2008-07-25 14:21:57 +02:00
/** @file
2008-01-02 07:43:26 +01:00
TPM Specification data structures ( TCG TPM Specification Version 1.2 Revision 94 )
See http : //trustedcomputinggroup.org for latest specification updates
2008-10-20 17:16:32 +02:00
Copyright ( c ) 2006 - 2008 , Intel Corporation
2008-02-25 08:01:44 +01:00
All rights reserved . This program and the accompanying materials
are licensed and made available under the terms and conditions of the BSD License
which accompanies this distribution . The full text of the license may be found at
http : //opensource.org/licenses/bsd-license.php
THE PROGRAM IS DISTRIBUTED UNDER THE BSD LICENSE ON AN " AS IS " BASIS ,
WITHOUT WARRANTIES OR REPRESENTATIONS OF ANY KIND , EITHER EXPRESS OR IMPLIED .
* */
2008-01-02 07:43:26 +01:00
# ifndef _TPM12_H_
# define _TPM12_H_
2008-08-14 05:22:55 +02:00
///
/// The start of TPM return codes
///
2008-01-02 07:43:26 +01:00
# define TPM_BASE (EFI_MAX_BIT + (EFI_MAX_BIT >> 1))
//
2008-12-02 09:15:14 +01:00
// All structures MUST be packed on a byte boundary.
2008-01-02 07:43:26 +01:00
//
2008-11-11 23:21:08 +01:00
2008-09-16 18:53:12 +02:00
# pragma pack (1)
2008-01-02 07:43:26 +01:00
//
2008-10-20 17:16:32 +02:00
// Part 2, section 2.2.3: Helper redefinitions
2008-01-02 07:43:26 +01:00
//
typedef UINT8 TPM_AUTH_DATA_USAGE ;
typedef UINT8 TPM_PAYLOAD_TYPE ;
typedef UINT8 TPM_VERSION_BYTE ;
typedef UINT16 TPM_TAG ;
typedef UINT16 TPM_PROTOCOL_ID ;
typedef UINT16 TPM_STARTUP_TYPE ;
typedef UINT16 TPM_ENC_SCHEME ;
typedef UINT16 TPM_SIG_SCHEME ;
typedef UINT16 TPM_MIGRATE_SCHEME ;
typedef UINT16 TPM_PHYSICAL_PRESENCE ;
typedef UINT16 TPM_ENTITY_TYPE ;
typedef UINT16 TPM_KEY_USAGE ;
typedef UINT16 TPM_EK_TYPE ;
typedef UINT16 TPM_STRUCTURE_TAG ;
typedef UINT16 TPM_PLATFORM_SPECIFIC ;
typedef UINT32 TPM_COMMAND_CODE ;
typedef UINT32 TPM_CAPABILITY_AREA ;
typedef UINT32 TPM_KEY_FLAGS ;
typedef UINT32 TPM_ALGORITHM_ID ;
typedef UINT32 TPM_MODIFIER_INDICATOR ;
typedef UINT32 TPM_ACTUAL_COUNT ;
typedef UINT32 TPM_TRANSPORT_ATTRIBUTES ;
typedef UINT32 TPM_AUTHHANDLE ;
typedef UINT32 TPM_DIRINDEX ;
typedef UINT32 TPM_KEY_HANDLE ;
typedef UINT32 TPM_PCRINDEX ;
typedef UINT32 TPM_RESULT ;
typedef UINT32 TPM_RESOURCE_TYPE ;
typedef UINT32 TPM_KEY_CONTROL ;
typedef UINT32 TPM_NV_INDEX ;
typedef UINT32 TPM_FAMILY_ID ;
typedef UINT32 TPM_FAMILY_VERIFICATION ;
typedef UINT32 TPM_STARTUP_EFFECTS ;
typedef UINT32 TPM_SYM_MODE ;
typedef UINT32 TPM_FAMILY_FLAGS ;
typedef UINT32 TPM_DELEGATE_INDEX ;
typedef UINT32 TPM_CMK_DELEGATE ;
typedef UINT32 TPM_COUNT_ID ;
typedef UINT32 TPM_REDIT_COMMAND ;
typedef UINT32 TPM_TRANSHANDLE ;
typedef UINT32 TPM_HANDLE ;
typedef UINT32 TPM_FAMILY_OPERATION ;
//
// Part 2, section 2.2.4: Vendor specific
// The following defines allow for the quick specification of a
// vendor specific item.
//
# define TPM_Vendor_Specific32 ((UINT32) 0x00000400)
# define TPM_Vendor_Specific8 ((UINT8) 0x80)
//
2008-10-20 17:16:32 +02:00
// Part 2, section 3.1: TPM_STRUCTURE_TAG
2008-01-02 07:43:26 +01:00
//
# define TPM_TAG_CONTEXTBLOB ((TPM_STRUCTURE_TAG) 0x0001)
# define TPM_TAG_CONTEXT_SENSITIVE ((TPM_STRUCTURE_TAG) 0x0002)
# define TPM_TAG_CONTEXTPOINTER ((TPM_STRUCTURE_TAG) 0x0003)
# define TPM_TAG_CONTEXTLIST ((TPM_STRUCTURE_TAG) 0x0004)
# define TPM_TAG_SIGNINFO ((TPM_STRUCTURE_TAG) 0x0005)
# define TPM_TAG_PCR_INFO_LONG ((TPM_STRUCTURE_TAG) 0x0006)
# define TPM_TAG_PERSISTENT_FLAGS ((TPM_STRUCTURE_TAG) 0x0007)
# define TPM_TAG_VOLATILE_FLAGS ((TPM_STRUCTURE_TAG) 0x0008)
# define TPM_TAG_PERSISTENT_DATA ((TPM_STRUCTURE_TAG) 0x0009)
# define TPM_TAG_VOLATILE_DATA ((TPM_STRUCTURE_TAG) 0x000A)
# define TPM_TAG_SV_DATA ((TPM_STRUCTURE_TAG) 0x000B)
# define TPM_TAG_EK_BLOB ((TPM_STRUCTURE_TAG) 0x000C)
# define TPM_TAG_EK_BLOB_AUTH ((TPM_STRUCTURE_TAG) 0x000D)
# define TPM_TAG_COUNTER_VALUE ((TPM_STRUCTURE_TAG) 0x000E)
# define TPM_TAG_TRANSPORT_INTERNAL ((TPM_STRUCTURE_TAG) 0x000F)
# define TPM_TAG_TRANSPORT_LOG_IN ((TPM_STRUCTURE_TAG) 0x0010)
# define TPM_TAG_TRANSPORT_LOG_OUT ((TPM_STRUCTURE_TAG) 0x0011)
# define TPM_TAG_AUDIT_EVENT_IN ((TPM_STRUCTURE_TAG) 0x0012)
# define TPM_TAG_AUDIT_EVENT_OUT ((TPM_STRUCTURE_TAG) 0x0013)
# define TPM_TAG_CURRENT_TICKS ((TPM_STRUCTURE_TAG) 0x0014)
# define TPM_TAG_KEY ((TPM_STRUCTURE_TAG) 0x0015)
# define TPM_TAG_STORED_DATA12 ((TPM_STRUCTURE_TAG) 0x0016)
# define TPM_TAG_NV_ATTRIBUTES ((TPM_STRUCTURE_TAG) 0x0017)
# define TPM_TAG_NV_DATA_PUBLIC ((TPM_STRUCTURE_TAG) 0x0018)
# define TPM_TAG_NV_DATA_SENSITIVE ((TPM_STRUCTURE_TAG) 0x0019)
# define TPM_TAG_DELEGATIONS ((TPM_STRUCTURE_TAG) 0x001A)
# define TPM_TAG_DELEGATE_PUBLIC ((TPM_STRUCTURE_TAG) 0x001B)
# define TPM_TAG_DELEGATE_TABLE_ROW ((TPM_STRUCTURE_TAG) 0x001C)
# define TPM_TAG_TRANSPORT_AUTH ((TPM_STRUCTURE_TAG) 0x001D)
# define TPM_TAG_TRANSPORT_PUBLIC ((TPM_STRUCTURE_TAG) 0x001E)
# define TPM_TAG_PERMANENT_FLAGS ((TPM_STRUCTURE_TAG) 0x001F)
# define TPM_TAG_STCLEAR_FLAGS ((TPM_STRUCTURE_TAG) 0x0020)
# define TPM_TAG_STANY_FLAGS ((TPM_STRUCTURE_TAG) 0x0021)
# define TPM_TAG_PERMANENT_DATA ((TPM_STRUCTURE_TAG) 0x0022)
# define TPM_TAG_STCLEAR_DATA ((TPM_STRUCTURE_TAG) 0x0023)
# define TPM_TAG_STANY_DATA ((TPM_STRUCTURE_TAG) 0x0024)
# define TPM_TAG_FAMILY_TABLE_ENTRY ((TPM_STRUCTURE_TAG) 0x0025)
# define TPM_TAG_DELEGATE_SENSITIVE ((TPM_STRUCTURE_TAG) 0x0026)
# define TPM_TAG_DELG_KEY_BLOB ((TPM_STRUCTURE_TAG) 0x0027)
# define TPM_TAG_KEY12 ((TPM_STRUCTURE_TAG) 0x0028)
# define TPM_TAG_CERTIFY_INFO2 ((TPM_STRUCTURE_TAG) 0x0029)
# define TPM_TAG_DELEGATE_OWNER_BLOB ((TPM_STRUCTURE_TAG) 0x002A)
# define TPM_TAG_EK_BLOB_ACTIVATE ((TPM_STRUCTURE_TAG) 0x002B)
# define TPM_TAG_DAA_BLOB ((TPM_STRUCTURE_TAG) 0x002C)
# define TPM_TAG_DAA_CONTEXT ((TPM_STRUCTURE_TAG) 0x002D)
# define TPM_TAG_DAA_ENFORCE ((TPM_STRUCTURE_TAG) 0x002E)
# define TPM_TAG_DAA_ISSUER ((TPM_STRUCTURE_TAG) 0x002F)
# define TPM_TAG_CAP_VERSION_INFO ((TPM_STRUCTURE_TAG) 0x0030)
# define TPM_TAG_DAA_SENSITIVE ((TPM_STRUCTURE_TAG) 0x0031)
# define TPM_TAG_DAA_TPM ((TPM_STRUCTURE_TAG) 0x0032)
# define TPM_TAG_CMK_MIGAUTH ((TPM_STRUCTURE_TAG) 0x0033)
# define TPM_TAG_CMK_SIGTICKET ((TPM_STRUCTURE_TAG) 0x0034)
# define TPM_TAG_CMK_MA_APPROVAL ((TPM_STRUCTURE_TAG) 0x0035)
# define TPM_TAG_QUOTE_INFO2 ((TPM_STRUCTURE_TAG) 0x0036)
//
// Part 2, section 4: TPM Types
//
//
// Part 2, section 4.1: TPM_RESOURCE_TYPE
//
2008-10-20 17:16:32 +02:00
# define TPM_RT_KEY ((TPM_RESOURCE_TYPE) 0x00000001) ///< The handle is a key handle and is the result of a LoadKey type operation
# define TPM_RT_AUTH ((TPM_RESOURCE_TYPE) 0x00000002) ///< The handle is an authorization handle. Auth handles come from TPM_OIAP, TPM_OSAP and TPM_DSAP
# define TPM_RT_HASH ((TPM_RESOURCE_TYPE) 0x00000003) ///< Reserved for hashes
# define TPM_RT_TRANS ((TPM_RESOURCE_TYPE) 0x00000004) ///< The handle is for a transport session. Transport handles come from TPM_EstablishTransport
# define TPM_RT_CONTEXT ((TPM_RESOURCE_TYPE) 0x00000005) ///< Resource wrapped and held outside the TPM using the context save/restore commands
# define TPM_RT_COUNTER ((TPM_RESOURCE_TYPE) 0x00000006) ///< Reserved for counters
# define TPM_RT_DELEGATE ((TPM_RESOURCE_TYPE) 0x00000007) ///< The handle is for a delegate row. These are the internal rows held in NV storage by the TPM
# define TPM_RT_DAA_TPM ((TPM_RESOURCE_TYPE) 0x00000008) ///< The value is a DAA TPM specific blob
# define TPM_RT_DAA_V0 ((TPM_RESOURCE_TYPE) 0x00000009) ///< The value is a DAA V0 parameter
# define TPM_RT_DAA_V1 ((TPM_RESOURCE_TYPE) 0x0000000A) ///< The value is a DAA V1 parameter
2008-01-02 07:43:26 +01:00
//
// Part 2, section 4.2: TPM_PAYLOAD_TYPE
//
2008-10-20 17:16:32 +02:00
# define TPM_PT_ASYM ((TPM_PAYLOAD_TYPE) 0x01) ///< The entity is an asymmetric key
# define TPM_PT_BIND ((TPM_PAYLOAD_TYPE) 0x02) ///< The entity is bound data
# define TPM_PT_MIGRATE ((TPM_PAYLOAD_TYPE) 0x03) ///< The entity is a migration blob
# define TPM_PT_MAINT ((TPM_PAYLOAD_TYPE) 0x04) ///< The entity is a maintenance blob
# define TPM_PT_SEAL ((TPM_PAYLOAD_TYPE) 0x05) ///< The entity is sealed data
# define TPM_PT_MIGRATE_RESTRICTED ((TPM_PAYLOAD_TYPE) 0x06) ///< The entity is a restricted-migration asymmetric key
# define TPM_PT_MIGRATE_EXTERNAL ((TPM_PAYLOAD_TYPE) 0x07) ///< The entity is a external migratable key
# define TPM_PT_CMK_MIGRATE ((TPM_PAYLOAD_TYPE) 0x08) ///< The entity is a CMK migratable blob
# define TPM_PT_VENDOR_SPECIFIC ((TPM_PAYLOAD_TYPE) 0x80) ///< 0x80 - 0xFF Vendor specific payloads
//
// Part 2, section 4.3: TPM_ENTITY_TYPE
//
# define TPM_ET_KEYHANDLE ((UINT16) 0x0001) ///< The entity is a keyHandle or key
# define TPM_ET_OWNER ((UINT16) 0x0002) ///< The entity is the TPM Owner
# define TPM_ET_DATA ((UINT16) 0x0003) ///< The entity is some data
# define TPM_ET_SRK ((UINT16) 0x0004) ///< The entity is the SRK
# define TPM_ET_KEY ((UINT16) 0x0005) ///< The entity is a key or keyHandle
# define TPM_ET_REVOKE ((UINT16) 0x0006) ///< The entity is the RevokeTrust value
# define TPM_ET_DEL_OWNER_BLOB ((UINT16) 0x0007) ///< The entity is a delegate owner blob
# define TPM_ET_DEL_ROW ((UINT16) 0x0008) ///< The entity is a delegate row
# define TPM_ET_DEL_KEY_BLOB ((UINT16) 0x0009) ///< The entity is a delegate key blob
# define TPM_ET_COUNTER ((UINT16) 0x000A) ///< The entity is a counter
# define TPM_ET_NV ((UINT16) 0x000B) ///< The entity is a NV index
# define TPM_ET_RESERVED_HANDLE ((UINT16) 0x0040) ///< Reserved. This value avoids collisions with the handle MSB setting.
2008-01-02 07:43:26 +01:00
//
// TPM_ENTITY_TYPE MSB Values: The MSB is used to indicate the ADIP encryption sheme when applicable
//
2008-10-20 17:16:32 +02:00
# define TPM_ET_XOR ((UINT16) 0x0000) ///< ADIP encryption scheme: XOR
# define TPM_ET_AES128 ((UINT16) 0x0006) ///< ADIP encryption scheme: AES 128 bits
2008-01-02 07:43:26 +01:00
//
// Part 2, section 4.4.1: Reserved Key Handles
//
2008-10-20 17:16:32 +02:00
# define TPM_KH_SRK ((TPM_KEY_HANDLE) 0x40000000) ///< The handle points to the SRK
# define TPM_KH_OWNER ((TPM_KEY_HANDLE) 0x40000001) ///< The handle points to the TPM Owner
# define TPM_KH_REVOKE ((TPM_KEY_HANDLE) 0x40000002) ///< The handle points to the RevokeTrust value
# define TPM_KH_TRANSPORT ((TPM_KEY_HANDLE) 0x40000003) ///< The handle points to the EstablishTransport static authorization
# define TPM_KH_OPERATOR ((TPM_KEY_HANDLE) 0x40000004) ///< The handle points to the Operator auth
# define TPM_KH_ADMIN ((TPM_KEY_HANDLE) 0x40000005) ///< The handle points to the delegation administration auth
# define TPM_KH_EK ((TPM_KEY_HANDLE) 0x40000006) ///< The handle points to the PUBEK, only usable with TPM_OwnerReadInternalPub
2008-01-02 07:43:26 +01:00
//
// Part 2, section 4.5: TPM_STARTUP_TYPE
//
2008-10-20 17:16:32 +02:00
# define TPM_ST_CLEAR ((TPM_STARTUP_TYPE) 0x0001) ///< The TPM is starting up from a clean state
# define TPM_ST_STATE ((TPM_STARTUP_TYPE) 0x0002) ///< The TPM is starting up from a saved state
# define TPM_ST_DEACTIVATED ((TPM_STARTUP_TYPE) 0x0003) ///< The TPM is to startup and set the deactivated flag to TRUE
2008-01-02 07:43:26 +01:00
//
// Part 2, section 4.6: TPM_STATUP_EFFECTS
// The table makeup is still an open issue.
//
//
// Part 2, section 4.7: TPM_PROTOCOL_ID
//
2008-10-20 17:16:32 +02:00
# define TPM_PID_OIAP ((TPM_PROTOCOL_ID) 0x0001) ///< The OIAP protocol.
# define TPM_PID_OSAP ((TPM_PROTOCOL_ID) 0x0002) ///< The OSAP protocol.
# define TPM_PID_ADIP ((TPM_PROTOCOL_ID) 0x0003) ///< The ADIP protocol.
# define TPM_PID_ADCP ((TPM_PROTOCOL_ID) 0x0004) ///< The ADCP protocol.
# define TPM_PID_OWNER ((TPM_PROTOCOL_ID) 0x0005) ///< The protocol for taking ownership of a TPM.
# define TPM_PID_DSAP ((TPM_PROTOCOL_ID) 0x0006) ///< The DSAP protocol
# define TPM_PID_TRANSPORT ((TPM_PROTOCOL_ID) 0x0007) ///< The transport protocol
2008-01-02 07:43:26 +01:00
//
// Part 2, section 4.8: TPM_ALGORITHM_ID
// The TPM MUST support the algorithms TPM_ALG_RSA, TPM_ALG_SHA, TPM_ALG_HMAC,
// TPM_ALG_MGF1
//
2008-10-20 17:16:32 +02:00
# define TPM_ALG_RSA ((TPM_ALGORITHM_ID) 0x00000001) ///< The RSA algorithm.
# define TPM_ALG_DES ((TPM_ALGORITHM_ID) 0x00000002) ///< The DES algorithm
# define TPM_ALG_3DES ((TPM_ALGORITHM_ID) 0x00000003) ///< The 3DES algorithm in EDE mode
# define TPM_ALG_SHA ((TPM_ALGORITHM_ID) 0x00000004) ///< The SHA1 algorithm
# define TPM_ALG_HMAC ((TPM_ALGORITHM_ID) 0x00000005) ///< The RFC 2104 HMAC algorithm
# define TPM_ALG_AES128 ((TPM_ALGORITHM_ID) 0x00000006) ///< The AES algorithm, key size 128
# define TPM_ALG_MGF1 ((TPM_ALGORITHM_ID) 0x00000007) ///< The XOR algorithm using MGF1 to create a string the size of the encrypted block
# define TPM_ALG_AES192 ((TPM_ALGORITHM_ID) 0x00000008) ///< AES, key size 192
# define TPM_ALG_AES256 ((TPM_ALGORITHM_ID) 0x00000009) ///< AES, key size 256
# define TPM_ALG_XOR ((TPM_ALGORITHM_ID) 0x0000000A) ///< XOR using the rolling nonces
2008-01-02 07:43:26 +01:00
//
// Part 2, section 4.9: TPM_PHYSICAL_PRESENCE
//
2008-10-20 17:16:32 +02:00
# define TPM_PHYSICAL_PRESENCE_HW_DISABLE ((TPM_PHYSICAL_PRESENCE) 0x0200) ///< Sets the physicalPresenceHWEnable to FALSE
# define TPM_PHYSICAL_PRESENCE_CMD_DISABLE ((TPM_PHYSICAL_PRESENCE) 0x0100) ///< Sets the physicalPresenceCMDEnable to FALSE
# define TPM_PHYSICAL_PRESENCE_LIFETIME_LOCK ((TPM_PHYSICAL_PRESENCE) 0x0080) ///< Sets the physicalPresenceLifetimeLock to TRUE
# define TPM_PHYSICAL_PRESENCE_HW_ENABLE ((TPM_PHYSICAL_PRESENCE) 0x0040) ///< Sets the physicalPresenceHWEnable to TRUE
# define TPM_PHYSICAL_PRESENCE_CMD_ENABLE ((TPM_PHYSICAL_PRESENCE) 0x0020) ///< Sets the physicalPresenceCMDEnable to TRUE
# define TPM_PHYSICAL_PRESENCE_NOTPRESENT ((TPM_PHYSICAL_PRESENCE) 0x0010) ///< Sets PhysicalPresence = FALSE
# define TPM_PHYSICAL_PRESENCE_PRESENT ((TPM_PHYSICAL_PRESENCE) 0x0008) ///< Sets PhysicalPresence = TRUE
# define TPM_PHYSICAL_PRESENCE_LOCK ((TPM_PHYSICAL_PRESENCE) 0x0004) ///< Sets PhysicalPresenceLock = TRUE
2008-01-02 07:43:26 +01:00
//
// Part 2, section 4.10: TPM_MIGRATE_SCHEME
//
2008-10-20 17:16:32 +02:00
# define TPM_MS_MIGRATE ((TPM_MIGRATE_SCHEME) 0x0001) ///< A public key that can be used with all TPM migration commands other than 'ReWrap' mode.
# define TPM_MS_REWRAP ((TPM_MIGRATE_SCHEME) 0x0002) ///< A public key that can be used for the ReWrap mode of TPM_CreateMigrationBlob.
# define TPM_MS_MAINT ((TPM_MIGRATE_SCHEME) 0x0003) ///< A public key that can be used for the Maintenance commands
# define TPM_MS_RESTRICT_MIGRATE ((TPM_MIGRATE_SCHEME) 0x0004) ///< The key is to be migrated to a Migration Authority.
# define TPM_MS_RESTRICT_APPROVE_DOUBLE ((TPM_MIGRATE_SCHEME) 0x0005) ///< The key is to be migrated to an entity approved by a Migration Authority using double wrapping
2008-01-02 07:43:26 +01:00
//
// Part 2, section 4.11: TPM_EK_TYPE
//
2008-10-20 17:16:32 +02:00
# define TPM_EK_TYPE_ACTIVATE ((TPM_EK_TYPE) 0x0001) ///< The blob MUST be TPM_EK_BLOB_ACTIVATE
# define TPM_EK_TYPE_AUTH ((TPM_EK_TYPE) 0x0002) ///< The blob MUST be TPM_EK_BLOB_AUTH
2008-01-02 07:43:26 +01:00
//
// Part 2, section 4.12: TPM_PLATFORM_SPECIFIC
//
2008-10-20 17:16:32 +02:00
# define TPM_PS_PC_11 ((TPM_PLATFORM_SPECIFIC) 0x0001) ///< PC Specific version 1.1
# define TPM_PS_PC_12 ((TPM_PLATFORM_SPECIFIC) 0x0002) ///< PC Specific version 1.2
# define TPM_PS_PDA_12 ((TPM_PLATFORM_SPECIFIC) 0x0003) ///< PDA Specific version 1.2
# define TPM_PS_Server_12 ((TPM_PLATFORM_SPECIFIC) 0x0004) ///< Server Specific version 1.2
# define TPM_PS_Mobile_12 ((TPM_PLATFORM_SPECIFIC) 0x0005) ///< Mobil Specific version 1.2
2008-01-02 07:43:26 +01:00
//
// Part 2, section 5: Basic Structures
//
2008-12-02 09:15:14 +01:00
///
/// Part 2, section 5.1: TPM_STRUCT_VER
///
2008-01-02 07:43:26 +01:00
typedef struct tdTPM_STRUCT_VER {
UINT8 major ;
UINT8 minor ;
UINT8 revMajor ;
UINT8 revMinor ;
} TPM_STRUCT_VER ;
2008-12-02 09:15:14 +01:00
///
/// Part 2, section 5.3: TPM_VERSION
///
2008-01-02 07:43:26 +01:00
typedef struct tdTPM_VERSION {
TPM_VERSION_BYTE major ;
TPM_VERSION_BYTE minor ;
UINT8 revMajor ;
UINT8 revMinor ;
} TPM_VERSION ;
2008-12-02 09:15:14 +01:00
///
/// Part 2, section 5.4: TPM_DIGEST
///
2008-01-02 07:43:26 +01:00
typedef struct tdTPM_DIGEST {
UINT8 digest [ TPM_SHA1_160_HASH_LEN ] ;
} TPM_DIGEST ;
2008-12-02 09:15:14 +01:00
# define TPM_SHA1_160_HASH_LEN 0x14
# define TPM_SHA1BASED_NONCE_LEN TPM_SHA1_160_HASH_LEN
2008-10-20 17:16:32 +02:00
typedef TPM_DIGEST TPM_CHOSENID_HASH ;
typedef TPM_DIGEST TPM_COMPOSITE_HASH ;
typedef TPM_DIGEST TPM_DIRVALUE ;
2008-01-02 07:43:26 +01:00
typedef TPM_DIGEST TPM_HMAC ;
2008-10-20 17:16:32 +02:00
typedef TPM_DIGEST TPM_PCRVALUE ;
typedef TPM_DIGEST TPM_AUDITDIGEST ;
typedef TPM_DIGEST TPM_DAA_TPM_SEED ;
typedef TPM_DIGEST TPM_DAA_CONTEXT_SEED ;
2008-01-02 07:43:26 +01:00
2008-12-02 09:15:14 +01:00
///
/// Part 2, section 5.5: TPM_NONCE
///
2008-01-02 07:43:26 +01:00
typedef struct tdTPM_NONCE {
UINT8 nonce [ 20 ] ;
} TPM_NONCE ;
//
// Part 2, section 5.6: TPM_AUTHDATA
//
typedef UINT8 tdTPM_AUTHDATA [ 20 ] ;
typedef tdTPM_AUTHDATA TPM_AUTHDATA ;
typedef TPM_AUTHDATA TPM_SECRET ;
typedef TPM_AUTHDATA TPM_ENCAUTH ;
2008-12-02 09:15:14 +01:00
///
/// Part 2, section 5.7: TPM_KEY_HANDLE_LIST
/// Size of handle is loaded * sizeof(TPM_KEY_HANDLE)
///
2008-01-02 07:43:26 +01:00
typedef struct tdTPM_KEY_HANDLE_LIST {
UINT16 loaded ;
TPM_KEY_HANDLE handle [ 1 ] ;
} TPM_KEY_HANDLE_LIST ;
//
// Part 2, section 5.8: TPM_KEY_USAGE values
//
2008-10-20 17:16:32 +02:00
///
/// TPM_KEY_SIGNING SHALL indicate a signing key. The [private] key SHALL be
/// used for signing operations, only. This means that it MUST be a leaf of the
/// Protected Storage key hierarchy.
///
2008-01-02 07:43:26 +01:00
# define TPM_KEY_SIGNING ((UINT16) 0x0010)
2008-10-20 17:16:32 +02:00
///
/// TPM_KEY_STORAGE SHALL indicate a storage key. The key SHALL be used to wrap
/// and unwrap other keys in the Protected Storage hierarchy
///
2008-01-02 07:43:26 +01:00
# define TPM_KEY_STORAGE ((UINT16) 0x0011)
2008-10-20 17:16:32 +02:00
///
/// TPM_KEY_IDENTITY SHALL indicate an identity key. The key SHALL be used for
/// operations that require a TPM identity, only.
///
2008-01-02 07:43:26 +01:00
# define TPM_KEY_IDENTITY ((UINT16) 0x0012)
2008-10-20 17:16:32 +02:00
///
/// TPM_KEY_AUTHCHANGE SHALL indicate an ephemeral key that is in use during
/// the ChangeAuthAsym process, only.
///
2008-01-02 07:43:26 +01:00
# define TPM_KEY_AUTHCHANGE ((UINT16) 0x0013)
2008-10-20 17:16:32 +02:00
///
/// TPM_KEY_BIND SHALL indicate a key that can be used for TPM_Bind and
/// TPM_Unbind operations only.
///
2008-01-02 07:43:26 +01:00
# define TPM_KEY_BIND ((UINT16) 0x0014)
2008-10-20 17:16:32 +02:00
///
/// TPM_KEY_LEGACY SHALL indicate a key that can perform signing and binding
/// operations. The key MAY be used for both signing and binding operations.
/// The TPM_KEY_LEGACY key type is to allow for use by applications where both
/// signing and encryption operations occur with the same key. The use of this
/// key type is not recommended TPM_KEY_MIGRATE 0x0016 This SHALL indicate a
/// key in use for TPM_MigrateKey
///
2008-01-02 07:43:26 +01:00
# define TPM_KEY_LEGACY ((UINT16) 0x0015)
2008-10-20 17:16:32 +02:00
///
/// TPM_KEY_MIGRAGE SHALL indicate a key in use for TPM_MigrateKey
///
2008-01-02 07:43:26 +01:00
# define TPM_KEY_MIGRATE ((UINT16) 0x0016)
//
2008-10-20 17:16:32 +02:00
// Part 2, section 5.8.1: Mandatory Key Usage Schemes
2008-01-02 07:43:26 +01:00
//
# define TPM_ES_NONE ((TPM_ENC_SCHEME) 0x0001)
# define TPM_ES_RSAESPKCSv15 ((TPM_ENC_SCHEME) 0x0002)
# define TPM_ES_RSAESOAEP_SHA1_MGF1 ((TPM_ENC_SCHEME) 0x0003)
# define TPM_ES_SYM_CNT ((TPM_ENC_SCHEME) 0x0004)
# define TPM_ES_SYM_OFB ((TPM_ENC_SCHEME) 0x0005)
# define TPM_SS_NONE ((TPM_SIG_SCHEME) 0x0001)
# define TPM_SS_RSASSAPKCS1v15_SHA1 ((TPM_SIG_SCHEME) 0x0002)
# define TPM_SS_RSASSAPKCS1v15_DER ((TPM_SIG_SCHEME) 0x0003)
# define TPM_SS_RSASSAPKCS1v15_INFO ((TPM_SIG_SCHEME) 0x0004)
//
// Part 2, section 5.9: TPM_AUTH_DATA_USAGE values
//
# define TPM_AUTH_NEVER ((TPM_AUTH_DATA_USAGE) 0x00)
# define TPM_AUTH_ALWAYS ((TPM_AUTH_DATA_USAGE) 0x01)
# define TPM_AUTH_PRIV_USE_ONLY ((TPM_AUTH_DATA_USAGE) 0x03)
2008-12-02 09:15:14 +01:00
///
/// Part 2, section 5.10: TPM_KEY_FLAGS
///
2008-07-16 08:31:22 +02:00
typedef enum tdTPM_KEY_FLAGS {
2008-01-02 07:43:26 +01:00
redirection = 0x00000001 ,
migratable = 0x00000002 ,
isVolatile = 0x00000004 ,
pcrIgnoredOnRead = 0x00000008 ,
migrateAuthority = 0x00000010
2008-07-21 04:46:21 +02:00
} TPM_KEY_FLAGS_BITS ;
2008-01-02 07:43:26 +01:00
2008-12-02 09:15:14 +01:00
///
/// Part 2, section 5.11: TPM_CHANGEAUTH_VALIDATE
///
2008-01-02 07:43:26 +01:00
typedef struct tdTPM_CHANGEAUTH_VALIDATE {
TPM_SECRET newAuthSecret ;
TPM_NONCE n1 ;
} TPM_CHANGEAUTH_VALIDATE ;
2008-12-02 09:15:14 +01:00
///
/// Part 2, section 5.12: TPM_MIGRATIONKEYAUTH
/// decalared after section 10 to catch declaration of TPM_PUBKEY
///
/// Part 2 section 10.1: TPM_KEY_PARMS
/// [size_is(parmSize)] BYTE* parms;
///
2008-01-02 07:43:26 +01:00
typedef struct tdTPM_KEY_PARMS {
TPM_ALGORITHM_ID algorithmID ;
TPM_ENC_SCHEME encScheme ;
TPM_SIG_SCHEME sigScheme ;
UINT32 parmSize ;
UINT8 * parms ;
} TPM_KEY_PARMS ;
2008-12-02 09:15:14 +01:00
///
/// Part 2, section 10.4: TPM_STORE_PUBKEY
///
2008-01-02 07:43:26 +01:00
typedef struct tdTPM_STORE_PUBKEY {
UINT32 keyLength ;
UINT8 key [ 1 ] ;
} TPM_STORE_PUBKEY ;
2008-12-02 09:15:14 +01:00
///
/// Part 2, section 10.5: TPM_PUBKEY
///
2008-01-02 07:43:26 +01:00
typedef struct tdTPM_PUBKEY {
TPM_KEY_PARMS algorithmParms ;
TPM_STORE_PUBKEY pubKey ;
} TPM_PUBKEY ;
2008-12-02 09:15:14 +01:00
///
/// Part 2, section 5.12: TPM_MIGRATIONKEYAUTH
///
2008-01-02 07:43:26 +01:00
typedef struct tdTPM_MIGRATIONKEYAUTH {
TPM_PUBKEY migrationKey ;
TPM_MIGRATE_SCHEME migrationScheme ;
TPM_DIGEST digest ;
} TPM_MIGRATIONKEYAUTH ;
2008-12-02 09:15:14 +01:00
///
/// Part 2, section 5.13: TPM_COUNTER_VALUE
///
2008-01-02 07:43:26 +01:00
typedef struct tdTPM_COUNTER_VALUE {
TPM_STRUCTURE_TAG tag ;
UINT8 label [ 4 ] ;
TPM_ACTUAL_COUNT counter ;
} TPM_COUNTER_VALUE ;
2008-12-02 09:15:14 +01:00
///
/// Part 2, section 5.14: TPM_SIGN_INFO
/// Size of data indicated by dataLen
///
2008-01-02 07:43:26 +01:00
typedef struct tdTPM_SIGN_INFO {
TPM_STRUCTURE_TAG tag ;
UINT8 fixed [ 4 ] ;
TPM_NONCE replay ;
UINT32 dataLen ;
UINT8 * data ;
} TPM_SIGN_INFO ;
2008-12-02 09:15:14 +01:00
///
/// Part 2, section 5.15: TPM_MSA_COMPOSITE
/// Number of migAuthDigest indicated by MSAlist
///
2008-01-02 07:43:26 +01:00
typedef struct tdTPM_MSA_COMPOSITE {
UINT32 MSAlist ;
TPM_DIGEST migAuthDigest [ 1 ] ;
} TPM_MSA_COMPOSITE ;
2008-12-02 09:15:14 +01:00
///
/// Part 2, section 5.16: TPM_CMK_AUTH
///
2008-01-02 07:43:26 +01:00
typedef struct tdTPM_CMK_AUTH {
TPM_DIGEST migrationAuthorityDigest ;
TPM_DIGEST destinationKeyDigest ;
TPM_DIGEST sourceKeyDigest ;
} TPM_CMK_AUTH ;
//
// Part 2, section 5.17: TPM_CMK_DELEGATE
//
2008-10-20 17:16:32 +02:00
# define TPM_CMK_DELEGATE_SIGNING ((TPM_CMK_DELEGATE) BIT31)
# define TPM_CMK_DELEGATE_STORAGE ((TPM_CMK_DELEGATE) BIT30)
# define TPM_CMK_DELEGATE_BIND ((TPM_CMK_DELEGATE) BIT29)
# define TPM_CMK_DELEGATE_LEGACY ((TPM_CMK_DELEGATE) BIT28)
# define TPM_CMK_DELEGATE_MIGRATE ((TPM_CMK_DELEGATE) BIT27)
2008-01-02 07:43:26 +01:00
2008-12-02 09:15:14 +01:00
///
/// Part 2, section 5.18: TPM_SELECT_SIZE
///
2008-01-02 07:43:26 +01:00
typedef struct tdTPM_SELECT_SIZE {
UINT8 major ;
UINT8 minor ;
UINT16 reqSize ;
} TPM_SELECT_SIZE ;
2008-12-02 09:15:14 +01:00
///
/// Part 2, section 5,19: TPM_CMK_MIGAUTH
///
2008-01-02 07:43:26 +01:00
typedef struct tdTPM_CMK_MIGAUTH {
TPM_STRUCTURE_TAG tag ;
TPM_DIGEST msaDigest ;
TPM_DIGEST pubKeyDigest ;
} TPM_CMK_MIGAUTH ;
2008-12-02 09:15:14 +01:00
///
/// Part 2, section 5.20: TPM_CMK_SIGTICKET
///
2008-01-02 07:43:26 +01:00
typedef struct tdTPM_CMK_SIGTICKET {
TPM_STRUCTURE_TAG tag ;
TPM_DIGEST verKeyDigest ;
TPM_DIGEST signedData ;
} TPM_CMK_SIGTICKET ;
2008-12-02 09:15:14 +01:00
///
/// Part 2, section 5.21: TPM_CMK_MA_APPROVAL
///
2008-01-02 07:43:26 +01:00
typedef struct tdTPM_CMK_MA_APPROVAL {
TPM_STRUCTURE_TAG tag ;
TPM_DIGEST migrationAuthorityDigest ;
} TPM_CMK_MA_APPROVAL ;
//
// Part 2, section 6: Command Tags
//
# define TPM_TAG_RQU_COMMAND ((TPM_STRUCTURE_TAG) 0x00C1)
# define TPM_TAG_RQU_AUTH1_COMMAND ((TPM_STRUCTURE_TAG) 0x00C2)
# define TPM_TAG_RQU_AUTH2_COMMAND ((TPM_STRUCTURE_TAG) 0x00C3)
# define TPM_TAG_RSP_COMMAND ((TPM_STRUCTURE_TAG) 0x00C4)
# define TPM_TAG_RSP_AUTH1_COMMAND ((TPM_STRUCTURE_TAG) 0x00C5)
# define TPM_TAG_RSP_AUTH2_COMMAND ((TPM_STRUCTURE_TAG) 0x00C6)
2008-12-02 09:15:14 +01:00
///
/// Part 2, section 7.1: TPM_PERMANENT_FLAGS
///
2008-01-02 07:43:26 +01:00
typedef struct tdTPM_PERMANENT_FLAGS {
TPM_STRUCTURE_TAG tag ;
BOOLEAN disable ;
BOOLEAN ownership ;
BOOLEAN deactivated ;
BOOLEAN readPubek ;
BOOLEAN disableOwnerClear ;
BOOLEAN allowMaintenance ;
BOOLEAN physicalPresenceLifetimeLock ;
BOOLEAN physicalPresenceHWEnable ;
BOOLEAN physicalPresenceCMDEnable ;
BOOLEAN CEKPUsed ;
BOOLEAN TPMpost ;
BOOLEAN TPMpostLock ;
BOOLEAN FIPS ;
BOOLEAN operator ;
BOOLEAN enableRevokeEK ;
BOOLEAN nvLocked ;
BOOLEAN readSRKPub ;
BOOLEAN tpmEstablished ;
BOOLEAN maintenanceDone ;
} TPM_PERMANENT_FLAGS ;
//
2008-10-20 17:16:32 +02:00
// Part 2, section 7.1.1: Flag Restrictions (of TPM_PERMANENT_FLAGS)
2008-01-02 07:43:26 +01:00
//
# define TPM_PF_DISABLE ((TPM_CAPABILITY_AREA) 1)
# define TPM_PF_OWNERSHIP ((TPM_CAPABILITY_AREA) 2)
# define TPM_PF_DEACTIVATED ((TPM_CAPABILITY_AREA) 3)
# define TPM_PF_READPUBEK ((TPM_CAPABILITY_AREA) 4)
# define TPM_PF_DISABLEOWNERCLEAR ((TPM_CAPABILITY_AREA) 5)
# define TPM_PF_ALLOWMAINTENANCE ((TPM_CAPABILITY_AREA) 6)
# define TPM_PF_PHYSICALPRESENCELIFETIMELOCK ((TPM_CAPABILITY_AREA) 7)
# define TPM_PF_PHYSICALPRESENCEHWENABLE ((TPM_CAPABILITY_AREA) 8)
# define TPM_PF_PHYSICALPRESENCECMDENABLE ((TPM_CAPABILITY_AREA) 9)
# define TPM_PF_CEKPUSED ((TPM_CAPABILITY_AREA) 10)
# define TPM_PF_TPMPOST ((TPM_CAPABILITY_AREA) 11)
# define TPM_PF_TPMPOSTLOCK ((TPM_CAPABILITY_AREA) 12)
# define TPM_PF_FIPS ((TPM_CAPABILITY_AREA) 13)
# define TPM_PF_OPERATOR ((TPM_CAPABILITY_AREA) 14)
# define TPM_PF_ENABLEREVOKEEK ((TPM_CAPABILITY_AREA) 15)
# define TPM_PF_NV_LOCKED ((TPM_CAPABILITY_AREA) 16)
# define TPM_PF_READSRKPUB ((TPM_CAPABILITY_AREA) 17)
# define TPM_PF_TPMESTABLISHED ((TPM_CAPABILITY_AREA) 18)
# define TPM_PF_MAINTENANCEDONE ((TPM_CAPABILITY_AREA) 19)
2008-12-02 09:15:14 +01:00
///
/// Part 2, section 7.2: TPM_STCLEAR_FLAGS
///
2008-01-02 07:43:26 +01:00
typedef struct tdTPM_STCLEAR_FLAGS {
TPM_STRUCTURE_TAG tag ;
BOOLEAN deactivated ;
BOOLEAN disableForceClear ;
BOOLEAN physicalPresence ;
BOOLEAN physicalPresenceLock ;
BOOLEAN bGlobalLock ;
} TPM_STCLEAR_FLAGS ;
//
2008-10-20 17:16:32 +02:00
// Part 2, section 7.2.1: Flag Restrictions (of TPM_STCLEAR_FLAGS)
2008-01-02 07:43:26 +01:00
//
# define TPM_SF_DEACTIVATED ((TPM_CAPABILITY_AREA) 1)
# define TPM_SF_DISABLEFORCECLEAR ((TPM_CAPABILITY_AREA) 2)
# define TPM_SF_PHYSICALPRESENCE ((TPM_CAPABILITY_AREA) 3)
# define TPM_SF_PHYSICALPRESENCELOCK ((TPM_CAPABILITY_AREA) 4)
# define TPM_SF_BGLOBALLOCK ((TPM_CAPABILITY_AREA) 5)
2008-12-02 09:15:14 +01:00
///
/// Part 2, section 7.3: TPM_STANY_FLAGS
///
2008-01-02 07:43:26 +01:00
typedef struct tdTPM_STANY_FLAGS {
TPM_STRUCTURE_TAG tag ;
BOOLEAN postInitialise ;
TPM_MODIFIER_INDICATOR localityModifier ;
BOOLEAN transportExclusive ;
BOOLEAN TOSPresent ;
} TPM_STANY_FLAGS ;
//
2008-10-20 17:16:32 +02:00
// Part 2, section 7.3.1: Flag Restrictions (of TPM_STANY_FLAGS)
2008-01-02 07:43:26 +01:00
//
# define TPM_AF_POSTINITIALISE ((TPM_CAPABILITY_AREA) 1)
# define TPM_AF_LOCALITYMODIFIER ((TPM_CAPABILITY_AREA) 2)
# define TPM_AF_TRANSPORTEXCLUSIVE ((TPM_CAPABILITY_AREA) 3)
# define TPM_AF_TOSPRESENT ((TPM_CAPABILITY_AREA) 4)
//
2008-10-20 17:16:32 +02:00
// All those structures defined in section 7.4, 7.5, 7.6 are not normative and
2008-01-02 07:43:26 +01:00
// thus no definitions here
//
//
// Part 2, section 8: PCR Structures
//
2008-12-02 09:15:14 +01:00
///
/// Part 2, section 8.1: TPM_PCR_SELECTION
/// Size of pcrSelect[] indicated by sizeOfSelect
///
2008-01-02 07:43:26 +01:00
typedef struct tdTPM_PCR_SELECTION {
UINT16 sizeOfSelect ;
UINT8 pcrSelect [ 1 ] ;
} TPM_PCR_SELECTION ;
2008-12-02 09:15:14 +01:00
///
/// Part 2, section 8.2: TPM_PCR_COMPOSITE
/// Size of pcrValue[] indicated by valueSize
///
2008-01-02 07:43:26 +01:00
typedef struct tdTPM_PCR_COMPOSITE {
TPM_PCR_SELECTION select ;
UINT32 valueSize ;
TPM_PCRVALUE pcrValue [ 1 ] ;
} TPM_PCR_COMPOSITE ;
2008-12-02 09:15:14 +01:00
///
/// Part 2, section 8.3: TPM_PCR_INFO
///
2008-01-02 07:43:26 +01:00
typedef struct tdTPM_PCR_INFO {
TPM_PCR_SELECTION pcrSelection ;
TPM_COMPOSITE_HASH digestAtRelease ;
TPM_COMPOSITE_HASH digestAtCreation ;
} TPM_PCR_INFO ;
2008-12-02 09:15:14 +01:00
///
/// Part 2, section 8.6: TPM_LOCALITY_SELECTION
///
2008-01-02 07:43:26 +01:00
typedef UINT8 TPM_LOCALITY_SELECTION ;
# define TPM_LOC_FOUR ((UINT8) 0x10)
# define TPM_LOC_THREE ((UINT8) 0x08)
# define TPM_LOC_TWO ((UINT8) 0x04)
# define TPM_LOC_ONE ((UINT8) 0x02)
# define TPM_LOC_ZERO ((UINT8) 0x01)
2008-12-02 09:15:14 +01:00
///
/// Part 2, section 8.4: TPM_PCR_INFO_LONG
///
2008-01-02 07:43:26 +01:00
typedef struct tdTPM_PCR_INFO_LONG {
TPM_STRUCTURE_TAG tag ;
TPM_LOCALITY_SELECTION localityAtCreation ;
TPM_LOCALITY_SELECTION localityAtRelease ;
TPM_PCR_SELECTION creationPCRSelection ;
TPM_PCR_SELECTION releasePCRSelection ;
TPM_COMPOSITE_HASH digestAtCreation ;
TPM_COMPOSITE_HASH digestAtRelease ;
} TPM_PCR_INFO_LONG ;
2008-12-02 09:15:14 +01:00
///
/// Part 2, section 8.5: TPM_PCR_INFO_SHORT
///
2008-01-02 07:43:26 +01:00
typedef struct tdTPM_PCR_INFO_SHORT {
TPM_PCR_SELECTION pcrSelection ;
TPM_LOCALITY_SELECTION localityAtRelease ;
TPM_COMPOSITE_HASH digestAtRelease ;
} TPM_PCR_INFO_SHORT ;
2008-12-02 09:15:14 +01:00
///
/// Part 2, section 8.8: TPM_PCR_ATTRIBUTES
///
2008-01-02 07:43:26 +01:00
typedef struct tdTPM_PCR_ATTRIBUTES {
BOOLEAN pcrReset ;
TPM_LOCALITY_SELECTION pcrExtendLocal ;
TPM_LOCALITY_SELECTION pcrResetLocal ;
} TPM_PCR_ATTRIBUTES ;
//
// Part 2, section 9: Storage Structures
//
2008-12-02 09:15:14 +01:00
///
/// Part 2, section 9.1: TPM_STORED_DATA
/// [size_is(sealInfoSize)] BYTE* sealInfo;
/// [size_is(encDataSize)] BYTE* encData;
///
2008-01-02 07:43:26 +01:00
typedef struct tdTPM_STORED_DATA {
TPM_STRUCT_VER ver ;
UINT32 sealInfoSize ;
UINT8 * sealInfo ;
UINT32 encDataSize ;
UINT8 * encData ;
} TPM_STORED_DATA ;
2008-12-02 09:15:14 +01:00
///
/// Part 2, section 9.2: TPM_STORED_DATA12
/// [size_is(sealInfoSize)] BYTE* sealInfo;
/// [size_is(encDataSize)] BYTE* encData;
///
2008-01-02 07:43:26 +01:00
typedef struct tdTPM_STORED_DATA12 {
TPM_STRUCTURE_TAG tag ;
TPM_ENTITY_TYPE et ;
UINT32 sealInfoSize ;
UINT8 * sealInfo ;
UINT32 encDataSize ;
UINT8 * encData ;
} TPM_STORED_DATA12 ;
2008-12-02 09:15:14 +01:00
///
/// Part 2, section 9.3: TPM_SEALED_DATA
/// [size_is(dataSize)] BYTE* data;
///
2008-01-02 07:43:26 +01:00
typedef struct tdTPM_SEALED_DATA {
TPM_PAYLOAD_TYPE payload ;
TPM_SECRET authData ;
TPM_NONCE tpmProof ;
TPM_DIGEST storedDigest ;
UINT32 dataSize ;
UINT8 * data ;
} TPM_SEALED_DATA ;
2008-12-02 09:15:14 +01:00
///
/// Part 2, section 9.4: TPM_SYMMETRIC_KEY
/// [size_is(size)] BYTE* data;
///
2008-01-02 07:43:26 +01:00
typedef struct tdTPM_SYMMETRIC_KEY {
TPM_ALGORITHM_ID algId ;
TPM_ENC_SCHEME encScheme ;
UINT16 dataSize ;
UINT8 * data ;
} TPM_SYMMETRIC_KEY ;
2008-12-02 09:15:14 +01:00
///
/// Part 2, section 9.5: TPM_BOUND_DATA
///
2008-01-02 07:43:26 +01:00
typedef struct tdTPM_BOUND_DATA {
TPM_STRUCT_VER ver ;
TPM_PAYLOAD_TYPE payload ;
UINT8 payloadData [ 1 ] ;
} TPM_BOUND_DATA ;
//
// Part 2 section 10: TPM_KEY complex
//
2008-10-20 17:16:32 +02:00
//
// Section 10.1, 10.4, and 10.5 have been defined previously
//
2008-12-02 09:15:14 +01:00
///
/// Part 2, section 10.2: TPM_KEY
/// [size_is(encDataSize)] BYTE* encData;
///
2008-01-02 07:43:26 +01:00
typedef struct tdTPM_KEY {
TPM_STRUCT_VER ver ;
TPM_KEY_USAGE keyUsage ;
TPM_KEY_FLAGS keyFlags ;
TPM_AUTH_DATA_USAGE authDataUsage ;
TPM_KEY_PARMS algorithmParms ;
UINT32 PCRInfoSize ;
UINT8 * PCRInfo ;
TPM_STORE_PUBKEY pubKey ;
UINT32 encDataSize ;
UINT8 * encData ;
} TPM_KEY ;
2008-12-02 09:15:14 +01:00
///
/// Part 2, section 10.3: TPM_KEY12
/// [size_is(encDataSize)] BYTE* encData;
///
2008-01-02 07:43:26 +01:00
typedef struct tdTPM_KEY12 {
TPM_STRUCTURE_TAG tag ;
UINT16 fill ;
TPM_KEY_USAGE keyUsage ;
TPM_KEY_FLAGS keyFlags ;
TPM_AUTH_DATA_USAGE authDataUsage ;
TPM_KEY_PARMS algorithmParms ;
UINT32 PCRInfoSize ;
UINT8 * PCRInfo ;
TPM_STORE_PUBKEY pubKey ;
UINT32 encDataSize ;
UINT8 * encData ;
} TPM_KEY12 ;
2008-12-02 09:15:14 +01:00
///
/// Part 2, section 10.7: TPM_STORE_PRIVKEY
/// [size_is(keyLength)] BYTE* key;
///
2008-01-02 07:43:26 +01:00
typedef struct tdTPM_STORE_PRIVKEY {
UINT32 keyLength ;
UINT8 * key ;
} TPM_STORE_PRIVKEY ;
2008-12-02 09:15:14 +01:00
///
/// Part 2, section 10.6: TPM_STORE_ASYMKEY
///
2008-01-02 07:43:26 +01:00
typedef struct tdTPM_STORE_ASYMKEY { // pos len total
TPM_PAYLOAD_TYPE payload ; // 0 1 1
TPM_SECRET usageAuth ; // 1 20 21
TPM_SECRET migrationAuth ; // 21 20 41
TPM_DIGEST pubDataDigest ; // 41 20 61
TPM_STORE_PRIVKEY privKey ; // 61 132-151 193-214
} TPM_STORE_ASYMKEY ;
2008-12-02 09:15:14 +01:00
///
/// Part 2, section 10.8: TPM_MIGRATE_ASYMKEY
/// [size_is(partPrivKeyLen)] BYTE* partPrivKey;
///
2008-01-02 07:43:26 +01:00
typedef struct tdTPM_MIGRATE_ASYMKEY { // pos len total
TPM_PAYLOAD_TYPE payload ; // 0 1 1
TPM_SECRET usageAuth ; // 1 20 21
TPM_DIGEST pubDataDigest ; // 21 20 41
UINT32 partPrivKeyLen ; // 41 4 45
UINT8 * partPrivKey ; // 45 112-127 157-172
} TPM_MIGRATE_ASYMKEY ;
2008-12-02 09:15:14 +01:00
///
/// Part 2, section 10.9: TPM_KEY_CONTROL
///
2008-01-02 07:43:26 +01:00
# define TPM_KEY_CONTROL_OWNER_EVICT ((UINT32) 0x00000001)
//
// Part 2, section 11: Signed Structures
//
2008-12-02 09:15:14 +01:00
///
/// Part 2, section 11.1: TPM_CERTIFY_INFO Structure
///
2008-10-20 17:16:32 +02:00
typedef struct tdTPM_CERTIFY_INFO {
TPM_STRUCT_VER version ;
TPM_KEY_USAGE keyUsage ;
TPM_KEY_FLAGS keyFlags ;
TPM_AUTH_DATA_USAGE authDataUsage ;
TPM_KEY_PARMS algorithmParms ;
TPM_DIGEST pubkeyDigest ;
TPM_NONCE data ;
BOOLEAN parentPCRStatus ;
UINT32 PCRInfoSize ;
UINT8 * PCRInfo ;
2008-01-02 07:43:26 +01:00
} TPM_CERTIFY_INFO ;
2008-12-02 09:15:14 +01:00
///
/// Part 2, section 11.2: TPM_CERTIFY_INFO2 Structure
///
2008-10-20 17:16:32 +02:00
typedef struct tdTPM_CERTIFY_INFO2 {
TPM_STRUCTURE_TAG tag ;
UINT8 fill ;
TPM_PAYLOAD_TYPE payloadType ;
TPM_KEY_USAGE keyUsage ;
TPM_KEY_FLAGS keyFlags ;
TPM_AUTH_DATA_USAGE authDataUsage ;
TPM_KEY_PARMS algorithmParms ;
TPM_DIGEST pubkeyDigest ;
TPM_NONCE data ;
BOOLEAN parentPCRStatus ;
UINT32 PCRInfoSize ;
UINT8 * PCRInfo ;
UINT32 migrationAuthoritySize ;
UINT8 * migrationAuthority ;
2008-01-02 07:43:26 +01:00
} TPM_CERTIFY_INFO2 ;
2008-12-02 09:15:14 +01:00
///
/// Part 2, section 11.3 TPM_QUOTE_INFO Structure
///
2008-10-20 17:16:32 +02:00
typedef struct tdTPM_QUOTE_INFO {
TPM_STRUCT_VER version ;
UINT8 fixed [ 4 ] ;
TPM_COMPOSITE_HASH digestValue ;
TPM_NONCE externalData ;
2008-01-02 07:43:26 +01:00
} TPM_QUOTE_INFO ;
2008-12-02 09:15:14 +01:00
///
/// Part 2, section 11.4 TPM_QUOTE_INFO2 Structure
///
2008-10-20 17:16:32 +02:00
typedef struct tdTPM_QUOTE_INFO2 {
TPM_STRUCTURE_TAG tag ;
UINT8 fixed [ 4 ] ;
TPM_NONCE externalData ;
TPM_PCR_INFO_SHORT infoShort ;
2008-01-02 07:43:26 +01:00
} TPM_QUOTE_INFO2 ;
//
// Part 2, section 12: Identity Structures
//
2008-12-02 09:15:14 +01:00
///
/// Part 2, section 12.1 TPM_EK_BLOB
///
2008-10-20 17:16:32 +02:00
typedef struct tdTPM_EK_BLOB {
TPM_STRUCTURE_TAG tag ;
TPM_EK_TYPE ekType ;
UINT32 blobSize ;
UINT8 * blob ;
2008-01-02 07:43:26 +01:00
} TPM_EK_BLOB ;
2008-12-02 09:15:14 +01:00
///
/// Part 2, section 12.2 TPM_EK_BLOB_ACTIVATE
///
2008-10-20 17:16:32 +02:00
typedef struct tdTPM_EK_BLOB_ACTIVATE {
TPM_STRUCTURE_TAG tag ;
TPM_SYMMETRIC_KEY sessionKey ;
TPM_DIGEST idDigest ;
TPM_PCR_INFO_SHORT pcrInfo ;
2008-01-02 07:43:26 +01:00
} TPM_EK_BLOB_ACTIVATE ;
2008-12-02 09:15:14 +01:00
///
/// Part 2, section 12.3 TPM_EK_BLOB_AUTH
///
2008-10-20 17:16:32 +02:00
typedef struct tdTPM_EK_BLOB_AUTH {
TPM_STRUCTURE_TAG tag ;
TPM_SECRET authValue ;
2008-01-02 07:43:26 +01:00
} TPM_EK_BLOB_AUTH ;
2008-12-02 09:15:14 +01:00
///
/// Part 2, section 12.5 TPM_IDENTITY_CONTENTS
///
2008-10-20 17:16:32 +02:00
typedef struct tdTPM_IDENTITY_CONTENTS {
TPM_STRUCT_VER ver ;
UINT32 ordinal ;
TPM_CHOSENID_HASH labelPrivCADigest ;
TPM_PUBKEY identityPubKey ;
2008-01-02 07:43:26 +01:00
} TPM_IDENTITY_CONTENTS ;
2008-12-02 09:15:14 +01:00
///
/// Part 2, section 12.6 TPM_IDENTITY_REQ
///
2008-10-20 17:16:32 +02:00
typedef struct tdTPM_IDENTITY_REQ {
UINT32 asymSize ;
UINT32 symSize ;
TPM_KEY_PARMS asymAlgorithm ;
TPM_KEY_PARMS symAlgorithm ;
UINT8 * asymBlob ;
UINT8 * symBlob ;
2008-01-02 07:43:26 +01:00
} TPM_IDENTITY_REQ ;
2008-12-02 09:15:14 +01:00
///
/// Part 2, section 12.7 TPM_IDENTITY_PROOF
///
2008-10-20 17:16:32 +02:00
typedef struct tdTPM_IDENTITY_PROOF {
TPM_STRUCT_VER ver ;
UINT32 labelSize ;
UINT32 identityBindingSize ;
UINT32 endorsementSize ;
UINT32 platformSize ;
UINT32 conformanceSize ;
TPM_PUBKEY identityKey ;
UINT8 * labelArea ;
UINT8 * identityBinding ;
UINT8 * endorsementCredential ;
UINT8 * platformCredential ;
UINT8 * conformanceCredential ;
2008-01-02 07:43:26 +01:00
} TPM_IDENTITY_PROOF ;
2008-12-02 09:15:14 +01:00
///
/// Part 2, section 12.8 TPM_ASYM_CA_CONTENTS
///
2008-10-20 17:16:32 +02:00
typedef struct tdTPM_ASYM_CA_CONTENTS {
TPM_SYMMETRIC_KEY sessionKey ;
TPM_DIGEST idDigest ;
2008-01-02 07:43:26 +01:00
} TPM_ASYM_CA_CONTENTS ;
2008-12-02 09:15:14 +01:00
///
/// Part 2, section 12.9 TPM_SYM_CA_ATTESTATION
///
2008-10-20 17:16:32 +02:00
typedef struct tdTPM_SYM_CA_ATTESTATION {
UINT32 credSize ;
TPM_KEY_PARMS algorithm ;
UINT8 * credential ;
2008-01-02 07:43:26 +01:00
} TPM_SYM_CA_ATTESTATION ;
2008-12-02 09:15:14 +01:00
///
/// Part 2, section 15: Tick Structures
/// Placed here out of order because definitions are used in section 13.
///
2008-01-02 07:43:26 +01:00
typedef struct tdTPM_CURRENT_TICKS {
TPM_STRUCTURE_TAG tag ;
UINT64 currentTicks ;
UINT16 tickRate ;
TPM_NONCE tickNonce ;
} TPM_CURRENT_TICKS ;
2008-12-02 09:15:14 +01:00
///
/// Part 2, section 13: Transport structures
///
2008-01-02 07:43:26 +01:00
2008-12-02 09:15:14 +01:00
///
/// Part 2, section 13.1: TPM _TRANSPORT_PUBLIC
///
2008-10-20 17:16:32 +02:00
typedef struct tdTPM_TRANSPORT_PUBLIC {
TPM_STRUCTURE_TAG tag ;
TPM_TRANSPORT_ATTRIBUTES transAttributes ;
TPM_ALGORITHM_ID algId ;
TPM_ENC_SCHEME encScheme ;
} TPM_TRANSPORT_PUBLIC ;
//
// Part 2, section 13.1.1 TPM_TRANSPORT_ATTRIBUTES Definitions
//
2008-01-02 07:43:26 +01:00
# define TPM_TRANSPORT_ENCRYPT ((UINT32)0x00000001)
# define TPM_TRANSPORT_LOG ((UINT32)0x00000002)
# define TPM_TRANSPORT_EXCLUSIVE ((UINT32)0x00000004)
2008-12-02 09:15:14 +01:00
///
/// Part 2, section 13.2 TPM_TRANSPORT_INTERNAL
///
2008-10-20 17:16:32 +02:00
typedef struct tdTPM_TRANSPORT_INTERNAL {
TPM_STRUCTURE_TAG tag ;
TPM_AUTHDATA authData ;
TPM_TRANSPORT_PUBLIC transPublic ;
TPM_TRANSHANDLE transHandle ;
TPM_NONCE transNonceEven ;
TPM_DIGEST transDigest ;
2008-01-02 07:43:26 +01:00
} TPM_TRANSPORT_INTERNAL ;
2008-12-02 09:15:14 +01:00
///
/// Part 2, section 13.3 TPM_TRANSPORT_LOG_IN structure
///
2008-10-20 17:16:32 +02:00
typedef struct tdTPM_TRANSPORT_LOG_IN {
TPM_STRUCTURE_TAG tag ;
TPM_DIGEST parameters ;
TPM_DIGEST pubKeyHash ;
2008-01-02 07:43:26 +01:00
} TPM_TRANSPORT_LOG_IN ;
2008-12-02 09:15:14 +01:00
///
/// Part 2, section 13.4 TPM_TRANSPORT_LOG_OUT structure
///
2008-10-20 17:16:32 +02:00
typedef struct tdTPM_TRANSPORT_LOG_OUT {
TPM_STRUCTURE_TAG tag ;
TPM_CURRENT_TICKS currentTicks ;
TPM_DIGEST parameters ;
TPM_MODIFIER_INDICATOR locality ;
2008-01-02 07:43:26 +01:00
} TPM_TRANSPORT_LOG_OUT ;
2008-12-02 09:15:14 +01:00
///
/// Part 2, section 13.5 TPM_TRANSPORT_AUTH structure
///
2008-10-20 17:16:32 +02:00
typedef struct tdTPM_TRANSPORT_AUTH {
TPM_STRUCTURE_TAG tag ;
TPM_AUTHDATA authData ;
2008-01-02 07:43:26 +01:00
} TPM_TRANSPORT_AUTH ;
//
// Part 2, section 14: Audit Structures
//
2008-12-02 09:15:14 +01:00
///
/// Part 2, section 14.1 TPM_AUDIT_EVENT_IN structure
///
2008-10-20 17:16:32 +02:00
typedef struct tdTPM_AUDIT_EVENT_IN {
TPM_STRUCTURE_TAG tag ;
TPM_DIGEST inputParms ;
TPM_COUNTER_VALUE auditCount ;
2008-01-02 07:43:26 +01:00
} TPM_AUDIT_EVENT_IN ;
2008-12-02 09:15:14 +01:00
///
/// Part 2, section 14.2 TPM_AUDIT_EVENT_OUT structure
///
2008-10-20 17:16:32 +02:00
typedef struct tdTPM_AUDIT_EVENT_OUT {
TPM_STRUCTURE_TAG tag ;
TPM_COMMAND_CODE ordinal ;
TPM_DIGEST outputParms ;
TPM_COUNTER_VALUE auditCount ;
TPM_RESULT returnCode ;
2008-01-02 07:43:26 +01:00
} TPM_AUDIT_EVENT_OUT ;
//
// Part 2, section 16: Return Codes
//
# define TPM_VENDOR_ERROR TPM_Vendor_Specific32
# define TPM_NON_FATAL 0x00000800
# define TPM_SUCCESS ((TPM_RESULT) TPM_BASE)
# define TPM_AUTHFAIL ((TPM_RESULT) (TPM_BASE + 1))
# define TPM_BADINDEX ((TPM_RESULT) (TPM_BASE + 2))
# define TPM_BAD_PARAMETER ((TPM_RESULT) (TPM_BASE + 3))
# define TPM_AUDITFAILURE ((TPM_RESULT) (TPM_BASE + 4))
# define TPM_CLEAR_DISABLED ((TPM_RESULT) (TPM_BASE + 5))
# define TPM_DEACTIVATED ((TPM_RESULT) (TPM_BASE + 6))
# define TPM_DISABLED ((TPM_RESULT) (TPM_BASE + 7))
# define TPM_DISABLED_CMD ((TPM_RESULT) (TPM_BASE + 8))
# define TPM_FAIL ((TPM_RESULT) (TPM_BASE + 9))
# define TPM_BAD_ORDINAL ((TPM_RESULT) (TPM_BASE + 10))
# define TPM_INSTALL_DISABLED ((TPM_RESULT) (TPM_BASE + 11))
# define TPM_INVALID_KEYHANDLE ((TPM_RESULT) (TPM_BASE + 12))
# define TPM_KEYNOTFOUND ((TPM_RESULT) (TPM_BASE + 13))
# define TPM_INAPPROPRIATE_ENC ((TPM_RESULT) (TPM_BASE + 14))
# define TPM_MIGRATEFAIL ((TPM_RESULT) (TPM_BASE + 15))
# define TPM_INVALID_PCR_INFO ((TPM_RESULT) (TPM_BASE + 16))
# define TPM_NOSPACE ((TPM_RESULT) (TPM_BASE + 17))
# define TPM_NOSRK ((TPM_RESULT) (TPM_BASE + 18))
# define TPM_NOTSEALED_BLOB ((TPM_RESULT) (TPM_BASE + 19))
# define TPM_OWNER_SET ((TPM_RESULT) (TPM_BASE + 20))
# define TPM_RESOURCES ((TPM_RESULT) (TPM_BASE + 21))
# define TPM_SHORTRANDOM ((TPM_RESULT) (TPM_BASE + 22))
# define TPM_SIZE ((TPM_RESULT) (TPM_BASE + 23))
# define TPM_WRONGPCRVAL ((TPM_RESULT) (TPM_BASE + 24))
# define TPM_BAD_PARAM_SIZE ((TPM_RESULT) (TPM_BASE + 25))
# define TPM_SHA_THREAD ((TPM_RESULT) (TPM_BASE + 26))
# define TPM_SHA_ERROR ((TPM_RESULT) (TPM_BASE + 27))
# define TPM_FAILEDSELFTEST ((TPM_RESULT) (TPM_BASE + 28))
# define TPM_AUTH2FAIL ((TPM_RESULT) (TPM_BASE + 29))
# define TPM_BADTAG ((TPM_RESULT) (TPM_BASE + 30))
# define TPM_IOERROR ((TPM_RESULT) (TPM_BASE + 31))
# define TPM_ENCRYPT_ERROR ((TPM_RESULT) (TPM_BASE + 32))
# define TPM_DECRYPT_ERROR ((TPM_RESULT) (TPM_BASE + 33))
# define TPM_INVALID_AUTHHANDLE ((TPM_RESULT) (TPM_BASE + 34))
# define TPM_NO_ENDORSEMENT ((TPM_RESULT) (TPM_BASE + 35))
# define TPM_INVALID_KEYUSAGE ((TPM_RESULT) (TPM_BASE + 36))
# define TPM_WRONG_ENTITYTYPE ((TPM_RESULT) (TPM_BASE + 37))
# define TPM_INVALID_POSTINIT ((TPM_RESULT) (TPM_BASE + 38))
# define TPM_INAPPROPRIATE_SIG ((TPM_RESULT) (TPM_BASE + 39))
# define TPM_BAD_KEY_PROPERTY ((TPM_RESULT) (TPM_BASE + 40))
# define TPM_BAD_MIGRATION ((TPM_RESULT) (TPM_BASE + 41))
# define TPM_BAD_SCHEME ((TPM_RESULT) (TPM_BASE + 42))
# define TPM_BAD_DATASIZE ((TPM_RESULT) (TPM_BASE + 43))
# define TPM_BAD_MODE ((TPM_RESULT) (TPM_BASE + 44))
# define TPM_BAD_PRESENCE ((TPM_RESULT) (TPM_BASE + 45))
# define TPM_BAD_VERSION ((TPM_RESULT) (TPM_BASE + 46))
# define TPM_NO_WRAP_TRANSPORT ((TPM_RESULT) (TPM_BASE + 47))
# define TPM_AUDITFAIL_UNSUCCESSFUL ((TPM_RESULT) (TPM_BASE + 48))
# define TPM_AUDITFAIL_SUCCESSFUL ((TPM_RESULT) (TPM_BASE + 49))
# define TPM_NOTRESETABLE ((TPM_RESULT) (TPM_BASE + 50))
# define TPM_NOTLOCAL ((TPM_RESULT) (TPM_BASE + 51))
# define TPM_BAD_TYPE ((TPM_RESULT) (TPM_BASE + 52))
# define TPM_INVALID_RESOURCE ((TPM_RESULT) (TPM_BASE + 53))
# define TPM_NOTFIPS ((TPM_RESULT) (TPM_BASE + 54))
# define TPM_INVALID_FAMILY ((TPM_RESULT) (TPM_BASE + 55))
# define TPM_NO_NV_PERMISSION ((TPM_RESULT) (TPM_BASE + 56))
# define TPM_REQUIRES_SIGN ((TPM_RESULT) (TPM_BASE + 57))
# define TPM_KEY_NOTSUPPORTED ((TPM_RESULT) (TPM_BASE + 58))
# define TPM_AUTH_CONFLICT ((TPM_RESULT) (TPM_BASE + 59))
# define TPM_AREA_LOCKED ((TPM_RESULT) (TPM_BASE + 60))
# define TPM_BAD_LOCALITY ((TPM_RESULT) (TPM_BASE + 61))
# define TPM_READ_ONLY ((TPM_RESULT) (TPM_BASE + 62))
# define TPM_PER_NOWRITE ((TPM_RESULT) (TPM_BASE + 63))
# define TPM_FAMILYCOUNT ((TPM_RESULT) (TPM_BASE + 64))
# define TPM_WRITE_LOCKED ((TPM_RESULT) (TPM_BASE + 65))
# define TPM_BAD_ATTRIBUTES ((TPM_RESULT) (TPM_BASE + 66))
# define TPM_INVALID_STRUCTURE ((TPM_RESULT) (TPM_BASE + 67))
# define TPM_KEY_OWNER_CONTROL ((TPM_RESULT) (TPM_BASE + 68))
# define TPM_BAD_COUNTER ((TPM_RESULT) (TPM_BASE + 69))
# define TPM_NOT_FULLWRITE ((TPM_RESULT) (TPM_BASE + 70))
# define TPM_CONTEXT_GAP ((TPM_RESULT) (TPM_BASE + 71))
# define TPM_MAXNVWRITES ((TPM_RESULT) (TPM_BASE + 72))
# define TPM_NOOPERATOR ((TPM_RESULT) (TPM_BASE + 73))
# define TPM_RESOURCEMISSING ((TPM_RESULT) (TPM_BASE + 74))
# define TPM_DELEGATE_LOCK ((TPM_RESULT) (TPM_BASE + 75))
# define TPM_DELEGATE_FAMILY ((TPM_RESULT) (TPM_BASE + 76))
# define TPM_DELEGATE_ADMIN ((TPM_RESULT) (TPM_BASE + 77))
# define TPM_TRANSPORT_NOTEXCLUSIVE ((TPM_RESULT) (TPM_BASE + 78))
# define TPM_OWNER_CONTROL ((TPM_RESULT) (TPM_BASE + 79))
# define TPM_DAA_RESOURCES ((TPM_RESULT) (TPM_BASE + 80))
# define TPM_DAA_INPUT_DATA0 ((TPM_RESULT) (TPM_BASE + 81))
# define TPM_DAA_INPUT_DATA1 ((TPM_RESULT) (TPM_BASE + 82))
# define TPM_DAA_ISSUER_SETTINGS ((TPM_RESULT) (TPM_BASE + 83))
# define TPM_DAA_TPM_SETTINGS ((TPM_RESULT) (TPM_BASE + 84))
# define TPM_DAA_STAGE ((TPM_RESULT) (TPM_BASE + 85))
# define TPM_DAA_ISSUER_VALIDITY ((TPM_RESULT) (TPM_BASE + 86))
# define TPM_DAA_WRONG_W ((TPM_RESULT) (TPM_BASE + 87))
# define TPM_BAD_HANDLE ((TPM_RESULT) (TPM_BASE + 88))
# define TPM_BAD_DELEGATE ((TPM_RESULT) (TPM_BASE + 89))
# define TPM_BADCONTEXT ((TPM_RESULT) (TPM_BASE + 90))
# define TPM_TOOMANYCONTEXTS ((TPM_RESULT) (TPM_BASE + 91))
# define TPM_MA_TICKET_SIGNATURE ((TPM_RESULT) (TPM_BASE + 92))
# define TPM_MA_DESTINATION ((TPM_RESULT) (TPM_BASE + 93))
# define TPM_MA_SOURCE ((TPM_RESULT) (TPM_BASE + 94))
# define TPM_MA_AUTHORITY ((TPM_RESULT) (TPM_BASE + 95))
# define TPM_PERMANENTEK ((TPM_RESULT) (TPM_BASE + 97))
# define TPM_BAD_SIGNATURE ((TPM_RESULT) (TPM_BASE + 98))
# define TPM_NOCONTEXTSPACE ((TPM_RESULT) (TPM_BASE + 99))
# define TPM_RETRY ((TPM_RESULT) (TPM_BASE + TPM_NON_FATAL))
# define TPM_NEEDS_SELFTEST ((TPM_RESULT) (TPM_BASE + TPM_NON_FATAL + 1))
# define TPM_DOING_SELFTEST ((TPM_RESULT) (TPM_BASE + TPM_NON_FATAL + 2))
# define TPM_DEFEND_LOCK_RUNNING ((TPM_RESULT) (TPM_BASE + TPM_NON_FATAL + 3))
//
// Part 2, section 17: Ordinals
//
// Ordinals are 32 bit values. The upper byte contains values that serve as
// flag indicators, the next byte contains values indicating what committee
// designated the ordinal, and the final two bytes contain the Command
// Ordinal Index.
// 3 2 1
// 1 0 9 8 7 6 5 4 3 2 1 0 9 8 7 6 5 4 3 2 1 0 9 8 7 6 5 4 3 2 1 0
// +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
// |P|C|V| Reserved| Purview | Command Ordinal Index |
// +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
//
// Where:
//
// * P is Protected/Unprotected command. When 0 the command is a Protected
// command, when 1 the command is an Unprotected command.
//
// * C is Non-Connection/Connection related command. When 0 this command
// passes through to either the protected (TPM) or unprotected (TSS)
// components.
//
// * V is TPM/Vendor command. When 0 the command is TPM defined, when 1 the
// command is vendor defined.
//
// * All reserved area bits are set to 0.
//
# define TPM_ORD_ActivateIdentity ((TPM_COMMAND_CODE) 0x0000007A)
# define TPM_ORD_AuthorizeMigrationKey ((TPM_COMMAND_CODE) 0x0000002B)
# define TPM_ORD_CertifyKey ((TPM_COMMAND_CODE) 0x00000032)
# define TPM_ORD_CertifyKey2 ((TPM_COMMAND_CODE) 0x00000033)
# define TPM_ORD_CertifySelfTest ((TPM_COMMAND_CODE) 0x00000052)
# define TPM_ORD_ChangeAuth ((TPM_COMMAND_CODE) 0x0000000C)
# define TPM_ORD_ChangeAuthAsymFinish ((TPM_COMMAND_CODE) 0x0000000F)
# define TPM_ORD_ChangeAuthAsymStart ((TPM_COMMAND_CODE) 0x0000000E)
# define TPM_ORD_ChangeAuthOwner ((TPM_COMMAND_CODE) 0x00000010)
# define TPM_ORD_CMK_ApproveMA ((TPM_COMMAND_CODE) 0x0000001D)
# define TPM_ORD_CMK_ConvertMigration ((TPM_COMMAND_CODE) 0x00000024)
# define TPM_ORD_CMK_CreateBlob ((TPM_COMMAND_CODE) 0x0000001B)
# define TPM_ORD_CMK_CreateKey ((TPM_COMMAND_CODE) 0x00000013)
# define TPM_ORD_CMK_CreateTicket ((TPM_COMMAND_CODE) 0x00000012)
# define TPM_ORD_CMK_SetRestrictions ((TPM_COMMAND_CODE) 0x0000001C)
# define TPM_ORD_ContinueSelfTest ((TPM_COMMAND_CODE) 0x00000053)
# define TPM_ORD_ConvertMigrationBlob ((TPM_COMMAND_CODE) 0x0000002A)
# define TPM_ORD_CreateCounter ((TPM_COMMAND_CODE) 0x000000DC)
# define TPM_ORD_CreateEndorsementKeyPair ((TPM_COMMAND_CODE) 0x00000078)
# define TPM_ORD_CreateMaintenanceArchive ((TPM_COMMAND_CODE) 0x0000002C)
# define TPM_ORD_CreateMigrationBlob ((TPM_COMMAND_CODE) 0x00000028)
# define TPM_ORD_CreateRevocableEK ((TPM_COMMAND_CODE) 0x0000007F)
# define TPM_ORD_CreateWrapKey ((TPM_COMMAND_CODE) 0x0000001F)
# define TPM_ORD_DAA_JOIN ((TPM_COMMAND_CODE) 0x00000029)
# define TPM_ORD_DAA_SIGN ((TPM_COMMAND_CODE) 0x00000031)
# define TPM_ORD_Delegate_CreateKeyDelegation ((TPM_COMMAND_CODE) 0x000000D4)
# define TPM_ORD_Delegate_CreateOwnerDelegation ((TPM_COMMAND_CODE) 0x000000D5)
# define TPM_ORD_Delegate_LoadOwnerDelegation ((TPM_COMMAND_CODE) 0x000000D8)
# define TPM_ORD_Delegate_Manage ((TPM_COMMAND_CODE) 0x000000D2)
# define TPM_ORD_Delegate_ReadTable ((TPM_COMMAND_CODE) 0x000000DB)
# define TPM_ORD_Delegate_UpdateVerification ((TPM_COMMAND_CODE) 0x000000D1)
# define TPM_ORD_Delegate_VerifyDelegation ((TPM_COMMAND_CODE) 0x000000D6)
# define TPM_ORD_DirRead ((TPM_COMMAND_CODE) 0x0000001A)
# define TPM_ORD_DirWriteAuth ((TPM_COMMAND_CODE) 0x00000019)
# define TPM_ORD_DisableForceClear ((TPM_COMMAND_CODE) 0x0000005E)
# define TPM_ORD_DisableOwnerClear ((TPM_COMMAND_CODE) 0x0000005C)
# define TPM_ORD_DisablePubekRead ((TPM_COMMAND_CODE) 0x0000007E)
# define TPM_ORD_DSAP ((TPM_COMMAND_CODE) 0x00000011)
# define TPM_ORD_EstablishTransport ((TPM_COMMAND_CODE) 0x000000E6)
# define TPM_ORD_EvictKey ((TPM_COMMAND_CODE) 0x00000022)
# define TPM_ORD_ExecuteTransport ((TPM_COMMAND_CODE) 0x000000E7)
# define TPM_ORD_Extend ((TPM_COMMAND_CODE) 0x00000014)
# define TPM_ORD_FieldUpgrade ((TPM_COMMAND_CODE) 0x000000AA)
# define TPM_ORD_FlushSpecific ((TPM_COMMAND_CODE) 0x000000BA)
# define TPM_ORD_ForceClear ((TPM_COMMAND_CODE) 0x0000005D)
# define TPM_ORD_GetAuditDigest ((TPM_COMMAND_CODE) 0x00000085)
# define TPM_ORD_GetAuditDigestSigned ((TPM_COMMAND_CODE) 0x00000086)
# define TPM_ORD_GetAuditEvent ((TPM_COMMAND_CODE) 0x00000082)
# define TPM_ORD_GetAuditEventSigned ((TPM_COMMAND_CODE) 0x00000083)
# define TPM_ORD_GetCapability ((TPM_COMMAND_CODE) 0x00000065)
# define TPM_ORD_GetCapabilityOwner ((TPM_COMMAND_CODE) 0x00000066)
# define TPM_ORD_GetCapabilitySigned ((TPM_COMMAND_CODE) 0x00000064)
# define TPM_ORD_GetOrdinalAuditStatus ((TPM_COMMAND_CODE) 0x0000008C)
# define TPM_ORD_GetPubKey ((TPM_COMMAND_CODE) 0x00000021)
# define TPM_ORD_GetRandom ((TPM_COMMAND_CODE) 0x00000046)
# define TPM_ORD_GetTestResult ((TPM_COMMAND_CODE) 0x00000054)
# define TPM_ORD_GetTicks ((TPM_COMMAND_CODE) 0x000000F1)
# define TPM_ORD_IncrementCounter ((TPM_COMMAND_CODE) 0x000000DD)
# define TPM_ORD_Init ((TPM_COMMAND_CODE) 0x00000097)
# define TPM_ORD_KeyControlOwner ((TPM_COMMAND_CODE) 0x00000023)
# define TPM_ORD_KillMaintenanceFeature ((TPM_COMMAND_CODE) 0x0000002E)
# define TPM_ORD_LoadAuthContext ((TPM_COMMAND_CODE) 0x000000B7)
# define TPM_ORD_LoadContext ((TPM_COMMAND_CODE) 0x000000B9)
# define TPM_ORD_LoadKey ((TPM_COMMAND_CODE) 0x00000020)
# define TPM_ORD_LoadKey2 ((TPM_COMMAND_CODE) 0x00000041)
# define TPM_ORD_LoadKeyContext ((TPM_COMMAND_CODE) 0x000000B5)
# define TPM_ORD_LoadMaintenanceArchive ((TPM_COMMAND_CODE) 0x0000002D)
# define TPM_ORD_LoadManuMaintPub ((TPM_COMMAND_CODE) 0x0000002F)
# define TPM_ORD_MakeIdentity ((TPM_COMMAND_CODE) 0x00000079)
# define TPM_ORD_MigrateKey ((TPM_COMMAND_CODE) 0x00000025)
# define TPM_ORD_NV_DefineSpace ((TPM_COMMAND_CODE) 0x000000CC)
# define TPM_ORD_NV_ReadValue ((TPM_COMMAND_CODE) 0x000000CF)
# define TPM_ORD_NV_ReadValueAuth ((TPM_COMMAND_CODE) 0x000000D0)
# define TPM_ORD_NV_WriteValue ((TPM_COMMAND_CODE) 0x000000CD)
# define TPM_ORD_NV_WriteValueAuth ((TPM_COMMAND_CODE) 0x000000CE)
# define TPM_ORD_OIAP ((TPM_COMMAND_CODE) 0x0000000A)
# define TPM_ORD_OSAP ((TPM_COMMAND_CODE) 0x0000000B)
# define TPM_ORD_OwnerClear ((TPM_COMMAND_CODE) 0x0000005B)
# define TPM_ORD_OwnerReadInternalPub ((TPM_COMMAND_CODE) 0x00000081)
# define TPM_ORD_OwnerReadPubek ((TPM_COMMAND_CODE) 0x0000007D)
# define TPM_ORD_OwnerSetDisable ((TPM_COMMAND_CODE) 0x0000006E)
# define TPM_ORD_PCR_Reset ((TPM_COMMAND_CODE) 0x000000C8)
# define TPM_ORD_PcrRead ((TPM_COMMAND_CODE) 0x00000015)
# define TPM_ORD_PhysicalDisable ((TPM_COMMAND_CODE) 0x00000070)
# define TPM_ORD_PhysicalEnable ((TPM_COMMAND_CODE) 0x0000006F)
# define TPM_ORD_PhysicalSetDeactivated ((TPM_COMMAND_CODE) 0x00000072)
# define TPM_ORD_Quote ((TPM_COMMAND_CODE) 0x00000016)
# define TPM_ORD_Quote2 ((TPM_COMMAND_CODE) 0x0000003E)
# define TPM_ORD_ReadCounter ((TPM_COMMAND_CODE) 0x000000DE)
# define TPM_ORD_ReadManuMaintPub ((TPM_COMMAND_CODE) 0x00000030)
# define TPM_ORD_ReadPubek ((TPM_COMMAND_CODE) 0x0000007C)
# define TPM_ORD_ReleaseCounter ((TPM_COMMAND_CODE) 0x000000DF)
# define TPM_ORD_ReleaseCounterOwner ((TPM_COMMAND_CODE) 0x000000E0)
# define TPM_ORD_ReleaseTransportSigned ((TPM_COMMAND_CODE) 0x000000E8)
# define TPM_ORD_Reset ((TPM_COMMAND_CODE) 0x0000005A)
# define TPM_ORD_ResetLockValue ((TPM_COMMAND_CODE) 0x00000040)
# define TPM_ORD_RevokeTrust ((TPM_COMMAND_CODE) 0x00000080)
# define TPM_ORD_SaveAuthContext ((TPM_COMMAND_CODE) 0x000000B6)
# define TPM_ORD_SaveContext ((TPM_COMMAND_CODE) 0x000000B8)
# define TPM_ORD_SaveKeyContext ((TPM_COMMAND_CODE) 0x000000B4)
# define TPM_ORD_SaveState ((TPM_COMMAND_CODE) 0x00000098)
# define TPM_ORD_Seal ((TPM_COMMAND_CODE) 0x00000017)
# define TPM_ORD_Sealx ((TPM_COMMAND_CODE) 0x0000003D)
# define TPM_ORD_SelfTestFull ((TPM_COMMAND_CODE) 0x00000050)
# define TPM_ORD_SetCapability ((TPM_COMMAND_CODE) 0x0000003F)
# define TPM_ORD_SetOperatorAuth ((TPM_COMMAND_CODE) 0x00000074)
# define TPM_ORD_SetOrdinalAuditStatus ((TPM_COMMAND_CODE) 0x0000008D)
# define TPM_ORD_SetOwnerInstall ((TPM_COMMAND_CODE) 0x00000071)
# define TPM_ORD_SetOwnerPointer ((TPM_COMMAND_CODE) 0x00000075)
# define TPM_ORD_SetRedirection ((TPM_COMMAND_CODE) 0x0000009A)
# define TPM_ORD_SetTempDeactivated ((TPM_COMMAND_CODE) 0x00000073)
# define TPM_ORD_SHA1Complete ((TPM_COMMAND_CODE) 0x000000A2)
# define TPM_ORD_SHA1CompleteExtend ((TPM_COMMAND_CODE) 0x000000A3)
# define TPM_ORD_SHA1Start ((TPM_COMMAND_CODE) 0x000000A0)
# define TPM_ORD_SHA1Update ((TPM_COMMAND_CODE) 0x000000A1)
# define TPM_ORD_Sign ((TPM_COMMAND_CODE) 0x0000003C)
# define TPM_ORD_Startup ((TPM_COMMAND_CODE) 0x00000099)
# define TPM_ORD_StirRandom ((TPM_COMMAND_CODE) 0x00000047)
# define TPM_ORD_TakeOwnership ((TPM_COMMAND_CODE) 0x0000000D)
# define TPM_ORD_Terminate_Handle ((TPM_COMMAND_CODE) 0x00000096)
# define TPM_ORD_TickStampBlob ((TPM_COMMAND_CODE) 0x000000F2)
# define TPM_ORD_UnBind ((TPM_COMMAND_CODE) 0x0000001E)
# define TPM_ORD_Unseal ((TPM_COMMAND_CODE) 0x00000018)
# define TSC_ORD_PhysicalPresence ((TPM_COMMAND_CODE) 0x4000000A)
# define TSC_ORD_ResetEstablishmentBit ((TPM_COMMAND_CODE) 0x4000000B)
//
// Part 2, section 18: Context structures
//
2008-12-02 09:15:14 +01:00
///
/// Part 2, section 18.1: TPM_CONTEXT_BLOB
///
2008-10-20 17:16:32 +02:00
typedef struct tdTPM_CONTEXT_BLOB {
TPM_STRUCTURE_TAG tag ;
TPM_RESOURCE_TYPE resourceType ;
TPM_HANDLE handle ;
UINT8 label [ 16 ] ;
UINT32 contextCount ;
TPM_DIGEST integrityDigest ;
UINT32 additionalSize ;
UINT8 * additionalData ;
UINT32 sensitiveSize ;
UINT8 * sensitiveData ;
2008-01-02 07:43:26 +01:00
} TPM_CONTEXT_BLOB ;
2008-12-02 09:15:14 +01:00
///
/// Part 2, section 18.2 TPM_CONTEXT_SENSITIVE
///
2008-10-20 17:16:32 +02:00
typedef struct tdTPM_CONTEXT_SENSITIVE {
TPM_STRUCTURE_TAG tag ;
TPM_NONCE contextNonce ;
UINT32 internalSize ;
UINT8 * internalData ;
2008-01-02 07:43:26 +01:00
} TPM_CONTEXT_SENSITIVE ;
//
// Part 2, section 19: NV Structures
//
2008-10-20 17:16:32 +02:00
//
// Part 2, section 19.1.1: Required TPM_NV_INDEX values
//
2008-01-02 07:43:26 +01:00
# define TPM_NV_INDEX_LOCK ((UINT32)0xffffffff)
# define TPM_NV_INDEX0 ((UINT32)0x00000000)
# define TPM_NV_INDEX_DIR ((UINT32)0x10000001)
# define TPM_NV_INDEX_EKCert ((UINT32)0x0000f000)
# define TPM_NV_INDEX_TPM_CC ((UINT32)0x0000f001)
# define TPM_NV_INDEX_PlatformCert ((UINT32)0x0000f002)
# define TPM_NV_INDEX_Platform_CC ((UINT32)0x0000f003)
2008-10-20 17:16:32 +02:00
//
// Part 2, section 19.1.2: Reserved Index values
//
2008-01-02 07:43:26 +01:00
# define TPM_NV_INDEX_TSS_BASE ((UINT32)0x00011100)
# define TPM_NV_INDEX_PC_BASE ((UINT32)0x00011200)
# define TPM_NV_INDEX_SERVER_BASE ((UINT32)0x00011300)
# define TPM_NV_INDEX_MOBILE_BASE ((UINT32)0x00011400)
# define TPM_NV_INDEX_PERIPHERAL_BASE ((UINT32)0x00011500)
# define TPM_NV_INDEX_GROUP_RESV_BASE ((UINT32)0x00010000)
2008-12-02 09:15:14 +01:00
///
/// The typedefs TPM_NV_PER_ATTRIBUTES (not present in TPM 1.2 Spec. have been added
/// and structure fields that were to hold the following values
///
2008-10-20 17:16:32 +02:00
typedef UINT32 TPM_NV_PER_ATTRIBUTES ;
2008-01-02 07:43:26 +01:00
2008-12-02 09:15:14 +01:00
///
/// Part 2, section 19.2: TPM_NV_ATTRIBUTES
///
typedef struct tdTPM_NV_ATTRIBUTES {
TPM_STRUCTURE_TAG tag ;
TPM_NV_PER_ATTRIBUTES attributes ;
} TPM_NV_ATTRIBUTES ;
2008-10-20 17:16:32 +02:00
# define TPM_NV_PER_READ_STCLEAR (BIT31)
# define TPM_NV_PER_AUTHREAD (BIT18)
# define TPM_NV_PER_OWNERREAD (BIT17)
# define TPM_NV_PER_PPREAD (BIT16)
# define TPM_NV_PER_GLOBALLOCK (BIT15)
# define TPM_NV_PER_WRITE_STCLEAR (BIT14)
# define TPM_NV_PER_WRITEDEFINE (BIT13)
# define TPM_NV_PER_WRITEALL (BIT12)
# define TPM_NV_PER_AUTHWRITE (BIT2)
# define TPM_NV_PER_OWNERWRITE (BIT1)
# define TPM_NV_PER_PPWRITE (BIT0)
2008-01-02 07:43:26 +01:00
2008-12-02 09:15:14 +01:00
///
/// Part 2, section 19.3: TPM_NV_DATA_PUBLIC
///
2008-10-20 17:16:32 +02:00
typedef struct tdTPM_NV_DATA_PUBLIC {
TPM_STRUCTURE_TAG tag ;
TPM_NV_INDEX nvIndex ;
TPM_PCR_INFO_SHORT pcrInfoRead ;
TPM_PCR_INFO_SHORT pcrInfoWrite ;
TPM_NV_ATTRIBUTES permission ;
BOOLEAN bReadSTClear ;
BOOLEAN bWriteSTClear ;
BOOLEAN bWriteDefine ;
UINT32 dataSize ;
} TPM_NV_DATA_PUBLIC ;
2008-01-02 07:43:26 +01:00
2008-10-20 17:16:32 +02:00
//
// Part 2, section 20: Delegate Structures
//
2008-01-02 07:43:26 +01:00
2008-10-20 17:16:32 +02:00
//
// Part 2, section 20.2: Delegate Definitions
//
# define TPM_DEL_OWNER_BITS ((UINT32)0x00000001)
# define TPM_DEL_KEY_BITS ((UINT32)0x00000002)
2008-01-02 07:43:26 +01:00
2008-10-20 17:16:32 +02:00
typedef struct tdTPM_DELEGATIONS {
TPM_STRUCTURE_TAG tag ;
UINT32 delegateType ;
UINT32 per1 ;
UINT32 per2 ;
} TPM_DELEGATIONS ;
2008-01-02 07:43:26 +01:00
2008-10-20 17:16:32 +02:00
//
// Part 2, section 20.2.1: Owner Permission Settings
//
# define TPM_DELEGATE_SetOrdinalAuditStatus (BIT30)
# define TPM_DELEGATE_DirWriteAuth (BIT29)
# define TPM_DELEGATE_CMK_ApproveMA (BIT28)
# define TPM_DELEGATE_CMK_CreateTicket (BIT26)
# define TPM_DELEGATE_Delegate_LoadOwnerDelegation (BIT24)
# define TPM_DELEGATE_DAA_Join (BIT23)
# define TPM_DELEGATE_AuthorizeMigrationKey (BIT22)
# define TPM_DELEGATE_CreateMaintenanceArchive (BIT21)
# define TPM_DELEGATE_LoadMaintenanceArchive (BIT20)
# define TPM_DELEGATE_KillMaintenanceFeature (BIT19)
# define TPM_DELEGATE_OwnerReadInteralPub (BIT18)
# define TPM_DELEGATE_ResetLockValue (BIT17)
# define TPM_DELEGATE_OwnerClear (BIT16)
# define TPM_DELEGATE_DisableOwnerClear (BIT15)
# define TPM_DELEGATE_OwnerSetDisable (BIT13)
# define TPM_DELEGATE_SetCapability (BIT12)
# define TPM_DELEGATE_MakeIdentity (BIT11)
# define TPM_DELEGATE_ActivateIdentity (BIT10)
# define TPM_DELEGATE_OwnerReadPubek (BIT9)
# define TPM_DELEGATE_DisablePubekRead (BIT8)
# define TPM_DELEGATE_SetRedirection (BIT7)
# define TPM_DELEGATE_FieldUpgrade (BIT6)
# define TPM_DELEGATE_Delegate_UpdateVerification (BIT5)
# define TPM_DELEGATE_CreateCounter (BIT4)
# define TPM_DELEGATE_ReleaseCounterOwner (BIT3)
# define TPM_DELEGATE_DelegateManage (BIT2)
# define TPM_DELEGATE_Delegate_CreateOwnerDelegation (BIT1)
# define TPM_DELEGATE_DAA_Sign (BIT0)
//
// Part 2, section 20.2.3: Key Permission settings
//
# define TPM_KEY_DELEGATE_CMK_ConvertMigration (BIT28)
# define TPM_KEY_DELEGATE_TickStampBlob (BIT27)
# define TPM_KEY_DELEGATE_ChangeAuthAsymStart (BIT26)
# define TPM_KEY_DELEGATE_ChangeAuthAsymFinish (BIT25)
# define TPM_KEY_DELEGATE_CMK_CreateKey (BIT24)
# define TPM_KEY_DELEGATE_MigrateKey (BIT23)
# define TPM_KEY_DELEGATE_LoadKey2 (BIT22)
# define TPM_KEY_DELEGATE_EstablishTransport (BIT21)
# define TPM_KEY_DELEGATE_ReleaseTransportSigned (BIT20)
# define TPM_KEY_DELEGATE_Quote2 (BIT19)
# define TPM_KEY_DELEGATE_Sealx (BIT18)
# define TPM_KEY_DELEGATE_MakeIdentity (BIT17)
# define TPM_KEY_DELEGATE_ActivateIdentity (BIT16)
# define TPM_KEY_DELEGATE_GetAuditDigestSigned (BIT15)
# define TPM_KEY_DELEGATE_Sign (BIT14)
# define TPM_KEY_DELEGATE_CertifyKey2 (BIT13)
# define TPM_KEY_DELEGATE_CertifyKey (BIT12)
# define TPM_KEY_DELEGATE_CreateWrapKey (BIT11)
# define TPM_KEY_DELEGATE_CMK_CreateBlob (BIT10)
# define TPM_KEY_DELEGATE_CreateMigrationBlob (BIT9)
# define TPM_KEY_DELEGATE_ConvertMigrationBlob (BIT8)
# define TPM_KEY_DELEGATE_CreateKeyDelegation (BIT7)
# define TPM_KEY_DELEGATE_ChangeAuth (BIT6)
# define TPM_KEY_DELEGATE_GetPubKey (BIT5)
# define TPM_KEY_DELEGATE_UnBind (BIT4)
# define TPM_KEY_DELEGATE_Quote (BIT3)
# define TPM_KEY_DELEGATE_Unseal (BIT2)
# define TPM_KEY_DELEGATE_Seal (BIT1)
# define TPM_KEY_DELEGATE_LoadKey (BIT0)
//
// Part 2, section 20.3: TPM_FAMILY_FLAGS
//
# define TPM_DELEGATE_ADMIN_LOCK (BIT1)
# define TPM_FAMFLAG_ENABLE (BIT0)
2008-12-02 09:15:14 +01:00
///
/// Part 2, section 20.4: TPM_FAMILY_LABEL
///
2008-10-20 17:16:32 +02:00
typedef struct tdTPM_FAMILY_LABEL {
UINT8 label ;
2008-01-02 07:43:26 +01:00
} TPM_FAMILY_LABEL ;
2008-12-02 09:15:14 +01:00
///
/// Part 2, section 20.5: TPM_FAMILY_TABLE_ENTRY
///
2008-10-20 17:16:32 +02:00
typedef struct tdTPM_FAMILY_TABLE_ENTRY {
TPM_STRUCTURE_TAG tag ;
TPM_FAMILY_LABEL label ;
TPM_FAMILY_ID familyID ;
TPM_FAMILY_VERIFICATION verificationCount ;
TPM_FAMILY_FLAGS flags ;
2008-01-02 07:43:26 +01:00
} TPM_FAMILY_TABLE_ENTRY ;
2008-10-20 17:16:32 +02:00
//
// Part 2, section 20.6: TPM_FAMILY_TABLE
//
# define TPM_NUM_FAMILY_TABLE_ENTRY_MIN 8
2008-01-02 07:43:26 +01:00
2008-10-20 17:16:32 +02:00
typedef struct tdTPM_FAMILY_TABLE {
TPM_FAMILY_TABLE_ENTRY famTableRow [ TPM_NUM_FAMILY_TABLE_ENTRY_MIN ] ;
} TPM_FAMILY_TABLE ;
2008-01-02 07:43:26 +01:00
2008-12-02 09:15:14 +01:00
///
/// Part 2, section 20.7: TPM_DELEGATE_LABEL
///
2008-10-20 17:16:32 +02:00
typedef struct tdTPM_DELEGATE_LABEL {
UINT8 label ;
2008-01-02 07:43:26 +01:00
} TPM_DELEGATE_LABEL ;
2008-12-02 09:15:14 +01:00
///
/// Part 2, section 20.8: TPM_DELEGATE_PUBLIC
///
2008-10-20 17:16:32 +02:00
typedef struct tdTPM_DELEGATE_PUBLIC {
TPM_STRUCTURE_TAG tag ;
TPM_DELEGATE_LABEL label ;
TPM_PCR_INFO_SHORT pcrInfo ;
TPM_DELEGATIONS permissions ;
TPM_FAMILY_ID familyID ;
TPM_FAMILY_VERIFICATION verificationCount ;
2008-01-02 07:43:26 +01:00
} TPM_DELEGATE_PUBLIC ;
2008-12-02 09:15:14 +01:00
///
/// Part 2, section 20.9: TPM_DELEGATE_TABLE_ROW
///
2008-10-20 17:16:32 +02:00
typedef struct tdTPM_DELEGATE_TABLE_ROW {
TPM_STRUCTURE_TAG tag ;
TPM_DELEGATE_PUBLIC pub ;
TPM_SECRET authValue ;
2008-01-02 07:43:26 +01:00
} TPM_DELEGATE_TABLE_ROW ;
2008-10-20 17:16:32 +02:00
//
// Part 2, section 20.10: TPM_DELEGATE_TABLE
//
2008-01-02 07:43:26 +01:00
# define TPM_NUM_DELEGATE_TABLE_ENTRY_MIN 2
2008-10-20 17:16:32 +02:00
typedef struct tdTPM_DELEGATE_TABLE {
TPM_DELEGATE_TABLE_ROW delRow [ TPM_NUM_DELEGATE_TABLE_ENTRY_MIN ] ;
} TPM_DELEGATE_TABLE ;
2008-12-02 09:15:14 +01:00
///
/// Part 2, section 20.11: TPM_DELEGATE_SENSITIVE
///
2008-10-20 17:16:32 +02:00
typedef struct tdTPM_DELEGATE_SENSITIVE {
TPM_STRUCTURE_TAG tag ;
TPM_SECRET authValue ;
2008-01-02 07:43:26 +01:00
} TPM_DELEGATE_SENSITIVE ;
2008-12-02 09:15:14 +01:00
///
/// Part 2, section 20.12: TPM_DELEGATE_OWNER_BLOB
///
2008-10-20 17:16:32 +02:00
typedef struct tdTPM_DELEGATE_OWNER_BLOB {
TPM_STRUCTURE_TAG tag ;
TPM_DELEGATE_PUBLIC pub ;
TPM_DIGEST integrityDigest ;
UINT32 additionalSize ;
UINT8 * additionalArea ;
UINT32 sensitiveSize ;
UINT8 * sensitiveArea ;
2008-01-02 07:43:26 +01:00
} TPM_DELEGATE_OWNER_BLOB ;
2008-12-02 09:15:14 +01:00
///
/// Part 2, section 20.13: TTPM_DELEGATE_KEY_BLOB
///
2008-10-20 17:16:32 +02:00
typedef struct tdTPM_DELEGATE_KEY_BLOB {
TPM_STRUCTURE_TAG tag ;
TPM_DELEGATE_PUBLIC pub ;
TPM_DIGEST integrityDigest ;
TPM_DIGEST pubKeyDigest ;
UINT32 additionalSize ;
UINT8 * additionalArea ;
UINT32 sensitiveSize ;
UINT8 * sensitiveArea ;
2008-01-02 07:43:26 +01:00
} TPM_DELEGATE_KEY_BLOB ;
2008-10-20 17:16:32 +02:00
//
// Part 2, section 20.14: TPM_FAMILY_OPERATION Values
//
# define TPM_FAMILY_CREATE ((UINT32)0x00000001)
# define TPM_FAMILY_ENABLE ((UINT32)0x00000002)
# define TPM_FAMILY_ADMIN ((UINT32)0x00000003)
# define TPM_FAMILY_INVALIDATE ((UINT32)0x00000004)
2008-01-02 07:43:26 +01:00
//
// Part 2, section 21.1: TPM_CAPABILITY_AREA for GetCapability
//
# define TPM_CAP_ORD ((TPM_CAPABILITY_AREA) 0x00000001)
# define TPM_CAP_ALG ((TPM_CAPABILITY_AREA) 0x00000002)
# define TPM_CAP_PID ((TPM_CAPABILITY_AREA) 0x00000003)
# define TPM_CAP_FLAG ((TPM_CAPABILITY_AREA) 0x00000004)
# define TPM_CAP_PROPERTY ((TPM_CAPABILITY_AREA) 0x00000005)
# define TPM_CAP_VERSION ((TPM_CAPABILITY_AREA) 0x00000006)
# define TPM_CAP_KEY_HANDLE ((TPM_CAPABILITY_AREA) 0x00000007)
# define TPM_CAP_CHECK_LOADED ((TPM_CAPABILITY_AREA) 0x00000008)
# define TPM_CAP_SYM_MODE ((TPM_CAPABILITY_AREA) 0x00000009)
# define TPM_CAP_KEY_STATUS ((TPM_CAPABILITY_AREA) 0x0000000C)
# define TPM_CAP_NV_LIST ((TPM_CAPABILITY_AREA) 0x0000000D)
# define TPM_CAP_MFR ((TPM_CAPABILITY_AREA) 0x00000010)
# define TPM_CAP_NV_INDEX ((TPM_CAPABILITY_AREA) 0x00000011)
# define TPM_CAP_TRANS_ALG ((TPM_CAPABILITY_AREA) 0x00000012)
# define TPM_CAP_HANDLE ((TPM_CAPABILITY_AREA) 0x00000014)
# define TPM_CAP_TRANS_ES ((TPM_CAPABILITY_AREA) 0x00000015)
# define TPM_CAP_AUTH_ENCRYPT ((TPM_CAPABILITY_AREA) 0x00000017)
# define TPM_CAP_SELECT_SIZE ((TPM_CAPABILITY_AREA) 0x00000018)
# define TPM_CAP_VERSION_VAL ((TPM_CAPABILITY_AREA) 0x0000001A)
# define TPM_CAP_FLAG_PERMANENT ((TPM_CAPABILITY_AREA) 0x00000108)
# define TPM_CAP_FLAG_VOLATILE ((TPM_CAPABILITY_AREA) 0x00000109)
//
// Part 2, section 21.2: CAP_PROPERTY Subcap values for GetCapability
//
# define TPM_CAP_PROP_PCR ((TPM_CAPABILITY_AREA) 0x00000101)
# define TPM_CAP_PROP_DIR ((TPM_CAPABILITY_AREA) 0x00000102)
# define TPM_CAP_PROP_MANUFACTURER ((TPM_CAPABILITY_AREA) 0x00000103)
# define TPM_CAP_PROP_KEYS ((TPM_CAPABILITY_AREA) 0x00000104)
# define TPM_CAP_PROP_MIN_COUNTER ((TPM_CAPABILITY_AREA) 0x00000107)
# define TPM_CAP_PROP_AUTHSESS ((TPM_CAPABILITY_AREA) 0x0000010A)
# define TPM_CAP_PROP_TRANSESS ((TPM_CAPABILITY_AREA) 0x0000010B)
# define TPM_CAP_PROP_COUNTERS ((TPM_CAPABILITY_AREA) 0x0000010C)
# define TPM_CAP_PROP_MAX_AUTHSESS ((TPM_CAPABILITY_AREA) 0x0000010D)
# define TPM_CAP_PROP_MAX_TRANSESS ((TPM_CAPABILITY_AREA) 0x0000010E)
# define TPM_CAP_PROP_MAX_COUNTERS ((TPM_CAPABILITY_AREA) 0x0000010F)
# define TPM_CAP_PROP_MAX_KEYS ((TPM_CAPABILITY_AREA) 0x00000110)
# define TPM_CAP_PROP_OWNER ((TPM_CAPABILITY_AREA) 0x00000111)
# define TPM_CAP_PROP_CONTEXT ((TPM_CAPABILITY_AREA) 0x00000112)
# define TPM_CAP_PROP_MAX_CONTEXT ((TPM_CAPABILITY_AREA) 0x00000113)
# define TPM_CAP_PROP_FAMILYROWS ((TPM_CAPABILITY_AREA) 0x00000114)
# define TPM_CAP_PROP_TIS_TIMEOUT ((TPM_CAPABILITY_AREA) 0x00000115)
# define TPM_CAP_PROP_STARTUP_EFFECT ((TPM_CAPABILITY_AREA) 0x00000116)
# define TPM_CAP_PROP_DELEGATE_ROW ((TPM_CAPABILITY_AREA) 0x00000117)
# define TPM_CAP_PROP_DAA_MAX ((TPM_CAPABILITY_AREA) 0x00000119)
# define CAP_PROP_SESSION_DAA ((TPM_CAPABILITY_AREA) 0x0000011A)
# define TPM_CAP_PROP_CONTEXT_DIST ((TPM_CAPABILITY_AREA) 0x0000011B)
# define TPM_CAP_PROP_DAA_INTERRUPT ((TPM_CAPABILITY_AREA) 0x0000011C)
# define TPM_CAP_PROP_SESSIONS ((TPM_CAPABILITY_AREA) 0x0000011D)
# define TPM_CAP_PROP_MAX_SESSIONS ((TPM_CAPABILITY_AREA) 0x0000011E)
# define TPM_CAP_PROP_CMK_RESTRICTION ((TPM_CAPABILITY_AREA) 0x0000011F)
# define TPM_CAP_PROP_DURATION ((TPM_CAPABILITY_AREA) 0x00000120)
# define TPM_CAP_PROP_ACTIVE_COUNTER ((TPM_CAPABILITY_AREA) 0x00000122)
# define TPM_CAP_PROP_MAX_NV_AVAILABLE ((TPM_CAPABILITY_AREA) 0x00000123)
# define TPM_CAP_PROP_INPUT_BUFFER ((TPM_CAPABILITY_AREA) 0x00000124)
2008-12-02 09:15:14 +01:00
///
/// Part 2, section 21.6: TPM_CAP_VERSION_INFO
/// [size_is(vendorSpecificSize)] BYTE* vendorSpecific;
///
2008-01-02 07:43:26 +01:00
typedef struct tdTPM_CAP_VERSION_INFO {
TPM_STRUCTURE_TAG tag ;
TPM_VERSION version ;
UINT16 specLevel ;
UINT8 errataRev ;
UINT8 tpmVendorID [ 4 ] ;
UINT16 vendorSpecificSize ;
UINT8 * vendorSpecific ;
} TPM_CAP_VERSION_INFO ;
//
// Part 2, section 22: DAA Structures
//
2008-10-20 17:16:32 +02:00
//
// Part 2, section 22.1: Size definitions
//
2008-01-02 07:43:26 +01:00
# define TPM_DAA_SIZE_r0 (43)
# define TPM_DAA_SIZE_r1 (43)
# define TPM_DAA_SIZE_r2 (128)
# define TPM_DAA_SIZE_r3 (168)
# define TPM_DAA_SIZE_r4 (219)
# define TPM_DAA_SIZE_NT (20)
# define TPM_DAA_SIZE_v0 (128)
# define TPM_DAA_SIZE_v1 (192)
# define TPM_DAA_SIZE_NE (256)
# define TPM_DAA_SIZE_w (256)
# define TPM_DAA_SIZE_issuerModulus (256)
2008-10-20 17:16:32 +02:00
//
// Part 2, section 22.2: Constant definitions
//
2008-01-02 07:43:26 +01:00
# define TPM_DAA_power0 (104)
# define TPM_DAA_power1 (1024)
2008-12-02 09:15:14 +01:00
///
/// Part 2, section 22.3: TPM_DAA_ISSUER
///
2008-10-20 17:16:32 +02:00
typedef struct tdTPM_DAA_ISSUER {
TPM_STRUCTURE_TAG tag ;
TPM_DIGEST DAA_digest_R0 ;
TPM_DIGEST DAA_digest_R1 ;
TPM_DIGEST DAA_digest_S0 ;
TPM_DIGEST DAA_digest_S1 ;
TPM_DIGEST DAA_digest_n ;
TPM_DIGEST DAA_digest_gamma ;
UINT8 DAA_generic_q [ 26 ] ;
2008-01-02 07:43:26 +01:00
} TPM_DAA_ISSUER ;
2008-12-02 09:15:14 +01:00
///
/// Part 2, section 22.4: TPM_DAA_TPM
///
2008-10-20 17:16:32 +02:00
typedef struct tdTPM_DAA_TPM {
TPM_STRUCTURE_TAG tag ;
TPM_DIGEST DAA_digestIssuer ;
TPM_DIGEST DAA_digest_v0 ;
TPM_DIGEST DAA_digest_v1 ;
TPM_DIGEST DAA_rekey ;
UINT32 DAA_count ;
2008-01-02 07:43:26 +01:00
} TPM_DAA_TPM ;
2008-12-02 09:15:14 +01:00
///
/// Part 2, section 22.5: TPM_DAA_CONTEXT
///
2008-10-20 17:16:32 +02:00
typedef struct tdTPM_DAA_CONTEXT {
TPM_STRUCTURE_TAG tag ;
TPM_DIGEST DAA_digestContext ;
TPM_DIGEST DAA_digest ;
TPM_DAA_CONTEXT_SEED DAA_contextSeed ;
UINT8 DAA_scratch [ 256 ] ;
UINT8 DAA_stage ;
2008-01-02 07:43:26 +01:00
} TPM_DAA_CONTEXT ;
2008-12-02 09:15:14 +01:00
///
/// Part 2, section 22.6: TPM_DAA_JOINDATA
///
2008-10-20 17:16:32 +02:00
typedef struct tdTPM_DAA_JOINDATA {
UINT8 DAA_join_u0 [ 128 ] ;
UINT8 DAA_join_u1 [ 138 ] ;
TPM_DIGEST DAA_digest_n0 ;
2008-01-02 07:43:26 +01:00
} TPM_DAA_JOINDATA ;
2008-12-02 09:15:14 +01:00
///
/// Part 2, section 22.8: TPM_DAA_BLOB
///
2008-10-20 17:16:32 +02:00
typedef struct tdTPM_DAA_BLOB {
TPM_STRUCTURE_TAG tag ;
TPM_RESOURCE_TYPE resourceType ;
UINT8 label [ 16 ] ;
TPM_DIGEST blobIntegrity ;
UINT32 additionalSize ;
UINT8 * additionalData ;
UINT32 sensitiveSize ;
UINT8 * sensitiveData ;
2008-01-02 07:43:26 +01:00
} TPM_DAA_BLOB ;
2008-12-02 09:15:14 +01:00
///
/// Part 2, section 22.9: TPM_DAA_SENSITIVE
///
2008-10-20 17:16:32 +02:00
typedef struct tdTPM_DAA_SENSITIVE {
TPM_STRUCTURE_TAG tag ;
UINT32 internalSize ;
UINT8 * internalData ;
2008-01-02 07:43:26 +01:00
} TPM_DAA_SENSITIVE ;
//
// Part 2, section 23: Redirection
//
2008-12-02 09:15:14 +01:00
///
/// Part 2 section 23.1: TPM_REDIR_COMMAND
/// This section defines exactly one value but does not
/// give it a name. The definition of TPM_SetRedirection in Part3
/// refers to exactly one name but does not give its value. We join
/// them here.
///
2008-01-02 07:43:26 +01:00
# define TPM_REDIR_GPIO (0x00000001)
2008-12-02 09:15:14 +01:00
///
/// TPM Command & Response Headers defined in Part 3
///
2008-01-02 07:43:26 +01:00
typedef struct tdTPM_RQU_COMMAND_HDR {
TPM_STRUCTURE_TAG tag ;
UINT32 paramSize ;
TPM_COMMAND_CODE ordinal ;
} TPM_RQU_COMMAND_HDR ;
typedef struct tdTPM_RSP_COMMAND_HDR {
TPM_STRUCTURE_TAG tag ;
UINT32 paramSize ;
TPM_RESULT returnCode ;
} TPM_RSP_COMMAND_HDR ;
2008-09-16 18:53:12 +02:00
# pragma pack ()
2008-01-02 07:43:26 +01:00
2008-10-20 17:16:32 +02:00
# endif
