Jonathan Zhang | 6d27778 | 2020-06-09 17:56:53 -0700 | [diff] [blame] | 1 | /** @file |
| 2 | TPM Specification data structures (TCG TPM Specification Version 1.2 Revision 103) |
| 3 | See http://trustedcomputinggroup.org for latest specification updates |
| 4 | |
| 5 | Copyright (c) 2006 - 2018, Intel Corporation. All rights reserved.<BR> |
| 6 | SPDX-License-Identifier: BSD-2-Clause-Patent |
| 7 | **/ |
| 8 | |
| 9 | |
| 10 | #ifndef _TPM12_H_ |
| 11 | #define _TPM12_H_ |
| 12 | |
| 13 | /// |
| 14 | /// The start of TPM return codes |
| 15 | /// |
| 16 | #define TPM_BASE 0 |
| 17 | |
| 18 | // |
| 19 | // All structures MUST be packed on a byte boundary. |
| 20 | // |
| 21 | |
| 22 | #pragma pack (1) |
| 23 | |
| 24 | // |
| 25 | // Part 2, section 2.2.3: Helper redefinitions |
| 26 | // |
| 27 | /// |
| 28 | /// Indicates the conditions where it is required that authorization be presented |
| 29 | /// |
| 30 | typedef UINT8 TPM_AUTH_DATA_USAGE; |
| 31 | /// |
| 32 | /// The information as to what the payload is in an encrypted structure |
| 33 | /// |
| 34 | typedef UINT8 TPM_PAYLOAD_TYPE; |
| 35 | /// |
| 36 | /// The version info breakdown |
| 37 | /// |
| 38 | typedef UINT8 TPM_VERSION_BYTE; |
| 39 | /// |
| 40 | /// The state of the dictionary attack mitigation logic |
| 41 | /// |
| 42 | typedef UINT8 TPM_DA_STATE; |
| 43 | /// |
| 44 | /// The request or response authorization type |
| 45 | /// |
| 46 | typedef UINT16 TPM_TAG; |
| 47 | /// |
| 48 | /// The protocol in use |
| 49 | /// |
| 50 | typedef UINT16 TPM_PROTOCOL_ID; |
| 51 | /// |
| 52 | /// Indicates the start state |
| 53 | /// |
| 54 | typedef UINT16 TPM_STARTUP_TYPE; |
| 55 | /// |
| 56 | /// The definition of the encryption scheme |
| 57 | /// |
| 58 | typedef UINT16 TPM_ENC_SCHEME; |
| 59 | /// |
| 60 | /// The definition of the signature scheme |
| 61 | /// |
| 62 | typedef UINT16 TPM_SIG_SCHEME; |
| 63 | /// |
| 64 | /// The definition of the migration scheme |
| 65 | /// |
| 66 | typedef UINT16 TPM_MIGRATE_SCHEME; |
| 67 | /// |
| 68 | /// Sets the state of the physical presence mechanism |
| 69 | /// |
| 70 | typedef UINT16 TPM_PHYSICAL_PRESENCE; |
| 71 | /// |
| 72 | /// Indicates the types of entity that are supported by the TPM |
| 73 | /// |
| 74 | typedef UINT16 TPM_ENTITY_TYPE; |
| 75 | /// |
| 76 | /// Indicates the permitted usage of the key |
| 77 | /// |
| 78 | typedef UINT16 TPM_KEY_USAGE; |
| 79 | /// |
| 80 | /// The type of asymmetric encrypted structure in use by the endorsement key |
| 81 | /// |
| 82 | typedef UINT16 TPM_EK_TYPE; |
| 83 | /// |
| 84 | /// The tag for the structure |
| 85 | /// |
| 86 | typedef UINT16 TPM_STRUCTURE_TAG; |
| 87 | /// |
| 88 | /// The platform specific spec to which the information relates to |
| 89 | /// |
| 90 | typedef UINT16 TPM_PLATFORM_SPECIFIC; |
| 91 | /// |
| 92 | /// The command ordinal |
| 93 | /// |
| 94 | typedef UINT32 TPM_COMMAND_CODE; |
| 95 | /// |
| 96 | /// Identifies a TPM capability area |
| 97 | /// |
| 98 | typedef UINT32 TPM_CAPABILITY_AREA; |
| 99 | /// |
| 100 | /// Indicates information regarding a key |
| 101 | /// |
| 102 | typedef UINT32 TPM_KEY_FLAGS; |
| 103 | /// |
| 104 | /// Indicates the type of algorithm |
| 105 | /// |
| 106 | typedef UINT32 TPM_ALGORITHM_ID; |
| 107 | /// |
| 108 | /// The locality modifier |
| 109 | /// |
| 110 | typedef UINT32 TPM_MODIFIER_INDICATOR; |
| 111 | /// |
| 112 | /// The actual number of a counter |
| 113 | /// |
| 114 | typedef UINT32 TPM_ACTUAL_COUNT; |
| 115 | /// |
| 116 | /// Attributes that define what options are in use for a transport session |
| 117 | /// |
| 118 | typedef UINT32 TPM_TRANSPORT_ATTRIBUTES; |
| 119 | /// |
| 120 | /// Handle to an authorization session |
| 121 | /// |
| 122 | typedef UINT32 TPM_AUTHHANDLE; |
| 123 | /// |
| 124 | /// Index to a DIR register |
| 125 | /// |
| 126 | typedef UINT32 TPM_DIRINDEX; |
| 127 | /// |
| 128 | /// The area where a key is held assigned by the TPM |
| 129 | /// |
| 130 | typedef UINT32 TPM_KEY_HANDLE; |
| 131 | /// |
| 132 | /// Index to a PCR register |
| 133 | /// |
| 134 | typedef UINT32 TPM_PCRINDEX; |
| 135 | /// |
| 136 | /// The return code from a function |
| 137 | /// |
| 138 | typedef UINT32 TPM_RESULT; |
| 139 | /// |
| 140 | /// The types of resources that a TPM may have using internal resources |
| 141 | /// |
| 142 | typedef UINT32 TPM_RESOURCE_TYPE; |
| 143 | /// |
| 144 | /// Allows for controlling of the key when loaded and how to handle TPM_Startup issues |
| 145 | /// |
| 146 | typedef UINT32 TPM_KEY_CONTROL; |
| 147 | /// |
| 148 | /// The index into the NV storage area |
| 149 | /// |
| 150 | typedef UINT32 TPM_NV_INDEX; |
| 151 | /// |
| 152 | /// The family ID. Family IDs are automatically assigned a sequence number by the TPM. |
| 153 | /// A trusted process can set the FamilyID value in an individual row to NULL, which |
| 154 | /// invalidates that row. The family ID resets to NULL on each change of TPM Owner. |
| 155 | /// |
| 156 | typedef UINT32 TPM_FAMILY_ID; |
| 157 | /// |
| 158 | /// IA value used as a label for the most recent verification of this family. Set to zero when not in use. |
| 159 | /// |
| 160 | typedef UINT32 TPM_FAMILY_VERIFICATION; |
| 161 | /// |
| 162 | /// How the TPM handles var |
| 163 | /// |
| 164 | typedef UINT32 TPM_STARTUP_EFFECTS; |
| 165 | /// |
| 166 | /// The mode of a symmetric encryption |
| 167 | /// |
| 168 | typedef UINT32 TPM_SYM_MODE; |
| 169 | /// |
| 170 | /// The family flags |
| 171 | /// |
| 172 | typedef UINT32 TPM_FAMILY_FLAGS; |
| 173 | /// |
| 174 | /// The index value for the delegate NV table |
| 175 | /// |
| 176 | typedef UINT32 TPM_DELEGATE_INDEX; |
| 177 | /// |
| 178 | /// The restrictions placed on delegation of CMK commands |
| 179 | /// |
| 180 | typedef UINT32 TPM_CMK_DELEGATE; |
| 181 | /// |
| 182 | /// The ID value of a monotonic counter |
| 183 | /// |
| 184 | typedef UINT32 TPM_COUNT_ID; |
| 185 | /// |
| 186 | /// A command to execute |
| 187 | /// |
| 188 | typedef UINT32 TPM_REDIT_COMMAND; |
| 189 | /// |
| 190 | /// A transport session handle |
| 191 | /// |
| 192 | typedef UINT32 TPM_TRANSHANDLE; |
| 193 | /// |
| 194 | /// A generic handle could be key, transport etc |
| 195 | /// |
| 196 | typedef UINT32 TPM_HANDLE; |
| 197 | /// |
| 198 | /// What operation is happening |
| 199 | /// |
| 200 | typedef UINT32 TPM_FAMILY_OPERATION; |
| 201 | |
| 202 | // |
| 203 | // Part 2, section 2.2.4: Vendor specific |
| 204 | // The following defines allow for the quick specification of a |
| 205 | // vendor specific item. |
| 206 | // |
| 207 | #define TPM_Vendor_Specific32 ((UINT32) 0x00000400) |
| 208 | #define TPM_Vendor_Specific8 ((UINT8) 0x80) |
| 209 | |
| 210 | // |
| 211 | // Part 2, section 3.1: TPM_STRUCTURE_TAG |
| 212 | // |
| 213 | #define TPM_TAG_CONTEXTBLOB ((TPM_STRUCTURE_TAG) 0x0001) |
| 214 | #define TPM_TAG_CONTEXT_SENSITIVE ((TPM_STRUCTURE_TAG) 0x0002) |
| 215 | #define TPM_TAG_CONTEXTPOINTER ((TPM_STRUCTURE_TAG) 0x0003) |
| 216 | #define TPM_TAG_CONTEXTLIST ((TPM_STRUCTURE_TAG) 0x0004) |
| 217 | #define TPM_TAG_SIGNINFO ((TPM_STRUCTURE_TAG) 0x0005) |
| 218 | #define TPM_TAG_PCR_INFO_LONG ((TPM_STRUCTURE_TAG) 0x0006) |
| 219 | #define TPM_TAG_PERSISTENT_FLAGS ((TPM_STRUCTURE_TAG) 0x0007) |
| 220 | #define TPM_TAG_VOLATILE_FLAGS ((TPM_STRUCTURE_TAG) 0x0008) |
| 221 | #define TPM_TAG_PERSISTENT_DATA ((TPM_STRUCTURE_TAG) 0x0009) |
| 222 | #define TPM_TAG_VOLATILE_DATA ((TPM_STRUCTURE_TAG) 0x000A) |
| 223 | #define TPM_TAG_SV_DATA ((TPM_STRUCTURE_TAG) 0x000B) |
| 224 | #define TPM_TAG_EK_BLOB ((TPM_STRUCTURE_TAG) 0x000C) |
| 225 | #define TPM_TAG_EK_BLOB_AUTH ((TPM_STRUCTURE_TAG) 0x000D) |
| 226 | #define TPM_TAG_COUNTER_VALUE ((TPM_STRUCTURE_TAG) 0x000E) |
| 227 | #define TPM_TAG_TRANSPORT_INTERNAL ((TPM_STRUCTURE_TAG) 0x000F) |
| 228 | #define TPM_TAG_TRANSPORT_LOG_IN ((TPM_STRUCTURE_TAG) 0x0010) |
| 229 | #define TPM_TAG_TRANSPORT_LOG_OUT ((TPM_STRUCTURE_TAG) 0x0011) |
| 230 | #define TPM_TAG_AUDIT_EVENT_IN ((TPM_STRUCTURE_TAG) 0x0012) |
| 231 | #define TPM_TAG_AUDIT_EVENT_OUT ((TPM_STRUCTURE_TAG) 0x0013) |
| 232 | #define TPM_TAG_CURRENT_TICKS ((TPM_STRUCTURE_TAG) 0x0014) |
| 233 | #define TPM_TAG_KEY ((TPM_STRUCTURE_TAG) 0x0015) |
| 234 | #define TPM_TAG_STORED_DATA12 ((TPM_STRUCTURE_TAG) 0x0016) |
| 235 | #define TPM_TAG_NV_ATTRIBUTES ((TPM_STRUCTURE_TAG) 0x0017) |
| 236 | #define TPM_TAG_NV_DATA_PUBLIC ((TPM_STRUCTURE_TAG) 0x0018) |
| 237 | #define TPM_TAG_NV_DATA_SENSITIVE ((TPM_STRUCTURE_TAG) 0x0019) |
| 238 | #define TPM_TAG_DELEGATIONS ((TPM_STRUCTURE_TAG) 0x001A) |
| 239 | #define TPM_TAG_DELEGATE_PUBLIC ((TPM_STRUCTURE_TAG) 0x001B) |
| 240 | #define TPM_TAG_DELEGATE_TABLE_ROW ((TPM_STRUCTURE_TAG) 0x001C) |
| 241 | #define TPM_TAG_TRANSPORT_AUTH ((TPM_STRUCTURE_TAG) 0x001D) |
| 242 | #define TPM_TAG_TRANSPORT_PUBLIC ((TPM_STRUCTURE_TAG) 0x001E) |
| 243 | #define TPM_TAG_PERMANENT_FLAGS ((TPM_STRUCTURE_TAG) 0x001F) |
| 244 | #define TPM_TAG_STCLEAR_FLAGS ((TPM_STRUCTURE_TAG) 0x0020) |
| 245 | #define TPM_TAG_STANY_FLAGS ((TPM_STRUCTURE_TAG) 0x0021) |
| 246 | #define TPM_TAG_PERMANENT_DATA ((TPM_STRUCTURE_TAG) 0x0022) |
| 247 | #define TPM_TAG_STCLEAR_DATA ((TPM_STRUCTURE_TAG) 0x0023) |
| 248 | #define TPM_TAG_STANY_DATA ((TPM_STRUCTURE_TAG) 0x0024) |
| 249 | #define TPM_TAG_FAMILY_TABLE_ENTRY ((TPM_STRUCTURE_TAG) 0x0025) |
| 250 | #define TPM_TAG_DELEGATE_SENSITIVE ((TPM_STRUCTURE_TAG) 0x0026) |
| 251 | #define TPM_TAG_DELG_KEY_BLOB ((TPM_STRUCTURE_TAG) 0x0027) |
| 252 | #define TPM_TAG_KEY12 ((TPM_STRUCTURE_TAG) 0x0028) |
| 253 | #define TPM_TAG_CERTIFY_INFO2 ((TPM_STRUCTURE_TAG) 0x0029) |
| 254 | #define TPM_TAG_DELEGATE_OWNER_BLOB ((TPM_STRUCTURE_TAG) 0x002A) |
| 255 | #define TPM_TAG_EK_BLOB_ACTIVATE ((TPM_STRUCTURE_TAG) 0x002B) |
| 256 | #define TPM_TAG_DAA_BLOB ((TPM_STRUCTURE_TAG) 0x002C) |
| 257 | #define TPM_TAG_DAA_CONTEXT ((TPM_STRUCTURE_TAG) 0x002D) |
| 258 | #define TPM_TAG_DAA_ENFORCE ((TPM_STRUCTURE_TAG) 0x002E) |
| 259 | #define TPM_TAG_DAA_ISSUER ((TPM_STRUCTURE_TAG) 0x002F) |
| 260 | #define TPM_TAG_CAP_VERSION_INFO ((TPM_STRUCTURE_TAG) 0x0030) |
| 261 | #define TPM_TAG_DAA_SENSITIVE ((TPM_STRUCTURE_TAG) 0x0031) |
| 262 | #define TPM_TAG_DAA_TPM ((TPM_STRUCTURE_TAG) 0x0032) |
| 263 | #define TPM_TAG_CMK_MIGAUTH ((TPM_STRUCTURE_TAG) 0x0033) |
| 264 | #define TPM_TAG_CMK_SIGTICKET ((TPM_STRUCTURE_TAG) 0x0034) |
| 265 | #define TPM_TAG_CMK_MA_APPROVAL ((TPM_STRUCTURE_TAG) 0x0035) |
| 266 | #define TPM_TAG_QUOTE_INFO2 ((TPM_STRUCTURE_TAG) 0x0036) |
| 267 | #define TPM_TAG_DA_INFO ((TPM_STRUCTURE_TAG) 0x0037) |
| 268 | #define TPM_TAG_DA_LIMITED ((TPM_STRUCTURE_TAG) 0x0038) |
| 269 | #define TPM_TAG_DA_ACTION_TYPE ((TPM_STRUCTURE_TAG) 0x0039) |
| 270 | |
| 271 | // |
| 272 | // Part 2, section 4: TPM Types |
| 273 | // |
| 274 | |
| 275 | // |
| 276 | // Part 2, section 4.1: TPM_RESOURCE_TYPE |
| 277 | // |
| 278 | #define TPM_RT_KEY ((TPM_RESOURCE_TYPE) 0x00000001) ///< The handle is a key handle and is the result of a LoadKey type operation |
| 279 | #define TPM_RT_AUTH ((TPM_RESOURCE_TYPE) 0x00000002) ///< The handle is an authorization handle. Auth handles come from TPM_OIAP, TPM_OSAP and TPM_DSAP |
| 280 | #define TPM_RT_HASH ((TPM_RESOURCE_TYPE) 0x00000003) ///< Reserved for hashes |
| 281 | #define TPM_RT_TRANS ((TPM_RESOURCE_TYPE) 0x00000004) ///< The handle is for a transport session. Transport handles come from TPM_EstablishTransport |
| 282 | #define TPM_RT_CONTEXT ((TPM_RESOURCE_TYPE) 0x00000005) ///< Resource wrapped and held outside the TPM using the context save/restore commands |
| 283 | #define TPM_RT_COUNTER ((TPM_RESOURCE_TYPE) 0x00000006) ///< Reserved for counters |
| 284 | #define TPM_RT_DELEGATE ((TPM_RESOURCE_TYPE) 0x00000007) ///< The handle is for a delegate row. These are the internal rows held in NV storage by the TPM |
| 285 | #define TPM_RT_DAA_TPM ((TPM_RESOURCE_TYPE) 0x00000008) ///< The value is a DAA TPM specific blob |
| 286 | #define TPM_RT_DAA_V0 ((TPM_RESOURCE_TYPE) 0x00000009) ///< The value is a DAA V0 parameter |
| 287 | #define TPM_RT_DAA_V1 ((TPM_RESOURCE_TYPE) 0x0000000A) ///< The value is a DAA V1 parameter |
| 288 | |
| 289 | // |
| 290 | // Part 2, section 4.2: TPM_PAYLOAD_TYPE |
| 291 | // |
| 292 | #define TPM_PT_ASYM ((TPM_PAYLOAD_TYPE) 0x01) ///< The entity is an asymmetric key |
| 293 | #define TPM_PT_BIND ((TPM_PAYLOAD_TYPE) 0x02) ///< The entity is bound data |
| 294 | #define TPM_PT_MIGRATE ((TPM_PAYLOAD_TYPE) 0x03) ///< The entity is a migration blob |
| 295 | #define TPM_PT_MAINT ((TPM_PAYLOAD_TYPE) 0x04) ///< The entity is a maintenance blob |
| 296 | #define TPM_PT_SEAL ((TPM_PAYLOAD_TYPE) 0x05) ///< The entity is sealed data |
| 297 | #define TPM_PT_MIGRATE_RESTRICTED ((TPM_PAYLOAD_TYPE) 0x06) ///< The entity is a restricted-migration asymmetric key |
| 298 | #define TPM_PT_MIGRATE_EXTERNAL ((TPM_PAYLOAD_TYPE) 0x07) ///< The entity is a external migratable key |
| 299 | #define TPM_PT_CMK_MIGRATE ((TPM_PAYLOAD_TYPE) 0x08) ///< The entity is a CMK migratable blob |
| 300 | #define TPM_PT_VENDOR_SPECIFIC ((TPM_PAYLOAD_TYPE) 0x80) ///< 0x80 - 0xFF Vendor specific payloads |
| 301 | |
| 302 | // |
| 303 | // Part 2, section 4.3: TPM_ENTITY_TYPE |
| 304 | // |
| 305 | #define TPM_ET_KEYHANDLE ((UINT16) 0x0001) ///< The entity is a keyHandle or key |
| 306 | #define TPM_ET_OWNER ((UINT16) 0x0002) ///< The entity is the TPM Owner |
| 307 | #define TPM_ET_DATA ((UINT16) 0x0003) ///< The entity is some data |
| 308 | #define TPM_ET_SRK ((UINT16) 0x0004) ///< The entity is the SRK |
| 309 | #define TPM_ET_KEY ((UINT16) 0x0005) ///< The entity is a key or keyHandle |
| 310 | #define TPM_ET_REVOKE ((UINT16) 0x0006) ///< The entity is the RevokeTrust value |
| 311 | #define TPM_ET_DEL_OWNER_BLOB ((UINT16) 0x0007) ///< The entity is a delegate owner blob |
| 312 | #define TPM_ET_DEL_ROW ((UINT16) 0x0008) ///< The entity is a delegate row |
| 313 | #define TPM_ET_DEL_KEY_BLOB ((UINT16) 0x0009) ///< The entity is a delegate key blob |
| 314 | #define TPM_ET_COUNTER ((UINT16) 0x000A) ///< The entity is a counter |
| 315 | #define TPM_ET_NV ((UINT16) 0x000B) ///< The entity is a NV index |
| 316 | #define TPM_ET_OPERATOR ((UINT16) 0x000C) ///< The entity is the operator |
| 317 | #define TPM_ET_RESERVED_HANDLE ((UINT16) 0x0040) ///< Reserved. This value avoids collisions with the handle MSB setting. |
| 318 | // |
| 319 | // TPM_ENTITY_TYPE MSB Values: The MSB is used to indicate the ADIP encryption sheme when applicable |
| 320 | // |
| 321 | #define TPM_ET_XOR ((UINT16) 0x0000) ///< ADIP encryption scheme: XOR |
| 322 | #define TPM_ET_AES128 ((UINT16) 0x0006) ///< ADIP encryption scheme: AES 128 bits |
| 323 | |
| 324 | // |
| 325 | // Part 2, section 4.4.1: Reserved Key Handles |
| 326 | // |
| 327 | #define TPM_KH_SRK ((TPM_KEY_HANDLE) 0x40000000) ///< The handle points to the SRK |
| 328 | #define TPM_KH_OWNER ((TPM_KEY_HANDLE) 0x40000001) ///< The handle points to the TPM Owner |
| 329 | #define TPM_KH_REVOKE ((TPM_KEY_HANDLE) 0x40000002) ///< The handle points to the RevokeTrust value |
| 330 | #define TPM_KH_TRANSPORT ((TPM_KEY_HANDLE) 0x40000003) ///< The handle points to the EstablishTransport static authorization |
| 331 | #define TPM_KH_OPERATOR ((TPM_KEY_HANDLE) 0x40000004) ///< The handle points to the Operator auth |
| 332 | #define TPM_KH_ADMIN ((TPM_KEY_HANDLE) 0x40000005) ///< The handle points to the delegation administration auth |
| 333 | #define TPM_KH_EK ((TPM_KEY_HANDLE) 0x40000006) ///< The handle points to the PUBEK, only usable with TPM_OwnerReadInternalPub |
| 334 | |
| 335 | // |
| 336 | // Part 2, section 4.5: TPM_STARTUP_TYPE |
| 337 | // |
| 338 | #define TPM_ST_CLEAR ((TPM_STARTUP_TYPE) 0x0001) ///< The TPM is starting up from a clean state |
| 339 | #define TPM_ST_STATE ((TPM_STARTUP_TYPE) 0x0002) ///< The TPM is starting up from a saved state |
| 340 | #define TPM_ST_DEACTIVATED ((TPM_STARTUP_TYPE) 0x0003) ///< The TPM is to startup and set the deactivated flag to TRUE |
| 341 | |
| 342 | // |
| 343 | // Part 2, section 4.6: TPM_STATUP_EFFECTS |
| 344 | // The table makeup is still an open issue. |
| 345 | // |
| 346 | |
| 347 | // |
| 348 | // Part 2, section 4.7: TPM_PROTOCOL_ID |
| 349 | // |
| 350 | #define TPM_PID_OIAP ((TPM_PROTOCOL_ID) 0x0001) ///< The OIAP protocol. |
| 351 | #define TPM_PID_OSAP ((TPM_PROTOCOL_ID) 0x0002) ///< The OSAP protocol. |
| 352 | #define TPM_PID_ADIP ((TPM_PROTOCOL_ID) 0x0003) ///< The ADIP protocol. |
| 353 | #define TPM_PID_ADCP ((TPM_PROTOCOL_ID) 0x0004) ///< The ADCP protocol. |
| 354 | #define TPM_PID_OWNER ((TPM_PROTOCOL_ID) 0x0005) ///< The protocol for taking ownership of a TPM. |
| 355 | #define TPM_PID_DSAP ((TPM_PROTOCOL_ID) 0x0006) ///< The DSAP protocol |
| 356 | #define TPM_PID_TRANSPORT ((TPM_PROTOCOL_ID) 0x0007) ///< The transport protocol |
| 357 | |
| 358 | // |
| 359 | // Part 2, section 4.8: TPM_ALGORITHM_ID |
| 360 | // The TPM MUST support the algorithms TPM_ALG_RSA, TPM_ALG_SHA, TPM_ALG_HMAC, |
| 361 | // TPM_ALG_MGF1 |
| 362 | // |
| 363 | #define TPM_ALG_RSA ((TPM_ALGORITHM_ID) 0x00000001) ///< The RSA algorithm. |
| 364 | #define TPM_ALG_DES ((TPM_ALGORITHM_ID) 0x00000002) ///< The DES algorithm |
| 365 | #define TPM_ALG_3DES ((TPM_ALGORITHM_ID) 0x00000003) ///< The 3DES algorithm in EDE mode |
| 366 | #define TPM_ALG_SHA ((TPM_ALGORITHM_ID) 0x00000004) ///< The SHA1 algorithm |
| 367 | #define TPM_ALG_HMAC ((TPM_ALGORITHM_ID) 0x00000005) ///< The RFC 2104 HMAC algorithm |
| 368 | #define TPM_ALG_AES128 ((TPM_ALGORITHM_ID) 0x00000006) ///< The AES algorithm, key size 128 |
| 369 | #define TPM_ALG_MGF1 ((TPM_ALGORITHM_ID) 0x00000007) ///< The XOR algorithm using MGF1 to create a string the size of the encrypted block |
| 370 | #define TPM_ALG_AES192 ((TPM_ALGORITHM_ID) 0x00000008) ///< AES, key size 192 |
| 371 | #define TPM_ALG_AES256 ((TPM_ALGORITHM_ID) 0x00000009) ///< AES, key size 256 |
| 372 | #define TPM_ALG_XOR ((TPM_ALGORITHM_ID) 0x0000000A) ///< XOR using the rolling nonces |
| 373 | |
| 374 | // |
| 375 | // Part 2, section 4.9: TPM_PHYSICAL_PRESENCE |
| 376 | // |
| 377 | #define TPM_PHYSICAL_PRESENCE_HW_DISABLE ((TPM_PHYSICAL_PRESENCE) 0x0200) ///< Sets the physicalPresenceHWEnable to FALSE |
| 378 | #define TPM_PHYSICAL_PRESENCE_CMD_DISABLE ((TPM_PHYSICAL_PRESENCE) 0x0100) ///< Sets the physicalPresenceCMDEnable to FALSE |
| 379 | #define TPM_PHYSICAL_PRESENCE_LIFETIME_LOCK ((TPM_PHYSICAL_PRESENCE) 0x0080) ///< Sets the physicalPresenceLifetimeLock to TRUE |
| 380 | #define TPM_PHYSICAL_PRESENCE_HW_ENABLE ((TPM_PHYSICAL_PRESENCE) 0x0040) ///< Sets the physicalPresenceHWEnable to TRUE |
| 381 | #define TPM_PHYSICAL_PRESENCE_CMD_ENABLE ((TPM_PHYSICAL_PRESENCE) 0x0020) ///< Sets the physicalPresenceCMDEnable to TRUE |
| 382 | #define TPM_PHYSICAL_PRESENCE_NOTPRESENT ((TPM_PHYSICAL_PRESENCE) 0x0010) ///< Sets PhysicalPresence = FALSE |
| 383 | #define TPM_PHYSICAL_PRESENCE_PRESENT ((TPM_PHYSICAL_PRESENCE) 0x0008) ///< Sets PhysicalPresence = TRUE |
| 384 | #define TPM_PHYSICAL_PRESENCE_LOCK ((TPM_PHYSICAL_PRESENCE) 0x0004) ///< Sets PhysicalPresenceLock = TRUE |
| 385 | |
| 386 | // |
| 387 | // Part 2, section 4.10: TPM_MIGRATE_SCHEME |
| 388 | // |
| 389 | #define TPM_MS_MIGRATE ((TPM_MIGRATE_SCHEME) 0x0001) ///< A public key that can be used with all TPM migration commands other than 'ReWrap' mode. |
| 390 | #define TPM_MS_REWRAP ((TPM_MIGRATE_SCHEME) 0x0002) ///< A public key that can be used for the ReWrap mode of TPM_CreateMigrationBlob. |
| 391 | #define TPM_MS_MAINT ((TPM_MIGRATE_SCHEME) 0x0003) ///< A public key that can be used for the Maintenance commands |
| 392 | #define TPM_MS_RESTRICT_MIGRATE ((TPM_MIGRATE_SCHEME) 0x0004) ///< The key is to be migrated to a Migration Authority. |
| 393 | #define TPM_MS_RESTRICT_APPROVE_DOUBLE ((TPM_MIGRATE_SCHEME) 0x0005) ///< The key is to be migrated to an entity approved by a Migration Authority using double wrapping |
| 394 | |
| 395 | // |
| 396 | // Part 2, section 4.11: TPM_EK_TYPE |
| 397 | // |
| 398 | #define TPM_EK_TYPE_ACTIVATE ((TPM_EK_TYPE) 0x0001) ///< The blob MUST be TPM_EK_BLOB_ACTIVATE |
| 399 | #define TPM_EK_TYPE_AUTH ((TPM_EK_TYPE) 0x0002) ///< The blob MUST be TPM_EK_BLOB_AUTH |
| 400 | |
| 401 | // |
| 402 | // Part 2, section 4.12: TPM_PLATFORM_SPECIFIC |
| 403 | // |
| 404 | #define TPM_PS_PC_11 ((TPM_PLATFORM_SPECIFIC) 0x0001) ///< PC Specific version 1.1 |
| 405 | #define TPM_PS_PC_12 ((TPM_PLATFORM_SPECIFIC) 0x0002) ///< PC Specific version 1.2 |
| 406 | #define TPM_PS_PDA_12 ((TPM_PLATFORM_SPECIFIC) 0x0003) ///< PDA Specific version 1.2 |
| 407 | #define TPM_PS_Server_12 ((TPM_PLATFORM_SPECIFIC) 0x0004) ///< Server Specific version 1.2 |
| 408 | #define TPM_PS_Mobile_12 ((TPM_PLATFORM_SPECIFIC) 0x0005) ///< Mobil Specific version 1.2 |
| 409 | |
| 410 | // |
| 411 | // Part 2, section 5: Basic Structures |
| 412 | // |
| 413 | |
| 414 | /// |
| 415 | /// Part 2, section 5.1: TPM_STRUCT_VER |
| 416 | /// |
| 417 | typedef struct tdTPM_STRUCT_VER { |
| 418 | UINT8 major; |
| 419 | UINT8 minor; |
| 420 | UINT8 revMajor; |
| 421 | UINT8 revMinor; |
| 422 | } TPM_STRUCT_VER; |
| 423 | |
| 424 | /// |
| 425 | /// Part 2, section 5.3: TPM_VERSION |
| 426 | /// |
| 427 | typedef struct tdTPM_VERSION { |
| 428 | TPM_VERSION_BYTE major; |
| 429 | TPM_VERSION_BYTE minor; |
| 430 | UINT8 revMajor; |
| 431 | UINT8 revMinor; |
| 432 | } TPM_VERSION; |
| 433 | |
| 434 | |
| 435 | #define TPM_SHA1_160_HASH_LEN 0x14 |
| 436 | #define TPM_SHA1BASED_NONCE_LEN TPM_SHA1_160_HASH_LEN |
| 437 | |
| 438 | /// |
| 439 | /// Part 2, section 5.4: TPM_DIGEST |
| 440 | /// |
| 441 | typedef struct tdTPM_DIGEST{ |
| 442 | UINT8 digest[TPM_SHA1_160_HASH_LEN]; |
| 443 | } TPM_DIGEST; |
| 444 | |
| 445 | /// |
| 446 | /// This SHALL be the digest of the chosen identityLabel and privacyCA for a new TPM identity |
| 447 | /// |
| 448 | typedef TPM_DIGEST TPM_CHOSENID_HASH; |
| 449 | /// |
| 450 | /// This SHALL be the hash of a list of PCR indexes and PCR values that a key or data is bound to |
| 451 | /// |
| 452 | typedef TPM_DIGEST TPM_COMPOSITE_HASH; |
| 453 | /// |
| 454 | /// This SHALL be the value of a DIR register |
| 455 | /// |
| 456 | typedef TPM_DIGEST TPM_DIRVALUE; |
| 457 | |
| 458 | typedef TPM_DIGEST TPM_HMAC; |
| 459 | /// |
| 460 | /// The value inside of the PCR |
| 461 | /// |
| 462 | typedef TPM_DIGEST TPM_PCRVALUE; |
| 463 | /// |
| 464 | /// This SHALL be the value of the current internal audit state |
| 465 | /// |
| 466 | typedef TPM_DIGEST TPM_AUDITDIGEST; |
| 467 | |
| 468 | /// |
| 469 | /// Part 2, section 5.5: TPM_NONCE |
| 470 | /// |
| 471 | typedef struct tdTPM_NONCE{ |
| 472 | UINT8 nonce[20]; |
| 473 | } TPM_NONCE; |
| 474 | |
| 475 | /// |
| 476 | /// This SHALL be a random value generated by a TPM immediately after the EK is installed |
| 477 | /// in that TPM, whenever an EK is installed in that TPM |
| 478 | /// |
| 479 | typedef TPM_NONCE TPM_DAA_TPM_SEED; |
| 480 | /// |
| 481 | /// This SHALL be a random value |
| 482 | /// |
| 483 | typedef TPM_NONCE TPM_DAA_CONTEXT_SEED; |
| 484 | |
| 485 | // |
| 486 | // Part 2, section 5.6: TPM_AUTHDATA |
| 487 | // |
| 488 | /// |
| 489 | /// The AuthData data is the information that is saved or passed to provide proof of ownership |
| 490 | /// 296 of an entity |
| 491 | /// |
| 492 | typedef UINT8 tdTPM_AUTHDATA[20]; |
| 493 | |
| 494 | typedef tdTPM_AUTHDATA TPM_AUTHDATA; |
| 495 | /// |
| 496 | /// A secret plaintext value used in the authorization process |
| 497 | /// |
| 498 | typedef TPM_AUTHDATA TPM_SECRET; |
| 499 | /// |
| 500 | /// A ciphertext (encrypted) version of AuthData data. The encryption mechanism depends on the context |
| 501 | /// |
| 502 | typedef TPM_AUTHDATA TPM_ENCAUTH; |
| 503 | |
| 504 | /// |
| 505 | /// Part 2, section 5.7: TPM_KEY_HANDLE_LIST |
| 506 | /// Size of handle is loaded * sizeof(TPM_KEY_HANDLE) |
| 507 | /// |
| 508 | typedef struct tdTPM_KEY_HANDLE_LIST { |
| 509 | UINT16 loaded; |
| 510 | TPM_KEY_HANDLE handle[1]; |
| 511 | } TPM_KEY_HANDLE_LIST; |
| 512 | |
| 513 | // |
| 514 | // Part 2, section 5.8: TPM_KEY_USAGE values |
| 515 | // |
| 516 | /// |
| 517 | /// TPM_KEY_SIGNING SHALL indicate a signing key. The [private] key SHALL be |
| 518 | /// used for signing operations, only. This means that it MUST be a leaf of the |
| 519 | /// Protected Storage key hierarchy. |
| 520 | /// |
| 521 | #define TPM_KEY_SIGNING ((UINT16) 0x0010) |
| 522 | /// |
| 523 | /// TPM_KEY_STORAGE SHALL indicate a storage key. The key SHALL be used to wrap |
| 524 | /// and unwrap other keys in the Protected Storage hierarchy |
| 525 | /// |
| 526 | #define TPM_KEY_STORAGE ((UINT16) 0x0011) |
| 527 | /// |
| 528 | /// TPM_KEY_IDENTITY SHALL indicate an identity key. The key SHALL be used for |
| 529 | /// operations that require a TPM identity, only. |
| 530 | /// |
| 531 | #define TPM_KEY_IDENTITY ((UINT16) 0x0012) |
| 532 | /// |
| 533 | /// TPM_KEY_AUTHCHANGE SHALL indicate an ephemeral key that is in use during |
| 534 | /// the ChangeAuthAsym process, only. |
| 535 | /// |
| 536 | #define TPM_KEY_AUTHCHANGE ((UINT16) 0x0013) |
| 537 | /// |
| 538 | /// TPM_KEY_BIND SHALL indicate a key that can be used for TPM_Bind and |
| 539 | /// TPM_Unbind operations only. |
| 540 | /// |
| 541 | #define TPM_KEY_BIND ((UINT16) 0x0014) |
| 542 | /// |
| 543 | /// TPM_KEY_LEGACY SHALL indicate a key that can perform signing and binding |
| 544 | /// operations. The key MAY be used for both signing and binding operations. |
| 545 | /// The TPM_KEY_LEGACY key type is to allow for use by applications where both |
| 546 | /// signing and encryption operations occur with the same key. The use of this |
| 547 | /// key type is not recommended TPM_KEY_MIGRATE 0x0016 This SHALL indicate a |
| 548 | /// key in use for TPM_MigrateKey |
| 549 | /// |
| 550 | #define TPM_KEY_LEGACY ((UINT16) 0x0015) |
| 551 | /// |
| 552 | /// TPM_KEY_MIGRAGE SHALL indicate a key in use for TPM_MigrateKey |
| 553 | /// |
| 554 | #define TPM_KEY_MIGRATE ((UINT16) 0x0016) |
| 555 | |
| 556 | // |
| 557 | // Part 2, section 5.8.1: Mandatory Key Usage Schemes |
| 558 | // |
| 559 | |
| 560 | #define TPM_ES_NONE ((TPM_ENC_SCHEME) 0x0001) |
| 561 | #define TPM_ES_RSAESPKCSv15 ((TPM_ENC_SCHEME) 0x0002) |
| 562 | #define TPM_ES_RSAESOAEP_SHA1_MGF1 ((TPM_ENC_SCHEME) 0x0003) |
| 563 | #define TPM_ES_SYM_CNT ((TPM_ENC_SCHEME) 0x0004) ///< rev94 defined |
| 564 | #define TPM_ES_SYM_CTR ((TPM_ENC_SCHEME) 0x0004) |
| 565 | #define TPM_ES_SYM_OFB ((TPM_ENC_SCHEME) 0x0005) |
| 566 | |
| 567 | #define TPM_SS_NONE ((TPM_SIG_SCHEME) 0x0001) |
| 568 | #define TPM_SS_RSASSAPKCS1v15_SHA1 ((TPM_SIG_SCHEME) 0x0002) |
| 569 | #define TPM_SS_RSASSAPKCS1v15_DER ((TPM_SIG_SCHEME) 0x0003) |
| 570 | #define TPM_SS_RSASSAPKCS1v15_INFO ((TPM_SIG_SCHEME) 0x0004) |
| 571 | |
| 572 | // |
| 573 | // Part 2, section 5.9: TPM_AUTH_DATA_USAGE values |
| 574 | // |
| 575 | #define TPM_AUTH_NEVER ((TPM_AUTH_DATA_USAGE) 0x00) |
| 576 | #define TPM_AUTH_ALWAYS ((TPM_AUTH_DATA_USAGE) 0x01) |
| 577 | #define TPM_AUTH_PRIV_USE_ONLY ((TPM_AUTH_DATA_USAGE) 0x03) |
| 578 | |
| 579 | /// |
| 580 | /// Part 2, section 5.10: TPM_KEY_FLAGS |
| 581 | /// |
| 582 | typedef enum tdTPM_KEY_FLAGS { |
| 583 | redirection = 0x00000001, |
| 584 | migratable = 0x00000002, |
| 585 | isVolatile = 0x00000004, |
| 586 | pcrIgnoredOnRead = 0x00000008, |
| 587 | migrateAuthority = 0x00000010 |
| 588 | } TPM_KEY_FLAGS_BITS; |
| 589 | |
| 590 | /// |
| 591 | /// Part 2, section 5.11: TPM_CHANGEAUTH_VALIDATE |
| 592 | /// |
| 593 | typedef struct tdTPM_CHANGEAUTH_VALIDATE { |
| 594 | TPM_SECRET newAuthSecret; |
| 595 | TPM_NONCE n1; |
| 596 | } TPM_CHANGEAUTH_VALIDATE; |
| 597 | |
| 598 | /// |
| 599 | /// Part 2, section 5.12: TPM_MIGRATIONKEYAUTH |
| 600 | /// declared after section 10 to catch declaration of TPM_PUBKEY |
| 601 | /// |
| 602 | /// Part 2 section 10.1: TPM_KEY_PARMS |
| 603 | /// [size_is(parmSize)] BYTE* parms; |
| 604 | /// |
| 605 | typedef struct tdTPM_KEY_PARMS { |
| 606 | TPM_ALGORITHM_ID algorithmID; |
| 607 | TPM_ENC_SCHEME encScheme; |
| 608 | TPM_SIG_SCHEME sigScheme; |
| 609 | UINT32 parmSize; |
| 610 | UINT8 *parms; |
| 611 | } TPM_KEY_PARMS; |
| 612 | |
| 613 | /// |
| 614 | /// Part 2, section 10.4: TPM_STORE_PUBKEY |
| 615 | /// |
| 616 | typedef struct tdTPM_STORE_PUBKEY { |
| 617 | UINT32 keyLength; |
| 618 | UINT8 key[1]; |
| 619 | } TPM_STORE_PUBKEY; |
| 620 | |
| 621 | /// |
| 622 | /// Part 2, section 10.5: TPM_PUBKEY |
| 623 | /// |
| 624 | typedef struct tdTPM_PUBKEY{ |
| 625 | TPM_KEY_PARMS algorithmParms; |
| 626 | TPM_STORE_PUBKEY pubKey; |
| 627 | } TPM_PUBKEY; |
| 628 | |
| 629 | /// |
| 630 | /// Part 2, section 5.12: TPM_MIGRATIONKEYAUTH |
| 631 | /// |
| 632 | typedef struct tdTPM_MIGRATIONKEYAUTH{ |
| 633 | TPM_PUBKEY migrationKey; |
| 634 | TPM_MIGRATE_SCHEME migrationScheme; |
| 635 | TPM_DIGEST digest; |
| 636 | } TPM_MIGRATIONKEYAUTH; |
| 637 | |
| 638 | /// |
| 639 | /// Part 2, section 5.13: TPM_COUNTER_VALUE |
| 640 | /// |
| 641 | typedef struct tdTPM_COUNTER_VALUE{ |
| 642 | TPM_STRUCTURE_TAG tag; |
| 643 | UINT8 label[4]; |
| 644 | TPM_ACTUAL_COUNT counter; |
| 645 | } TPM_COUNTER_VALUE; |
| 646 | |
| 647 | /// |
| 648 | /// Part 2, section 5.14: TPM_SIGN_INFO |
| 649 | /// Size of data indicated by dataLen |
| 650 | /// |
| 651 | typedef struct tdTPM_SIGN_INFO { |
| 652 | TPM_STRUCTURE_TAG tag; |
| 653 | UINT8 fixed[4]; |
| 654 | TPM_NONCE replay; |
| 655 | UINT32 dataLen; |
| 656 | UINT8 *data; |
| 657 | } TPM_SIGN_INFO; |
| 658 | |
| 659 | /// |
| 660 | /// Part 2, section 5.15: TPM_MSA_COMPOSITE |
| 661 | /// Number of migAuthDigest indicated by MSAlist |
| 662 | /// |
| 663 | typedef struct tdTPM_MSA_COMPOSITE { |
| 664 | UINT32 MSAlist; |
| 665 | TPM_DIGEST migAuthDigest[1]; |
| 666 | } TPM_MSA_COMPOSITE; |
| 667 | |
| 668 | /// |
| 669 | /// Part 2, section 5.16: TPM_CMK_AUTH |
| 670 | /// |
| 671 | typedef struct tdTPM_CMK_AUTH{ |
| 672 | TPM_DIGEST migrationAuthorityDigest; |
| 673 | TPM_DIGEST destinationKeyDigest; |
| 674 | TPM_DIGEST sourceKeyDigest; |
| 675 | } TPM_CMK_AUTH; |
| 676 | |
| 677 | // |
| 678 | // Part 2, section 5.17: TPM_CMK_DELEGATE |
| 679 | // |
| 680 | #define TPM_CMK_DELEGATE_SIGNING ((TPM_CMK_DELEGATE) BIT31) |
| 681 | #define TPM_CMK_DELEGATE_STORAGE ((TPM_CMK_DELEGATE) BIT30) |
| 682 | #define TPM_CMK_DELEGATE_BIND ((TPM_CMK_DELEGATE) BIT29) |
| 683 | #define TPM_CMK_DELEGATE_LEGACY ((TPM_CMK_DELEGATE) BIT28) |
| 684 | #define TPM_CMK_DELEGATE_MIGRATE ((TPM_CMK_DELEGATE) BIT27) |
| 685 | |
| 686 | /// |
| 687 | /// Part 2, section 5.18: TPM_SELECT_SIZE |
| 688 | /// |
| 689 | typedef struct tdTPM_SELECT_SIZE { |
| 690 | UINT8 major; |
| 691 | UINT8 minor; |
| 692 | UINT16 reqSize; |
| 693 | } TPM_SELECT_SIZE; |
| 694 | |
| 695 | /// |
| 696 | /// Part 2, section 5,19: TPM_CMK_MIGAUTH |
| 697 | /// |
| 698 | typedef struct tdTPM_CMK_MIGAUTH{ |
| 699 | TPM_STRUCTURE_TAG tag; |
| 700 | TPM_DIGEST msaDigest; |
| 701 | TPM_DIGEST pubKeyDigest; |
| 702 | } TPM_CMK_MIGAUTH; |
| 703 | |
| 704 | /// |
| 705 | /// Part 2, section 5.20: TPM_CMK_SIGTICKET |
| 706 | /// |
| 707 | typedef struct tdTPM_CMK_SIGTICKET{ |
| 708 | TPM_STRUCTURE_TAG tag; |
| 709 | TPM_DIGEST verKeyDigest; |
| 710 | TPM_DIGEST signedData; |
| 711 | } TPM_CMK_SIGTICKET; |
| 712 | |
| 713 | /// |
| 714 | /// Part 2, section 5.21: TPM_CMK_MA_APPROVAL |
| 715 | /// |
| 716 | typedef struct tdTPM_CMK_MA_APPROVAL{ |
| 717 | TPM_STRUCTURE_TAG tag; |
| 718 | TPM_DIGEST migrationAuthorityDigest; |
| 719 | } TPM_CMK_MA_APPROVAL; |
| 720 | |
| 721 | // |
| 722 | // Part 2, section 6: Command Tags |
| 723 | // |
| 724 | #define TPM_TAG_RQU_COMMAND ((TPM_STRUCTURE_TAG) 0x00C1) |
| 725 | #define TPM_TAG_RQU_AUTH1_COMMAND ((TPM_STRUCTURE_TAG) 0x00C2) |
| 726 | #define TPM_TAG_RQU_AUTH2_COMMAND ((TPM_STRUCTURE_TAG) 0x00C3) |
| 727 | #define TPM_TAG_RSP_COMMAND ((TPM_STRUCTURE_TAG) 0x00C4) |
| 728 | #define TPM_TAG_RSP_AUTH1_COMMAND ((TPM_STRUCTURE_TAG) 0x00C5) |
| 729 | #define TPM_TAG_RSP_AUTH2_COMMAND ((TPM_STRUCTURE_TAG) 0x00C6) |
| 730 | |
| 731 | /// |
| 732 | /// Part 2, section 7.1: TPM_PERMANENT_FLAGS |
| 733 | /// |
| 734 | typedef struct tdTPM_PERMANENT_FLAGS{ |
| 735 | TPM_STRUCTURE_TAG tag; |
| 736 | BOOLEAN disable; |
| 737 | BOOLEAN ownership; |
| 738 | BOOLEAN deactivated; |
| 739 | BOOLEAN readPubek; |
| 740 | BOOLEAN disableOwnerClear; |
| 741 | BOOLEAN allowMaintenance; |
| 742 | BOOLEAN physicalPresenceLifetimeLock; |
| 743 | BOOLEAN physicalPresenceHWEnable; |
| 744 | BOOLEAN physicalPresenceCMDEnable; |
| 745 | BOOLEAN CEKPUsed; |
| 746 | BOOLEAN TPMpost; |
| 747 | BOOLEAN TPMpostLock; |
| 748 | BOOLEAN FIPS; |
| 749 | BOOLEAN operator; |
| 750 | BOOLEAN enableRevokeEK; |
| 751 | BOOLEAN nvLocked; |
| 752 | BOOLEAN readSRKPub; |
| 753 | BOOLEAN tpmEstablished; |
| 754 | BOOLEAN maintenanceDone; |
| 755 | BOOLEAN disableFullDALogicInfo; |
| 756 | } TPM_PERMANENT_FLAGS; |
| 757 | |
| 758 | // |
| 759 | // Part 2, section 7.1.1: Flag Restrictions (of TPM_PERMANENT_FLAGS) |
| 760 | // |
| 761 | #define TPM_PF_DISABLE ((TPM_CAPABILITY_AREA) 1) |
| 762 | #define TPM_PF_OWNERSHIP ((TPM_CAPABILITY_AREA) 2) |
| 763 | #define TPM_PF_DEACTIVATED ((TPM_CAPABILITY_AREA) 3) |
| 764 | #define TPM_PF_READPUBEK ((TPM_CAPABILITY_AREA) 4) |
| 765 | #define TPM_PF_DISABLEOWNERCLEAR ((TPM_CAPABILITY_AREA) 5) |
| 766 | #define TPM_PF_ALLOWMAINTENANCE ((TPM_CAPABILITY_AREA) 6) |
| 767 | #define TPM_PF_PHYSICALPRESENCELIFETIMELOCK ((TPM_CAPABILITY_AREA) 7) |
| 768 | #define TPM_PF_PHYSICALPRESENCEHWENABLE ((TPM_CAPABILITY_AREA) 8) |
| 769 | #define TPM_PF_PHYSICALPRESENCECMDENABLE ((TPM_CAPABILITY_AREA) 9) |
| 770 | #define TPM_PF_CEKPUSED ((TPM_CAPABILITY_AREA) 10) |
| 771 | #define TPM_PF_TPMPOST ((TPM_CAPABILITY_AREA) 11) |
| 772 | #define TPM_PF_TPMPOSTLOCK ((TPM_CAPABILITY_AREA) 12) |
| 773 | #define TPM_PF_FIPS ((TPM_CAPABILITY_AREA) 13) |
| 774 | #define TPM_PF_OPERATOR ((TPM_CAPABILITY_AREA) 14) |
| 775 | #define TPM_PF_ENABLEREVOKEEK ((TPM_CAPABILITY_AREA) 15) |
| 776 | #define TPM_PF_NV_LOCKED ((TPM_CAPABILITY_AREA) 16) |
| 777 | #define TPM_PF_READSRKPUB ((TPM_CAPABILITY_AREA) 17) |
| 778 | #define TPM_PF_TPMESTABLISHED ((TPM_CAPABILITY_AREA) 18) |
| 779 | #define TPM_PF_MAINTENANCEDONE ((TPM_CAPABILITY_AREA) 19) |
| 780 | #define TPM_PF_DISABLEFULLDALOGICINFO ((TPM_CAPABILITY_AREA) 20) |
| 781 | |
| 782 | /// |
| 783 | /// Part 2, section 7.2: TPM_STCLEAR_FLAGS |
| 784 | /// |
| 785 | typedef struct tdTPM_STCLEAR_FLAGS{ |
| 786 | TPM_STRUCTURE_TAG tag; |
| 787 | BOOLEAN deactivated; |
| 788 | BOOLEAN disableForceClear; |
| 789 | BOOLEAN physicalPresence; |
| 790 | BOOLEAN physicalPresenceLock; |
| 791 | BOOLEAN bGlobalLock; |
| 792 | } TPM_STCLEAR_FLAGS; |
| 793 | |
| 794 | // |
| 795 | // Part 2, section 7.2.1: Flag Restrictions (of TPM_STCLEAR_FLAGS) |
| 796 | // |
| 797 | #define TPM_SF_DEACTIVATED ((TPM_CAPABILITY_AREA) 1) |
| 798 | #define TPM_SF_DISABLEFORCECLEAR ((TPM_CAPABILITY_AREA) 2) |
| 799 | #define TPM_SF_PHYSICALPRESENCE ((TPM_CAPABILITY_AREA) 3) |
| 800 | #define TPM_SF_PHYSICALPRESENCELOCK ((TPM_CAPABILITY_AREA) 4) |
| 801 | #define TPM_SF_BGLOBALLOCK ((TPM_CAPABILITY_AREA) 5) |
| 802 | |
| 803 | /// |
| 804 | /// Part 2, section 7.3: TPM_STANY_FLAGS |
| 805 | /// |
| 806 | typedef struct tdTPM_STANY_FLAGS{ |
| 807 | TPM_STRUCTURE_TAG tag; |
| 808 | BOOLEAN postInitialise; |
| 809 | TPM_MODIFIER_INDICATOR localityModifier; |
| 810 | BOOLEAN transportExclusive; |
| 811 | BOOLEAN TOSPresent; |
| 812 | } TPM_STANY_FLAGS; |
| 813 | |
| 814 | // |
| 815 | // Part 2, section 7.3.1: Flag Restrictions (of TPM_STANY_FLAGS) |
| 816 | // |
| 817 | #define TPM_AF_POSTINITIALISE ((TPM_CAPABILITY_AREA) 1) |
| 818 | #define TPM_AF_LOCALITYMODIFIER ((TPM_CAPABILITY_AREA) 2) |
| 819 | #define TPM_AF_TRANSPORTEXCLUSIVE ((TPM_CAPABILITY_AREA) 3) |
| 820 | #define TPM_AF_TOSPRESENT ((TPM_CAPABILITY_AREA) 4) |
| 821 | |
| 822 | // |
| 823 | // All those structures defined in section 7.4, 7.5, 7.6 are not normative and |
| 824 | // thus no definitions here |
| 825 | // |
| 826 | // Part 2, section 7.4: TPM_PERMANENT_DATA |
| 827 | // |
| 828 | #define TPM_MIN_COUNTERS 4 ///< the minimum number of counters is 4 |
| 829 | #define TPM_DELEGATE_KEY TPM_KEY |
| 830 | #define TPM_NUM_PCR 16 |
| 831 | #define TPM_MAX_NV_WRITE_NOOWNER 64 |
| 832 | |
| 833 | // |
| 834 | // Part 2, section 7.4.1: PERMANENT_DATA Subcap for SetCapability |
| 835 | // |
| 836 | #define TPM_PD_REVMAJOR ((TPM_CAPABILITY_AREA) 1) |
| 837 | #define TPM_PD_REVMINOR ((TPM_CAPABILITY_AREA) 2) |
| 838 | #define TPM_PD_TPMPROOF ((TPM_CAPABILITY_AREA) 3) |
| 839 | #define TPM_PD_OWNERAUTH ((TPM_CAPABILITY_AREA) 4) |
| 840 | #define TPM_PD_OPERATORAUTH ((TPM_CAPABILITY_AREA) 5) |
| 841 | #define TPM_PD_MANUMAINTPUB ((TPM_CAPABILITY_AREA) 6) |
| 842 | #define TPM_PD_ENDORSEMENTKEY ((TPM_CAPABILITY_AREA) 7) |
| 843 | #define TPM_PD_SRK ((TPM_CAPABILITY_AREA) 8) |
| 844 | #define TPM_PD_DELEGATEKEY ((TPM_CAPABILITY_AREA) 9) |
| 845 | #define TPM_PD_CONTEXTKEY ((TPM_CAPABILITY_AREA) 10) |
| 846 | #define TPM_PD_AUDITMONOTONICCOUNTER ((TPM_CAPABILITY_AREA) 11) |
| 847 | #define TPM_PD_MONOTONICCOUNTER ((TPM_CAPABILITY_AREA) 12) |
| 848 | #define TPM_PD_PCRATTRIB ((TPM_CAPABILITY_AREA) 13) |
| 849 | #define TPM_PD_ORDINALAUDITSTATUS ((TPM_CAPABILITY_AREA) 14) |
| 850 | #define TPM_PD_AUTHDIR ((TPM_CAPABILITY_AREA) 15) |
| 851 | #define TPM_PD_RNGSTATE ((TPM_CAPABILITY_AREA) 16) |
| 852 | #define TPM_PD_FAMILYTABLE ((TPM_CAPABILITY_AREA) 17) |
| 853 | #define TPM_DELEGATETABLE ((TPM_CAPABILITY_AREA) 18) |
| 854 | #define TPM_PD_EKRESET ((TPM_CAPABILITY_AREA) 19) |
| 855 | #define TPM_PD_MAXNVBUFSIZE ((TPM_CAPABILITY_AREA) 20) |
| 856 | #define TPM_PD_LASTFAMILYID ((TPM_CAPABILITY_AREA) 21) |
| 857 | #define TPM_PD_NOOWNERNVWRITE ((TPM_CAPABILITY_AREA) 22) |
| 858 | #define TPM_PD_RESTRICTDELEGATE ((TPM_CAPABILITY_AREA) 23) |
| 859 | #define TPM_PD_TPMDAASEED ((TPM_CAPABILITY_AREA) 24) |
| 860 | #define TPM_PD_DAAPROOF ((TPM_CAPABILITY_AREA) 25) |
| 861 | |
| 862 | /// |
| 863 | /// Part 2, section 7.5: TPM_STCLEAR_DATA |
| 864 | /// available inside TPM only |
| 865 | /// |
| 866 | typedef struct tdTPM_STCLEAR_DATA{ |
| 867 | TPM_STRUCTURE_TAG tag; |
| 868 | TPM_NONCE contextNonceKey; |
| 869 | TPM_COUNT_ID countID; |
| 870 | UINT32 ownerReference; |
| 871 | BOOLEAN disableResetLock; |
| 872 | TPM_PCRVALUE PCR[TPM_NUM_PCR]; |
| 873 | UINT32 deferredPhysicalPresence; |
| 874 | }TPM_STCLEAR_DATA; |
| 875 | |
| 876 | // |
| 877 | // Part 2, section 7.5.1: STCLEAR_DATA Subcap for SetCapability |
| 878 | // |
| 879 | #define TPM_SD_CONTEXTNONCEKEY ((TPM_CAPABILITY_AREA)0x00000001) |
| 880 | #define TPM_SD_COUNTID ((TPM_CAPABILITY_AREA)0x00000002) |
| 881 | #define TPM_SD_OWNERREFERENCE ((TPM_CAPABILITY_AREA)0x00000003) |
| 882 | #define TPM_SD_DISABLERESETLOCK ((TPM_CAPABILITY_AREA)0x00000004) |
| 883 | #define TPM_SD_PCR ((TPM_CAPABILITY_AREA)0x00000005) |
| 884 | #define TPM_SD_DEFERREDPHYSICALPRESENCE ((TPM_CAPABILITY_AREA)0x00000006) |
| 885 | |
| 886 | // |
| 887 | // Part 2, section 7.6.1: STANY_DATA Subcap for SetCapability |
| 888 | // |
| 889 | #define TPM_AD_CONTEXTNONCESESSION ((TPM_CAPABILITY_AREA) 1) |
| 890 | #define TPM_AD_AUDITDIGEST ((TPM_CAPABILITY_AREA) 2) |
| 891 | #define TPM_AD_CURRENTTICKS ((TPM_CAPABILITY_AREA) 3) |
| 892 | #define TPM_AD_CONTEXTCOUNT ((TPM_CAPABILITY_AREA) 4) |
| 893 | #define TPM_AD_CONTEXTLIST ((TPM_CAPABILITY_AREA) 5) |
| 894 | #define TPM_AD_SESSIONS ((TPM_CAPABILITY_AREA) 6) |
| 895 | |
| 896 | // |
| 897 | // Part 2, section 8: PCR Structures |
| 898 | // |
| 899 | |
| 900 | /// |
| 901 | /// Part 2, section 8.1: TPM_PCR_SELECTION |
| 902 | /// Size of pcrSelect[] indicated by sizeOfSelect |
| 903 | /// |
| 904 | typedef struct tdTPM_PCR_SELECTION { |
| 905 | UINT16 sizeOfSelect; |
| 906 | UINT8 pcrSelect[1]; |
| 907 | } TPM_PCR_SELECTION; |
| 908 | |
| 909 | /// |
| 910 | /// Part 2, section 8.2: TPM_PCR_COMPOSITE |
| 911 | /// Size of pcrValue[] indicated by valueSize |
| 912 | /// |
| 913 | typedef struct tdTPM_PCR_COMPOSITE { |
| 914 | TPM_PCR_SELECTION select; |
| 915 | UINT32 valueSize; |
| 916 | TPM_PCRVALUE pcrValue[1]; |
| 917 | } TPM_PCR_COMPOSITE; |
| 918 | |
| 919 | /// |
| 920 | /// Part 2, section 8.3: TPM_PCR_INFO |
| 921 | /// |
| 922 | typedef struct tdTPM_PCR_INFO { |
| 923 | TPM_PCR_SELECTION pcrSelection; |
| 924 | TPM_COMPOSITE_HASH digestAtRelease; |
| 925 | TPM_COMPOSITE_HASH digestAtCreation; |
| 926 | } TPM_PCR_INFO; |
| 927 | |
| 928 | /// |
| 929 | /// Part 2, section 8.6: TPM_LOCALITY_SELECTION |
| 930 | /// |
| 931 | typedef UINT8 TPM_LOCALITY_SELECTION; |
| 932 | |
| 933 | #define TPM_LOC_FOUR ((UINT8) 0x10) |
| 934 | #define TPM_LOC_THREE ((UINT8) 0x08) |
| 935 | #define TPM_LOC_TWO ((UINT8) 0x04) |
| 936 | #define TPM_LOC_ONE ((UINT8) 0x02) |
| 937 | #define TPM_LOC_ZERO ((UINT8) 0x01) |
| 938 | |
| 939 | /// |
| 940 | /// Part 2, section 8.4: TPM_PCR_INFO_LONG |
| 941 | /// |
| 942 | typedef struct tdTPM_PCR_INFO_LONG { |
| 943 | TPM_STRUCTURE_TAG tag; |
| 944 | TPM_LOCALITY_SELECTION localityAtCreation; |
| 945 | TPM_LOCALITY_SELECTION localityAtRelease; |
| 946 | TPM_PCR_SELECTION creationPCRSelection; |
| 947 | TPM_PCR_SELECTION releasePCRSelection; |
| 948 | TPM_COMPOSITE_HASH digestAtCreation; |
| 949 | TPM_COMPOSITE_HASH digestAtRelease; |
| 950 | } TPM_PCR_INFO_LONG; |
| 951 | |
| 952 | /// |
| 953 | /// Part 2, section 8.5: TPM_PCR_INFO_SHORT |
| 954 | /// |
| 955 | typedef struct tdTPM_PCR_INFO_SHORT{ |
| 956 | TPM_PCR_SELECTION pcrSelection; |
| 957 | TPM_LOCALITY_SELECTION localityAtRelease; |
| 958 | TPM_COMPOSITE_HASH digestAtRelease; |
| 959 | } TPM_PCR_INFO_SHORT; |
| 960 | |
| 961 | /// |
| 962 | /// Part 2, section 8.8: TPM_PCR_ATTRIBUTES |
| 963 | /// |
| 964 | typedef struct tdTPM_PCR_ATTRIBUTES{ |
| 965 | BOOLEAN pcrReset; |
| 966 | TPM_LOCALITY_SELECTION pcrExtendLocal; |
| 967 | TPM_LOCALITY_SELECTION pcrResetLocal; |
| 968 | } TPM_PCR_ATTRIBUTES; |
| 969 | |
| 970 | // |
| 971 | // Part 2, section 9: Storage Structures |
| 972 | // |
| 973 | |
| 974 | /// |
| 975 | /// Part 2, section 9.1: TPM_STORED_DATA |
| 976 | /// [size_is(sealInfoSize)] BYTE* sealInfo; |
| 977 | /// [size_is(encDataSize)] BYTE* encData; |
| 978 | /// |
| 979 | typedef struct tdTPM_STORED_DATA { |
| 980 | TPM_STRUCT_VER ver; |
| 981 | UINT32 sealInfoSize; |
| 982 | UINT8 *sealInfo; |
| 983 | UINT32 encDataSize; |
| 984 | UINT8 *encData; |
| 985 | } TPM_STORED_DATA; |
| 986 | |
| 987 | /// |
| 988 | /// Part 2, section 9.2: TPM_STORED_DATA12 |
| 989 | /// [size_is(sealInfoSize)] BYTE* sealInfo; |
| 990 | /// [size_is(encDataSize)] BYTE* encData; |
| 991 | /// |
| 992 | typedef struct tdTPM_STORED_DATA12 { |
| 993 | TPM_STRUCTURE_TAG tag; |
| 994 | TPM_ENTITY_TYPE et; |
| 995 | UINT32 sealInfoSize; |
| 996 | UINT8 *sealInfo; |
| 997 | UINT32 encDataSize; |
| 998 | UINT8 *encData; |
| 999 | } TPM_STORED_DATA12; |
| 1000 | |
| 1001 | /// |
| 1002 | /// Part 2, section 9.3: TPM_SEALED_DATA |
| 1003 | /// [size_is(dataSize)] BYTE* data; |
| 1004 | /// |
| 1005 | typedef struct tdTPM_SEALED_DATA { |
| 1006 | TPM_PAYLOAD_TYPE payload; |
| 1007 | TPM_SECRET authData; |
| 1008 | TPM_NONCE tpmProof; |
| 1009 | TPM_DIGEST storedDigest; |
| 1010 | UINT32 dataSize; |
| 1011 | UINT8 *data; |
| 1012 | } TPM_SEALED_DATA; |
| 1013 | |
| 1014 | /// |
| 1015 | /// Part 2, section 9.4: TPM_SYMMETRIC_KEY |
| 1016 | /// [size_is(size)] BYTE* data; |
| 1017 | /// |
| 1018 | typedef struct tdTPM_SYMMETRIC_KEY { |
| 1019 | TPM_ALGORITHM_ID algId; |
| 1020 | TPM_ENC_SCHEME encScheme; |
| 1021 | UINT16 dataSize; |
| 1022 | UINT8 *data; |
| 1023 | } TPM_SYMMETRIC_KEY; |
| 1024 | |
| 1025 | /// |
| 1026 | /// Part 2, section 9.5: TPM_BOUND_DATA |
| 1027 | /// |
| 1028 | typedef struct tdTPM_BOUND_DATA { |
| 1029 | TPM_STRUCT_VER ver; |
| 1030 | TPM_PAYLOAD_TYPE payload; |
| 1031 | UINT8 payloadData[1]; |
| 1032 | } TPM_BOUND_DATA; |
| 1033 | |
| 1034 | // |
| 1035 | // Part 2 section 10: TPM_KEY complex |
| 1036 | // |
| 1037 | |
| 1038 | // |
| 1039 | // Section 10.1, 10.4, and 10.5 have been defined previously |
| 1040 | // |
| 1041 | |
| 1042 | /// |
| 1043 | /// Part 2, section 10.2: TPM_KEY |
| 1044 | /// [size_is(encDataSize)] BYTE* encData; |
| 1045 | /// |
| 1046 | typedef struct tdTPM_KEY{ |
| 1047 | TPM_STRUCT_VER ver; |
| 1048 | TPM_KEY_USAGE keyUsage; |
| 1049 | TPM_KEY_FLAGS keyFlags; |
| 1050 | TPM_AUTH_DATA_USAGE authDataUsage; |
| 1051 | TPM_KEY_PARMS algorithmParms; |
| 1052 | UINT32 PCRInfoSize; |
| 1053 | UINT8 *PCRInfo; |
| 1054 | TPM_STORE_PUBKEY pubKey; |
| 1055 | UINT32 encDataSize; |
| 1056 | UINT8 *encData; |
| 1057 | } TPM_KEY; |
| 1058 | |
| 1059 | /// |
| 1060 | /// Part 2, section 10.3: TPM_KEY12 |
| 1061 | /// [size_is(encDataSize)] BYTE* encData; |
| 1062 | /// |
| 1063 | typedef struct tdTPM_KEY12{ |
| 1064 | TPM_STRUCTURE_TAG tag; |
| 1065 | UINT16 fill; |
| 1066 | TPM_KEY_USAGE keyUsage; |
| 1067 | TPM_KEY_FLAGS keyFlags; |
| 1068 | TPM_AUTH_DATA_USAGE authDataUsage; |
| 1069 | TPM_KEY_PARMS algorithmParms; |
| 1070 | UINT32 PCRInfoSize; |
| 1071 | UINT8 *PCRInfo; |
| 1072 | TPM_STORE_PUBKEY pubKey; |
| 1073 | UINT32 encDataSize; |
| 1074 | UINT8 *encData; |
| 1075 | } TPM_KEY12; |
| 1076 | |
| 1077 | /// |
| 1078 | /// Part 2, section 10.7: TPM_STORE_PRIVKEY |
| 1079 | /// [size_is(keyLength)] BYTE* key; |
| 1080 | /// |
| 1081 | typedef struct tdTPM_STORE_PRIVKEY { |
| 1082 | UINT32 keyLength; |
| 1083 | UINT8 *key; |
| 1084 | } TPM_STORE_PRIVKEY; |
| 1085 | |
| 1086 | /// |
| 1087 | /// Part 2, section 10.6: TPM_STORE_ASYMKEY |
| 1088 | /// |
| 1089 | typedef struct tdTPM_STORE_ASYMKEY { // pos len total |
| 1090 | TPM_PAYLOAD_TYPE payload; // 0 1 1 |
| 1091 | TPM_SECRET usageAuth; // 1 20 21 |
| 1092 | TPM_SECRET migrationAuth; // 21 20 41 |
| 1093 | TPM_DIGEST pubDataDigest; // 41 20 61 |
| 1094 | TPM_STORE_PRIVKEY privKey; // 61 132-151 193-214 |
| 1095 | } TPM_STORE_ASYMKEY; |
| 1096 | |
| 1097 | /// |
| 1098 | /// Part 2, section 10.8: TPM_MIGRATE_ASYMKEY |
| 1099 | /// [size_is(partPrivKeyLen)] BYTE* partPrivKey; |
| 1100 | /// |
| 1101 | typedef struct tdTPM_MIGRATE_ASYMKEY { // pos len total |
| 1102 | TPM_PAYLOAD_TYPE payload; // 0 1 1 |
| 1103 | TPM_SECRET usageAuth; // 1 20 21 |
| 1104 | TPM_DIGEST pubDataDigest; // 21 20 41 |
| 1105 | UINT32 partPrivKeyLen; // 41 4 45 |
| 1106 | UINT8 *partPrivKey; // 45 112-127 157-172 |
| 1107 | } TPM_MIGRATE_ASYMKEY; |
| 1108 | |
| 1109 | /// |
| 1110 | /// Part 2, section 10.9: TPM_KEY_CONTROL |
| 1111 | /// |
| 1112 | #define TPM_KEY_CONTROL_OWNER_EVICT ((UINT32) 0x00000001) |
| 1113 | |
| 1114 | // |
| 1115 | // Part 2, section 11: Signed Structures |
| 1116 | // |
| 1117 | |
| 1118 | /// |
| 1119 | /// Part 2, section 11.1: TPM_CERTIFY_INFO Structure |
| 1120 | /// |
| 1121 | typedef struct tdTPM_CERTIFY_INFO { |
| 1122 | TPM_STRUCT_VER version; |
| 1123 | TPM_KEY_USAGE keyUsage; |
| 1124 | TPM_KEY_FLAGS keyFlags; |
| 1125 | TPM_AUTH_DATA_USAGE authDataUsage; |
| 1126 | TPM_KEY_PARMS algorithmParms; |
| 1127 | TPM_DIGEST pubkeyDigest; |
| 1128 | TPM_NONCE data; |
| 1129 | BOOLEAN parentPCRStatus; |
| 1130 | UINT32 PCRInfoSize; |
| 1131 | UINT8 *PCRInfo; |
| 1132 | } TPM_CERTIFY_INFO; |
| 1133 | |
| 1134 | /// |
| 1135 | /// Part 2, section 11.2: TPM_CERTIFY_INFO2 Structure |
| 1136 | /// |
| 1137 | typedef struct tdTPM_CERTIFY_INFO2 { |
| 1138 | TPM_STRUCTURE_TAG tag; |
| 1139 | UINT8 fill; |
| 1140 | TPM_PAYLOAD_TYPE payloadType; |
| 1141 | TPM_KEY_USAGE keyUsage; |
| 1142 | TPM_KEY_FLAGS keyFlags; |
| 1143 | TPM_AUTH_DATA_USAGE authDataUsage; |
| 1144 | TPM_KEY_PARMS algorithmParms; |
| 1145 | TPM_DIGEST pubkeyDigest; |
| 1146 | TPM_NONCE data; |
| 1147 | BOOLEAN parentPCRStatus; |
| 1148 | UINT32 PCRInfoSize; |
| 1149 | UINT8 *PCRInfo; |
| 1150 | UINT32 migrationAuthoritySize; |
| 1151 | UINT8 *migrationAuthority; |
| 1152 | } TPM_CERTIFY_INFO2; |
| 1153 | |
| 1154 | /// |
| 1155 | /// Part 2, section 11.3 TPM_QUOTE_INFO Structure |
| 1156 | /// |
| 1157 | typedef struct tdTPM_QUOTE_INFO { |
| 1158 | TPM_STRUCT_VER version; |
| 1159 | UINT8 fixed[4]; |
| 1160 | TPM_COMPOSITE_HASH digestValue; |
| 1161 | TPM_NONCE externalData; |
| 1162 | } TPM_QUOTE_INFO; |
| 1163 | |
| 1164 | /// |
| 1165 | /// Part 2, section 11.4 TPM_QUOTE_INFO2 Structure |
| 1166 | /// |
| 1167 | typedef struct tdTPM_QUOTE_INFO2 { |
| 1168 | TPM_STRUCTURE_TAG tag; |
| 1169 | UINT8 fixed[4]; |
| 1170 | TPM_NONCE externalData; |
| 1171 | TPM_PCR_INFO_SHORT infoShort; |
| 1172 | } TPM_QUOTE_INFO2; |
| 1173 | |
| 1174 | // |
| 1175 | // Part 2, section 12: Identity Structures |
| 1176 | // |
| 1177 | |
| 1178 | /// |
| 1179 | /// Part 2, section 12.1 TPM_EK_BLOB |
| 1180 | /// |
| 1181 | typedef struct tdTPM_EK_BLOB { |
| 1182 | TPM_STRUCTURE_TAG tag; |
| 1183 | TPM_EK_TYPE ekType; |
| 1184 | UINT32 blobSize; |
| 1185 | UINT8 *blob; |
| 1186 | } TPM_EK_BLOB; |
| 1187 | |
| 1188 | /// |
| 1189 | /// Part 2, section 12.2 TPM_EK_BLOB_ACTIVATE |
| 1190 | /// |
| 1191 | typedef struct tdTPM_EK_BLOB_ACTIVATE { |
| 1192 | TPM_STRUCTURE_TAG tag; |
| 1193 | TPM_SYMMETRIC_KEY sessionKey; |
| 1194 | TPM_DIGEST idDigest; |
| 1195 | TPM_PCR_INFO_SHORT pcrInfo; |
| 1196 | } TPM_EK_BLOB_ACTIVATE; |
| 1197 | |
| 1198 | /// |
| 1199 | /// Part 2, section 12.3 TPM_EK_BLOB_AUTH |
| 1200 | /// |
| 1201 | typedef struct tdTPM_EK_BLOB_AUTH { |
| 1202 | TPM_STRUCTURE_TAG tag; |
| 1203 | TPM_SECRET authValue; |
| 1204 | } TPM_EK_BLOB_AUTH; |
| 1205 | |
| 1206 | |
| 1207 | /// |
| 1208 | /// Part 2, section 12.5 TPM_IDENTITY_CONTENTS |
| 1209 | /// |
| 1210 | typedef struct tdTPM_IDENTITY_CONTENTS { |
| 1211 | TPM_STRUCT_VER ver; |
| 1212 | UINT32 ordinal; |
| 1213 | TPM_CHOSENID_HASH labelPrivCADigest; |
| 1214 | TPM_PUBKEY identityPubKey; |
| 1215 | } TPM_IDENTITY_CONTENTS; |
| 1216 | |
| 1217 | /// |
| 1218 | /// Part 2, section 12.6 TPM_IDENTITY_REQ |
| 1219 | /// |
| 1220 | typedef struct tdTPM_IDENTITY_REQ { |
| 1221 | UINT32 asymSize; |
| 1222 | UINT32 symSize; |
| 1223 | TPM_KEY_PARMS asymAlgorithm; |
| 1224 | TPM_KEY_PARMS symAlgorithm; |
| 1225 | UINT8 *asymBlob; |
| 1226 | UINT8 *symBlob; |
| 1227 | } TPM_IDENTITY_REQ; |
| 1228 | |
| 1229 | /// |
| 1230 | /// Part 2, section 12.7 TPM_IDENTITY_PROOF |
| 1231 | /// |
| 1232 | typedef struct tdTPM_IDENTITY_PROOF { |
| 1233 | TPM_STRUCT_VER ver; |
| 1234 | UINT32 labelSize; |
| 1235 | UINT32 identityBindingSize; |
| 1236 | UINT32 endorsementSize; |
| 1237 | UINT32 platformSize; |
| 1238 | UINT32 conformanceSize; |
| 1239 | TPM_PUBKEY identityKey; |
| 1240 | UINT8 *labelArea; |
| 1241 | UINT8 *identityBinding; |
| 1242 | UINT8 *endorsementCredential; |
| 1243 | UINT8 *platformCredential; |
| 1244 | UINT8 *conformanceCredential; |
| 1245 | } TPM_IDENTITY_PROOF; |
| 1246 | |
| 1247 | /// |
| 1248 | /// Part 2, section 12.8 TPM_ASYM_CA_CONTENTS |
| 1249 | /// |
| 1250 | typedef struct tdTPM_ASYM_CA_CONTENTS { |
| 1251 | TPM_SYMMETRIC_KEY sessionKey; |
| 1252 | TPM_DIGEST idDigest; |
| 1253 | } TPM_ASYM_CA_CONTENTS; |
| 1254 | |
| 1255 | /// |
| 1256 | /// Part 2, section 12.9 TPM_SYM_CA_ATTESTATION |
| 1257 | /// |
| 1258 | typedef struct tdTPM_SYM_CA_ATTESTATION { |
| 1259 | UINT32 credSize; |
| 1260 | TPM_KEY_PARMS algorithm; |
| 1261 | UINT8 *credential; |
| 1262 | } TPM_SYM_CA_ATTESTATION; |
| 1263 | |
| 1264 | /// |
| 1265 | /// Part 2, section 15: Tick Structures |
| 1266 | /// Placed here out of order because definitions are used in section 13. |
| 1267 | /// |
| 1268 | typedef struct tdTPM_CURRENT_TICKS { |
| 1269 | TPM_STRUCTURE_TAG tag; |
| 1270 | UINT64 currentTicks; |
| 1271 | UINT16 tickRate; |
| 1272 | TPM_NONCE tickNonce; |
| 1273 | } TPM_CURRENT_TICKS; |
| 1274 | |
| 1275 | /// |
| 1276 | /// Part 2, section 13: Transport structures |
| 1277 | /// |
| 1278 | |
| 1279 | /// |
| 1280 | /// Part 2, section 13.1: TPM _TRANSPORT_PUBLIC |
| 1281 | /// |
| 1282 | typedef struct tdTPM_TRANSPORT_PUBLIC { |
| 1283 | TPM_STRUCTURE_TAG tag; |
| 1284 | TPM_TRANSPORT_ATTRIBUTES transAttributes; |
| 1285 | TPM_ALGORITHM_ID algId; |
| 1286 | TPM_ENC_SCHEME encScheme; |
| 1287 | } TPM_TRANSPORT_PUBLIC; |
| 1288 | |
| 1289 | // |
| 1290 | // Part 2, section 13.1.1 TPM_TRANSPORT_ATTRIBUTES Definitions |
| 1291 | // |
| 1292 | #define TPM_TRANSPORT_ENCRYPT ((UINT32)BIT0) |
| 1293 | #define TPM_TRANSPORT_LOG ((UINT32)BIT1) |
| 1294 | #define TPM_TRANSPORT_EXCLUSIVE ((UINT32)BIT2) |
| 1295 | |
| 1296 | /// |
| 1297 | /// Part 2, section 13.2 TPM_TRANSPORT_INTERNAL |
| 1298 | /// |
| 1299 | typedef struct tdTPM_TRANSPORT_INTERNAL { |
| 1300 | TPM_STRUCTURE_TAG tag; |
| 1301 | TPM_AUTHDATA authData; |
| 1302 | TPM_TRANSPORT_PUBLIC transPublic; |
| 1303 | TPM_TRANSHANDLE transHandle; |
| 1304 | TPM_NONCE transNonceEven; |
| 1305 | TPM_DIGEST transDigest; |
| 1306 | } TPM_TRANSPORT_INTERNAL; |
| 1307 | |
| 1308 | /// |
| 1309 | /// Part 2, section 13.3 TPM_TRANSPORT_LOG_IN structure |
| 1310 | /// |
| 1311 | typedef struct tdTPM_TRANSPORT_LOG_IN { |
| 1312 | TPM_STRUCTURE_TAG tag; |
| 1313 | TPM_DIGEST parameters; |
| 1314 | TPM_DIGEST pubKeyHash; |
| 1315 | } TPM_TRANSPORT_LOG_IN; |
| 1316 | |
| 1317 | /// |
| 1318 | /// Part 2, section 13.4 TPM_TRANSPORT_LOG_OUT structure |
| 1319 | /// |
| 1320 | typedef struct tdTPM_TRANSPORT_LOG_OUT { |
| 1321 | TPM_STRUCTURE_TAG tag; |
| 1322 | TPM_CURRENT_TICKS currentTicks; |
| 1323 | TPM_DIGEST parameters; |
| 1324 | TPM_MODIFIER_INDICATOR locality; |
| 1325 | } TPM_TRANSPORT_LOG_OUT; |
| 1326 | |
| 1327 | /// |
| 1328 | /// Part 2, section 13.5 TPM_TRANSPORT_AUTH structure |
| 1329 | /// |
| 1330 | typedef struct tdTPM_TRANSPORT_AUTH { |
| 1331 | TPM_STRUCTURE_TAG tag; |
| 1332 | TPM_AUTHDATA authData; |
| 1333 | } TPM_TRANSPORT_AUTH; |
| 1334 | |
| 1335 | // |
| 1336 | // Part 2, section 14: Audit Structures |
| 1337 | // |
| 1338 | |
| 1339 | /// |
| 1340 | /// Part 2, section 14.1 TPM_AUDIT_EVENT_IN structure |
| 1341 | /// |
| 1342 | typedef struct tdTPM_AUDIT_EVENT_IN { |
| 1343 | TPM_STRUCTURE_TAG tag; |
| 1344 | TPM_DIGEST inputParms; |
| 1345 | TPM_COUNTER_VALUE auditCount; |
| 1346 | } TPM_AUDIT_EVENT_IN; |
| 1347 | |
| 1348 | /// |
| 1349 | /// Part 2, section 14.2 TPM_AUDIT_EVENT_OUT structure |
| 1350 | /// |
| 1351 | typedef struct tdTPM_AUDIT_EVENT_OUT { |
| 1352 | TPM_STRUCTURE_TAG tag; |
| 1353 | TPM_COMMAND_CODE ordinal; |
| 1354 | TPM_DIGEST outputParms; |
| 1355 | TPM_COUNTER_VALUE auditCount; |
| 1356 | TPM_RESULT returnCode; |
| 1357 | } TPM_AUDIT_EVENT_OUT; |
| 1358 | |
| 1359 | // |
| 1360 | // Part 2, section 16: Return Codes |
| 1361 | // |
| 1362 | |
| 1363 | #define TPM_VENDOR_ERROR TPM_Vendor_Specific32 |
| 1364 | #define TPM_NON_FATAL 0x00000800 |
| 1365 | |
| 1366 | #define TPM_SUCCESS ((TPM_RESULT) TPM_BASE) |
| 1367 | #define TPM_AUTHFAIL ((TPM_RESULT) (TPM_BASE + 1)) |
| 1368 | #define TPM_BADINDEX ((TPM_RESULT) (TPM_BASE + 2)) |
| 1369 | #define TPM_BAD_PARAMETER ((TPM_RESULT) (TPM_BASE + 3)) |
| 1370 | #define TPM_AUDITFAILURE ((TPM_RESULT) (TPM_BASE + 4)) |
| 1371 | #define TPM_CLEAR_DISABLED ((TPM_RESULT) (TPM_BASE + 5)) |
| 1372 | #define TPM_DEACTIVATED ((TPM_RESULT) (TPM_BASE + 6)) |
| 1373 | #define TPM_DISABLED ((TPM_RESULT) (TPM_BASE + 7)) |
| 1374 | #define TPM_DISABLED_CMD ((TPM_RESULT) (TPM_BASE + 8)) |
| 1375 | #define TPM_FAIL ((TPM_RESULT) (TPM_BASE + 9)) |
| 1376 | #define TPM_BAD_ORDINAL ((TPM_RESULT) (TPM_BASE + 10)) |
| 1377 | #define TPM_INSTALL_DISABLED ((TPM_RESULT) (TPM_BASE + 11)) |
| 1378 | #define TPM_INVALID_KEYHANDLE ((TPM_RESULT) (TPM_BASE + 12)) |
| 1379 | #define TPM_KEYNOTFOUND ((TPM_RESULT) (TPM_BASE + 13)) |
| 1380 | #define TPM_INAPPROPRIATE_ENC ((TPM_RESULT) (TPM_BASE + 14)) |
| 1381 | #define TPM_MIGRATEFAIL ((TPM_RESULT) (TPM_BASE + 15)) |
| 1382 | #define TPM_INVALID_PCR_INFO ((TPM_RESULT) (TPM_BASE + 16)) |
| 1383 | #define TPM_NOSPACE ((TPM_RESULT) (TPM_BASE + 17)) |
| 1384 | #define TPM_NOSRK ((TPM_RESULT) (TPM_BASE + 18)) |
| 1385 | #define TPM_NOTSEALED_BLOB ((TPM_RESULT) (TPM_BASE + 19)) |
| 1386 | #define TPM_OWNER_SET ((TPM_RESULT) (TPM_BASE + 20)) |
| 1387 | #define TPM_RESOURCES ((TPM_RESULT) (TPM_BASE + 21)) |
| 1388 | #define TPM_SHORTRANDOM ((TPM_RESULT) (TPM_BASE + 22)) |
| 1389 | #define TPM_SIZE ((TPM_RESULT) (TPM_BASE + 23)) |
| 1390 | #define TPM_WRONGPCRVAL ((TPM_RESULT) (TPM_BASE + 24)) |
| 1391 | #define TPM_BAD_PARAM_SIZE ((TPM_RESULT) (TPM_BASE + 25)) |
| 1392 | #define TPM_SHA_THREAD ((TPM_RESULT) (TPM_BASE + 26)) |
| 1393 | #define TPM_SHA_ERROR ((TPM_RESULT) (TPM_BASE + 27)) |
| 1394 | #define TPM_FAILEDSELFTEST ((TPM_RESULT) (TPM_BASE + 28)) |
| 1395 | #define TPM_AUTH2FAIL ((TPM_RESULT) (TPM_BASE + 29)) |
| 1396 | #define TPM_BADTAG ((TPM_RESULT) (TPM_BASE + 30)) |
| 1397 | #define TPM_IOERROR ((TPM_RESULT) (TPM_BASE + 31)) |
| 1398 | #define TPM_ENCRYPT_ERROR ((TPM_RESULT) (TPM_BASE + 32)) |
| 1399 | #define TPM_DECRYPT_ERROR ((TPM_RESULT) (TPM_BASE + 33)) |
| 1400 | #define TPM_INVALID_AUTHHANDLE ((TPM_RESULT) (TPM_BASE + 34)) |
| 1401 | #define TPM_NO_ENDORSEMENT ((TPM_RESULT) (TPM_BASE + 35)) |
| 1402 | #define TPM_INVALID_KEYUSAGE ((TPM_RESULT) (TPM_BASE + 36)) |
| 1403 | #define TPM_WRONG_ENTITYTYPE ((TPM_RESULT) (TPM_BASE + 37)) |
| 1404 | #define TPM_INVALID_POSTINIT ((TPM_RESULT) (TPM_BASE + 38)) |
| 1405 | #define TPM_INAPPROPRIATE_SIG ((TPM_RESULT) (TPM_BASE + 39)) |
| 1406 | #define TPM_BAD_KEY_PROPERTY ((TPM_RESULT) (TPM_BASE + 40)) |
| 1407 | #define TPM_BAD_MIGRATION ((TPM_RESULT) (TPM_BASE + 41)) |
| 1408 | #define TPM_BAD_SCHEME ((TPM_RESULT) (TPM_BASE + 42)) |
| 1409 | #define TPM_BAD_DATASIZE ((TPM_RESULT) (TPM_BASE + 43)) |
| 1410 | #define TPM_BAD_MODE ((TPM_RESULT) (TPM_BASE + 44)) |
| 1411 | #define TPM_BAD_PRESENCE ((TPM_RESULT) (TPM_BASE + 45)) |
| 1412 | #define TPM_BAD_VERSION ((TPM_RESULT) (TPM_BASE + 46)) |
| 1413 | #define TPM_NO_WRAP_TRANSPORT ((TPM_RESULT) (TPM_BASE + 47)) |
| 1414 | #define TPM_AUDITFAIL_UNSUCCESSFUL ((TPM_RESULT) (TPM_BASE + 48)) |
| 1415 | #define TPM_AUDITFAIL_SUCCESSFUL ((TPM_RESULT) (TPM_BASE + 49)) |
| 1416 | #define TPM_NOTRESETABLE ((TPM_RESULT) (TPM_BASE + 50)) |
| 1417 | #define TPM_NOTLOCAL ((TPM_RESULT) (TPM_BASE + 51)) |
| 1418 | #define TPM_BAD_TYPE ((TPM_RESULT) (TPM_BASE + 52)) |
| 1419 | #define TPM_INVALID_RESOURCE ((TPM_RESULT) (TPM_BASE + 53)) |
| 1420 | #define TPM_NOTFIPS ((TPM_RESULT) (TPM_BASE + 54)) |
| 1421 | #define TPM_INVALID_FAMILY ((TPM_RESULT) (TPM_BASE + 55)) |
| 1422 | #define TPM_NO_NV_PERMISSION ((TPM_RESULT) (TPM_BASE + 56)) |
| 1423 | #define TPM_REQUIRES_SIGN ((TPM_RESULT) (TPM_BASE + 57)) |
| 1424 | #define TPM_KEY_NOTSUPPORTED ((TPM_RESULT) (TPM_BASE + 58)) |
| 1425 | #define TPM_AUTH_CONFLICT ((TPM_RESULT) (TPM_BASE + 59)) |
| 1426 | #define TPM_AREA_LOCKED ((TPM_RESULT) (TPM_BASE + 60)) |
| 1427 | #define TPM_BAD_LOCALITY ((TPM_RESULT) (TPM_BASE + 61)) |
| 1428 | #define TPM_READ_ONLY ((TPM_RESULT) (TPM_BASE + 62)) |
| 1429 | #define TPM_PER_NOWRITE ((TPM_RESULT) (TPM_BASE + 63)) |
| 1430 | #define TPM_FAMILYCOUNT ((TPM_RESULT) (TPM_BASE + 64)) |
| 1431 | #define TPM_WRITE_LOCKED ((TPM_RESULT) (TPM_BASE + 65)) |
| 1432 | #define TPM_BAD_ATTRIBUTES ((TPM_RESULT) (TPM_BASE + 66)) |
| 1433 | #define TPM_INVALID_STRUCTURE ((TPM_RESULT) (TPM_BASE + 67)) |
| 1434 | #define TPM_KEY_OWNER_CONTROL ((TPM_RESULT) (TPM_BASE + 68)) |
| 1435 | #define TPM_BAD_COUNTER ((TPM_RESULT) (TPM_BASE + 69)) |
| 1436 | #define TPM_NOT_FULLWRITE ((TPM_RESULT) (TPM_BASE + 70)) |
| 1437 | #define TPM_CONTEXT_GAP ((TPM_RESULT) (TPM_BASE + 71)) |
| 1438 | #define TPM_MAXNVWRITES ((TPM_RESULT) (TPM_BASE + 72)) |
| 1439 | #define TPM_NOOPERATOR ((TPM_RESULT) (TPM_BASE + 73)) |
| 1440 | #define TPM_RESOURCEMISSING ((TPM_RESULT) (TPM_BASE + 74)) |
| 1441 | #define TPM_DELEGATE_LOCK ((TPM_RESULT) (TPM_BASE + 75)) |
| 1442 | #define TPM_DELEGATE_FAMILY ((TPM_RESULT) (TPM_BASE + 76)) |
| 1443 | #define TPM_DELEGATE_ADMIN ((TPM_RESULT) (TPM_BASE + 77)) |
| 1444 | #define TPM_TRANSPORT_NOTEXCLUSIVE ((TPM_RESULT) (TPM_BASE + 78)) |
| 1445 | #define TPM_OWNER_CONTROL ((TPM_RESULT) (TPM_BASE + 79)) |
| 1446 | #define TPM_DAA_RESOURCES ((TPM_RESULT) (TPM_BASE + 80)) |
| 1447 | #define TPM_DAA_INPUT_DATA0 ((TPM_RESULT) (TPM_BASE + 81)) |
| 1448 | #define TPM_DAA_INPUT_DATA1 ((TPM_RESULT) (TPM_BASE + 82)) |
| 1449 | #define TPM_DAA_ISSUER_SETTINGS ((TPM_RESULT) (TPM_BASE + 83)) |
| 1450 | #define TPM_DAA_TPM_SETTINGS ((TPM_RESULT) (TPM_BASE + 84)) |
| 1451 | #define TPM_DAA_STAGE ((TPM_RESULT) (TPM_BASE + 85)) |
| 1452 | #define TPM_DAA_ISSUER_VALIDITY ((TPM_RESULT) (TPM_BASE + 86)) |
| 1453 | #define TPM_DAA_WRONG_W ((TPM_RESULT) (TPM_BASE + 87)) |
| 1454 | #define TPM_BAD_HANDLE ((TPM_RESULT) (TPM_BASE + 88)) |
| 1455 | #define TPM_BAD_DELEGATE ((TPM_RESULT) (TPM_BASE + 89)) |
| 1456 | #define TPM_BADCONTEXT ((TPM_RESULT) (TPM_BASE + 90)) |
| 1457 | #define TPM_TOOMANYCONTEXTS ((TPM_RESULT) (TPM_BASE + 91)) |
| 1458 | #define TPM_MA_TICKET_SIGNATURE ((TPM_RESULT) (TPM_BASE + 92)) |
| 1459 | #define TPM_MA_DESTINATION ((TPM_RESULT) (TPM_BASE + 93)) |
| 1460 | #define TPM_MA_SOURCE ((TPM_RESULT) (TPM_BASE + 94)) |
| 1461 | #define TPM_MA_AUTHORITY ((TPM_RESULT) (TPM_BASE + 95)) |
| 1462 | #define TPM_PERMANENTEK ((TPM_RESULT) (TPM_BASE + 97)) |
| 1463 | #define TPM_BAD_SIGNATURE ((TPM_RESULT) (TPM_BASE + 98)) |
| 1464 | #define TPM_NOCONTEXTSPACE ((TPM_RESULT) (TPM_BASE + 99)) |
| 1465 | |
| 1466 | #define TPM_RETRY ((TPM_RESULT) (TPM_BASE + TPM_NON_FATAL)) |
| 1467 | #define TPM_NEEDS_SELFTEST ((TPM_RESULT) (TPM_BASE + TPM_NON_FATAL + 1)) |
| 1468 | #define TPM_DOING_SELFTEST ((TPM_RESULT) (TPM_BASE + TPM_NON_FATAL + 2)) |
| 1469 | #define TPM_DEFEND_LOCK_RUNNING ((TPM_RESULT) (TPM_BASE + TPM_NON_FATAL + 3)) |
| 1470 | |
| 1471 | // |
| 1472 | // Part 2, section 17: Ordinals |
| 1473 | // |
| 1474 | // Ordinals are 32 bit values. The upper byte contains values that serve as |
| 1475 | // flag indicators, the next byte contains values indicating what committee |
| 1476 | // designated the ordinal, and the final two bytes contain the Command |
| 1477 | // Ordinal Index. |
| 1478 | // 3 2 1 |
| 1479 | // 1 0 9 8 7 6 5 4 3 2 1 0 9 8 7 6 5 4 3 2 1 0 9 8 7 6 5 4 3 2 1 0 |
| 1480 | // +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ |
| 1481 | // |P|C|V| Reserved| Purview | Command Ordinal Index | |
| 1482 | // +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ |
| 1483 | // |
| 1484 | // Where: |
| 1485 | // |
| 1486 | // * P is Protected/Unprotected command. When 0 the command is a Protected |
| 1487 | // command, when 1 the command is an Unprotected command. |
| 1488 | // |
| 1489 | // * C is Non-Connection/Connection related command. When 0 this command |
| 1490 | // passes through to either the protected (TPM) or unprotected (TSS) |
| 1491 | // components. |
| 1492 | // |
| 1493 | // * V is TPM/Vendor command. When 0 the command is TPM defined, when 1 the |
| 1494 | // command is vendor defined. |
| 1495 | // |
| 1496 | // * All reserved area bits are set to 0. |
| 1497 | // |
| 1498 | |
| 1499 | #define TPM_ORD_ActivateIdentity ((TPM_COMMAND_CODE) 0x0000007A) |
| 1500 | #define TPM_ORD_AuthorizeMigrationKey ((TPM_COMMAND_CODE) 0x0000002B) |
| 1501 | #define TPM_ORD_CertifyKey ((TPM_COMMAND_CODE) 0x00000032) |
| 1502 | #define TPM_ORD_CertifyKey2 ((TPM_COMMAND_CODE) 0x00000033) |
| 1503 | #define TPM_ORD_CertifySelfTest ((TPM_COMMAND_CODE) 0x00000052) |
| 1504 | #define TPM_ORD_ChangeAuth ((TPM_COMMAND_CODE) 0x0000000C) |
| 1505 | #define TPM_ORD_ChangeAuthAsymFinish ((TPM_COMMAND_CODE) 0x0000000F) |
| 1506 | #define TPM_ORD_ChangeAuthAsymStart ((TPM_COMMAND_CODE) 0x0000000E) |
| 1507 | #define TPM_ORD_ChangeAuthOwner ((TPM_COMMAND_CODE) 0x00000010) |
| 1508 | #define TPM_ORD_CMK_ApproveMA ((TPM_COMMAND_CODE) 0x0000001D) |
| 1509 | #define TPM_ORD_CMK_ConvertMigration ((TPM_COMMAND_CODE) 0x00000024) |
| 1510 | #define TPM_ORD_CMK_CreateBlob ((TPM_COMMAND_CODE) 0x0000001B) |
| 1511 | #define TPM_ORD_CMK_CreateKey ((TPM_COMMAND_CODE) 0x00000013) |
| 1512 | #define TPM_ORD_CMK_CreateTicket ((TPM_COMMAND_CODE) 0x00000012) |
| 1513 | #define TPM_ORD_CMK_SetRestrictions ((TPM_COMMAND_CODE) 0x0000001C) |
| 1514 | #define TPM_ORD_ContinueSelfTest ((TPM_COMMAND_CODE) 0x00000053) |
| 1515 | #define TPM_ORD_ConvertMigrationBlob ((TPM_COMMAND_CODE) 0x0000002A) |
| 1516 | #define TPM_ORD_CreateCounter ((TPM_COMMAND_CODE) 0x000000DC) |
| 1517 | #define TPM_ORD_CreateEndorsementKeyPair ((TPM_COMMAND_CODE) 0x00000078) |
| 1518 | #define TPM_ORD_CreateMaintenanceArchive ((TPM_COMMAND_CODE) 0x0000002C) |
| 1519 | #define TPM_ORD_CreateMigrationBlob ((TPM_COMMAND_CODE) 0x00000028) |
| 1520 | #define TPM_ORD_CreateRevocableEK ((TPM_COMMAND_CODE) 0x0000007F) |
| 1521 | #define TPM_ORD_CreateWrapKey ((TPM_COMMAND_CODE) 0x0000001F) |
| 1522 | #define TPM_ORD_DAA_JOIN ((TPM_COMMAND_CODE) 0x00000029) |
| 1523 | #define TPM_ORD_DAA_SIGN ((TPM_COMMAND_CODE) 0x00000031) |
| 1524 | #define TPM_ORD_Delegate_CreateKeyDelegation ((TPM_COMMAND_CODE) 0x000000D4) |
| 1525 | #define TPM_ORD_Delegate_CreateOwnerDelegation ((TPM_COMMAND_CODE) 0x000000D5) |
| 1526 | #define TPM_ORD_Delegate_LoadOwnerDelegation ((TPM_COMMAND_CODE) 0x000000D8) |
| 1527 | #define TPM_ORD_Delegate_Manage ((TPM_COMMAND_CODE) 0x000000D2) |
| 1528 | #define TPM_ORD_Delegate_ReadTable ((TPM_COMMAND_CODE) 0x000000DB) |
| 1529 | #define TPM_ORD_Delegate_UpdateVerification ((TPM_COMMAND_CODE) 0x000000D1) |
| 1530 | #define TPM_ORD_Delegate_VerifyDelegation ((TPM_COMMAND_CODE) 0x000000D6) |
| 1531 | #define TPM_ORD_DirRead ((TPM_COMMAND_CODE) 0x0000001A) |
| 1532 | #define TPM_ORD_DirWriteAuth ((TPM_COMMAND_CODE) 0x00000019) |
| 1533 | #define TPM_ORD_DisableForceClear ((TPM_COMMAND_CODE) 0x0000005E) |
| 1534 | #define TPM_ORD_DisableOwnerClear ((TPM_COMMAND_CODE) 0x0000005C) |
| 1535 | #define TPM_ORD_DisablePubekRead ((TPM_COMMAND_CODE) 0x0000007E) |
| 1536 | #define TPM_ORD_DSAP ((TPM_COMMAND_CODE) 0x00000011) |
| 1537 | #define TPM_ORD_EstablishTransport ((TPM_COMMAND_CODE) 0x000000E6) |
| 1538 | #define TPM_ORD_EvictKey ((TPM_COMMAND_CODE) 0x00000022) |
| 1539 | #define TPM_ORD_ExecuteTransport ((TPM_COMMAND_CODE) 0x000000E7) |
| 1540 | #define TPM_ORD_Extend ((TPM_COMMAND_CODE) 0x00000014) |
| 1541 | #define TPM_ORD_FieldUpgrade ((TPM_COMMAND_CODE) 0x000000AA) |
| 1542 | #define TPM_ORD_FlushSpecific ((TPM_COMMAND_CODE) 0x000000BA) |
| 1543 | #define TPM_ORD_ForceClear ((TPM_COMMAND_CODE) 0x0000005D) |
| 1544 | #define TPM_ORD_GetAuditDigest ((TPM_COMMAND_CODE) 0x00000085) |
| 1545 | #define TPM_ORD_GetAuditDigestSigned ((TPM_COMMAND_CODE) 0x00000086) |
| 1546 | #define TPM_ORD_GetAuditEvent ((TPM_COMMAND_CODE) 0x00000082) |
| 1547 | #define TPM_ORD_GetAuditEventSigned ((TPM_COMMAND_CODE) 0x00000083) |
| 1548 | #define TPM_ORD_GetCapability ((TPM_COMMAND_CODE) 0x00000065) |
| 1549 | #define TPM_ORD_GetCapabilityOwner ((TPM_COMMAND_CODE) 0x00000066) |
| 1550 | #define TPM_ORD_GetCapabilitySigned ((TPM_COMMAND_CODE) 0x00000064) |
| 1551 | #define TPM_ORD_GetOrdinalAuditStatus ((TPM_COMMAND_CODE) 0x0000008C) |
| 1552 | #define TPM_ORD_GetPubKey ((TPM_COMMAND_CODE) 0x00000021) |
| 1553 | #define TPM_ORD_GetRandom ((TPM_COMMAND_CODE) 0x00000046) |
| 1554 | #define TPM_ORD_GetTestResult ((TPM_COMMAND_CODE) 0x00000054) |
| 1555 | #define TPM_ORD_GetTicks ((TPM_COMMAND_CODE) 0x000000F1) |
| 1556 | #define TPM_ORD_IncrementCounter ((TPM_COMMAND_CODE) 0x000000DD) |
| 1557 | #define TPM_ORD_Init ((TPM_COMMAND_CODE) 0x00000097) |
| 1558 | #define TPM_ORD_KeyControlOwner ((TPM_COMMAND_CODE) 0x00000023) |
| 1559 | #define TPM_ORD_KillMaintenanceFeature ((TPM_COMMAND_CODE) 0x0000002E) |
| 1560 | #define TPM_ORD_LoadAuthContext ((TPM_COMMAND_CODE) 0x000000B7) |
| 1561 | #define TPM_ORD_LoadContext ((TPM_COMMAND_CODE) 0x000000B9) |
| 1562 | #define TPM_ORD_LoadKey ((TPM_COMMAND_CODE) 0x00000020) |
| 1563 | #define TPM_ORD_LoadKey2 ((TPM_COMMAND_CODE) 0x00000041) |
| 1564 | #define TPM_ORD_LoadKeyContext ((TPM_COMMAND_CODE) 0x000000B5) |
| 1565 | #define TPM_ORD_LoadMaintenanceArchive ((TPM_COMMAND_CODE) 0x0000002D) |
| 1566 | #define TPM_ORD_LoadManuMaintPub ((TPM_COMMAND_CODE) 0x0000002F) |
| 1567 | #define TPM_ORD_MakeIdentity ((TPM_COMMAND_CODE) 0x00000079) |
| 1568 | #define TPM_ORD_MigrateKey ((TPM_COMMAND_CODE) 0x00000025) |
| 1569 | #define TPM_ORD_NV_DefineSpace ((TPM_COMMAND_CODE) 0x000000CC) |
| 1570 | #define TPM_ORD_NV_ReadValue ((TPM_COMMAND_CODE) 0x000000CF) |
| 1571 | #define TPM_ORD_NV_ReadValueAuth ((TPM_COMMAND_CODE) 0x000000D0) |
| 1572 | #define TPM_ORD_NV_WriteValue ((TPM_COMMAND_CODE) 0x000000CD) |
| 1573 | #define TPM_ORD_NV_WriteValueAuth ((TPM_COMMAND_CODE) 0x000000CE) |
| 1574 | #define TPM_ORD_OIAP ((TPM_COMMAND_CODE) 0x0000000A) |
| 1575 | #define TPM_ORD_OSAP ((TPM_COMMAND_CODE) 0x0000000B) |
| 1576 | #define TPM_ORD_OwnerClear ((TPM_COMMAND_CODE) 0x0000005B) |
| 1577 | #define TPM_ORD_OwnerReadInternalPub ((TPM_COMMAND_CODE) 0x00000081) |
| 1578 | #define TPM_ORD_OwnerReadPubek ((TPM_COMMAND_CODE) 0x0000007D) |
| 1579 | #define TPM_ORD_OwnerSetDisable ((TPM_COMMAND_CODE) 0x0000006E) |
| 1580 | #define TPM_ORD_PCR_Reset ((TPM_COMMAND_CODE) 0x000000C8) |
| 1581 | #define TPM_ORD_PcrRead ((TPM_COMMAND_CODE) 0x00000015) |
| 1582 | #define TPM_ORD_PhysicalDisable ((TPM_COMMAND_CODE) 0x00000070) |
| 1583 | #define TPM_ORD_PhysicalEnable ((TPM_COMMAND_CODE) 0x0000006F) |
| 1584 | #define TPM_ORD_PhysicalSetDeactivated ((TPM_COMMAND_CODE) 0x00000072) |
| 1585 | #define TPM_ORD_Quote ((TPM_COMMAND_CODE) 0x00000016) |
| 1586 | #define TPM_ORD_Quote2 ((TPM_COMMAND_CODE) 0x0000003E) |
| 1587 | #define TPM_ORD_ReadCounter ((TPM_COMMAND_CODE) 0x000000DE) |
| 1588 | #define TPM_ORD_ReadManuMaintPub ((TPM_COMMAND_CODE) 0x00000030) |
| 1589 | #define TPM_ORD_ReadPubek ((TPM_COMMAND_CODE) 0x0000007C) |
| 1590 | #define TPM_ORD_ReleaseCounter ((TPM_COMMAND_CODE) 0x000000DF) |
| 1591 | #define TPM_ORD_ReleaseCounterOwner ((TPM_COMMAND_CODE) 0x000000E0) |
| 1592 | #define TPM_ORD_ReleaseTransportSigned ((TPM_COMMAND_CODE) 0x000000E8) |
| 1593 | #define TPM_ORD_Reset ((TPM_COMMAND_CODE) 0x0000005A) |
| 1594 | #define TPM_ORD_ResetLockValue ((TPM_COMMAND_CODE) 0x00000040) |
| 1595 | #define TPM_ORD_RevokeTrust ((TPM_COMMAND_CODE) 0x00000080) |
| 1596 | #define TPM_ORD_SaveAuthContext ((TPM_COMMAND_CODE) 0x000000B6) |
| 1597 | #define TPM_ORD_SaveContext ((TPM_COMMAND_CODE) 0x000000B8) |
| 1598 | #define TPM_ORD_SaveKeyContext ((TPM_COMMAND_CODE) 0x000000B4) |
| 1599 | #define TPM_ORD_SaveState ((TPM_COMMAND_CODE) 0x00000098) |
| 1600 | #define TPM_ORD_Seal ((TPM_COMMAND_CODE) 0x00000017) |
| 1601 | #define TPM_ORD_Sealx ((TPM_COMMAND_CODE) 0x0000003D) |
| 1602 | #define TPM_ORD_SelfTestFull ((TPM_COMMAND_CODE) 0x00000050) |
| 1603 | #define TPM_ORD_SetCapability ((TPM_COMMAND_CODE) 0x0000003F) |
| 1604 | #define TPM_ORD_SetOperatorAuth ((TPM_COMMAND_CODE) 0x00000074) |
| 1605 | #define TPM_ORD_SetOrdinalAuditStatus ((TPM_COMMAND_CODE) 0x0000008D) |
| 1606 | #define TPM_ORD_SetOwnerInstall ((TPM_COMMAND_CODE) 0x00000071) |
| 1607 | #define TPM_ORD_SetOwnerPointer ((TPM_COMMAND_CODE) 0x00000075) |
| 1608 | #define TPM_ORD_SetRedirection ((TPM_COMMAND_CODE) 0x0000009A) |
| 1609 | #define TPM_ORD_SetTempDeactivated ((TPM_COMMAND_CODE) 0x00000073) |
| 1610 | #define TPM_ORD_SHA1Complete ((TPM_COMMAND_CODE) 0x000000A2) |
| 1611 | #define TPM_ORD_SHA1CompleteExtend ((TPM_COMMAND_CODE) 0x000000A3) |
| 1612 | #define TPM_ORD_SHA1Start ((TPM_COMMAND_CODE) 0x000000A0) |
| 1613 | #define TPM_ORD_SHA1Update ((TPM_COMMAND_CODE) 0x000000A1) |
| 1614 | #define TPM_ORD_Sign ((TPM_COMMAND_CODE) 0x0000003C) |
| 1615 | #define TPM_ORD_Startup ((TPM_COMMAND_CODE) 0x00000099) |
| 1616 | #define TPM_ORD_StirRandom ((TPM_COMMAND_CODE) 0x00000047) |
| 1617 | #define TPM_ORD_TakeOwnership ((TPM_COMMAND_CODE) 0x0000000D) |
| 1618 | #define TPM_ORD_Terminate_Handle ((TPM_COMMAND_CODE) 0x00000096) |
| 1619 | #define TPM_ORD_TickStampBlob ((TPM_COMMAND_CODE) 0x000000F2) |
| 1620 | #define TPM_ORD_UnBind ((TPM_COMMAND_CODE) 0x0000001E) |
| 1621 | #define TPM_ORD_Unseal ((TPM_COMMAND_CODE) 0x00000018) |
| 1622 | #define TSC_ORD_PhysicalPresence ((TPM_COMMAND_CODE) 0x4000000A) |
| 1623 | #define TSC_ORD_ResetEstablishmentBit ((TPM_COMMAND_CODE) 0x4000000B) |
| 1624 | |
| 1625 | // |
| 1626 | // Part 2, section 18: Context structures |
| 1627 | // |
| 1628 | |
| 1629 | /// |
| 1630 | /// Part 2, section 18.1: TPM_CONTEXT_BLOB |
| 1631 | /// |
| 1632 | typedef struct tdTPM_CONTEXT_BLOB { |
| 1633 | TPM_STRUCTURE_TAG tag; |
| 1634 | TPM_RESOURCE_TYPE resourceType; |
| 1635 | TPM_HANDLE handle; |
| 1636 | UINT8 label[16]; |
| 1637 | UINT32 contextCount; |
| 1638 | TPM_DIGEST integrityDigest; |
| 1639 | UINT32 additionalSize; |
| 1640 | UINT8 *additionalData; |
| 1641 | UINT32 sensitiveSize; |
| 1642 | UINT8 *sensitiveData; |
| 1643 | } TPM_CONTEXT_BLOB; |
| 1644 | |
| 1645 | /// |
| 1646 | /// Part 2, section 18.2 TPM_CONTEXT_SENSITIVE |
| 1647 | /// |
| 1648 | typedef struct tdTPM_CONTEXT_SENSITIVE { |
| 1649 | TPM_STRUCTURE_TAG tag; |
| 1650 | TPM_NONCE contextNonce; |
| 1651 | UINT32 internalSize; |
| 1652 | UINT8 *internalData; |
| 1653 | } TPM_CONTEXT_SENSITIVE; |
| 1654 | |
| 1655 | // |
| 1656 | // Part 2, section 19: NV Structures |
| 1657 | // |
| 1658 | |
| 1659 | // |
| 1660 | // Part 2, section 19.1.1: Required TPM_NV_INDEX values |
| 1661 | // |
| 1662 | #define TPM_NV_INDEX_LOCK ((UINT32)0xffffffff) |
| 1663 | #define TPM_NV_INDEX0 ((UINT32)0x00000000) |
| 1664 | #define TPM_NV_INDEX_DIR ((UINT32)0x10000001) |
| 1665 | #define TPM_NV_INDEX_EKCert ((UINT32)0x0000f000) |
| 1666 | #define TPM_NV_INDEX_TPM_CC ((UINT32)0x0000f001) |
| 1667 | #define TPM_NV_INDEX_PlatformCert ((UINT32)0x0000f002) |
| 1668 | #define TPM_NV_INDEX_Platform_CC ((UINT32)0x0000f003) |
| 1669 | // |
| 1670 | // Part 2, section 19.1.2: Reserved Index values |
| 1671 | // |
| 1672 | #define TPM_NV_INDEX_TSS_BASE ((UINT32)0x00011100) |
| 1673 | #define TPM_NV_INDEX_PC_BASE ((UINT32)0x00011200) |
| 1674 | #define TPM_NV_INDEX_SERVER_BASE ((UINT32)0x00011300) |
| 1675 | #define TPM_NV_INDEX_MOBILE_BASE ((UINT32)0x00011400) |
| 1676 | #define TPM_NV_INDEX_PERIPHERAL_BASE ((UINT32)0x00011500) |
| 1677 | #define TPM_NV_INDEX_GROUP_RESV_BASE ((UINT32)0x00010000) |
| 1678 | |
| 1679 | /// |
| 1680 | /// Part 2, section 19.2: TPM_NV_ATTRIBUTES |
| 1681 | /// |
| 1682 | typedef struct tdTPM_NV_ATTRIBUTES { |
| 1683 | TPM_STRUCTURE_TAG tag; |
| 1684 | UINT32 attributes; |
| 1685 | } TPM_NV_ATTRIBUTES; |
| 1686 | |
| 1687 | #define TPM_NV_PER_READ_STCLEAR (BIT31) |
| 1688 | #define TPM_NV_PER_AUTHREAD (BIT18) |
| 1689 | #define TPM_NV_PER_OWNERREAD (BIT17) |
| 1690 | #define TPM_NV_PER_PPREAD (BIT16) |
| 1691 | #define TPM_NV_PER_GLOBALLOCK (BIT15) |
| 1692 | #define TPM_NV_PER_WRITE_STCLEAR (BIT14) |
| 1693 | #define TPM_NV_PER_WRITEDEFINE (BIT13) |
| 1694 | #define TPM_NV_PER_WRITEALL (BIT12) |
| 1695 | #define TPM_NV_PER_AUTHWRITE (BIT2) |
| 1696 | #define TPM_NV_PER_OWNERWRITE (BIT1) |
| 1697 | #define TPM_NV_PER_PPWRITE (BIT0) |
| 1698 | |
| 1699 | /// |
| 1700 | /// Part 2, section 19.3: TPM_NV_DATA_PUBLIC |
| 1701 | /// |
| 1702 | typedef struct tdTPM_NV_DATA_PUBLIC { |
| 1703 | TPM_STRUCTURE_TAG tag; |
| 1704 | TPM_NV_INDEX nvIndex; |
| 1705 | TPM_PCR_INFO_SHORT pcrInfoRead; |
| 1706 | TPM_PCR_INFO_SHORT pcrInfoWrite; |
| 1707 | TPM_NV_ATTRIBUTES permission; |
| 1708 | BOOLEAN bReadSTClear; |
| 1709 | BOOLEAN bWriteSTClear; |
| 1710 | BOOLEAN bWriteDefine; |
| 1711 | UINT32 dataSize; |
| 1712 | } TPM_NV_DATA_PUBLIC; |
| 1713 | |
| 1714 | // |
| 1715 | // Part 2, section 20: Delegate Structures |
| 1716 | // |
| 1717 | |
| 1718 | #define TPM_DEL_OWNER_BITS ((UINT32)0x00000001) |
| 1719 | #define TPM_DEL_KEY_BITS ((UINT32)0x00000002) |
| 1720 | /// |
| 1721 | /// Part 2, section 20.2: Delegate Definitions |
| 1722 | /// |
| 1723 | typedef struct tdTPM_DELEGATIONS { |
| 1724 | TPM_STRUCTURE_TAG tag; |
| 1725 | UINT32 delegateType; |
| 1726 | UINT32 per1; |
| 1727 | UINT32 per2; |
| 1728 | } TPM_DELEGATIONS; |
| 1729 | |
| 1730 | // |
| 1731 | // Part 2, section 20.2.1: Owner Permission Settings |
| 1732 | // |
| 1733 | #define TPM_DELEGATE_SetOrdinalAuditStatus (BIT30) |
| 1734 | #define TPM_DELEGATE_DirWriteAuth (BIT29) |
| 1735 | #define TPM_DELEGATE_CMK_ApproveMA (BIT28) |
| 1736 | #define TPM_DELEGATE_NV_WriteValue (BIT27) |
| 1737 | #define TPM_DELEGATE_CMK_CreateTicket (BIT26) |
| 1738 | #define TPM_DELEGATE_NV_ReadValue (BIT25) |
| 1739 | #define TPM_DELEGATE_Delegate_LoadOwnerDelegation (BIT24) |
| 1740 | #define TPM_DELEGATE_DAA_Join (BIT23) |
| 1741 | #define TPM_DELEGATE_AuthorizeMigrationKey (BIT22) |
| 1742 | #define TPM_DELEGATE_CreateMaintenanceArchive (BIT21) |
| 1743 | #define TPM_DELEGATE_LoadMaintenanceArchive (BIT20) |
| 1744 | #define TPM_DELEGATE_KillMaintenanceFeature (BIT19) |
| 1745 | #define TPM_DELEGATE_OwnerReadInteralPub (BIT18) |
| 1746 | #define TPM_DELEGATE_ResetLockValue (BIT17) |
| 1747 | #define TPM_DELEGATE_OwnerClear (BIT16) |
| 1748 | #define TPM_DELEGATE_DisableOwnerClear (BIT15) |
| 1749 | #define TPM_DELEGATE_NV_DefineSpace (BIT14) |
| 1750 | #define TPM_DELEGATE_OwnerSetDisable (BIT13) |
| 1751 | #define TPM_DELEGATE_SetCapability (BIT12) |
| 1752 | #define TPM_DELEGATE_MakeIdentity (BIT11) |
| 1753 | #define TPM_DELEGATE_ActivateIdentity (BIT10) |
| 1754 | #define TPM_DELEGATE_OwnerReadPubek (BIT9) |
| 1755 | #define TPM_DELEGATE_DisablePubekRead (BIT8) |
| 1756 | #define TPM_DELEGATE_SetRedirection (BIT7) |
| 1757 | #define TPM_DELEGATE_FieldUpgrade (BIT6) |
| 1758 | #define TPM_DELEGATE_Delegate_UpdateVerification (BIT5) |
| 1759 | #define TPM_DELEGATE_CreateCounter (BIT4) |
| 1760 | #define TPM_DELEGATE_ReleaseCounterOwner (BIT3) |
| 1761 | #define TPM_DELEGATE_DelegateManage (BIT2) |
| 1762 | #define TPM_DELEGATE_Delegate_CreateOwnerDelegation (BIT1) |
| 1763 | #define TPM_DELEGATE_DAA_Sign (BIT0) |
| 1764 | |
| 1765 | // |
| 1766 | // Part 2, section 20.2.3: Key Permission settings |
| 1767 | // |
| 1768 | #define TPM_KEY_DELEGATE_CMK_ConvertMigration (BIT28) |
| 1769 | #define TPM_KEY_DELEGATE_TickStampBlob (BIT27) |
| 1770 | #define TPM_KEY_DELEGATE_ChangeAuthAsymStart (BIT26) |
| 1771 | #define TPM_KEY_DELEGATE_ChangeAuthAsymFinish (BIT25) |
| 1772 | #define TPM_KEY_DELEGATE_CMK_CreateKey (BIT24) |
| 1773 | #define TPM_KEY_DELEGATE_MigrateKey (BIT23) |
| 1774 | #define TPM_KEY_DELEGATE_LoadKey2 (BIT22) |
| 1775 | #define TPM_KEY_DELEGATE_EstablishTransport (BIT21) |
| 1776 | #define TPM_KEY_DELEGATE_ReleaseTransportSigned (BIT20) |
| 1777 | #define TPM_KEY_DELEGATE_Quote2 (BIT19) |
| 1778 | #define TPM_KEY_DELEGATE_Sealx (BIT18) |
| 1779 | #define TPM_KEY_DELEGATE_MakeIdentity (BIT17) |
| 1780 | #define TPM_KEY_DELEGATE_ActivateIdentity (BIT16) |
| 1781 | #define TPM_KEY_DELEGATE_GetAuditDigestSigned (BIT15) |
| 1782 | #define TPM_KEY_DELEGATE_Sign (BIT14) |
| 1783 | #define TPM_KEY_DELEGATE_CertifyKey2 (BIT13) |
| 1784 | #define TPM_KEY_DELEGATE_CertifyKey (BIT12) |
| 1785 | #define TPM_KEY_DELEGATE_CreateWrapKey (BIT11) |
| 1786 | #define TPM_KEY_DELEGATE_CMK_CreateBlob (BIT10) |
| 1787 | #define TPM_KEY_DELEGATE_CreateMigrationBlob (BIT9) |
| 1788 | #define TPM_KEY_DELEGATE_ConvertMigrationBlob (BIT8) |
| 1789 | #define TPM_KEY_DELEGATE_CreateKeyDelegation (BIT7) |
| 1790 | #define TPM_KEY_DELEGATE_ChangeAuth (BIT6) |
| 1791 | #define TPM_KEY_DELEGATE_GetPubKey (BIT5) |
| 1792 | #define TPM_KEY_DELEGATE_UnBind (BIT4) |
| 1793 | #define TPM_KEY_DELEGATE_Quote (BIT3) |
| 1794 | #define TPM_KEY_DELEGATE_Unseal (BIT2) |
| 1795 | #define TPM_KEY_DELEGATE_Seal (BIT1) |
| 1796 | #define TPM_KEY_DELEGATE_LoadKey (BIT0) |
| 1797 | |
| 1798 | // |
| 1799 | // Part 2, section 20.3: TPM_FAMILY_FLAGS |
| 1800 | // |
| 1801 | #define TPM_DELEGATE_ADMIN_LOCK (BIT1) |
| 1802 | #define TPM_FAMFLAG_ENABLE (BIT0) |
| 1803 | |
| 1804 | /// |
| 1805 | /// Part 2, section 20.4: TPM_FAMILY_LABEL |
| 1806 | /// |
| 1807 | typedef struct tdTPM_FAMILY_LABEL { |
| 1808 | UINT8 label; |
| 1809 | } TPM_FAMILY_LABEL; |
| 1810 | |
| 1811 | /// |
| 1812 | /// Part 2, section 20.5: TPM_FAMILY_TABLE_ENTRY |
| 1813 | /// |
| 1814 | typedef struct tdTPM_FAMILY_TABLE_ENTRY { |
| 1815 | TPM_STRUCTURE_TAG tag; |
| 1816 | TPM_FAMILY_LABEL label; |
| 1817 | TPM_FAMILY_ID familyID; |
| 1818 | TPM_FAMILY_VERIFICATION verificationCount; |
| 1819 | TPM_FAMILY_FLAGS flags; |
| 1820 | } TPM_FAMILY_TABLE_ENTRY; |
| 1821 | |
| 1822 | // |
| 1823 | // Part 2, section 20.6: TPM_FAMILY_TABLE |
| 1824 | // |
| 1825 | #define TPM_NUM_FAMILY_TABLE_ENTRY_MIN 8 |
| 1826 | |
| 1827 | typedef struct tdTPM_FAMILY_TABLE{ |
| 1828 | TPM_FAMILY_TABLE_ENTRY famTableRow[TPM_NUM_FAMILY_TABLE_ENTRY_MIN]; |
| 1829 | } TPM_FAMILY_TABLE; |
| 1830 | |
| 1831 | /// |
| 1832 | /// Part 2, section 20.7: TPM_DELEGATE_LABEL |
| 1833 | /// |
| 1834 | typedef struct tdTPM_DELEGATE_LABEL { |
| 1835 | UINT8 label; |
| 1836 | } TPM_DELEGATE_LABEL; |
| 1837 | |
| 1838 | /// |
| 1839 | /// Part 2, section 20.8: TPM_DELEGATE_PUBLIC |
| 1840 | /// |
| 1841 | typedef struct tdTPM_DELEGATE_PUBLIC { |
| 1842 | TPM_STRUCTURE_TAG tag; |
| 1843 | TPM_DELEGATE_LABEL label; |
| 1844 | TPM_PCR_INFO_SHORT pcrInfo; |
| 1845 | TPM_DELEGATIONS permissions; |
| 1846 | TPM_FAMILY_ID familyID; |
| 1847 | TPM_FAMILY_VERIFICATION verificationCount; |
| 1848 | } TPM_DELEGATE_PUBLIC; |
| 1849 | |
| 1850 | /// |
| 1851 | /// Part 2, section 20.9: TPM_DELEGATE_TABLE_ROW |
| 1852 | /// |
| 1853 | typedef struct tdTPM_DELEGATE_TABLE_ROW { |
| 1854 | TPM_STRUCTURE_TAG tag; |
| 1855 | TPM_DELEGATE_PUBLIC pub; |
| 1856 | TPM_SECRET authValue; |
| 1857 | } TPM_DELEGATE_TABLE_ROW; |
| 1858 | |
| 1859 | // |
| 1860 | // Part 2, section 20.10: TPM_DELEGATE_TABLE |
| 1861 | // |
| 1862 | #define TPM_NUM_DELEGATE_TABLE_ENTRY_MIN 2 |
| 1863 | |
| 1864 | typedef struct tdTPM_DELEGATE_TABLE{ |
| 1865 | TPM_DELEGATE_TABLE_ROW delRow[TPM_NUM_DELEGATE_TABLE_ENTRY_MIN]; |
| 1866 | } TPM_DELEGATE_TABLE; |
| 1867 | |
| 1868 | /// |
| 1869 | /// Part 2, section 20.11: TPM_DELEGATE_SENSITIVE |
| 1870 | /// |
| 1871 | typedef struct tdTPM_DELEGATE_SENSITIVE { |
| 1872 | TPM_STRUCTURE_TAG tag; |
| 1873 | TPM_SECRET authValue; |
| 1874 | } TPM_DELEGATE_SENSITIVE; |
| 1875 | |
| 1876 | /// |
| 1877 | /// Part 2, section 20.12: TPM_DELEGATE_OWNER_BLOB |
| 1878 | /// |
| 1879 | typedef struct tdTPM_DELEGATE_OWNER_BLOB { |
| 1880 | TPM_STRUCTURE_TAG tag; |
| 1881 | TPM_DELEGATE_PUBLIC pub; |
| 1882 | TPM_DIGEST integrityDigest; |
| 1883 | UINT32 additionalSize; |
| 1884 | UINT8 *additionalArea; |
| 1885 | UINT32 sensitiveSize; |
| 1886 | UINT8 *sensitiveArea; |
| 1887 | } TPM_DELEGATE_OWNER_BLOB; |
| 1888 | |
| 1889 | /// |
| 1890 | /// Part 2, section 20.13: TTPM_DELEGATE_KEY_BLOB |
| 1891 | /// |
| 1892 | typedef struct tdTPM_DELEGATE_KEY_BLOB { |
| 1893 | TPM_STRUCTURE_TAG tag; |
| 1894 | TPM_DELEGATE_PUBLIC pub; |
| 1895 | TPM_DIGEST integrityDigest; |
| 1896 | TPM_DIGEST pubKeyDigest; |
| 1897 | UINT32 additionalSize; |
| 1898 | UINT8 *additionalArea; |
| 1899 | UINT32 sensitiveSize; |
| 1900 | UINT8 *sensitiveArea; |
| 1901 | } TPM_DELEGATE_KEY_BLOB; |
| 1902 | |
| 1903 | // |
| 1904 | // Part 2, section 20.14: TPM_FAMILY_OPERATION Values |
| 1905 | // |
| 1906 | #define TPM_FAMILY_CREATE ((UINT32)0x00000001) |
| 1907 | #define TPM_FAMILY_ENABLE ((UINT32)0x00000002) |
| 1908 | #define TPM_FAMILY_ADMIN ((UINT32)0x00000003) |
| 1909 | #define TPM_FAMILY_INVALIDATE ((UINT32)0x00000004) |
| 1910 | |
| 1911 | // |
| 1912 | // Part 2, section 21.1: TPM_CAPABILITY_AREA for GetCapability |
| 1913 | // |
| 1914 | #define TPM_CAP_ORD ((TPM_CAPABILITY_AREA) 0x00000001) |
| 1915 | #define TPM_CAP_ALG ((TPM_CAPABILITY_AREA) 0x00000002) |
| 1916 | #define TPM_CAP_PID ((TPM_CAPABILITY_AREA) 0x00000003) |
| 1917 | #define TPM_CAP_FLAG ((TPM_CAPABILITY_AREA) 0x00000004) |
| 1918 | #define TPM_CAP_PROPERTY ((TPM_CAPABILITY_AREA) 0x00000005) |
| 1919 | #define TPM_CAP_VERSION ((TPM_CAPABILITY_AREA) 0x00000006) |
| 1920 | #define TPM_CAP_KEY_HANDLE ((TPM_CAPABILITY_AREA) 0x00000007) |
| 1921 | #define TPM_CAP_CHECK_LOADED ((TPM_CAPABILITY_AREA) 0x00000008) |
| 1922 | #define TPM_CAP_SYM_MODE ((TPM_CAPABILITY_AREA) 0x00000009) |
| 1923 | #define TPM_CAP_KEY_STATUS ((TPM_CAPABILITY_AREA) 0x0000000C) |
| 1924 | #define TPM_CAP_NV_LIST ((TPM_CAPABILITY_AREA) 0x0000000D) |
| 1925 | #define TPM_CAP_MFR ((TPM_CAPABILITY_AREA) 0x00000010) |
| 1926 | #define TPM_CAP_NV_INDEX ((TPM_CAPABILITY_AREA) 0x00000011) |
| 1927 | #define TPM_CAP_TRANS_ALG ((TPM_CAPABILITY_AREA) 0x00000012) |
| 1928 | #define TPM_CAP_HANDLE ((TPM_CAPABILITY_AREA) 0x00000014) |
| 1929 | #define TPM_CAP_TRANS_ES ((TPM_CAPABILITY_AREA) 0x00000015) |
| 1930 | #define TPM_CAP_AUTH_ENCRYPT ((TPM_CAPABILITY_AREA) 0x00000017) |
| 1931 | #define TPM_CAP_SELECT_SIZE ((TPM_CAPABILITY_AREA) 0x00000018) |
| 1932 | #define TPM_CAP_VERSION_VAL ((TPM_CAPABILITY_AREA) 0x0000001A) |
| 1933 | |
| 1934 | #define TPM_CAP_FLAG_PERMANENT ((TPM_CAPABILITY_AREA) 0x00000108) |
| 1935 | #define TPM_CAP_FLAG_VOLATILE ((TPM_CAPABILITY_AREA) 0x00000109) |
| 1936 | |
| 1937 | // |
| 1938 | // Part 2, section 21.2: CAP_PROPERTY Subcap values for GetCapability |
| 1939 | // |
| 1940 | #define TPM_CAP_PROP_PCR ((TPM_CAPABILITY_AREA) 0x00000101) |
| 1941 | #define TPM_CAP_PROP_DIR ((TPM_CAPABILITY_AREA) 0x00000102) |
| 1942 | #define TPM_CAP_PROP_MANUFACTURER ((TPM_CAPABILITY_AREA) 0x00000103) |
| 1943 | #define TPM_CAP_PROP_KEYS ((TPM_CAPABILITY_AREA) 0x00000104) |
| 1944 | #define TPM_CAP_PROP_MIN_COUNTER ((TPM_CAPABILITY_AREA) 0x00000107) |
| 1945 | #define TPM_CAP_PROP_AUTHSESS ((TPM_CAPABILITY_AREA) 0x0000010A) |
| 1946 | #define TPM_CAP_PROP_TRANSESS ((TPM_CAPABILITY_AREA) 0x0000010B) |
| 1947 | #define TPM_CAP_PROP_COUNTERS ((TPM_CAPABILITY_AREA) 0x0000010C) |
| 1948 | #define TPM_CAP_PROP_MAX_AUTHSESS ((TPM_CAPABILITY_AREA) 0x0000010D) |
| 1949 | #define TPM_CAP_PROP_MAX_TRANSESS ((TPM_CAPABILITY_AREA) 0x0000010E) |
| 1950 | #define TPM_CAP_PROP_MAX_COUNTERS ((TPM_CAPABILITY_AREA) 0x0000010F) |
| 1951 | #define TPM_CAP_PROP_MAX_KEYS ((TPM_CAPABILITY_AREA) 0x00000110) |
| 1952 | #define TPM_CAP_PROP_OWNER ((TPM_CAPABILITY_AREA) 0x00000111) |
| 1953 | #define TPM_CAP_PROP_CONTEXT ((TPM_CAPABILITY_AREA) 0x00000112) |
| 1954 | #define TPM_CAP_PROP_MAX_CONTEXT ((TPM_CAPABILITY_AREA) 0x00000113) |
| 1955 | #define TPM_CAP_PROP_FAMILYROWS ((TPM_CAPABILITY_AREA) 0x00000114) |
| 1956 | #define TPM_CAP_PROP_TIS_TIMEOUT ((TPM_CAPABILITY_AREA) 0x00000115) |
| 1957 | #define TPM_CAP_PROP_STARTUP_EFFECT ((TPM_CAPABILITY_AREA) 0x00000116) |
| 1958 | #define TPM_CAP_PROP_DELEGATE_ROW ((TPM_CAPABILITY_AREA) 0x00000117) |
| 1959 | #define TPM_CAP_PROP_DAA_MAX ((TPM_CAPABILITY_AREA) 0x00000119) |
| 1960 | #define CAP_PROP_SESSION_DAA ((TPM_CAPABILITY_AREA) 0x0000011A) |
| 1961 | #define TPM_CAP_PROP_CONTEXT_DIST ((TPM_CAPABILITY_AREA) 0x0000011B) |
| 1962 | #define TPM_CAP_PROP_DAA_INTERRUPT ((TPM_CAPABILITY_AREA) 0x0000011C) |
| 1963 | #define TPM_CAP_PROP_SESSIONS ((TPM_CAPABILITY_AREA) 0x0000011D) |
| 1964 | #define TPM_CAP_PROP_MAX_SESSIONS ((TPM_CAPABILITY_AREA) 0x0000011E) |
| 1965 | #define TPM_CAP_PROP_CMK_RESTRICTION ((TPM_CAPABILITY_AREA) 0x0000011F) |
| 1966 | #define TPM_CAP_PROP_DURATION ((TPM_CAPABILITY_AREA) 0x00000120) |
| 1967 | #define TPM_CAP_PROP_ACTIVE_COUNTER ((TPM_CAPABILITY_AREA) 0x00000122) |
| 1968 | #define TPM_CAP_PROP_MAX_NV_AVAILABLE ((TPM_CAPABILITY_AREA) 0x00000123) |
| 1969 | #define TPM_CAP_PROP_INPUT_BUFFER ((TPM_CAPABILITY_AREA) 0x00000124) |
| 1970 | |
| 1971 | // |
| 1972 | // Part 2, section 21.4: TPM_CAPABILITY_AREA for SetCapability |
| 1973 | // |
| 1974 | #define TPM_SET_PERM_FLAGS ((TPM_CAPABILITY_AREA) 0x00000001) |
| 1975 | #define TPM_SET_PERM_DATA ((TPM_CAPABILITY_AREA) 0x00000002) |
| 1976 | #define TPM_SET_STCLEAR_FLAGS ((TPM_CAPABILITY_AREA) 0x00000003) |
| 1977 | #define TPM_SET_STCLEAR_DATA ((TPM_CAPABILITY_AREA) 0x00000004) |
| 1978 | #define TPM_SET_STANY_FLAGS ((TPM_CAPABILITY_AREA) 0x00000005) |
| 1979 | #define TPM_SET_STANY_DATA ((TPM_CAPABILITY_AREA) 0x00000006) |
| 1980 | |
| 1981 | /// |
| 1982 | /// Part 2, section 21.6: TPM_CAP_VERSION_INFO |
| 1983 | /// [size_is(vendorSpecificSize)] BYTE* vendorSpecific; |
| 1984 | /// |
| 1985 | typedef struct tdTPM_CAP_VERSION_INFO { |
| 1986 | TPM_STRUCTURE_TAG tag; |
| 1987 | TPM_VERSION version; |
| 1988 | UINT16 specLevel; |
| 1989 | UINT8 errataRev; |
| 1990 | UINT8 tpmVendorID[4]; |
| 1991 | UINT16 vendorSpecificSize; |
| 1992 | UINT8 *vendorSpecific; |
| 1993 | } TPM_CAP_VERSION_INFO; |
| 1994 | |
| 1995 | /// |
| 1996 | /// Part 2, section 21.10: TPM_DA_ACTION_TYPE |
| 1997 | /// |
| 1998 | typedef struct tdTPM_DA_ACTION_TYPE { |
| 1999 | TPM_STRUCTURE_TAG tag; |
| 2000 | UINT32 actions; |
| 2001 | } TPM_DA_ACTION_TYPE; |
| 2002 | |
| 2003 | #define TPM_DA_ACTION_FAILURE_MODE (((UINT32)1)<<3) |
| 2004 | #define TPM_DA_ACTION_DEACTIVATE (((UINT32)1)<<2) |
| 2005 | #define TPM_DA_ACTION_DISABLE (((UINT32)1)<<1) |
| 2006 | #define TPM_DA_ACTION_TIMEOUT (((UINT32)1)<<0) |
| 2007 | |
| 2008 | /// |
| 2009 | /// Part 2, section 21.7: TPM_DA_INFO |
| 2010 | /// |
| 2011 | typedef struct tdTPM_DA_INFO { |
| 2012 | TPM_STRUCTURE_TAG tag; |
| 2013 | TPM_DA_STATE state; |
| 2014 | UINT16 currentCount; |
| 2015 | UINT16 thresholdCount; |
| 2016 | TPM_DA_ACTION_TYPE actionAtThreshold; |
| 2017 | UINT32 actionDependValue; |
| 2018 | UINT32 vendorDataSize; |
| 2019 | UINT8 *vendorData; |
| 2020 | } TPM_DA_INFO; |
| 2021 | |
| 2022 | /// |
| 2023 | /// Part 2, section 21.8: TPM_DA_INFO_LIMITED |
| 2024 | /// |
| 2025 | typedef struct tdTPM_DA_INFO_LIMITED { |
| 2026 | TPM_STRUCTURE_TAG tag; |
| 2027 | TPM_DA_STATE state; |
| 2028 | TPM_DA_ACTION_TYPE actionAtThreshold; |
| 2029 | UINT32 vendorDataSize; |
| 2030 | UINT8 *vendorData; |
| 2031 | } TPM_DA_INFO_LIMITED; |
| 2032 | |
| 2033 | // |
| 2034 | // Part 2, section 21.9: CAP_PROPERTY Subcap values for GetCapability |
| 2035 | // |
| 2036 | #define TPM_DA_STATE_INACTIVE ((UINT8)0x00) |
| 2037 | #define TPM_DA_STATE_ACTIVE ((UINT8)0x01) |
| 2038 | |
| 2039 | // |
| 2040 | // Part 2, section 22: DAA Structures |
| 2041 | // |
| 2042 | |
| 2043 | // |
| 2044 | // Part 2, section 22.1: Size definitions |
| 2045 | // |
| 2046 | #define TPM_DAA_SIZE_r0 (43) |
| 2047 | #define TPM_DAA_SIZE_r1 (43) |
| 2048 | #define TPM_DAA_SIZE_r2 (128) |
| 2049 | #define TPM_DAA_SIZE_r3 (168) |
| 2050 | #define TPM_DAA_SIZE_r4 (219) |
| 2051 | #define TPM_DAA_SIZE_NT (20) |
| 2052 | #define TPM_DAA_SIZE_v0 (128) |
| 2053 | #define TPM_DAA_SIZE_v1 (192) |
| 2054 | #define TPM_DAA_SIZE_NE (256) |
| 2055 | #define TPM_DAA_SIZE_w (256) |
| 2056 | #define TPM_DAA_SIZE_issuerModulus (256) |
| 2057 | // |
| 2058 | // Part 2, section 22.2: Constant definitions |
| 2059 | // |
| 2060 | #define TPM_DAA_power0 (104) |
| 2061 | #define TPM_DAA_power1 (1024) |
| 2062 | |
| 2063 | /// |
| 2064 | /// Part 2, section 22.3: TPM_DAA_ISSUER |
| 2065 | /// |
| 2066 | typedef struct tdTPM_DAA_ISSUER { |
| 2067 | TPM_STRUCTURE_TAG tag; |
| 2068 | TPM_DIGEST DAA_digest_R0; |
| 2069 | TPM_DIGEST DAA_digest_R1; |
| 2070 | TPM_DIGEST DAA_digest_S0; |
| 2071 | TPM_DIGEST DAA_digest_S1; |
| 2072 | TPM_DIGEST DAA_digest_n; |
| 2073 | TPM_DIGEST DAA_digest_gamma; |
| 2074 | UINT8 DAA_generic_q[26]; |
| 2075 | } TPM_DAA_ISSUER; |
| 2076 | |
| 2077 | /// |
| 2078 | /// Part 2, section 22.4: TPM_DAA_TPM |
| 2079 | /// |
| 2080 | typedef struct tdTPM_DAA_TPM { |
| 2081 | TPM_STRUCTURE_TAG tag; |
| 2082 | TPM_DIGEST DAA_digestIssuer; |
| 2083 | TPM_DIGEST DAA_digest_v0; |
| 2084 | TPM_DIGEST DAA_digest_v1; |
| 2085 | TPM_DIGEST DAA_rekey; |
| 2086 | UINT32 DAA_count; |
| 2087 | } TPM_DAA_TPM; |
| 2088 | |
| 2089 | /// |
| 2090 | /// Part 2, section 22.5: TPM_DAA_CONTEXT |
| 2091 | /// |
| 2092 | typedef struct tdTPM_DAA_CONTEXT { |
| 2093 | TPM_STRUCTURE_TAG tag; |
| 2094 | TPM_DIGEST DAA_digestContext; |
| 2095 | TPM_DIGEST DAA_digest; |
| 2096 | TPM_DAA_CONTEXT_SEED DAA_contextSeed; |
| 2097 | UINT8 DAA_scratch[256]; |
| 2098 | UINT8 DAA_stage; |
| 2099 | } TPM_DAA_CONTEXT; |
| 2100 | |
| 2101 | /// |
| 2102 | /// Part 2, section 22.6: TPM_DAA_JOINDATA |
| 2103 | /// |
| 2104 | typedef struct tdTPM_DAA_JOINDATA { |
| 2105 | UINT8 DAA_join_u0[128]; |
| 2106 | UINT8 DAA_join_u1[138]; |
| 2107 | TPM_DIGEST DAA_digest_n0; |
| 2108 | } TPM_DAA_JOINDATA; |
| 2109 | |
| 2110 | /// |
| 2111 | /// Part 2, section 22.8: TPM_DAA_BLOB |
| 2112 | /// |
| 2113 | typedef struct tdTPM_DAA_BLOB { |
| 2114 | TPM_STRUCTURE_TAG tag; |
| 2115 | TPM_RESOURCE_TYPE resourceType; |
| 2116 | UINT8 label[16]; |
| 2117 | TPM_DIGEST blobIntegrity; |
| 2118 | UINT32 additionalSize; |
| 2119 | UINT8 *additionalData; |
| 2120 | UINT32 sensitiveSize; |
| 2121 | UINT8 *sensitiveData; |
| 2122 | } TPM_DAA_BLOB; |
| 2123 | |
| 2124 | /// |
| 2125 | /// Part 2, section 22.9: TPM_DAA_SENSITIVE |
| 2126 | /// |
| 2127 | typedef struct tdTPM_DAA_SENSITIVE { |
| 2128 | TPM_STRUCTURE_TAG tag; |
| 2129 | UINT32 internalSize; |
| 2130 | UINT8 *internalData; |
| 2131 | } TPM_DAA_SENSITIVE; |
| 2132 | |
| 2133 | |
| 2134 | // |
| 2135 | // Part 2, section 23: Redirection |
| 2136 | // |
| 2137 | |
| 2138 | /// |
| 2139 | /// Part 2 section 23.1: TPM_REDIR_COMMAND |
| 2140 | /// This section defines exactly one value but does not |
| 2141 | /// give it a name. The definition of TPM_SetRedirection in Part3 |
| 2142 | /// refers to exactly one name but does not give its value. We join |
| 2143 | /// them here. |
| 2144 | /// |
| 2145 | #define TPM_REDIR_GPIO (0x00000001) |
| 2146 | |
| 2147 | /// |
| 2148 | /// TPM Command Headers defined in Part 3 |
| 2149 | /// |
| 2150 | typedef struct tdTPM_RQU_COMMAND_HDR { |
| 2151 | TPM_STRUCTURE_TAG tag; |
| 2152 | UINT32 paramSize; |
| 2153 | TPM_COMMAND_CODE ordinal; |
| 2154 | } TPM_RQU_COMMAND_HDR; |
| 2155 | |
| 2156 | /// |
| 2157 | /// TPM Response Headers defined in Part 3 |
| 2158 | /// |
| 2159 | typedef struct tdTPM_RSP_COMMAND_HDR { |
| 2160 | TPM_STRUCTURE_TAG tag; |
| 2161 | UINT32 paramSize; |
| 2162 | TPM_RESULT returnCode; |
| 2163 | } TPM_RSP_COMMAND_HDR; |
| 2164 | |
| 2165 | #pragma pack () |
| 2166 | |
| 2167 | #endif |