16];
1802     TPM_DIGEST                      blobIntegrity;
1803     UINT32                          additionalSize;
1804     UINT8                           *additionalData;
1805     UINT32                          sensitiveSize;
1806     UINT8                           *sensitiveData;
1807 } TPM_DAA_BLOB;
1808
1809 typedef struct tdTPM_DAA_SENSITIVE
1810 {
1811     TPM_STRUCTURE_TAG               tag;
1812     UINT32                          internalSize;
1813     UINT8                           *internalData;
1814 } TPM_DAA_SENSITIVE;
1815
1816
1817 //
1818 // Part 2, section 23: Redirection
1819 //
1820
1821 // This section of the TPM spec defines exactly one value but does not
1822 // give it a name. The definition of TPM_SetRedirection in Part3
1823 // refers to exactly one name but does not give its value. We join
1824 // them here.
1825 #define TPM_REDIR_GPIO              (0x00000001)
1826
1827 //
1828 // TPM Command & Response Headers
1829 //
1830 typedef struct tdTPM_RQU_COMMAND_HDR {
1831   TPM_STRUCTURE_TAG                 tag;
1832   UINT32                            paramSize;
1833   TPM_COMMAND_CODE                  ordinal;
1834 } TPM_RQU_COMMAND_HDR;
1835
1836 typedef struct tdTPM_RSP_COMMAND_HDR {
1837   TPM_STRUCTURE_TAG                 tag;
1838   UINT32                            paramSize;
1839   TPM_RESULT                        returnCode;
1840 } TPM_RSP_COMMAND_HDR;
1841
1842 #ifndef __GNUC__
1843 #pragma pack (pop)
1844 #endif
1845
1846 #endif  // _TPM12_H_