]> git.proxmox.com Git - mirror_edk2.git/blob - MdePkg/Include/IndustryStandard/Tpm12.h
projects / mirror_edk2.git / blob
? search:
summary | shortlog | log | commit | commitdiff | tree
blame | history | raw | HEAD
Code Scrub the common includes in MdePkg.
[mirror_edk2.git] / MdePkg / Include / IndustryStandard / Tpm12.h
1 /**
2 @file
3 TPM Specification data structures (TCG TPM Specification Version 1.2 Revision 94)
4 See http://trustedcomputinggroup.org for latest specification updates
5
6 Copyright (c) 2006 - 2007, Intel Corporation
7 All rights reserved. This program and the accompanying materials
8 are licensed and made available under the terms and conditions of the BSD License
9 which accompanies this distribution. The full text of the license may be found at
10 http://opensource.org/licenses/bsd-license.php
11
12 THE PROGRAM IS DISTRIBUTED UNDER THE BSD LICENSE ON AN "AS IS" BASIS,
13 WITHOUT WARRANTIES OR REPRESENTATIONS OF ANY KIND, EITHER EXPRESS OR IMPLIED.
14 **/
15
16
17 #ifndef _TPM12_H_
18 #define _TPM12_H_
19
20 //
21 // The start of TPM return codes
22 //
23 #define TPM_BASE (EFI_MAX_BIT + (EFI_MAX_BIT >> 1))
24
25 //
26 // Structures are all packed on 1-byte alignment
27 //
28
29 #pragma pack (push, 1)
30
31 //
32 // Part 2, section 2.2: Basic types & Helper redefinitions
33 //
34 typedef UINT8 TPM_AUTH_DATA_USAGE;
35 typedef UINT8 TPM_PAYLOAD_TYPE;
36 typedef UINT8 TPM_VERSION_BYTE;
37 typedef UINT16 TPM_TAG;
38 typedef UINT16 TPM_PROTOCOL_ID;
39 typedef UINT16 TPM_STARTUP_TYPE;
40 typedef UINT16 TPM_ENC_SCHEME;
41 typedef UINT16 TPM_SIG_SCHEME;
42 typedef UINT16 TPM_MIGRATE_SCHEME;
43 typedef UINT16 TPM_PHYSICAL_PRESENCE;
44 typedef UINT16 TPM_ENTITY_TYPE;
45 typedef UINT16 TPM_KEY_USAGE;
46 typedef UINT16 TPM_EK_TYPE;
47 typedef UINT16 TPM_STRUCTURE_TAG;
48 typedef UINT16 TPM_PLATFORM_SPECIFIC;
49 typedef UINT32 TPM_COMMAND_CODE;
50 typedef UINT32 TPM_CAPABILITY_AREA;
51 typedef UINT32 TPM_KEY_FLAGS;
52 typedef UINT32 TPM_ALGORITHM_ID;
53 typedef UINT32 TPM_MODIFIER_INDICATOR;
54 typedef UINT32 TPM_ACTUAL_COUNT;
55 typedef UINT32 TPM_TRANSPORT_ATTRIBUTES;
56 typedef UINT32 TPM_AUTHHANDLE;
57 typedef UINT32 TPM_DIRINDEX;
58 typedef UINT32 TPM_KEY_HANDLE;
59 typedef UINT32 TPM_PCRINDEX;
60 typedef UINT32 TPM_RESULT;
61 typedef UINT32 TPM_RESOURCE_TYPE;
62 typedef UINT32 TPM_KEY_CONTROL;
63 typedef UINT32 TPM_NV_INDEX;
64 typedef UINT32 TPM_FAMILY_ID;
65 typedef UINT32 TPM_FAMILY_VERIFICATION;
66 typedef UINT32 TPM_STARTUP_EFFECTS;
67 typedef UINT32 TPM_SYM_MODE;
68 typedef UINT32 TPM_FAMILY_FLAGS;
69 typedef UINT32 TPM_DELEGATE_INDEX;
70 typedef UINT32 TPM_CMK_DELEGATE;
71 typedef UINT32 TPM_COUNT_ID;
72 typedef UINT32 TPM_REDIT_COMMAND;
73 typedef UINT32 TPM_TRANSHANDLE;
74 typedef UINT32 TPM_HANDLE;
75 typedef UINT32 TPM_FAMILY_OPERATION;
76
77 //
78 // Part 2, section 2.2.4: Vendor specific
79 // The following defines allow for the quick specification of a
80 // vendor specific item.
81 //
82 #define TPM_Vendor_Specific32 ((UINT32) 0x00000400)
83 #define TPM_Vendor_Specific8 ((UINT8) 0x80)
84
85 //
86 // Part 2, section 3.1: Structure TAGs
87 //
88 #define TPM_TAG_CONTEXTBLOB ((TPM_STRUCTURE_TAG) 0x0001)
89 #define TPM_TAG_CONTEXT_SENSITIVE ((TPM_STRUCTURE_TAG) 0x0002)
90 #define TPM_TAG_CONTEXTPOINTER ((TPM_STRUCTURE_TAG) 0x0003)
91 #define TPM_TAG_CONTEXTLIST ((TPM_STRUCTURE_TAG) 0x0004)
92 #define TPM_TAG_SIGNINFO ((TPM_STRUCTURE_TAG) 0x0005)
93 #define TPM_TAG_PCR_INFO_LONG ((TPM_STRUCTURE_TAG) 0x0006)
94 #define TPM_TAG_PERSISTENT_FLAGS ((TPM_STRUCTURE_TAG) 0x0007)
95 #define TPM_TAG_VOLATILE_FLAGS ((TPM_STRUCTURE_TAG) 0x0008)
96 #define TPM_TAG_PERSISTENT_DATA ((TPM_STRUCTURE_TAG) 0x0009)
97 #define TPM_TAG_VOLATILE_DATA ((TPM_STRUCTURE_TAG) 0x000A)
98 #define TPM_TAG_SV_DATA ((TPM_STRUCTURE_TAG) 0x000B)
99 #define TPM_TAG_EK_BLOB ((TPM_STRUCTURE_TAG) 0x000C)
100 #define TPM_TAG_EK_BLOB_AUTH ((TPM_STRUCTURE_TAG) 0x000D)
101 #define TPM_TAG_COUNTER_VALUE ((TPM_STRUCTURE_TAG) 0x000E)
102 #define TPM_TAG_TRANSPORT_INTERNAL ((TPM_STRUCTURE_TAG) 0x000F)
103 #define TPM_TAG_TRANSPORT_LOG_IN ((TPM_STRUCTURE_TAG) 0x0010)
104 #define TPM_TAG_TRANSPORT_LOG_OUT ((TPM_STRUCTURE_TAG) 0x0011)
105 #define TPM_TAG_AUDIT_EVENT_IN ((TPM_STRUCTURE_TAG) 0x0012)
106 #define TPM_TAG_AUDIT_EVENT_OUT ((TPM_STRUCTURE_TAG) 0x0013)
107 #define TPM_TAG_CURRENT_TICKS ((TPM_STRUCTURE_TAG) 0x0014)
108 #define TPM_TAG_KEY ((TPM_STRUCTURE_TAG) 0x0015)
109 #define TPM_TAG_STORED_DATA12 ((TPM_STRUCTURE_TAG) 0x0016)
110 #define TPM_TAG_NV_ATTRIBUTES ((TPM_STRUCTURE_TAG) 0x0017)
111 #define TPM_TAG_NV_DATA_PUBLIC ((TPM_STRUCTURE_TAG) 0x0018)
112 #define TPM_TAG_NV_DATA_SENSITIVE ((TPM_STRUCTURE_TAG) 0x0019)
113 #define TPM_TAG_DELEGATIONS ((TPM_STRUCTURE_TAG) 0x001A)
114 #define TPM_TAG_DELEGATE_PUBLIC ((TPM_STRUCTURE_TAG) 0x001B)
115 #define TPM_TAG_DELEGATE_TABLE_ROW ((TPM_STRUCTURE_TAG) 0x001C)
116 #define TPM_TAG_TRANSPORT_AUTH ((TPM_STRUCTURE_TAG) 0x001D)
117 #define TPM_TAG_TRANSPORT_PUBLIC ((TPM_STRUCTURE_TAG) 0x001E)
118 #define TPM_TAG_PERMANENT_FLAGS ((TPM_STRUCTURE_TAG) 0x001F)
119 #define TPM_TAG_STCLEAR_FLAGS ((TPM_STRUCTURE_TAG) 0x0020)
120 #define TPM_TAG_STANY_FLAGS ((TPM_STRUCTURE_TAG) 0x0021)
121 #define TPM_TAG_PERMANENT_DATA ((TPM_STRUCTURE_TAG) 0x0022)
122 #define TPM_TAG_STCLEAR_DATA ((TPM_STRUCTURE_TAG) 0x0023)
123 #define TPM_TAG_STANY_DATA ((TPM_STRUCTURE_TAG) 0x0024)
124 #define TPM_TAG_FAMILY_TABLE_ENTRY ((TPM_STRUCTURE_TAG) 0x0025)
125 #define TPM_TAG_DELEGATE_SENSITIVE ((TPM_STRUCTURE_TAG) 0x0026)
126 #define TPM_TAG_DELG_KEY_BLOB ((TPM_STRUCTURE_TAG) 0x0027)
127 #define TPM_TAG_KEY12 ((TPM_STRUCTURE_TAG) 0x0028)
128 #define TPM_TAG_CERTIFY_INFO2 ((TPM_STRUCTURE_TAG) 0x0029)
129 #define TPM_TAG_DELEGATE_OWNER_BLOB ((TPM_STRUCTURE_TAG) 0x002A)
130 #define TPM_TAG_EK_BLOB_ACTIVATE ((TPM_STRUCTURE_TAG) 0x002B)
131 #define TPM_TAG_DAA_BLOB ((TPM_STRUCTURE_TAG) 0x002C)
132 #define TPM_TAG_DAA_CONTEXT ((TPM_STRUCTURE_TAG) 0x002D)
133 #define TPM_TAG_DAA_ENFORCE ((TPM_STRUCTURE_TAG) 0x002E)
134 #define TPM_TAG_DAA_ISSUER ((TPM_STRUCTURE_TAG) 0x002F)
135 #define TPM_TAG_CAP_VERSION_INFO ((TPM_STRUCTURE_TAG) 0x0030)
136 #define TPM_TAG_DAA_SENSITIVE ((TPM_STRUCTURE_TAG) 0x0031)
137 #define TPM_TAG_DAA_TPM ((TPM_STRUCTURE_TAG) 0x0032)
138 #define TPM_TAG_CMK_MIGAUTH ((TPM_STRUCTURE_TAG) 0x0033)
139 #define TPM_TAG_CMK_SIGTICKET ((TPM_STRUCTURE_TAG) 0x0034)
140 #define TPM_TAG_CMK_MA_APPROVAL ((TPM_STRUCTURE_TAG) 0x0035)
141 #define TPM_TAG_QUOTE_INFO2 ((TPM_STRUCTURE_TAG) 0x0036)
142
143 //
144 // Part 2, section 4: TPM Types
145 //
146
147 //
148 // Part 2, section 4.1: TPM_RESOURCE_TYPE
149 //
150 #define TPM_RT_KEY ((TPM_RESOURCE_TYPE) 0x00000001) // The handle is a key handle and is the result of a LoadKey type operation
151 #define TPM_RT_AUTH ((TPM_RESOURCE_TYPE) 0x00000002) // The handle is an authorization handle. Auth handles come from TPM_OIAP, TPM_OSAP and TPM_DSAP
152 #define TPM_RT_HASH ((TPM_RESOURCE_TYPE) 0x00000003) // Reserved for hashes
153 #define TPM_RT_TRANS ((TPM_RESOURCE_TYPE) 0x00000004) // The handle is for a transport session. Transport handles come from TPM_EstablishTransport
154 #define TPM_RT_CONTEXT ((TPM_RESOURCE_TYPE) 0x00000005) // Resource wrapped and held outside the TPM using the context save/restore commands
155 #define TPM_RT_COUNTER ((TPM_RESOURCE_TYPE) 0x00000006) // Reserved for counters
156 #define TPM_RT_DELEGATE ((TPM_RESOURCE_TYPE) 0x00000007) // The handle is for a delegate row. These are the internal rows held in NV storage by the TPM
157 #define TPM_RT_DAA_TPM ((TPM_RESOURCE_TYPE) 0x00000008) // The value is a DAA TPM specific blob
158 #define TPM_RT_DAA_V0 ((TPM_RESOURCE_TYPE) 0x00000009) // The value is a DAA V0 parameter
159 #define TPM_RT_DAA_V1 ((TPM_RESOURCE_TYPE) 0x0000000A) // The value is a DAA V1 parameter
160
161 //
162 // Part 2, section 4.2: TPM_PAYLOAD_TYPE
163 //
164 #define TPM_PT_ASYM ((TPM_PAYLOAD_TYPE) 0x01) // The entity is an asymmetric key
165 #define TPM_PT_BIND ((TPM_PAYLOAD_TYPE) 0x02) // The entity is bound data
166 #define TPM_PT_MIGRATE ((TPM_PAYLOAD_TYPE) 0x03) // The entity is a migration blob
167 #define TPM_PT_MAINT ((TPM_PAYLOAD_TYPE) 0x04) // The entity is a maintenance blob
168 #define TPM_PT_SEAL ((TPM_PAYLOAD_TYPE) 0x05) // The entity is sealed data
169 #define TPM_PT_MIGRATE_RESTRICTED ((TPM_PAYLOAD_TYPE) 0x06) // The entity is a restricted-migration asymmetric key
170 #define TPM_PT_MIGRATE_EXTERNAL ((TPM_PAYLOAD_TYPE) 0x07) // The entity is a external migratable key
171 #define TPM_PT_CMK_MIGRATE ((TPM_PAYLOAD_TYPE) 0x08) // The entity is a CMK migratable blob
172 #define TPM_PT_VENDOR_SPECIFIC ((TPM_PAYLOAD_TYPE) 0x80) // 0x80 - 0xFF Vendor specific payloads
173
174 //
175 // Part 2, section 4.3: TPM_ENTIRY_TYPE
176 //
177 #define TPM_ET_KEYHANDLE ((UINT16) 0x0001) // The entity is a keyHandle or key
178 #define TPM_ET_OWNER ((UINT16) 0x0002) // The entity is the TPM Owner
179 #define TPM_ET_DATA ((UINT16) 0x0003) // The entity is some data
180 #define TPM_ET_SRK ((UINT16) 0x0004) // The entity is the SRK
181 #define TPM_ET_KEY ((UINT16) 0x0005) // The entity is a key or keyHandle
182 #define TPM_ET_REVOKE ((UINT16) 0x0006) // The entity is the RevokeTrust value
183 #define TPM_ET_DEL_OWNER_BLOB ((UINT16) 0x0007) // The entity is a delegate owner blob
184 #define TPM_ET_DEL_ROW ((UINT16) 0x0008) // The entity is a delegate row
185 #define TPM_ET_DEL_KEY_BLOB ((UINT16) 0x0009) // The entity is a delegate key blob
186 #define TPM_ET_COUNTER ((UINT16) 0x000A) // The entity is a counter
187 #define TPM_ET_NV ((UINT16) 0x000B) // The entity is a NV index
188 #define TPM_ET_RESERVED_HANDLE ((UINT16) 0x0040) // Reserved. This value avoids collisions with the handle MSB setting.
189 //
190 // TPM_ENTITY_TYPE MSB Values: The MSB is used to indicate the ADIP encryption sheme when applicable
191 //
192 #define TPM_ET_XOR ((UINT16) 0x0000) // ADIP encryption scheme: XOR
193 #define TPM_ET_AES128 ((UINT16) 0x0006) // ADIP encryption scheme: AES 128 bits
194
195 //
196 // Part 2, section 4.4.1: Reserved Key Handles
197 //
198 #define TPM_KH_SRK ((TPM_KEY_HANDLE) 0x40000000) // The handle points to the SRK
199 #define TPM_KH_OWNER ((TPM_KEY_HANDLE) 0x40000001) // The handle points to the TPM Owner
200 #define TPM_KH_REVOKE ((TPM_KEY_HANDLE) 0x40000002) // The handle points to the RevokeTrust value
201 #define TPM_KH_TRANSPORT ((TPM_KEY_HANDLE) 0x40000003) // The handle points to the EstablishTransport static authorization
202 #define TPM_KH_OPERATOR ((TPM_KEY_HANDLE) 0x40000004) // The handle points to the Operator auth
203 #define TPM_KH_ADMIN ((TPM_KEY_HANDLE) 0x40000005) // The handle points to the delegation administration auth
204 #define TPM_KH_EK ((TPM_KEY_HANDLE) 0x40000006) // The handle points to the PUBEK, only usable with TPM_OwnerReadInternalPub
205
206 //
207 // Part 2, section 4.5: TPM_STARTUP_TYPE
208 //
209 #define TPM_ST_CLEAR ((TPM_STARTUP_TYPE) 0x0001) // The TPM is starting up from a clean state
210 #define TPM_ST_STATE ((TPM_STARTUP_TYPE) 0x0002) // The TPM is starting up from a saved state
211 #define TPM_ST_DEACTIVATED ((TPM_STARTUP_TYPE) 0x0003) // The TPM is to startup and set the deactivated flag to TRUE
212
213 //
214 // Part 2, section 4.6: TPM_STATUP_EFFECTS
215 // The table makeup is still an open issue.
216 //
217
218 //
219 // Part 2, section 4.7: TPM_PROTOCOL_ID
220 //
221 #define TPM_PID_OIAP ((TPM_PROTOCOL_ID) 0x0001) // The OIAP protocol.
222 #define TPM_PID_OSAP ((TPM_PROTOCOL_ID) 0x0002) // The OSAP protocol.
223 #define TPM_PID_ADIP ((TPM_PROTOCOL_ID) 0x0003) // The ADIP protocol.
224 #define TPM_PID_ADCP ((TPM_PROTOCOL_ID) 0x0004) // The ADCP protocol.
225 #define TPM_PID_OWNER ((TPM_PROTOCOL_ID) 0x0005) // The protocol for taking ownership of a TPM.
226 #define TPM_PID_DSAP ((TPM_PROTOCOL_ID) 0x0006) // The DSAP protocol
227 #define TPM_PID_TRANSPORT ((TPM_PROTOCOL_ID) 0x0007) // The transport protocol
228
229 //
230 // Part 2, section 4.8: TPM_ALGORITHM_ID
231 // The TPM MUST support the algorithms TPM_ALG_RSA, TPM_ALG_SHA, TPM_ALG_HMAC,
232 // TPM_ALG_MGF1
233 //
234 #define TPM_ALG_RSA ((TPM_ALGORITHM_ID) 0x00000001) // The RSA algorithm.
235 #define TPM_ALG_DES ((TPM_ALGORITHM_ID) 0x00000002) // The DES algorithm
236 #define TPM_ALG_3DES ((TPM_ALGORITHM_ID) 0x00000003) // The 3DES algorithm in EDE mode
237 #define TPM_ALG_SHA ((TPM_ALGORITHM_ID) 0x00000004) // The SHA1 algorithm
238 #define TPM_ALG_HMAC ((TPM_ALGORITHM_ID) 0x00000005) // The RFC 2104 HMAC algorithm
239 #define TPM_ALG_AES128 ((TPM_ALGORITHM_ID) 0x00000006) // The AES algorithm, key size 128
240 #define TPM_ALG_MGF1 ((TPM_ALGORITHM_ID) 0x00000007) // The XOR algorithm using MGF1 to create a string the size of the encrypted block
241 #define TPM_ALG_AES192 ((TPM_ALGORITHM_ID) 0x00000008) // AES, key size 192
242 #define TPM_ALG_AES256 ((TPM_ALGORITHM_ID) 0x00000009) // AES, key size 256
243 #define TPM_ALG_XOR ((TPM_ALGORITHM_ID) 0x0000000A) // XOR using the rolling nonces
244
245 //
246 // Part 2, section 4.9: TPM_PHYSICAL_PRESENCE
247 //
248 #define TPM_PHYSICAL_PRESENCE_HW_DISABLE ((TPM_PHYSICAL_PRESENCE) 0x0200) // Sets the physicalPresenceHWEnable to FALSE
249 #define TPM_PHYSICAL_PRESENCE_CMD_DISABLE ((TPM_PHYSICAL_PRESENCE) 0x0100) // Sets the physicalPresenceCMDEnable to FALSE
250 #define TPM_PHYSICAL_PRESENCE_LIFETIME_LOCK ((TPM_PHYSICAL_PRESENCE) 0x0080) // Sets the physicalPresenceLifetimeLock to TRUE
251 #define TPM_PHYSICAL_PRESENCE_HW_ENABLE ((TPM_PHYSICAL_PRESENCE) 0x0040) // Sets the physicalPresenceHWEnable to TRUE
252 #define TPM_PHYSICAL_PRESENCE_CMD_ENABLE ((TPM_PHYSICAL_PRESENCE) 0x0020) // Sets the physicalPresenceCMDEnable to TRUE
253 #define TPM_PHYSICAL_PRESENCE_NOTPRESENT ((TPM_PHYSICAL_PRESENCE) 0x0010) // Sets PhysicalPresence = FALSE
254 #define TPM_PHYSICAL_PRESENCE_PRESENT ((TPM_PHYSICAL_PRESENCE) 0x0008) // Sets PhysicalPresence = TRUE
255 #define TPM_PHYSICAL_PRESENCE_LOCK ((TPM_PHYSICAL_PRESENCE) 0x0004) // Sets PhysicalPresenceLock = TRUE
256
257 //
258 // Part 2, section 4.10: TPM_MIGRATE_SCHEME
259 //
260 #define TPM_MS_MIGRATE ((TPM_MIGRATE_SCHEME) 0x0001) // A public key that can be used with all TPM migration commands other than 'ReWrap' mode.
261 #define TPM_MS_REWRAP ((TPM_MIGRATE_SCHEME) 0x0002) // A public key that can be used for the ReWrap mode of TPM_CreateMigrationBlob.
262 #define TPM_MS_MAINT ((TPM_MIGRATE_SCHEME) 0x0003) // A public key that can be used for the Maintenance commands
263 #define TPM_MS_RESTRICT_MIGRATE ((TPM_MIGRATE_SCHEME) 0x0004) // The key is to be migrated to a Migration Authority.
264 #define TPM_MS_RESTRICT_APPROVE_DOUBLE ((TPM_MIGRATE_SCHEME) 0x0005) // The key is to be migrated to an entity approved by a Migration Authority using double wrapping
265
266 //
267 // Part 2, section 4.11: TPM_EK_TYPE
268 //
269 #define TPM_EK_TYPE_ACTIVATE ((TPM_EK_TYPE) 0x0001) // The blob MUST be TPM_EK_BLOB_ACTIVATE
270 #define TPM_EK_TYPE_AUTH ((TPM_EK_TYPE) 0x0002) // The blob MUST be TPM_EK_BLOB_AUTH
271
272 //
273 // Part 2, section 4.12: TPM_PLATFORM_SPECIFIC
274 //
275 #define TPM_PS_PC_11 ((TPM_PLATFORM_SPECIFIC) 0x0001) // PC Specific version 1.1
276 #define TPM_PS_PC_12 ((TPM_PLATFORM_SPECIFIC) 0x0002) // PC Specific version 1.2
277 #define TPM_PS_PDA_12 ((TPM_PLATFORM_SPECIFIC) 0x0003) // PDA Specific version 1.2
278 #define TPM_PS_Server_12 ((TPM_PLATFORM_SPECIFIC) 0x0004) // Server Specific version 1.2
279 #define TPM_PS_Mobile_12 ((TPM_PLATFORM_SPECIFIC) 0x0005) // Mobil Specific version 1.2
280
281 //
282 // Part 2, section 5: Basic Structures
283 //
284
285 //
286 // Part 2, section 5.1: TPM_STRUCT_VER
287 //
288 typedef struct tdTPM_STRUCT_VER {
289 UINT8 major;
290 UINT8 minor;
291 UINT8 revMajor;
292 UINT8 revMinor;
293 } TPM_STRUCT_VER;
294
295 //
296 // Part 2, section 5.3: TPM_VERSION
297 //
298 typedef struct tdTPM_VERSION {
299 TPM_VERSION_BYTE major;
300 TPM_VERSION_BYTE minor;
301 UINT8 revMajor;
302 UINT8 revMinor;
303 } TPM_VERSION;
304
305 //
306 // Part 2, section 5.4: TPM_DIGEST
307 //
308 #define TPM_SHA1_160_HASH_LEN 0x14
309 #define TPM_SHA1BASED_NONCE_LEN TPM_SHA1_160_HASH_LEN
310
311 typedef struct tdTPM_DIGEST{
312 UINT8 digest[TPM_SHA1_160_HASH_LEN];
313 } TPM_DIGEST;
314
315 typedef TPM_DIGEST TPM_CHOSENID_HASH; // This SHALL be the digest of the chosen identityLabel and privacyCA for a new TPM identity.
316 typedef TPM_DIGEST TPM_COMPOSITE_HASH; // This SHALL be the hash of a list of PCR indexes and PCR values that a key or data is bound to.
317 typedef TPM_DIGEST TPM_DIRVALUE; // This SHALL be the value of a DIR register
318 typedef TPM_DIGEST TPM_HMAC;
319 typedef TPM_DIGEST TPM_PCRVALUE; // The value inside of the PCR
320 typedef TPM_DIGEST TPM_AUDITDIGEST; // This SHALL be the value of the current internal audit state
321 typedef TPM_DIGEST TPM_DAA_TPM_SEED; // This SHALL be a random value generated by a TPM immediately after the EK is installed in that TPM, whenever an EK is installed in that TPM
322 typedef TPM_DIGEST TPM_DAA_CONTEXT_SEED; // This SHALL be a random value
323
324 //
325 // Part 2, section 5.5: TPM_NONCE
326 //
327 typedef struct tdTPM_NONCE{
328 UINT8 nonce[20];
329 } TPM_NONCE;
330
331 //
332 // Part 2, section 5.6: TPM_AUTHDATA
333 //
334 typedef UINT8 tdTPM_AUTHDATA[20];
335 typedef tdTPM_AUTHDATA TPM_AUTHDATA;
336 typedef TPM_AUTHDATA TPM_SECRET;
337 typedef TPM_AUTHDATA TPM_ENCAUTH;
338
339 //
340 // Part 2, section 5.7: TPM_KEY_HANDLE_LIST
341 // Size of handle is loaded * sizeof(TPM_KEY_HANDLE)
342 //
343 typedef struct tdTPM_KEY_HANDLE_LIST {
344 UINT16 loaded;
345 TPM_KEY_HANDLE handle[1];
346 } TPM_KEY_HANDLE_LIST;
347
348 //
349 // Part 2, section 5.8: TPM_KEY_USAGE values
350 //
351
352 #define TPM_KEY_SIGNING ((UINT16) 0x0010)
353 // TPM_KEY_SIGNING SHALL indicate a signing key. The [private] key SHALL be
354 // used for signing operations, only. This means that it MUST be a leaf of the
355 // Protected Storage key hierarchy.
356
357 #define TPM_KEY_STORAGE ((UINT16) 0x0011)
358 // TPM_KEY_STORAGE SHALL indicate a storage key. The key SHALL be used to wrap
359 // and unwrap other keys in the Protected Storage hierarchy
360
361 #define TPM_KEY_IDENTITY ((UINT16) 0x0012)
362 // TPM_KEY_IDENTITY SHALL indicate an identity key. The key SHALL be used for
363 // operations that require a TPM identity, only.
364
365 #define TPM_KEY_AUTHCHANGE ((UINT16) 0x0013)
366 // TPM_KEY_AUTHCHANGE SHALL indicate an ephemeral key that is in use during
367 // the ChangeAuthAsym process, only.
368
369 #define TPM_KEY_BIND ((UINT16) 0x0014)
370 // TPM_KEY_BIND SHALL indicate a key that can be used for TPM_Bind and
371 // TPM_Unbind operations only.
372
373 #define TPM_KEY_LEGACY ((UINT16) 0x0015)
374 // TPM_KEY_LEGACY SHALL indicate a key that can perform signing and binding
375 // operations. The key MAY be used for both signing and binding operations.
376 // The TPM_KEY_LEGACY key type is to allow for use by applications where both
377 // signing and encryption operations occur with the same key. The use of this
378 // key type is not recommended TPM_KEY_MIGRATE 0x0016 This SHALL indicate a
379 // key in use for TPM_MigrateKey
380
381 #define TPM_KEY_MIGRATE ((UINT16) 0x0016)
382 // TPM_KEY_MIGRAGE SHALL indicate a key in use for TPM_MigrateKey
383
384 //
385 // Part 2, section 5.8.1: Encryption/Signature schemes
386 //
387
388 #define TPM_ES_NONE ((TPM_ENC_SCHEME) 0x0001)
389 #define TPM_ES_RSAESPKCSv15 ((TPM_ENC_SCHEME) 0x0002)
390 #define TPM_ES_RSAESOAEP_SHA1_MGF1 ((TPM_ENC_SCHEME) 0x0003)
391 #define TPM_ES_SYM_CNT ((TPM_ENC_SCHEME) 0x0004)
392 #define TPM_ES_SYM_OFB ((TPM_ENC_SCHEME) 0x0005)
393
394 #define TPM_SS_NONE ((TPM_SIG_SCHEME) 0x0001)
395 #define TPM_SS_RSASSAPKCS1v15_SHA1 ((TPM_SIG_SCHEME) 0x0002)
396 #define TPM_SS_RSASSAPKCS1v15_DER ((TPM_SIG_SCHEME) 0x0003)
397 #define TPM_SS_RSASSAPKCS1v15_INFO ((TPM_SIG_SCHEME) 0x0004)
398
399 //
400 // Part 2, section 5.9: TPM_AUTH_DATA_USAGE values
401 //
402 #define TPM_AUTH_NEVER ((TPM_AUTH_DATA_USAGE) 0x00)
403 #define TPM_AUTH_ALWAYS ((TPM_AUTH_DATA_USAGE) 0x01)
404 #define TPM_AUTH_PRIV_USE_ONLY ((TPM_AUTH_DATA_USAGE) 0x03)
405
406 //
407 // Part 2, section 5.10: TPM_KEY_FLAGS
408 //
409 typedef enum tdTPM_KEY_FLAGS {
410 redirection = 0x00000001,
411 migratable = 0x00000002,
412 isVolatile = 0x00000004,
413 pcrIgnoredOnRead = 0x00000008,
414 migrateAuthority = 0x00000010
415 } TPM_KEY_FLAGS;
416
417 //
418 // Part 2, section 5.11: TPM_CHANGEAUTH_VALIDATE
419 //
420 typedef struct tdTPM_CHANGEAUTH_VALIDATE {
421 TPM_SECRET newAuthSecret;
422 TPM_NONCE n1;
423 } TPM_CHANGEAUTH_VALIDATE;
424
425 //
426 // Part 2, section 5.12: TPM_MIGRATIONKEYAUTH
427 // decalared after section 10 to catch declaration of TPM_PUBKEY
428 //
429 // Part 2 section 10.1: TPM_KEY_PARMS
430 // [size_is(parmSize)] BYTE* parms;
431 //
432 typedef struct tdTPM_KEY_PARMS {
433 TPM_ALGORITHM_ID algorithmID;
434 TPM_ENC_SCHEME encScheme;
435 TPM_SIG_SCHEME sigScheme;
436 UINT32 parmSize;
437 UINT8 *parms;
438 } TPM_KEY_PARMS;
439
440 //
441 // Part 2, section 10.4: TPM_STORE_PUBKEY
442 //
443 typedef struct tdTPM_STORE_PUBKEY {
444 UINT32 keyLength;
445 UINT8 key[1];
446 } TPM_STORE_PUBKEY;
447
448 //
449 // Part 2, section 10.5: TPM_PUBKEY
450 //
451 typedef struct tdTPM_PUBKEY{
452 TPM_KEY_PARMS algorithmParms;
453 TPM_STORE_PUBKEY pubKey;
454 } TPM_PUBKEY;
455
456 //
457 // Part 2, section 5.12: TPM_MIGRATIONKEYAUTH
458 //
459 typedef struct tdTPM_MIGRATIONKEYAUTH{
460 TPM_PUBKEY migrationKey;
461 TPM_MIGRATE_SCHEME migrationScheme;
462 TPM_DIGEST digest;
463 } TPM_MIGRATIONKEYAUTH;
464
465 //
466 // Part 2, section 5.13: TPM_COUNTER_VALUE
467 //
468 typedef struct tdTPM_COUNTER_VALUE{
469 TPM_STRUCTURE_TAG tag;
470 UINT8 label[4];
471 TPM_ACTUAL_COUNT counter;
472 } TPM_COUNTER_VALUE;
473
474 //
475 // Part 2, section 5.14: TPM_SIGN_INFO
476 // Size of data indicated by dataLen
477 //
478 typedef struct tdTPM_SIGN_INFO {
479 TPM_STRUCTURE_TAG tag;
480 UINT8 fixed[4];
481 TPM_NONCE replay;
482 UINT32 dataLen;
483 UINT8 *data;
484 } TPM_SIGN_INFO;
485
486 //
487 // Part 2, section 5.15: TPM_MSA_COMPOSITE
488 // Number of migAuthDigest indicated by MSAlist
489 //
490 typedef struct tdTPM_MSA_COMPOSITE {
491 UINT32 MSAlist;
492 TPM_DIGEST migAuthDigest[1];
493 } TPM_MSA_COMPOSITE;
494
495 //
496 // Part 2, section 5.16: TPM_CMK_AUTH
497 //
498 typedef struct tdTPM_CMK_AUTH{
499 TPM_DIGEST migrationAuthorityDigest;
500 TPM_DIGEST destinationKeyDigest;
501 TPM_DIGEST sourceKeyDigest;
502 } TPM_CMK_AUTH;
503
504 //
505 // Part 2, section 5.17: TPM_CMK_DELEGATE
506 //
507 #define TPM_CMK_DELEGATE_SIGNING (((TPM_CMK_DELEGATE)1) << 31)
508 #define TPM_CMK_DELEGATE_STORAGE (((TPM_CMK_DELEGATE)1) << 30)
509 #define TPM_CMK_DELEGATE_BIND (((TPM_CMK_DELEGATE)1) << 29)
510 #define TPM_CMK_DELEGATE_LEGACY (((TPM_CMK_DELEGATE)1) << 28)
511 #define TPM_CMK_DELEGATE_MIGRATE (((TPM_CMK_DELEGATE)1) << 27)
512
513 //
514 // Part 2, section 5.18: TPM_SELECT_SIZE
515 //
516 typedef struct tdTPM_SELECT_SIZE {
517 UINT8 major;
518 UINT8 minor;
519 UINT16 reqSize;
520 } TPM_SELECT_SIZE;
521
522 //
523 // Part 2, section 5,19: TPM_CMK_MIGAUTH
524 //
525 typedef struct tdTPM_CMK_MIGAUTH{
526 TPM_STRUCTURE_TAG tag;
527 TPM_DIGEST msaDigest;
528 TPM_DIGEST pubKeyDigest;
529 } TPM_CMK_MIGAUTH;
530
531 //
532 // Part 2, section 5.20: TPM_CMK_SIGTICKET
533 //
534 typedef struct tdTPM_CMK_SIGTICKET{
535 TPM_STRUCTURE_TAG tag;
536 TPM_DIGEST verKeyDigest;
537 TPM_DIGEST signedData;
538 } TPM_CMK_SIGTICKET;
539
540 //
541 // Part 2, section 5.21: TPM_CMK_MA_APPROVAL
542 //
543 typedef struct tdTPM_CMK_MA_APPROVAL{
544 TPM_STRUCTURE_TAG tag;
545 TPM_DIGEST migrationAuthorityDigest;
546 } TPM_CMK_MA_APPROVAL;
547
548 //
549 // Part 2, section 6: Command Tags
550 //
551 #define TPM_TAG_RQU_COMMAND ((TPM_STRUCTURE_TAG) 0x00C1)
552 #define TPM_TAG_RQU_AUTH1_COMMAND ((TPM_STRUCTURE_TAG) 0x00C2)
553 #define TPM_TAG_RQU_AUTH2_COMMAND ((TPM_STRUCTURE_TAG) 0x00C3)
554 #define TPM_TAG_RSP_COMMAND ((TPM_STRUCTURE_TAG) 0x00C4)
555 #define TPM_TAG_RSP_AUTH1_COMMAND ((TPM_STRUCTURE_TAG) 0x00C5)
556 #define TPM_TAG_RSP_AUTH2_COMMAND ((TPM_STRUCTURE_TAG) 0x00C6)
557
558 //
559 // Part 2, section 7.1: TPM_PERMANENT_FLAGS
560 //
561 typedef struct tdTPM_PERMANENT_FLAGS{
562 TPM_STRUCTURE_TAG tag;
563 BOOLEAN disable;
564 BOOLEAN ownership;
565 BOOLEAN deactivated;
566 BOOLEAN readPubek;
567 BOOLEAN disableOwnerClear;
568 BOOLEAN allowMaintenance;
569 BOOLEAN physicalPresenceLifetimeLock;
570 BOOLEAN physicalPresenceHWEnable;
571 BOOLEAN physicalPresenceCMDEnable;
572 BOOLEAN CEKPUsed;
573 BOOLEAN TPMpost;
574 BOOLEAN TPMpostLock;
575 BOOLEAN FIPS;
576 BOOLEAN operator;
577 BOOLEAN enableRevokeEK;
578 BOOLEAN nvLocked;
579 BOOLEAN readSRKPub;
580 BOOLEAN tpmEstablished;
581 BOOLEAN maintenanceDone;
582 } TPM_PERMANENT_FLAGS;
583
584 //
585 // Part 2, section 7.1.1: PERMANENT_FLAGS Subcap for SetCapability
586 //
587 #define TPM_PF_DISABLE ((TPM_CAPABILITY_AREA) 1)
588 #define TPM_PF_OWNERSHIP ((TPM_CAPABILITY_AREA) 2)
589 #define TPM_PF_DEACTIVATED ((TPM_CAPABILITY_AREA) 3)
590 #define TPM_PF_READPUBEK ((TPM_CAPABILITY_AREA) 4)
591 #define TPM_PF_DISABLEOWNERCLEAR ((TPM_CAPABILITY_AREA) 5)
592 #define TPM_PF_ALLOWMAINTENANCE ((TPM_CAPABILITY_AREA) 6)
593 #define TPM_PF_PHYSICALPRESENCELIFETIMELOCK ((TPM_CAPABILITY_AREA) 7)
594 #define TPM_PF_PHYSICALPRESENCEHWENABLE ((TPM_CAPABILITY_AREA) 8)
595 #define TPM_PF_PHYSICALPRESENCECMDENABLE ((TPM_CAPABILITY_AREA) 9)
596 #define TPM_PF_CEKPUSED ((TPM_CAPABILITY_AREA) 10)
597 #define TPM_PF_TPMPOST ((TPM_CAPABILITY_AREA) 11)
598 #define TPM_PF_TPMPOSTLOCK ((TPM_CAPABILITY_AREA) 12)
599 #define TPM_PF_FIPS ((TPM_CAPABILITY_AREA) 13)
600 #define TPM_PF_OPERATOR ((TPM_CAPABILITY_AREA) 14)
601 #define TPM_PF_ENABLEREVOKEEK ((TPM_CAPABILITY_AREA) 15)
602 #define TPM_PF_NV_LOCKED ((TPM_CAPABILITY_AREA) 16)
603 #define TPM_PF_READSRKPUB ((TPM_CAPABILITY_AREA) 17)
604 #define TPM_PF_TPMESTABLISHED ((TPM_CAPABILITY_AREA) 18)
605 #define TPM_PF_MAINTENANCEDONE ((TPM_CAPABILITY_AREA) 19)
606
607 //
608 // Part 2, section 7.2: TPM_STCLEAR_FLAGS
609 //
610 typedef struct tdTPM_STCLEAR_FLAGS{
611 TPM_STRUCTURE_TAG tag;
612 BOOLEAN deactivated;
613 BOOLEAN disableForceClear;
614 BOOLEAN physicalPresence;
615 BOOLEAN physicalPresenceLock;
616 BOOLEAN bGlobalLock;
617 } TPM_STCLEAR_FLAGS;
618
619 //
620 // Part 2, section 7.2.1: STCLEAR_FLAGS Subcap for SetCapability
621 //
622 #define TPM_SF_DEACTIVATED ((TPM_CAPABILITY_AREA) 1)
623 #define TPM_SF_DISABLEFORCECLEAR ((TPM_CAPABILITY_AREA) 2)
624 #define TPM_SF_PHYSICALPRESENCE ((TPM_CAPABILITY_AREA) 3)
625 #define TPM_SF_PHYSICALPRESENCELOCK ((TPM_CAPABILITY_AREA) 4)
626 #define TPM_SF_BGLOBALLOCK ((TPM_CAPABILITY_AREA) 5)
627
628 //
629 // Part 2, section 7.3: TPM_STANY_FLAGS
630 //
631 typedef struct tdTPM_STANY_FLAGS{
632 TPM_STRUCTURE_TAG tag;
633 BOOLEAN postInitialise;
634 TPM_MODIFIER_INDICATOR localityModifier;
635 BOOLEAN transportExclusive;
636 BOOLEAN TOSPresent;
637 } TPM_STANY_FLAGS;
638
639 //
640 // Part 2, section 7.3.1: STANY_FLAGS Subcap for SetCapability
641 //
642 #define TPM_AF_POSTINITIALISE ((TPM_CAPABILITY_AREA) 1)
643 #define TPM_AF_LOCALITYMODIFIER ((TPM_CAPABILITY_AREA) 2)
644 #define TPM_AF_TRANSPORTEXCLUSIVE ((TPM_CAPABILITY_AREA) 3)
645 #define TPM_AF_TOSPRESENT ((TPM_CAPABILITY_AREA) 4)
646
647 //
648 // All those structures (section 7.4, 7.5, 7.6) are not normative and
649 // thus no definitions here
650 //
651 // Part 2, section 7.4: TPM_PERMANENT_DATA
652 //
653 //#define TPM_MIN_COUNTERS 4 // the minimum number of counters is 4
654 //#define TPM_DELEGATE_KEY TPM_KEY
655 //#define TPM_NUM_PCR 16
656 //#define TPM_MAX_NV_WRITE_NOOWNER 64
657 //typedef struct tdTPM_PERMANENT_DATA
658 //{
659 // TPM_STRUCTURE_TAG tag;
660 // UINT8 revMajor;
661 // UINT8 revMinor;
662 // TPM_NONCE tpmProof;
663 // TPM_NONCE ekReset;
664 // TPM_SECRET ownerAuth;
665 // TPM_SECRET operatorAuth;
666 // TPM_DIRVALUE authDIR[1];
667 // TPM_PUBKEY manuMaintPub;
668 // TPM_KEY endorsementKey;
669 // TPM_KEY srk;
670 // TPM_KEY contextKey;
671 // TPM_KEY delegateKey;
672 // TPM_COUNTER_VALUE auditMonotonicCounter;
673 // TPM_COUNTER_VALUE monitonicCounter[TPM_MIN_COUNTERS];
674 // TPM_PCR_ATTRIBUTES pcrAttrib[TPM_NUM_PCR];
675 // UINT8 ordinalAuditStatus[];
676 // UINT8 *rngState;
677 // TPM_FAMILY_TABLE familyTable;
678 // TPM_DELEGATE_TABLE delegateTable;
679 // UINT32 maxNVBufSize;
680 // UINT32 lastFamilyID;
681 // UINT32 noOwnerNVWrite;
682 // TPM_CMK_DELEGATE restrictDelegate;
683 // TPM_DAA_TPM_SEED tpmDAASeed;
684 //} TPM_PERMANENT_DATA;
685
686 //
687 // Part 2, section 7.5: TPM_STCLEAR_DATA
688 // available inside TPM only
689 //
690 //typedef struct tdTPM_STCLEAR_DATA
691 //{
692 // TPM_STRUCTURE_TAG tag;
693 // TPM_NONCE contextNonceKey;
694 // TPM_COUNT_ID countID;
695 // UINT32 ownerReference;
696 // BOOLEAN disableResetLock;
697 //} TPM_STCLEAR_DATA;
698
699 //
700 // Part 2, section 7.6: TPM_STANY_DATA
701 // available inside TPM only
702 //
703 //typedef struct tdTPM_STANY_DATA
704 //{
705 // TPM_STRUCTURE_TAG tag;
706 // TPM_NONCE contextNonceSession;
707 // TPM_DIGEST auditDigest;
708 // TPM_CURRENT_TICKS currentTicks;
709 // UINT32 contextCount;
710 // UINT32 contextList[TPM_MIN_SESSION_LIST];
711 // TPM_SESSION_DATA sessions[TPM_MIN_SESSIONS];
712 //} TPM_STANY_DATA;
713
714 //
715 // Part 2, section 8: PCR Structures
716 //
717
718 //
719 // Part 2, section 8.1: TPM_PCR_SELECTION
720 // Size of pcrSelect[] indicated by sizeOfSelect
721 //
722 typedef struct tdTPM_PCR_SELECTION {
723 UINT16 sizeOfSelect;
724 UINT8 pcrSelect[1];
725 } TPM_PCR_SELECTION;
726
727 //
728 // Part 2, section 8.2: TPM_PCR_COMPOSITE
729 // Size of pcrValue[] indicated by valueSize
730 //
731 typedef struct tdTPM_PCR_COMPOSITE {
732 TPM_PCR_SELECTION select;
733 UINT32 valueSize;
734 TPM_PCRVALUE pcrValue[1];
735 } TPM_PCR_COMPOSITE;
736
737 //
738 // Part 2, section 8.3: TPM_PCR_INFO
739 //
740 typedef struct tdTPM_PCR_INFO {
741 TPM_PCR_SELECTION pcrSelection;
742 TPM_COMPOSITE_HASH digestAtRelease;
743 TPM_COMPOSITE_HASH digestAtCreation;
744 } TPM_PCR_INFO;
745
746 //
747 // Part 2, section 8.6: TPM_LOCALITY_SELECTION
748 //
749 typedef UINT8 TPM_LOCALITY_SELECTION;
750
751 #define TPM_LOC_FOUR ((UINT8) 0x10)
752 #define TPM_LOC_THREE ((UINT8) 0x08)
753 #define TPM_LOC_TWO ((UINT8) 0x04)
754 #define TPM_LOC_ONE ((UINT8) 0x02)
755 #define TPM_LOC_ZERO ((UINT8) 0x01)
756
757 //
758 // Part 2, section 8.4: TPM_PCR_INFO_LONG
759 //
760 typedef struct tdTPM_PCR_INFO_LONG {
761 TPM_STRUCTURE_TAG tag;
762 TPM_LOCALITY_SELECTION localityAtCreation;
763 TPM_LOCALITY_SELECTION localityAtRelease;
764 TPM_PCR_SELECTION creationPCRSelection;
765 TPM_PCR_SELECTION releasePCRSelection;
766 TPM_COMPOSITE_HASH digestAtCreation;
767 TPM_COMPOSITE_HASH digestAtRelease;
768 } TPM_PCR_INFO_LONG;
769
770 //
771 // Part 2, section 8.5: TPM_PCR_INFO_SHORT
772 //
773 typedef struct tdTPM_PCR_INFO_SHORT{
774 TPM_PCR_SELECTION pcrSelection;
775 TPM_LOCALITY_SELECTION localityAtRelease;
776 TPM_COMPOSITE_HASH digestAtRelease;
777 } TPM_PCR_INFO_SHORT;
778
779 //
780 // Part 2, section 8.8: TPM_PCR_ATTRIBUTES
781 //
782 typedef struct tdTPM_PCR_ATTRIBUTES{
783 BOOLEAN pcrReset;
784 TPM_LOCALITY_SELECTION pcrExtendLocal;
785 TPM_LOCALITY_SELECTION pcrResetLocal;
786 } TPM_PCR_ATTRIBUTES;
787
788 //
789 // Part 2, section 9: Storage Structures
790 //
791
792 //
793 // Part 2, section 9.1: TPM_STORED_DATA
794 // [size_is(sealInfoSize)] BYTE* sealInfo;
795 // [size_is(encDataSize)] BYTE* encData;
796 //
797 typedef struct tdTPM_STORED_DATA {
798 TPM_STRUCT_VER ver;
799 UINT32 sealInfoSize;
800 UINT8 *sealInfo;
801 UINT32 encDataSize;
802 UINT8 *encData;
803 } TPM_STORED_DATA;
804
805 //
806 // Part 2, section 9.2: TPM_STORED_DATA12
807 // [size_is(sealInfoSize)] BYTE* sealInfo;
808 // [size_is(encDataSize)] BYTE* encData;
809 //
810 typedef struct tdTPM_STORED_DATA12 {
811 TPM_STRUCTURE_TAG tag;
812 TPM_ENTITY_TYPE et;
813 UINT32 sealInfoSize;
814 UINT8 *sealInfo;
815 UINT32 encDataSize;
816 UINT8 *encData;
817 } TPM_STORED_DATA12;
818
819 //
820 // Part 2, section 9.3: TPM_SEALED_DATA
821 // [size_is(dataSize)] BYTE* data;
822 //
823 typedef struct tdTPM_SEALED_DATA {
824 TPM_PAYLOAD_TYPE payload;
825 TPM_SECRET authData;
826 TPM_NONCE tpmProof;
827 TPM_DIGEST storedDigest;
828 UINT32 dataSize;
829 UINT8 *data;
830 } TPM_SEALED_DATA;
831
832 //
833 // Part 2, section 9.4: TPM_SYMMETRIC_KEY
834 // [size_is(size)] BYTE* data;
835 //
836 typedef struct tdTPM_SYMMETRIC_KEY {
837 TPM_ALGORITHM_ID algId;
838 TPM_ENC_SCHEME encScheme;
839 UINT16 dataSize;
840 UINT8 *data;
841 } TPM_SYMMETRIC_KEY;
842
843 //
844 // Part 2, section 9.5: TPM_BOUND_DATA
845 //
846 typedef struct tdTPM_BOUND_DATA {
847 TPM_STRUCT_VER ver;
848 TPM_PAYLOAD_TYPE payload;
849 UINT8 payloadData[1];
850 } TPM_BOUND_DATA;
851
852 //
853 // Part 2 section 10: TPM_KEY complex
854 //
855
856 //
857 // Part 2, section 10.2: TPM_KEY
858 // [size_is(encDataSize)] BYTE* encData;
859 //
860 typedef struct tdTPM_KEY{
861 TPM_STRUCT_VER ver;
862 TPM_KEY_USAGE keyUsage;
863 TPM_KEY_FLAGS keyFlags;
864 TPM_AUTH_DATA_USAGE authDataUsage;
865 TPM_KEY_PARMS algorithmParms;
866 UINT32 PCRInfoSize;
867 UINT8 *PCRInfo;
868 TPM_STORE_PUBKEY pubKey;
869 UINT32 encDataSize;
870 UINT8 *encData;
871 } TPM_KEY;
872
873 //
874 // Part 2, section 10.3: TPM_KEY12
875 // [size_is(encDataSize)] BYTE* encData;
876 //
877 typedef struct tdTPM_KEY12{
878 TPM_STRUCTURE_TAG tag;
879 UINT16 fill;
880 TPM_KEY_USAGE keyUsage;
881 TPM_KEY_FLAGS keyFlags;
882 TPM_AUTH_DATA_USAGE authDataUsage;
883 TPM_KEY_PARMS algorithmParms;
884 UINT32 PCRInfoSize;
885 UINT8 *PCRInfo;
886 TPM_STORE_PUBKEY pubKey;
887 UINT32 encDataSize;
888 UINT8 *encData;
889 } TPM_KEY12;
890
891 //
892 // Part 2, section 10.7: TPM_STORE_PRIVKEY
893 // [size_is(keyLength)] BYTE* key;
894 //
895 typedef struct tdTPM_STORE_PRIVKEY {
896 UINT32 keyLength;
897 UINT8 *key;
898 } TPM_STORE_PRIVKEY;
899
900 //
901 // Part 2, section 10.6: TPM_STORE_ASYMKEY
902 //
903 typedef struct tdTPM_STORE_ASYMKEY { // pos len total
904 TPM_PAYLOAD_TYPE payload; // 0 1 1
905 TPM_SECRET usageAuth; // 1 20 21
906 TPM_SECRET migrationAuth; // 21 20 41
907 TPM_DIGEST pubDataDigest; // 41 20 61
908 TPM_STORE_PRIVKEY privKey; // 61 132-151 193-214
909 } TPM_STORE_ASYMKEY;
910
911 //
912 // Part 2, section 10.8: TPM_MIGRATE_ASYMKEY
913 // [size_is(partPrivKeyLen)] BYTE* partPrivKey;
914 //
915 typedef struct tdTPM_MIGRATE_ASYMKEY { // pos len total
916 TPM_PAYLOAD_TYPE payload; // 0 1 1
917 TPM_SECRET usageAuth; // 1 20 21
918 TPM_DIGEST pubDataDigest; // 21 20 41
919 UINT32 partPrivKeyLen; // 41 4 45
920 UINT8 *partPrivKey; // 45 112-127 157-172
921 } TPM_MIGRATE_ASYMKEY;
922
923 //
924 // Part 2, section 10.9: TPM_KEY_CONTROL
925 //
926 #define TPM_KEY_CONTROL_OWNER_EVICT ((UINT32) 0x00000001)
927
928 //
929 // Part 2, section 11: Signed Structures
930 //
931
932 typedef struct tdTPM_CERTIFY_INFO
933 {
934 TPM_STRUCT_VER version;
935 TPM_KEY_USAGE keyUsage;
936 TPM_KEY_FLAGS keyFlags;
937 TPM_AUTH_DATA_USAGE authDataUsage;
938 TPM_KEY_PARMS algorithmParms;
939 TPM_DIGEST pubkeyDigest;
940 TPM_NONCE data;
941 BOOLEAN parentPCRStatus;
942 UINT32 PCRInfoSize;
943 UINT8 *PCRInfo;
944 } TPM_CERTIFY_INFO;
945
946 typedef struct tdTPM_CERTIFY_INFO2
947 {
948 TPM_STRUCTURE_TAG tag;
949 UINT8 fill;
950 TPM_PAYLOAD_TYPE payloadType;
951 TPM_KEY_USAGE keyUsage;
952 TPM_KEY_FLAGS keyFlags;
953 TPM_AUTH_DATA_USAGE authDataUsage;
954 TPM_KEY_PARMS algorithmParms;
955 TPM_DIGEST pubkeyDigest;
956 TPM_NONCE data;
957 BOOLEAN parentPCRStatus;
958 UINT32 PCRInfoSize;
959 UINT8 *PCRInfo;
960 UINT32 migrationAuthoritySize;
961 UINT8 *migrationAuthority;
962 } TPM_CERTIFY_INFO2;
963
964 typedef struct tdTPM_QUOTE_INFO
965 {
966 TPM_STRUCT_VER version;
967 UINT8 fixed[4];
968 TPM_COMPOSITE_HASH digestValue;
969 TPM_NONCE externalData;
970 } TPM_QUOTE_INFO;
971
972 typedef struct tdTPM_QUOTE_INFO2
973 {
974 TPM_STRUCTURE_TAG tag;
975 UINT8 fixed[4];
976 TPM_NONCE externalData;
977 TPM_PCR_INFO_SHORT infoShort;
978 } TPM_QUOTE_INFO2;
979
980 //
981 // Part 2, section 12: Identity Structures
982 //
983
984 typedef struct tdTPM_EK_BLOB
985 {
986 TPM_STRUCTURE_TAG tag;
987 TPM_EK_TYPE ekType;
988 UINT32 blobSize;
989 UINT8 *blob;
990 } TPM_EK_BLOB;
991
992 typedef struct tdTPM_EK_BLOB_ACTIVATE
993 {
994 TPM_STRUCTURE_TAG tag;
995 TPM_SYMMETRIC_KEY sessionKey;
996 TPM_DIGEST idDigest;
997 TPM_PCR_INFO_SHORT pcrInfo;
998 } TPM_EK_BLOB_ACTIVATE;
999
1000 typedef struct tdTPM_EK_BLOB_AUTH
1001 {
1002 TPM_STRUCTURE_TAG tag;
1003 TPM_SECRET authValue;
1004 } TPM_EK_BLOB_AUTH;
1005
1006
1007 typedef struct tdTPM_IDENTITY_CONTENTS
1008 {
1009 TPM_STRUCT_VER ver;
1010 UINT32 ordinal;
1011 TPM_CHOSENID_HASH labelPrivCADigest;
1012 TPM_PUBKEY identityPubKey;
1013 } TPM_IDENTITY_CONTENTS;
1014
1015 typedef struct tdTPM_IDENTITY_REQ
1016 {
1017 UINT32 asymSize;
1018 UINT32 symSize;
1019 TPM_KEY_PARMS asymAlgorithm;
1020 TPM_KEY_PARMS symAlgorithm;
1021 UINT8 *asymBlob;
1022 UINT8 *symBlob;
1023 } TPM_IDENTITY_REQ;
1024
1025 typedef struct tdTPM_IDENTITY_PROOF
1026 {
1027 TPM_STRUCT_VER ver;
1028 UINT32 labelSize;
1029 UINT32 identityBindingSize;
1030 UINT32 endorsementSize;
1031 UINT32 platformSize;
1032 UINT32 conformanceSize;
1033 TPM_PUBKEY identityKey;
1034 UINT8 *labelArea;
1035 UINT8 *identityBinding;
1036 UINT8 *endorsementCredential;
1037 UINT8 *platformCredential;
1038 UINT8 *conformanceCredential;
1039 } TPM_IDENTITY_PROOF;
1040
1041 typedef struct tdTPM_ASYM_CA_CONTENTS
1042 {
1043 TPM_SYMMETRIC_KEY sessionKey;
1044 TPM_DIGEST idDigest;
1045 } TPM_ASYM_CA_CONTENTS;
1046
1047 typedef struct tdTPM_SYM_CA_ATTESTATION
1048 {
1049 UINT32 credSize;
1050 TPM_KEY_PARMS algorithm;
1051 UINT8 *credential;
1052 } TPM_SYM_CA_ATTESTATION;
1053
1054 //
1055 // Part 2, section 15: TPM_CURRENT_TICKS
1056 // Placed here out of order because definitions are used in section 13.
1057 //
1058 typedef struct tdTPM_CURRENT_TICKS {
1059 TPM_STRUCTURE_TAG tag;
1060 UINT64 currentTicks;
1061 UINT16 tickRate;
1062 TPM_NONCE tickNonce;
1063 } TPM_CURRENT_TICKS;
1064
1065 //
1066 // Part 2, section 13: Transport structures
1067 //
1068
1069 #define TPM_TRANSPORT_ENCRYPT ((UINT32)0x00000001)
1070 #define TPM_TRANSPORT_LOG ((UINT32)0x00000002)
1071 #define TPM_TRANSPORT_EXCLUSIVE ((UINT32)0x00000004)
1072
1073 typedef struct tdTPM_TRANSPORT_PUBLIC
1074 {
1075 TPM_STRUCTURE_TAG tag;
1076 TPM_TRANSPORT_ATTRIBUTES transAttributes;
1077 TPM_ALGORITHM_ID algId;
1078 TPM_ENC_SCHEME encScheme;
1079 } TPM_TRANSPORT_PUBLIC;
1080
1081 typedef struct tdTPM_TRANSPORT_INTERNAL
1082 {
1083 TPM_STRUCTURE_TAG tag;
1084 TPM_AUTHDATA authData;
1085 TPM_TRANSPORT_PUBLIC transPublic;
1086 TPM_TRANSHANDLE transHandle;
1087 TPM_NONCE transNonceEven;
1088 TPM_DIGEST transDigest;
1089 } TPM_TRANSPORT_INTERNAL;
1090
1091 typedef struct tdTPM_TRANSPORT_LOG_IN
1092 {
1093 TPM_STRUCTURE_TAG tag;
1094 TPM_DIGEST parameters;
1095 TPM_DIGEST pubKeyHash;
1096 } TPM_TRANSPORT_LOG_IN;
1097
1098 typedef struct tdTPM_TRANSPORT_LOG_OUT
1099 {
1100 TPM_STRUCTURE_TAG tag;
1101 TPM_CURRENT_TICKS currentTicks;
1102 TPM_DIGEST parameters;
1103 TPM_MODIFIER_INDICATOR locality;
1104 } TPM_TRANSPORT_LOG_OUT;
1105
1106 typedef struct tdTPM_TRANSPORT_AUTH
1107 {
1108 TPM_STRUCTURE_TAG tag;
1109 TPM_AUTHDATA authData;
1110 } TPM_TRANSPORT_AUTH;
1111
1112 //
1113 // Part 2, section 14: Audit Structures
1114 //
1115
1116 typedef struct tdTPM_AUDIT_EVENT_IN
1117 {
1118 TPM_STRUCTURE_TAG tag;
1119 TPM_DIGEST inputParms;
1120 TPM_COUNTER_VALUE auditCount;
1121 } TPM_AUDIT_EVENT_IN;
1122
1123 typedef struct tdTPM_AUDIT_EVENT_OUT
1124 {
1125 TPM_STRUCTURE_TAG tag;
1126 TPM_COMMAND_CODE ordinal;
1127 TPM_DIGEST outputParms;
1128 TPM_COUNTER_VALUE auditCount;
1129 TPM_RESULT returnCode;
1130 } TPM_AUDIT_EVENT_OUT;
1131
1132 //
1133 // Part 2, section 16: Return Codes
1134 //
1135 #ifndef TPM_BASE
1136 #error "TPM Error Codes require definition of TPM_BASE"
1137 #endif
1138
1139 #define TPM_VENDOR_ERROR TPM_Vendor_Specific32
1140 #define TPM_NON_FATAL 0x00000800
1141
1142 #define TPM_SUCCESS ((TPM_RESULT) TPM_BASE)
1143 #define TPM_AUTHFAIL ((TPM_RESULT) (TPM_BASE + 1))
1144 #define TPM_BADINDEX ((TPM_RESULT) (TPM_BASE + 2))
1145 #define TPM_BAD_PARAMETER ((TPM_RESULT) (TPM_BASE + 3))
1146 #define TPM_AUDITFAILURE ((TPM_RESULT) (TPM_BASE + 4))
1147 #define TPM_CLEAR_DISABLED ((TPM_RESULT) (TPM_BASE + 5))
1148 #define TPM_DEACTIVATED ((TPM_RESULT) (TPM_BASE + 6))
1149 #define TPM_DISABLED ((TPM_RESULT) (TPM_BASE + 7))
1150 #define TPM_DISABLED_CMD ((TPM_RESULT) (TPM_BASE + 8))
1151 #define TPM_FAIL ((TPM_RESULT) (TPM_BASE + 9))
1152 #define TPM_BAD_ORDINAL ((TPM_RESULT) (TPM_BASE + 10))
1153 #define TPM_INSTALL_DISABLED ((TPM_RESULT) (TPM_BASE + 11))
1154 #define TPM_INVALID_KEYHANDLE ((TPM_RESULT) (TPM_BASE + 12))
1155 #define TPM_KEYNOTFOUND ((TPM_RESULT) (TPM_BASE + 13))
1156 #define TPM_INAPPROPRIATE_ENC ((TPM_RESULT) (TPM_BASE + 14))
1157 #define TPM_MIGRATEFAIL ((TPM_RESULT) (TPM_BASE + 15))
1158 #define TPM_INVALID_PCR_INFO ((TPM_RESULT) (TPM_BASE + 16))
1159 #define TPM_NOSPACE ((TPM_RESULT) (TPM_BASE + 17))
1160 #define TPM_NOSRK ((TPM_RESULT) (TPM_BASE + 18))
1161 #define TPM_NOTSEALED_BLOB ((TPM_RESULT) (TPM_BASE + 19))
1162 #define TPM_OWNER_SET ((TPM_RESULT) (TPM_BASE + 20))
1163 #define TPM_RESOURCES ((TPM_RESULT) (TPM_BASE + 21))
1164 #define TPM_SHORTRANDOM ((TPM_RESULT) (TPM_BASE + 22))
1165 #define TPM_SIZE ((TPM_RESULT) (TPM_BASE + 23))
1166 #define TPM_WRONGPCRVAL ((TPM_RESULT) (TPM_BASE + 24))
1167 #define TPM_BAD_PARAM_SIZE ((TPM_RESULT) (TPM_BASE + 25))
1168 #define TPM_SHA_THREAD ((TPM_RESULT) (TPM_BASE + 26))
1169 #define TPM_SHA_ERROR ((TPM_RESULT) (TPM_BASE + 27))
1170 #define TPM_FAILEDSELFTEST ((TPM_RESULT) (TPM_BASE + 28))
1171 #define TPM_AUTH2FAIL ((TPM_RESULT) (TPM_BASE + 29))
1172 #define TPM_BADTAG ((TPM_RESULT) (TPM_BASE + 30))
1173 #define TPM_IOERROR ((TPM_RESULT) (TPM_BASE + 31))
1174 #define TPM_ENCRYPT_ERROR ((TPM_RESULT) (TPM_BASE + 32))
1175 #define TPM_DECRYPT_ERROR ((TPM_RESULT) (TPM_BASE + 33))
1176 #define TPM_INVALID_AUTHHANDLE ((TPM_RESULT) (TPM_BASE + 34))
1177 #define TPM_NO_ENDORSEMENT ((TPM_RESULT) (TPM_BASE + 35))
1178 #define TPM_INVALID_KEYUSAGE ((TPM_RESULT) (TPM_BASE + 36))
1179 #define TPM_WRONG_ENTITYTYPE ((TPM_RESULT) (TPM_BASE + 37))
1180 #define TPM_INVALID_POSTINIT ((TPM_RESULT) (TPM_BASE + 38))
1181 #define TPM_INAPPROPRIATE_SIG ((TPM_RESULT) (TPM_BASE + 39))
1182 #define TPM_BAD_KEY_PROPERTY ((TPM_RESULT) (TPM_BASE + 40))
1183 #define TPM_BAD_MIGRATION ((TPM_RESULT) (TPM_BASE + 41))
1184 #define TPM_BAD_SCHEME ((TPM_RESULT) (TPM_BASE + 42))
1185 #define TPM_BAD_DATASIZE ((TPM_RESULT) (TPM_BASE + 43))
1186 #define TPM_BAD_MODE ((TPM_RESULT) (TPM_BASE + 44))
1187 #define TPM_BAD_PRESENCE ((TPM_RESULT) (TPM_BASE + 45))
1188 #define TPM_BAD_VERSION ((TPM_RESULT) (TPM_BASE + 46))
1189 #define TPM_NO_WRAP_TRANSPORT ((TPM_RESULT) (TPM_BASE + 47))
1190 #define TPM_AUDITFAIL_UNSUCCESSFUL ((TPM_RESULT) (TPM_BASE + 48))
1191 #define TPM_AUDITFAIL_SUCCESSFUL ((TPM_RESULT) (TPM_BASE + 49))
1192 #define TPM_NOTRESETABLE ((TPM_RESULT) (TPM_BASE + 50))
1193 #define TPM_NOTLOCAL ((TPM_RESULT) (TPM_BASE + 51))
1194 #define TPM_BAD_TYPE ((TPM_RESULT) (TPM_BASE + 52))
1195 #define TPM_INVALID_RESOURCE ((TPM_RESULT) (TPM_BASE + 53))
1196 #define TPM_NOTFIPS ((TPM_RESULT) (TPM_BASE + 54))
1197 #define TPM_INVALID_FAMILY ((TPM_RESULT) (TPM_BASE + 55))
1198 #define TPM_NO_NV_PERMISSION ((TPM_RESULT) (TPM_BASE + 56))
1199 #define TPM_REQUIRES_SIGN ((TPM_RESULT) (TPM_BASE + 57))
1200 #define TPM_KEY_NOTSUPPORTED ((TPM_RESULT) (TPM_BASE + 58))
1201 #define TPM_AUTH_CONFLICT ((TPM_RESULT) (TPM_BASE + 59))
1202 #define TPM_AREA_LOCKED ((TPM_RESULT) (TPM_BASE + 60))
1203 #define TPM_BAD_LOCALITY ((TPM_RESULT) (TPM_BASE + 61))
1204 #define TPM_READ_ONLY ((TPM_RESULT) (TPM_BASE + 62))
1205 #define TPM_PER_NOWRITE ((TPM_RESULT) (TPM_BASE + 63))
1206 #define TPM_FAMILYCOUNT ((TPM_RESULT) (TPM_BASE + 64))
1207 #define TPM_WRITE_LOCKED ((TPM_RESULT) (TPM_BASE + 65))
1208 #define TPM_BAD_ATTRIBUTES ((TPM_RESULT) (TPM_BASE + 66))
1209 #define TPM_INVALID_STRUCTURE ((TPM_RESULT) (TPM_BASE + 67))
1210 #define TPM_KEY_OWNER_CONTROL ((TPM_RESULT) (TPM_BASE + 68))
1211 #define TPM_BAD_COUNTER ((TPM_RESULT) (TPM_BASE + 69))
1212 #define TPM_NOT_FULLWRITE ((TPM_RESULT) (TPM_BASE + 70))
1213 #define TPM_CONTEXT_GAP ((TPM_RESULT) (TPM_BASE + 71))
1214 #define TPM_MAXNVWRITES ((TPM_RESULT) (TPM_BASE + 72))
1215 #define TPM_NOOPERATOR ((TPM_RESULT) (TPM_BASE + 73))
1216 #define TPM_RESOURCEMISSING ((TPM_RESULT) (TPM_BASE + 74))
1217 #define TPM_DELEGATE_LOCK ((TPM_RESULT) (TPM_BASE + 75))
1218 #define TPM_DELEGATE_FAMILY ((TPM_RESULT) (TPM_BASE + 76))
1219 #define TPM_DELEGATE_ADMIN ((TPM_RESULT) (TPM_BASE + 77))
1220 #define TPM_TRANSPORT_NOTEXCLUSIVE ((TPM_RESULT) (TPM_BASE + 78))
1221 #define TPM_OWNER_CONTROL ((TPM_RESULT) (TPM_BASE + 79))
1222 #define TPM_DAA_RESOURCES ((TPM_RESULT) (TPM_BASE + 80))
1223 #define TPM_DAA_INPUT_DATA0 ((TPM_RESULT) (TPM_BASE + 81))
1224 #define TPM_DAA_INPUT_DATA1 ((TPM_RESULT) (TPM_BASE + 82))
1225 #define TPM_DAA_ISSUER_SETTINGS ((TPM_RESULT) (TPM_BASE + 83))
1226 #define TPM_DAA_TPM_SETTINGS ((TPM_RESULT) (TPM_BASE + 84))
1227 #define TPM_DAA_STAGE ((TPM_RESULT) (TPM_BASE + 85))
1228 #define TPM_DAA_ISSUER_VALIDITY ((TPM_RESULT) (TPM_BASE + 86))
1229 #define TPM_DAA_WRONG_W ((TPM_RESULT) (TPM_BASE + 87))
1230 #define TPM_BAD_HANDLE ((TPM_RESULT) (TPM_BASE + 88))
1231 #define TPM_BAD_DELEGATE ((TPM_RESULT) (TPM_BASE + 89))
1232 #define TPM_BADCONTEXT ((TPM_RESULT) (TPM_BASE + 90))
1233 #define TPM_TOOMANYCONTEXTS ((TPM_RESULT) (TPM_BASE + 91))
1234 #define TPM_MA_TICKET_SIGNATURE ((TPM_RESULT) (TPM_BASE + 92))
1235 #define TPM_MA_DESTINATION ((TPM_RESULT) (TPM_BASE + 93))
1236 #define TPM_MA_SOURCE ((TPM_RESULT) (TPM_BASE + 94))
1237 #define TPM_MA_AUTHORITY ((TPM_RESULT) (TPM_BASE + 95))
1238 #define TPM_PERMANENTEK ((TPM_RESULT) (TPM_BASE + 97))
1239 #define TPM_BAD_SIGNATURE ((TPM_RESULT) (TPM_BASE + 98))
1240 #define TPM_NOCONTEXTSPACE ((TPM_RESULT) (TPM_BASE + 99))
1241
1242 #define TPM_RETRY ((TPM_RESULT) (TPM_BASE + TPM_NON_FATAL))
1243 #define TPM_NEEDS_SELFTEST ((TPM_RESULT) (TPM_BASE + TPM_NON_FATAL + 1))
1244 #define TPM_DOING_SELFTEST ((TPM_RESULT) (TPM_BASE + TPM_NON_FATAL + 2))
1245 #define TPM_DEFEND_LOCK_RUNNING ((TPM_RESULT) (TPM_BASE + TPM_NON_FATAL + 3))
1246
1247 //
1248 // Part 2, section 17: Ordinals
1249 //
1250 // Ordinals are 32 bit values. The upper byte contains values that serve as
1251 // flag indicators, the next byte contains values indicating what committee
1252 // designated the ordinal, and the final two bytes contain the Command
1253 // Ordinal Index.
1254 // 3 2 1
1255 // 1 0 9 8 7 6 5 4 3 2 1 0 9 8 7 6 5 4 3 2 1 0 9 8 7 6 5 4 3 2 1 0
1256 // +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
1257 // |P|C|V| Reserved| Purview | Command Ordinal Index |
1258 // +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
1259 //
1260 // Where:
1261 //
1262 // * P is Protected/Unprotected command. When 0 the command is a Protected
1263 // command, when 1 the command is an Unprotected command.
1264 //
1265 // * C is Non-Connection/Connection related command. When 0 this command
1266 // passes through to either the protected (TPM) or unprotected (TSS)
1267 // components.
1268 //
1269 // * V is TPM/Vendor command. When 0 the command is TPM defined, when 1 the
1270 // command is vendor defined.
1271 //
1272 // * All reserved area bits are set to 0.
1273 //
1274
1275 #define TPM_ORD_ActivateIdentity ((TPM_COMMAND_CODE) 0x0000007A)
1276 #define TPM_ORD_AuthorizeMigrationKey ((TPM_COMMAND_CODE) 0x0000002B)
1277 #define TPM_ORD_CertifyKey ((TPM_COMMAND_CODE) 0x00000032)
1278 #define TPM_ORD_CertifyKey2 ((TPM_COMMAND_CODE) 0x00000033)
1279 #define TPM_ORD_CertifySelfTest ((TPM_COMMAND_CODE) 0x00000052)
1280 #define TPM_ORD_ChangeAuth ((TPM_COMMAND_CODE) 0x0000000C)
1281 #define TPM_ORD_ChangeAuthAsymFinish ((TPM_COMMAND_CODE) 0x0000000F)
1282 #define TPM_ORD_ChangeAuthAsymStart ((TPM_COMMAND_CODE) 0x0000000E)
1283 #define TPM_ORD_ChangeAuthOwner ((TPM_COMMAND_CODE) 0x00000010)
1284 #define TPM_ORD_CMK_ApproveMA ((TPM_COMMAND_CODE) 0x0000001D)
1285 #define TPM_ORD_CMK_ConvertMigration ((TPM_COMMAND_CODE) 0x00000024)
1286 #define TPM_ORD_CMK_CreateBlob ((TPM_COMMAND_CODE) 0x0000001B)
1287 #define TPM_ORD_CMK_CreateKey ((TPM_COMMAND_CODE) 0x00000013)
1288 #define TPM_ORD_CMK_CreateTicket ((TPM_COMMAND_CODE) 0x00000012)
1289 #define TPM_ORD_CMK_SetRestrictions ((TPM_COMMAND_CODE) 0x0000001C)
1290 #define TPM_ORD_ContinueSelfTest ((TPM_COMMAND_CODE) 0x00000053)
1291 #define TPM_ORD_ConvertMigrationBlob ((TPM_COMMAND_CODE) 0x0000002A)
1292 #define TPM_ORD_CreateCounter ((TPM_COMMAND_CODE) 0x000000DC)
1293 #define TPM_ORD_CreateEndorsementKeyPair ((TPM_COMMAND_CODE) 0x00000078)
1294 #define TPM_ORD_CreateMaintenanceArchive ((TPM_COMMAND_CODE) 0x0000002C)
1295 #define TPM_ORD_CreateMigrationBlob ((TPM_COMMAND_CODE) 0x00000028)
1296 #define TPM_ORD_CreateRevocableEK ((TPM_COMMAND_CODE) 0x0000007F)
1297 #define TPM_ORD_CreateWrapKey ((TPM_COMMAND_CODE) 0x0000001F)
1298 #define TPM_ORD_DAA_JOIN ((TPM_COMMAND_CODE) 0x00000029)
1299 #define TPM_ORD_DAA_SIGN ((TPM_COMMAND_CODE) 0x00000031)
1300 #define TPM_ORD_Delegate_CreateKeyDelegation ((TPM_COMMAND_CODE) 0x000000D4)
1301 #define TPM_ORD_Delegate_CreateOwnerDelegation ((TPM_COMMAND_CODE) 0x000000D5)
1302 #define TPM_ORD_Delegate_LoadOwnerDelegation ((TPM_COMMAND_CODE) 0x000000D8)
1303 #define TPM_ORD_Delegate_Manage ((TPM_COMMAND_CODE) 0x000000D2)
1304 #define TPM_ORD_Delegate_ReadTable ((TPM_COMMAND_CODE) 0x000000DB)
1305 #define TPM_ORD_Delegate_UpdateVerification ((TPM_COMMAND_CODE) 0x000000D1)
1306 #define TPM_ORD_Delegate_VerifyDelegation ((TPM_COMMAND_CODE) 0x000000D6)
1307 #define TPM_ORD_DirRead ((TPM_COMMAND_CODE) 0x0000001A)
1308 #define TPM_ORD_DirWriteAuth ((TPM_COMMAND_CODE) 0x00000019)
1309 #define TPM_ORD_DisableForceClear ((TPM_COMMAND_CODE) 0x0000005E)
1310 #define TPM_ORD_DisableOwnerClear ((TPM_COMMAND_CODE) 0x0000005C)
1311 #define TPM_ORD_DisablePubekRead ((TPM_COMMAND_CODE) 0x0000007E)
1312 #define TPM_ORD_DSAP ((TPM_COMMAND_CODE) 0x00000011)
1313 #define TPM_ORD_EstablishTransport ((TPM_COMMAND_CODE) 0x000000E6)
1314 #define TPM_ORD_EvictKey ((TPM_COMMAND_CODE) 0x00000022)
1315 #define TPM_ORD_ExecuteTransport ((TPM_COMMAND_CODE) 0x000000E7)
1316 #define TPM_ORD_Extend ((TPM_COMMAND_CODE) 0x00000014)
1317 #define TPM_ORD_FieldUpgrade ((TPM_COMMAND_CODE) 0x000000AA)
1318 #define TPM_ORD_FlushSpecific ((TPM_COMMAND_CODE) 0x000000BA)
1319 #define TPM_ORD_ForceClear ((TPM_COMMAND_CODE) 0x0000005D)
1320 #define TPM_ORD_GetAuditDigest ((TPM_COMMAND_CODE) 0x00000085)
1321 #define TPM_ORD_GetAuditDigestSigned ((TPM_COMMAND_CODE) 0x00000086)
1322 #define TPM_ORD_GetAuditEvent ((TPM_COMMAND_CODE) 0x00000082)
1323 #define TPM_ORD_GetAuditEventSigned ((TPM_COMMAND_CODE) 0x00000083)
1324 #define TPM_ORD_GetCapability ((TPM_COMMAND_CODE) 0x00000065)
1325 #define TPM_ORD_GetCapabilityOwner ((TPM_COMMAND_CODE) 0x00000066)
1326 #define TPM_ORD_GetCapabilitySigned ((TPM_COMMAND_CODE) 0x00000064)
1327 #define TPM_ORD_GetOrdinalAuditStatus ((TPM_COMMAND_CODE) 0x0000008C)
1328 #define TPM_ORD_GetPubKey ((TPM_COMMAND_CODE) 0x00000021)
1329 #define TPM_ORD_GetRandom ((TPM_COMMAND_CODE) 0x00000046)
1330 #define TPM_ORD_GetTestResult ((TPM_COMMAND_CODE) 0x00000054)
1331 #define TPM_ORD_GetTicks ((TPM_COMMAND_CODE) 0x000000F1)
1332 #define TPM_ORD_IncrementCounter ((TPM_COMMAND_CODE) 0x000000DD)
1333 #define TPM_ORD_Init ((TPM_COMMAND_CODE) 0x00000097)
1334 #define TPM_ORD_KeyControlOwner ((TPM_COMMAND_CODE) 0x00000023)
1335 #define TPM_ORD_KillMaintenanceFeature ((TPM_COMMAND_CODE) 0x0000002E)
1336 #define TPM_ORD_LoadAuthContext ((TPM_COMMAND_CODE) 0x000000B7)
1337 #define TPM_ORD_LoadContext ((TPM_COMMAND_CODE) 0x000000B9)
1338 #define TPM_ORD_LoadKey ((TPM_COMMAND_CODE) 0x00000020)
1339 #define TPM_ORD_LoadKey2 ((TPM_COMMAND_CODE) 0x00000041)
1340 #define TPM_ORD_LoadKeyContext ((TPM_COMMAND_CODE) 0x000000B5)
1341 #define TPM_ORD_LoadMaintenanceArchive ((TPM_COMMAND_CODE) 0x0000002D)
1342 #define TPM_ORD_LoadManuMaintPub ((TPM_COMMAND_CODE) 0x0000002F)
1343 #define TPM_ORD_MakeIdentity ((TPM_COMMAND_CODE) 0x00000079)
1344 #define TPM_ORD_MigrateKey ((TPM_COMMAND_CODE) 0x00000025)
1345 #define TPM_ORD_NV_DefineSpace ((TPM_COMMAND_CODE) 0x000000CC)
1346 #define TPM_ORD_NV_ReadValue ((TPM_COMMAND_CODE) 0x000000CF)
1347 #define TPM_ORD_NV_ReadValueAuth ((TPM_COMMAND_CODE) 0x000000D0)
1348 #define TPM_ORD_NV_WriteValue ((TPM_COMMAND_CODE) 0x000000CD)
1349 #define TPM_ORD_NV_WriteValueAuth ((TPM_COMMAND_CODE) 0x000000CE)
1350 #define TPM_ORD_OIAP ((TPM_COMMAND_CODE) 0x0000000A)
1351 #define TPM_ORD_OSAP ((TPM_COMMAND_CODE) 0x0000000B)
1352 #define TPM_ORD_OwnerClear ((TPM_COMMAND_CODE) 0x0000005B)
1353 #define TPM_ORD_OwnerReadInternalPub ((TPM_COMMAND_CODE) 0x00000081)
1354 #define TPM_ORD_OwnerReadPubek ((TPM_COMMAND_CODE) 0x0000007D)
1355 #define TPM_ORD_OwnerSetDisable ((TPM_COMMAND_CODE) 0x0000006E)
1356 #define TPM_ORD_PCR_Reset ((TPM_COMMAND_CODE) 0x000000C8)
1357 #define TPM_ORD_PcrRead ((TPM_COMMAND_CODE) 0x00000015)
1358 #define TPM_ORD_PhysicalDisable ((TPM_COMMAND_CODE) 0x00000070)
1359 #define TPM_ORD_PhysicalEnable ((TPM_COMMAND_CODE) 0x0000006F)
1360 #define TPM_ORD_PhysicalSetDeactivated ((TPM_COMMAND_CODE) 0x00000072)
1361 #define TPM_ORD_Quote ((TPM_COMMAND_CODE) 0x00000016)
1362 #define TPM_ORD_Quote2 ((TPM_COMMAND_CODE) 0x0000003E)
1363 #define TPM_ORD_ReadCounter ((TPM_COMMAND_CODE) 0x000000DE)
1364 #define TPM_ORD_ReadManuMaintPub ((TPM_COMMAND_CODE) 0x00000030)
1365 #define TPM_ORD_ReadPubek ((TPM_COMMAND_CODE) 0x0000007C)
1366 #define TPM_ORD_ReleaseCounter ((TPM_COMMAND_CODE) 0x000000DF)
1367 #define TPM_ORD_ReleaseCounterOwner ((TPM_COMMAND_CODE) 0x000000E0)
1368 #define TPM_ORD_ReleaseTransportSigned ((TPM_COMMAND_CODE) 0x000000E8)
1369 #define TPM_ORD_Reset ((TPM_COMMAND_CODE) 0x0000005A)
1370 #define TPM_ORD_ResetLockValue ((TPM_COMMAND_CODE) 0x00000040)
1371 #define TPM_ORD_RevokeTrust ((TPM_COMMAND_CODE) 0x00000080)
1372 #define TPM_ORD_SaveAuthContext ((TPM_COMMAND_CODE) 0x000000B6)
1373 #define TPM_ORD_SaveContext ((TPM_COMMAND_CODE) 0x000000B8)
1374 #define TPM_ORD_SaveKeyContext ((TPM_COMMAND_CODE) 0x000000B4)
1375 #define TPM_ORD_SaveState ((TPM_COMMAND_CODE) 0x00000098)
1376 #define TPM_ORD_Seal ((TPM_COMMAND_CODE) 0x00000017)
1377 #define TPM_ORD_Sealx ((TPM_COMMAND_CODE) 0x0000003D)
1378 #define TPM_ORD_SelfTestFull ((TPM_COMMAND_CODE) 0x00000050)
1379 #define TPM_ORD_SetCapability ((TPM_COMMAND_CODE) 0x0000003F)
1380 #define TPM_ORD_SetOperatorAuth ((TPM_COMMAND_CODE) 0x00000074)
1381 #define TPM_ORD_SetOrdinalAuditStatus ((TPM_COMMAND_CODE) 0x0000008D)
1382 #define TPM_ORD_SetOwnerInstall ((TPM_COMMAND_CODE) 0x00000071)
1383 #define TPM_ORD_SetOwnerPointer ((TPM_COMMAND_CODE) 0x00000075)
1384 #define TPM_ORD_SetRedirection ((TPM_COMMAND_CODE) 0x0000009A)
1385 #define TPM_ORD_SetTempDeactivated ((TPM_COMMAND_CODE) 0x00000073)
1386 #define TPM_ORD_SHA1Complete ((TPM_COMMAND_CODE) 0x000000A2)
1387 #define TPM_ORD_SHA1CompleteExtend ((TPM_COMMAND_CODE) 0x000000A3)
1388 #define TPM_ORD_SHA1Start ((TPM_COMMAND_CODE) 0x000000A0)
1389 #define TPM_ORD_SHA1Update ((TPM_COMMAND_CODE) 0x000000A1)
1390 #define TPM_ORD_Sign ((TPM_COMMAND_CODE) 0x0000003C)
1391 #define TPM_ORD_Startup ((TPM_COMMAND_CODE) 0x00000099)
1392 #define TPM_ORD_StirRandom ((TPM_COMMAND_CODE) 0x00000047)
1393 #define TPM_ORD_TakeOwnership ((TPM_COMMAND_CODE) 0x0000000D)
1394 #define TPM_ORD_Terminate_Handle ((TPM_COMMAND_CODE) 0x00000096)
1395 #define TPM_ORD_TickStampBlob ((TPM_COMMAND_CODE) 0x000000F2)
1396 #define TPM_ORD_UnBind ((TPM_COMMAND_CODE) 0x0000001E)
1397 #define TPM_ORD_Unseal ((TPM_COMMAND_CODE) 0x00000018)
1398 #define TSC_ORD_PhysicalPresence ((TPM_COMMAND_CODE) 0x4000000A)
1399 #define TSC_ORD_ResetEstablishmentBit ((TPM_COMMAND_CODE) 0x4000000B)
1400
1401 //
1402 // Part 2, section 18: Context structures
1403 //
1404
1405 typedef struct tdTPM_CONTEXT_BLOB
1406 {
1407 TPM_STRUCTURE_TAG tag;
1408 TPM_RESOURCE_TYPE resourceType;
1409 TPM_HANDLE handle;
1410 UINT8 label[16];
1411 UINT32 contextCount;
1412 TPM_DIGEST integrityDigest;
1413 UINT32 additionalSize;
1414 UINT8 *additionalData;
1415 UINT32 sensitiveSize;
1416 UINT8 *sensitiveData;
1417 } TPM_CONTEXT_BLOB;
1418
1419 typedef struct tdTPM_CONTEXT_SENSITIVE
1420 {
1421 TPM_STRUCTURE_TAG tag;
1422 TPM_NONCE contextNonce;
1423 UINT32 internalSize;
1424 UINT8 *internalData;
1425 } TPM_CONTEXT_SENSITIVE;
1426
1427 //
1428 // Part 2, section 19: NV Structures
1429 //
1430
1431 #define TPM_NV_INDEX_LOCK ((UINT32)0xffffffff)
1432 #define TPM_NV_INDEX0 ((UINT32)0x00000000)
1433 #define TPM_NV_INDEX_DIR ((UINT32)0x10000001)
1434 #define TPM_NV_INDEX_EKCert ((UINT32)0x0000f000)
1435 #define TPM_NV_INDEX_TPM_CC ((UINT32)0x0000f001)
1436 #define TPM_NV_INDEX_PlatformCert ((UINT32)0x0000f002)
1437 #define TPM_NV_INDEX_Platform_CC ((UINT32)0x0000f003)
1438 // The following define ranges of reserved indices.
1439 #define TPM_NV_INDEX_TSS_BASE ((UINT32)0x00011100)
1440 #define TPM_NV_INDEX_PC_BASE ((UINT32)0x00011200)
1441 #define TPM_NV_INDEX_SERVER_BASE ((UINT32)0x00011300)
1442 #define TPM_NV_INDEX_MOBILE_BASE ((UINT32)0x00011400)
1443 #define TPM_NV_INDEX_PERIPHERAL_BASE ((UINT32)0x00011500)
1444 #define TPM_NV_INDEX_GROUP_RESV_BASE ((UINT32)0x00010000)
1445
1446 typedef UINT32 TPM_NV_PER_ATTRIBUTES;
1447 // The typedefs TPM_NV_PER_ATTRIBUTES (not present in TPM 1.2 Spec. have been added
1448 // and structure fields that were to hold the following values
1449 #define TPM_NV_PER_READ_STCLEAR (((UINT32)1)<<31)
1450 #define TPM_NV_PER_AUTHREAD (((UINT32)1)<<18)
1451 #define TPM_NV_PER_OWNERREAD (((UINT32)1)<<17)
1452 #define TPM_NV_PER_PPREAD (((UINT32)1)<<16)
1453 #define TPM_NV_PER_GLOBALLOCK (((UINT32)1)<<15)
1454 #define TPM_NV_PER_WRITE_STCLEAR (((UINT32)1)<<14)
1455 #define TPM_NV_PER_WRITEDEFINE (((UINT32)1)<<13)
1456 #define TPM_NV_PER_WRITEALL (((UINT32)1)<<12)
1457 #define TPM_NV_PER_AUTHWRITE (((UINT32)1)<<2)
1458 #define TPM_NV_PER_OWNERWRITE (((UINT32)1)<<1)
1459 #define TPM_NV_PER_PPWRITE (((UINT32)1)<<0)
1460
1461 typedef struct tdTPM_NV_ATTRIBUTES
1462 {
1463 TPM_STRUCTURE_TAG tag;
1464 TPM_NV_PER_ATTRIBUTES attributes;
1465 } TPM_NV_ATTRIBUTES;
1466
1467
1468 typedef struct tdTPM_NV_DATA_PUBLIC
1469 {
1470 TPM_STRUCTURE_TAG tag;
1471 TPM_NV_INDEX nvIndex;
1472 TPM_PCR_INFO_SHORT pcrInfoRead;
1473 TPM_PCR_INFO_SHORT pcrInfoWrite;
1474 TPM_NV_ATTRIBUTES permission;
1475 BOOLEAN bReadSTClear;
1476 BOOLEAN bWriteSTClear;
1477 BOOLEAN bWriteDefine;
1478 UINT32 dataSize;
1479 } TPM_NV_DATA_PUBLIC;
1480
1481
1482
1483 // Internal to TPM:
1484 //typedef struct tdTPM_NV_DATA_SENSITIVE
1485 //{
1486 // TPM_STRUCTURE_TAG tag;
1487 // TPM_NV_DATA_PUBLIC pubInfo;
1488 // TPM_AUTHDATA authValue;
1489 // UINT8 *data;
1490 //} TPM_NV_DATA_SENSITIVE;
1491
1492
1493 //
1494 // Part 2, section 20: Delegation
1495 //
1496
1497 //
1498 // Part 2, section 20.3: Owner Permissions Settings for per1 bits
1499 //
1500 #define TPM_DELEGATE_SetOrdinalAuditStatus (((UINT32)1)<<30)
1501 #define TPM_DELEGATE_DirWriteAuth (((UINT32)1)<<29)
1502 #define TPM_DELEGATE_CMK_ApproveMA (((UINT32)1)<<28)
1503 #define TPM_DELEGATE_CMK_CreateTicket (((UINT32)1)<<26)
1504 #define TPM_DELEGATE_Delegate_LoadOwnerDelegation (((UINT32)1)<<24)
1505 #define TPM_DELEGATE_DAA_Join (((UINT32)1)<<23)
1506 #define TPM_DELEGATE_AuthorizeMigrationKey (((UINT32)1)<<22)
1507 #define TPM_DELEGATE_CreateMaintenanceArchive (((UINT32)1)<<21)
1508 #define TPM_DELEGATE_LoadMaintenanceArchive (((UINT32)1)<<20)
1509 #define TPM_DELEGATE_KillMaintenanceFeature (((UINT32)1)<<19)
1510 #define TPM_DELEGATE_OwnerReadInteralPub (((UINT32)1)<<18)
1511 #define TPM_DELEGATE_ResetLockValue (((UINT32)1)<<17)
1512 #define TPM_DELEGATE_OwnerClear (((UINT32)1)<<16)
1513 #define TPM_DELEGATE_DisableOwnerClear (((UINT32)1)<<15)
1514 #define TPM_DELEGATE_OwnerSetDisable (((UINT32)1)<<13)
1515 #define TPM_DELEGATE_SetCapability (((UINT32)1)<<12)
1516 #define TPM_DELEGATE_MakeIdentity (((UINT32)1)<<11)
1517 #define TPM_DELEGATE_ActivateIdentity (((UINT32)1)<<10)
1518 #define TPM_DELEGATE_OwnerReadPubek (((UINT32)1)<<9)
1519 #define TPM_DELEGATE_DisablePubekRead (((UINT32)1)<<8)
1520 #define TPM_DELEGATE_SetRedirection (((UINT32)1)<<7)
1521 #define TPM_DELEGATE_FieldUpgrade (((UINT32)1)<<6)
1522 #define TPM_DELEGATE_Delegate_UpdateVerification (((UINT32)1)<<5)
1523 #define TPM_DELEGATE_CreateCounter (((UINT32)1)<<4)
1524 #define TPM_DELEGATE_ReleaseCounterOwner (((UINT32)1)<<3)
1525 #define TPM_DELEGATE_DelegateManage (((UINT32)1)<<2)
1526 #define TPM_DELEGATE_Delegate_CreateOwnerDelegation (((UINT32)1)<<1)
1527 #define TPM_DELEGATE_DAA_Sign (((UINT32)1)<<0)
1528
1529 //
1530 // Part 2, section 20.3: Key Permissions Settings for per1 bits
1531 //
1532 #define TPM_KEY_DELEGATE_CMK_ConvertMigration (((UINT32)1)<<28)
1533 #define TPM_KEY_DELEGATE_TickStampBlob (((UINT32)1)<<27)
1534 #define TPM_KEY_DELEGATE_ChangeAuthAsymStart (((UINT32)1)<<26)
1535 #define TPM_KEY_DELEGATE_ChangeAuthAsymFinish (((UINT32)1)<<25)
1536 #define TPM_KEY_DELEGATE_CMK_CreateKey (((UINT32)1)<<24)
1537 #define TPM_KEY_DELEGATE_MigrateKey (((UINT32)1)<<23)
1538 #define TPM_KEY_DELEGATE_LoadKey2 (((UINT32)1)<<22)
1539 #define TPM_KEY_DELEGATE_EstablishTransport (((UINT32)1)<<21)
1540 #define TPM_KEY_DELEGATE_ReleaseTransportSigned (((UINT32)1)<<20)
1541 #define TPM_KEY_DELEGATE_Quote2 (((UINT32)1)<<19)
1542 #define TPM_KEY_DELEGATE_Sealx (((UINT32)1)<<18)
1543 #define TPM_KEY_DELEGATE_MakeIdentity (((UINT32)1)<<17)
1544 #define TPM_KEY_DELEGATE_ActivateIdentity (((UINT32)1)<<16)
1545 #define TPM_KEY_DELEGATE_GetAuditDigestSigned (((UINT32)1)<<15)
1546 #define TPM_KEY_DELEGATE_Sign (((UINT32)1)<<14)
1547 #define TPM_KEY_DELEGATE_CertifyKey2 (((UINT32)1)<<13)
1548 #define TPM_KEY_DELEGATE_CertifyKey (((UINT32)1)<<12)
1549 #define TPM_KEY_DELEGATE_CreateWrapKey (((UINT32)1)<<11)
1550 #define TPM_KEY_DELEGATE_CMK_CreateBlob (((UINT32)1)<<10)
1551 #define TPM_KEY_DELEGATE_CreateMigrationBlob (((UINT32)1)<<9)
1552 #define TPM_KEY_DELEGATE_ConvertMigrationBlob (((UINT32)1)<<8)
1553 #define TPM_KEY_DELEGATE_CreateKeyDelegation (((UINT32)1)<<7)
1554 #define TPM_KEY_DELEGATE_ChangeAuth (((UINT32)1)<<6)
1555 #define TPM_KEY_DELEGATE_GetPubKey (((UINT32)1)<<5)
1556 #define TPM_KEY_DELEGATE_UnBind (((UINT32)1)<<4)
1557 #define TPM_KEY_DELEGATE_Quote (((UINT32)1)<<3)
1558 #define TPM_KEY_DELEGATE_Unseal (((UINT32)1)<<2)
1559 #define TPM_KEY_DELEGATE_Seal (((UINT32)1)<<1)
1560 #define TPM_KEY_DELEGATE_LoadKey (((UINT32)1)<<0)
1561
1562 #define TPM_FAMILY_CREATE ((UINT32)0x00000001)
1563 #define TPM_FAMILY_ENABLE ((UINT32)0x00000002)
1564 #define TPM_FAMILY_ADMIN ((UINT32)0x00000003)
1565 #define TPM_FAMILY_INVALIDATE ((UINT32)0x00000004)
1566
1567 #define TPM_FAMFLAG_DELEGATE_ADMIN_LOCK (((UINT32)1)<<1)
1568 #define TPM_FAMFLAG_ENABLE (((UINT32)1)<<0)
1569
1570 typedef struct tdTPM_FAMILY_LABEL
1571 {
1572 UINT8 label;
1573 } TPM_FAMILY_LABEL;
1574
1575 typedef struct tdTPM_FAMILY_TABLE_ENTRY
1576 {
1577 TPM_STRUCTURE_TAG tag;
1578 TPM_FAMILY_LABEL label;
1579 TPM_FAMILY_ID familyID;
1580 TPM_FAMILY_VERIFICATION verificationCount;
1581 TPM_FAMILY_FLAGS flags;
1582 } TPM_FAMILY_TABLE_ENTRY;
1583
1584 #define TPM_FAMILY_TABLE_ENTRY_MIN 8
1585 //typedef struct tdTPM_FAMILY_TABLE
1586 //{
1587 // TPM_FAMILY_TABLE_ENTRY FamTableRow[TPM_NUM_FAMILY_TABLE_ENTRY_MIN];
1588 //} TPM_FAMILY_TABLE;
1589
1590
1591 typedef struct tdTPM_DELEGATE_LABEL
1592 {
1593 UINT8 label;
1594 } TPM_DELEGATE_LABEL;
1595
1596
1597 typedef UINT32 TPM_DELEGATE_TYPE;
1598 #define TPM_DEL_OWNER_BITS ((UINT32)0x00000001)
1599 #define TPM_DEL_KEY_BITS ((UINT32)0x00000002)
1600
1601 typedef struct tdTPM_DELEGATIONS
1602 {
1603 TPM_STRUCTURE_TAG tag;
1604 TPM_DELEGATE_TYPE delegateType;
1605 UINT32 per1;
1606 UINT32 per2;
1607 } TPM_DELEGATIONS;
1608
1609 typedef struct tdTPM_DELEGATE_PUBLIC
1610 {
1611 TPM_STRUCTURE_TAG tag;
1612 TPM_DELEGATE_LABEL label;
1613 TPM_PCR_INFO_SHORT pcrInfo;
1614 TPM_DELEGATIONS permissions;
1615 TPM_FAMILY_ID familyID;
1616 TPM_FAMILY_VERIFICATION verificationCount;
1617 } TPM_DELEGATE_PUBLIC;
1618
1619 typedef struct tdTPM_DELEGATE_TABLE_ROW
1620 {
1621 TPM_STRUCTURE_TAG tag;
1622 TPM_DELEGATE_PUBLIC pub;
1623 TPM_SECRET authValue;
1624 } TPM_DELEGATE_TABLE_ROW;
1625
1626
1627 #define TPM_NUM_DELEGATE_TABLE_ENTRY_MIN 2
1628 //typedef struct tdTPM_DELEGATE_TABLE
1629 //{
1630 // TPM_DELEGATE_TABLE_ROW delRow[TPM_NUM_DELEGATE_TABLE_ENTRY_MIN];
1631 //} TPM_DELEGATE_TABLE;
1632
1633 typedef struct tdTPM_DELEGATE_SENSITIVE
1634 {
1635 TPM_STRUCTURE_TAG tag;
1636 TPM_SECRET authValue;
1637 } TPM_DELEGATE_SENSITIVE;
1638
1639 typedef struct tdTPM_DELEGATE_OWNER_BLOB
1640 {
1641 TPM_STRUCTURE_TAG tag;
1642 TPM_DELEGATE_PUBLIC pub;
1643 TPM_DIGEST integrityDigest;
1644 UINT32 additionalSize;
1645 UINT8 *additionalArea;
1646 UINT32 sensitiveSize;
1647 UINT8 *sensitiveArea;
1648 } TPM_DELEGATE_OWNER_BLOB;
1649
1650 typedef struct tdTPM_DELEGATE_KEY_BLOB
1651 {
1652 TPM_STRUCTURE_TAG tag;
1653 TPM_DELEGATE_PUBLIC pub;
1654 TPM_DIGEST integrityDigest;
1655 TPM_DIGEST pubKeyDigest;
1656 UINT32 additionalSize;
1657 UINT8 *additionalArea;
1658 UINT32 sensitiveSize;
1659 UINT8 *sensitiveArea;
1660 } TPM_DELEGATE_KEY_BLOB;
1661
1662 //
1663 // Part 2, section 21.1: TPM_CAPABILITY_AREA for GetCapability
1664 //
1665 #define TPM_CAP_ORD ((TPM_CAPABILITY_AREA) 0x00000001)
1666 #define TPM_CAP_ALG ((TPM_CAPABILITY_AREA) 0x00000002)
1667 #define TPM_CAP_PID ((TPM_CAPABILITY_AREA) 0x00000003)
1668 #define TPM_CAP_FLAG ((TPM_CAPABILITY_AREA) 0x00000004)
1669 #define TPM_CAP_PROPERTY ((TPM_CAPABILITY_AREA) 0x00000005)
1670 #define TPM_CAP_VERSION ((TPM_CAPABILITY_AREA) 0x00000006)
1671 #define TPM_CAP_KEY_HANDLE ((TPM_CAPABILITY_AREA) 0x00000007)
1672 #define TPM_CAP_CHECK_LOADED ((TPM_CAPABILITY_AREA) 0x00000008)
1673 #define TPM_CAP_SYM_MODE ((TPM_CAPABILITY_AREA) 0x00000009)
1674 #define TPM_CAP_KEY_STATUS ((TPM_CAPABILITY_AREA) 0x0000000C)
1675 #define TPM_CAP_NV_LIST ((TPM_CAPABILITY_AREA) 0x0000000D)
1676 #define TPM_CAP_MFR ((TPM_CAPABILITY_AREA) 0x00000010)
1677 #define TPM_CAP_NV_INDEX ((TPM_CAPABILITY_AREA) 0x00000011)
1678 #define TPM_CAP_TRANS_ALG ((TPM_CAPABILITY_AREA) 0x00000012)
1679 #define TPM_CAP_HANDLE ((TPM_CAPABILITY_AREA) 0x00000014)
1680 #define TPM_CAP_TRANS_ES ((TPM_CAPABILITY_AREA) 0x00000015)
1681 #define TPM_CAP_AUTH_ENCRYPT ((TPM_CAPABILITY_AREA) 0x00000017)
1682 #define TPM_CAP_SELECT_SIZE ((TPM_CAPABILITY_AREA) 0x00000018)
1683 #define TPM_CAP_VERSION_VAL ((TPM_CAPABILITY_AREA) 0x0000001A)
1684
1685 #define TPM_CAP_FLAG_PERMANENT ((TPM_CAPABILITY_AREA) 0x00000108)
1686 #define TPM_CAP_FLAG_VOLATILE ((TPM_CAPABILITY_AREA) 0x00000109)
1687
1688 //
1689 // Part 2, section 21.2: CAP_PROPERTY Subcap values for GetCapability
1690 //
1691 #define TPM_CAP_PROP_PCR ((TPM_CAPABILITY_AREA) 0x00000101)
1692 #define TPM_CAP_PROP_DIR ((TPM_CAPABILITY_AREA) 0x00000102)
1693 #define TPM_CAP_PROP_MANUFACTURER ((TPM_CAPABILITY_AREA) 0x00000103)
1694 #define TPM_CAP_PROP_KEYS ((TPM_CAPABILITY_AREA) 0x00000104)
1695 #define TPM_CAP_PROP_MIN_COUNTER ((TPM_CAPABILITY_AREA) 0x00000107)
1696 #define TPM_CAP_PROP_AUTHSESS ((TPM_CAPABILITY_AREA) 0x0000010A)
1697 #define TPM_CAP_PROP_TRANSESS ((TPM_CAPABILITY_AREA) 0x0000010B)
1698 #define TPM_CAP_PROP_COUNTERS ((TPM_CAPABILITY_AREA) 0x0000010C)
1699 #define TPM_CAP_PROP_MAX_AUTHSESS ((TPM_CAPABILITY_AREA) 0x0000010D)
1700 #define TPM_CAP_PROP_MAX_TRANSESS ((TPM_CAPABILITY_AREA) 0x0000010E)
1701 #define TPM_CAP_PROP_MAX_COUNTERS ((TPM_CAPABILITY_AREA) 0x0000010F)
1702 #define TPM_CAP_PROP_MAX_KEYS ((TPM_CAPABILITY_AREA) 0x00000110)
1703 #define TPM_CAP_PROP_OWNER ((TPM_CAPABILITY_AREA) 0x00000111)
1704 #define TPM_CAP_PROP_CONTEXT ((TPM_CAPABILITY_AREA) 0x00000112)
1705 #define TPM_CAP_PROP_MAX_CONTEXT ((TPM_CAPABILITY_AREA) 0x00000113)
1706 #define TPM_CAP_PROP_FAMILYROWS ((TPM_CAPABILITY_AREA) 0x00000114)
1707 #define TPM_CAP_PROP_TIS_TIMEOUT ((TPM_CAPABILITY_AREA) 0x00000115)
1708 #define TPM_CAP_PROP_STARTUP_EFFECT ((TPM_CAPABILITY_AREA) 0x00000116)
1709 #define TPM_CAP_PROP_DELEGATE_ROW ((TPM_CAPABILITY_AREA) 0x00000117)
1710 #define TPM_CAP_PROP_DAA_MAX ((TPM_CAPABILITY_AREA) 0x00000119)
1711 #define CAP_PROP_SESSION_DAA ((TPM_CAPABILITY_AREA) 0x0000011A)
1712 #define TPM_CAP_PROP_CONTEXT_DIST ((TPM_CAPABILITY_AREA) 0x0000011B)
1713 #define TPM_CAP_PROP_DAA_INTERRUPT ((TPM_CAPABILITY_AREA) 0x0000011C)
1714 #define TPM_CAP_PROP_SESSIONS ((TPM_CAPABILITY_AREA) 0x0000011D)
1715 #define TPM_CAP_PROP_MAX_SESSIONS ((TPM_CAPABILITY_AREA) 0x0000011E)
1716 #define TPM_CAP_PROP_CMK_RESTRICTION ((TPM_CAPABILITY_AREA) 0x0000011F)
1717 #define TPM_CAP_PROP_DURATION ((TPM_CAPABILITY_AREA) 0x00000120)
1718 #define TPM_CAP_PROP_ACTIVE_COUNTER ((TPM_CAPABILITY_AREA) 0x00000122)
1719 #define TPM_CAP_PROP_MAX_NV_AVAILABLE ((TPM_CAPABILITY_AREA) 0x00000123)
1720 #define TPM_CAP_PROP_INPUT_BUFFER ((TPM_CAPABILITY_AREA) 0x00000124)
1721
1722 //
1723 // Part 2, section 21.6: TPM_CAP_VERSION_INFO
1724 // [size_is(vendorSpecificSize)] BYTE* vendorSpecific;
1725 //
1726 typedef struct tdTPM_CAP_VERSION_INFO {
1727 TPM_STRUCTURE_TAG tag;
1728 TPM_VERSION version;
1729 UINT16 specLevel;
1730 UINT8 errataRev;
1731 UINT8 tpmVendorID[4];
1732 UINT16 vendorSpecificSize;
1733 UINT8 *vendorSpecific;
1734 } TPM_CAP_VERSION_INFO;
1735
1736 //
1737 // Part 2, section 22: DAA Structures
1738 //
1739
1740 #define TPM_DAA_SIZE_r0 (43)
1741 #define TPM_DAA_SIZE_r1 (43)
1742 #define TPM_DAA_SIZE_r2 (128)
1743 #define TPM_DAA_SIZE_r3 (168)
1744 #define TPM_DAA_SIZE_r4 (219)
1745 #define TPM_DAA_SIZE_NT (20)
1746 #define TPM_DAA_SIZE_v0 (128)
1747 #define TPM_DAA_SIZE_v1 (192)
1748 #define TPM_DAA_SIZE_NE (256)
1749 #define TPM_DAA_SIZE_w (256)
1750 #define TPM_DAA_SIZE_issuerModulus (256)
1751 #define TPM_DAA_power0 (104)
1752 #define TPM_DAA_power1 (1024)
1753
1754 typedef struct tdTPM_DAA_ISSUER
1755 {
1756 TPM_STRUCTURE_TAG tag;
1757 TPM_DIGEST DAA_digest_R0;
1758 TPM_DIGEST DAA_digest_R1;
1759 TPM_DIGEST DAA_digest_S0;
1760 TPM_DIGEST DAA_digest_S1;
1761 TPM_DIGEST DAA_digest_n;
1762 TPM_DIGEST DAA_digest_gamma;
1763 UINT8 DAA_generic_q[26];
1764 } TPM_DAA_ISSUER;
1765
1766
1767 typedef struct tdTPM_DAA_TPM
1768 {
1769 TPM_STRUCTURE_TAG tag;
1770 TPM_DIGEST DAA_digestIssuer;
1771 TPM_DIGEST DAA_digest_v0;
1772 TPM_DIGEST DAA_digest_v1;
1773 TPM_DIGEST DAA_rekey;
1774 UINT32 DAA_count;
1775 } TPM_DAA_TPM;
1776
1777 typedef struct tdTPM_DAA_CONTEXT
1778 {
1779 TPM_STRUCTURE_TAG tag;
1780 TPM_DIGEST DAA_digestContext;
1781 TPM_DIGEST DAA_digest;
1782 TPM_DAA_CONTEXT_SEED DAA_contextSeed;
1783 UINT8 DAA_scratch[256];
1784 UINT8 DAA_stage;
1785 } TPM_DAA_CONTEXT;
1786
1787 typedef struct tdTPM_DAA_JOINDATA
1788 {
1789 UINT8 DAA_join_u0[128];
1790 UINT8 DAA_join_u1[138];
1791 TPM_DIGEST DAA_digest_n0;
1792 } TPM_DAA_JOINDATA;
1793
1794 typedef struct tdTPM_DAA_BLOB
1795 {
1796 TPM_STRUCTURE_TAG tag;
1797 TPM_RESOURCE_TYPE resourceType;
1798 UINT8 label[16];
1799 TPM_DIGEST blobIntegrity;
1800 UINT32 additionalSize;
1801 UINT8 *additionalData;
1802 UINT32 sensitiveSize;
1803 UINT8 *sensitiveData;
1804 } TPM_DAA_BLOB;
1805
1806 typedef struct tdTPM_DAA_SENSITIVE
1807 {
1808 TPM_STRUCTURE_TAG tag;
1809 UINT32 internalSize;
1810 UINT8 *internalData;
1811 } TPM_DAA_SENSITIVE;
1812
1813
1814 //
1815 // Part 2, section 23: Redirection
1816 //
1817
1818 // This section of the TPM spec defines exactly one value but does not
1819 // give it a name. The definition of TPM_SetRedirection in Part3
1820 // refers to exactly one name but does not give its value. We join
1821 // them here.
1822 #define TPM_REDIR_GPIO (0x00000001)
1823
1824 //
1825 // TPM Command & Response Headers
1826 //
1827 typedef struct tdTPM_RQU_COMMAND_HDR {
1828 TPM_STRUCTURE_TAG tag;
1829 UINT32 paramSize;
1830 TPM_COMMAND_CODE ordinal;
1831 } TPM_RQU_COMMAND_HDR;
1832
1833 typedef struct tdTPM_RSP_COMMAND_HDR {
1834 TPM_STRUCTURE_TAG tag;
1835 UINT32 paramSize;
1836 TPM_RESULT returnCode;
1837 } TPM_RSP_COMMAND_HDR;
1838
1839 #pragma pack (pop)
1840
1841 #endif // _TPM12_H_
EFI Development Kit II mirror for PVE