You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
93 lines
3.3 KiB
93 lines
3.3 KiB
// This file was extracted from the TCG Published |
|
// Trusted Platform Module Library |
|
// Part 3: Commands |
|
// Family "2.0" |
|
// Level 00 Revision 01.16 |
|
// October 30, 2014 |
|
|
|
#include "InternalRoutines.h" |
|
#include "ZGen_2Phase_fp.h" |
|
#ifdef TPM_CC_ZGen_2Phase // Conditional expansion of this file |
|
// |
|
// This command uses the TPM to recover one or two Z values in a two phase key exchange protocol |
|
// |
|
// Error Returns Meaning |
|
// |
|
// TPM_RC_ATTRIBUTES key referenced by keyA is restricted or not a decrypt key |
|
// TPM_RC_ECC_POINT inQsB or inQeB is not on the curve of the key reference by keyA |
|
// TPM_RC_KEY key referenced by keyA is not an ECC key |
|
// TPM_RC_SCHEME the scheme of the key referenced by keyA is not TPM_ALG_NULL, |
|
// TPM_ALG_ECDH, TPM_ALG_ECMQV or TPM_ALG_SM2 |
|
// |
|
TPM_RC |
|
TPM2_ZGen_2Phase( |
|
ZGen_2Phase_In *in, // IN: input parameter list |
|
ZGen_2Phase_Out *out // OUT: output parameter list |
|
) |
|
{ |
|
TPM_RC result; |
|
OBJECT *eccKey; |
|
TPM2B_ECC_PARAMETER r; |
|
TPM_ALG_ID scheme; |
|
|
|
// Input Validation |
|
|
|
eccKey = ObjectGet(in->keyA); |
|
|
|
// keyA must be an ECC key |
|
if(eccKey->publicArea.type != TPM_ALG_ECC) |
|
return TPM_RC_KEY + RC_ZGen_2Phase_keyA; |
|
|
|
// keyA must not be restricted and must be a decrypt key |
|
if( eccKey->publicArea.objectAttributes.restricted == SET |
|
|| eccKey->publicArea.objectAttributes.decrypt != SET |
|
) |
|
return TPM_RC_ATTRIBUTES + RC_ZGen_2Phase_keyA; |
|
|
|
// if the scheme of keyA is TPM_ALG_NULL, then use the input scheme; otherwise |
|
// the input scheme must be the same as the scheme of keyA |
|
scheme = eccKey->publicArea.parameters.asymDetail.scheme.scheme; |
|
if(scheme != TPM_ALG_NULL) |
|
{ |
|
if(scheme != in->inScheme) |
|
return TPM_RC_SCHEME + RC_ZGen_2Phase_inScheme; |
|
} |
|
else |
|
scheme = in->inScheme; |
|
if(scheme == TPM_ALG_NULL) |
|
return TPM_RC_SCHEME + RC_ZGen_2Phase_inScheme; |
|
|
|
// Input points must be on the curve of keyA |
|
if(!CryptEccIsPointOnCurve(eccKey->publicArea.parameters.eccDetail.curveID, |
|
&in->inQsB.t.point)) |
|
return TPM_RC_ECC_POINT + RC_ZGen_2Phase_inQsB; |
|
|
|
if(!CryptEccIsPointOnCurve(eccKey->publicArea.parameters.eccDetail.curveID, |
|
&in->inQeB.t.point)) |
|
// |
|
return TPM_RC_ECC_POINT + RC_ZGen_2Phase_inQeB; |
|
|
|
if(!CryptGenerateR(&r, &in->counter, |
|
eccKey->publicArea.parameters.eccDetail.curveID, |
|
NULL)) |
|
return TPM_RC_VALUE + RC_ZGen_2Phase_counter; |
|
|
|
// Command Output |
|
|
|
result = CryptEcc2PhaseKeyExchange(&out->outZ1.t.point, |
|
&out->outZ2.t.point, |
|
eccKey->publicArea.parameters.eccDetail.curveID, |
|
scheme, |
|
&eccKey->sensitive.sensitive.ecc, |
|
&r, |
|
&in->inQsB.t.point, |
|
&in->inQeB.t.point); |
|
if(result == TPM_RC_SCHEME) |
|
return TPM_RC_SCHEME + RC_ZGen_2Phase_inScheme; |
|
|
|
if(result == TPM_RC_SUCCESS) |
|
CryptEndCommit(in->counter); |
|
|
|
return result; |
|
} |
|
#endif
|
|
|