You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
100 lines
4.7 KiB
100 lines
4.7 KiB
// This file was extracted from the TCG Published |
|
// Trusted Platform Module Library |
|
// Part 3: Commands |
|
// Family "2.0" |
|
// Level 00 Revision 01.16 |
|
// October 30, 2014 |
|
|
|
#include "InternalRoutines.h" |
|
#include "CreatePrimary_fp.h" |
|
#include "Object_spt_fp.h" |
|
#include "Platform.h" |
|
// |
|
// |
|
// Error Returns Meaning |
|
// |
|
// TPM_RC_ATTRIBUTES sensitiveDataOrigin is CLEAR when 'sensitive.data' is an Empty |
|
// Buffer, or is SET when 'sensitive.data' is not empty; fixedTPM, |
|
// fixedParent, or encryptedDuplication attributes are inconsistent |
|
// between themselves or with those of the parent object; inconsistent |
|
// restricted, decrypt and sign attributes; attempt to inject sensitive data |
|
// for an asymmetric key; attempt to create a symmetric cipher key that |
|
// is not a decryption key |
|
// TPM_RC_KDF incorrect KDF specified for decrypting keyed hash object |
|
// TPM_RC_OBJECT_MEMORY there is no free slot for the object |
|
// TPM_RC_SCHEME inconsistent attributes decrypt, sign, restricted and key's scheme ID; |
|
// or hash algorithm is inconsistent with the scheme ID for keyed hash |
|
// object |
|
// TPM_RC_SIZE size of public auth policy or sensitive auth value does not match |
|
// digest size of the name algorithm sensitive data size for the keyed |
|
// hash object is larger than is allowed for the scheme |
|
// TPM_RC_SYMMETRIC a storage key with no symmetric algorithm specified; or non-storage |
|
// key with symmetric algorithm different from TPM_ALG_NULL |
|
// TPM_RC_TYPE unknown object type; |
|
// |
|
TPM_RC |
|
TPM2_CreatePrimary( |
|
CreatePrimary_In *in, // IN: input parameter list |
|
CreatePrimary_Out *out // OUT: output parameter list |
|
) |
|
{ |
|
// Local variables |
|
TPM_RC result = TPM_RC_SUCCESS; |
|
TPMT_SENSITIVE sensitive; |
|
|
|
// Input Validation |
|
// The sensitiveDataOrigin attribute must be consistent with the setting of |
|
// the size of the data object in inSensitive. |
|
if( (in->inPublic.t.publicArea.objectAttributes.sensitiveDataOrigin == SET) |
|
!= (in->inSensitive.t.sensitive.data.t.size == 0 )) |
|
// Mismatch between the object attributes and the parameter. |
|
return TPM_RC_ATTRIBUTES + RC_CreatePrimary_inSensitive; |
|
|
|
// Check attributes in input public area. TPM_RC_ATTRIBUTES, TPM_RC_KDF, |
|
// TPM_RC_SCHEME, TPM_RC_SIZE, TPM_RC_SYMMETRIC, or TPM_RC_TYPE error may |
|
// be returned at this point. |
|
result = PublicAttributesValidation(FALSE, in->primaryHandle, |
|
&in->inPublic.t.publicArea); |
|
if(result != TPM_RC_SUCCESS) |
|
return RcSafeAddToResult(result, RC_CreatePrimary_inPublic); |
|
|
|
// Validate the sensitive area values |
|
if( MemoryRemoveTrailingZeros(&in->inSensitive.t.sensitive.userAuth) |
|
> CryptGetHashDigestSize(in->inPublic.t.publicArea.nameAlg)) |
|
// |
|
return TPM_RC_SIZE + RC_CreatePrimary_inSensitive; |
|
|
|
// Command output |
|
|
|
// Generate Primary Object |
|
// The primary key generation process uses the Name of the input public |
|
// template to compute the key. The keys are generated from the template |
|
// before anything in the template is allowed to be changed. |
|
// A TPM_RC_KDF, TPM_RC_SIZE error may be returned at this point |
|
result = CryptCreateObject(in->primaryHandle, &in->inPublic.t.publicArea, |
|
&in->inSensitive.t.sensitive,&sensitive); |
|
if(result != TPM_RC_SUCCESS) |
|
return result; |
|
|
|
// Fill in creation data |
|
FillInCreationData(in->primaryHandle, in->inPublic.t.publicArea.nameAlg, |
|
&in->creationPCR, &in->outsideInfo, &out->creationData, |
|
&out->creationHash); |
|
|
|
// Copy public area |
|
out->outPublic = in->inPublic; |
|
|
|
// Fill in private area for output |
|
ObjectComputeName(&(out->outPublic.t.publicArea), &out->name); |
|
|
|
// Compute creation ticket |
|
TicketComputeCreation(EntityGetHierarchy(in->primaryHandle), &out->name, |
|
&out->creationHash, &out->creationTicket); |
|
|
|
// Create a internal object. A TPM_RC_OBJECT_MEMORY error may be returned |
|
// at this point. |
|
result = ObjectLoad(in->primaryHandle, &in->inPublic.t.publicArea, &sensitive, |
|
&out->name, in->primaryHandle, TRUE, &out->objectHandle); |
|
|
|
return result; |
|
}
|
|
|