summaryrefslogtreecommitdiffstats
path: root/src/tpm2/NV_spt.c
diff options
context:
space:
mode:
authorDaniel Baumann <daniel.baumann@progress-linux.org>2024-04-27 21:41:43 +0000
committerDaniel Baumann <daniel.baumann@progress-linux.org>2024-04-27 21:41:43 +0000
commit92cccad89d1c12b39165d5f0ed7ccd2d44965a1a (patch)
treef59a2764cd8c50959050a428bd8fc935138df750 /src/tpm2/NV_spt.c
parentInitial commit. (diff)
downloadlibtpms-92cccad89d1c12b39165d5f0ed7ccd2d44965a1a.tar.xz
libtpms-92cccad89d1c12b39165d5f0ed7ccd2d44965a1a.zip
Adding upstream version 0.9.2.upstream/0.9.2upstream
Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
Diffstat (limited to 'src/tpm2/NV_spt.c')
-rw-r--r--src/tpm2/NV_spt.c179
1 files changed, 179 insertions, 0 deletions
diff --git a/src/tpm2/NV_spt.c b/src/tpm2/NV_spt.c
new file mode 100644
index 0000000..9e4351f
--- /dev/null
+++ b/src/tpm2/NV_spt.c
@@ -0,0 +1,179 @@
+/********************************************************************************/
+/* */
+/* */
+/* Written by Ken Goldman */
+/* IBM Thomas J. Watson Research Center */
+/* $Id: NV_spt.c 1490 2019-07-26 21:13:22Z kgoldman $ */
+/* */
+/* Licenses and Notices */
+/* */
+/* 1. Copyright Licenses: */
+/* */
+/* - Trusted Computing Group (TCG) grants to the user of the source code in */
+/* this specification (the "Source Code") a worldwide, irrevocable, */
+/* nonexclusive, royalty free, copyright license to reproduce, create */
+/* derivative works, distribute, display and perform the Source Code and */
+/* derivative works thereof, and to grant others the rights granted herein. */
+/* */
+/* - The TCG grants to the user of the other parts of the specification */
+/* (other than the Source Code) the rights to reproduce, distribute, */
+/* display, and perform the specification solely for the purpose of */
+/* developing products based on such documents. */
+/* */
+/* 2. Source Code Distribution Conditions: */
+/* */
+/* - Redistributions of Source Code must retain the above copyright licenses, */
+/* this list of conditions and the following disclaimers. */
+/* */
+/* - Redistributions in binary form must reproduce the above copyright */
+/* licenses, this list of conditions and the following disclaimers in the */
+/* documentation and/or other materials provided with the distribution. */
+/* */
+/* 3. Disclaimers: */
+/* */
+/* - THE COPYRIGHT LICENSES SET FORTH ABOVE DO NOT REPRESENT ANY FORM OF */
+/* LICENSE OR WAIVER, EXPRESS OR IMPLIED, BY ESTOPPEL OR OTHERWISE, WITH */
+/* RESPECT TO PATENT RIGHTS HELD BY TCG MEMBERS (OR OTHER THIRD PARTIES) */
+/* THAT MAY BE NECESSARY TO IMPLEMENT THIS SPECIFICATION OR OTHERWISE. */
+/* Contact TCG Administration (admin@trustedcomputinggroup.org) for */
+/* information on specification licensing rights available through TCG */
+/* membership agreements. */
+/* */
+/* - THIS SPECIFICATION IS PROVIDED "AS IS" WITH NO EXPRESS OR IMPLIED */
+/* WARRANTIES WHATSOEVER, INCLUDING ANY WARRANTY OF MERCHANTABILITY OR */
+/* FITNESS FOR A PARTICULAR PURPOSE, ACCURACY, COMPLETENESS, OR */
+/* NONINFRINGEMENT OF INTELLECTUAL PROPERTY RIGHTS, OR ANY WARRANTY */
+/* OTHERWISE ARISING OUT OF ANY PROPOSAL, SPECIFICATION OR SAMPLE. */
+/* */
+/* - Without limitation, TCG and its members and licensors disclaim all */
+/* liability, including liability for infringement of any proprietary */
+/* rights, relating to use of information in this specification and to the */
+/* implementation of this specification, and TCG disclaims all liability for */
+/* cost of procurement of substitute goods or services, lost profits, loss */
+/* of use, loss of data or any incidental, consequential, direct, indirect, */
+/* or special damages, whether under contract, tort, warranty or otherwise, */
+/* arising in any way out of use or reliance upon this specification or any */
+/* information herein. */
+/* */
+/* (c) Copyright IBM Corp. and others, 2016, 2017 */
+/* */
+/********************************************************************************/
+
+/* 7.5 NV Command Support (NV_spt.c) */
+/* 7.5.1 Includes */
+#include "Tpm.h"
+#include "NV_spt_fp.h"
+/* 7.5.2 Functions */
+/* 7.5.2.1 NvReadAccessChecks() */
+/* Common routine for validating a read Used by TPM2_NV_Read(), TPM2_NV_ReadLock() and
+ TPM2_PolicyNV() */
+/* Error Returns Meaning */
+/* TPM_RC_NV_AUTHORIZATION autHandle is not allowed to authorize read of the index */
+/* TPM_RC_NV_LOCKED Read locked */
+/* TPM_RC_NV_UNINITIALIZED Try to read an uninitialized index */
+TPM_RC
+NvReadAccessChecks(
+ TPM_HANDLE authHandle, // IN: the handle that provided the
+ // authorization
+ TPM_HANDLE nvHandle, // IN: the handle of the NV index to be read
+ TPMA_NV attributes // IN: the attributes of 'nvHandle'
+ )
+{
+ // If data is read locked, returns an error
+ if(IS_ATTRIBUTE(attributes, TPMA_NV, READLOCKED))
+ return TPM_RC_NV_LOCKED;
+ // If the authorization was provided by the owner or platform, then check
+ // that the attributes allow the read. If the authorization handle
+ // is the same as the index, then the checks were made when the authorization
+ // was checked..
+ if(authHandle == TPM_RH_OWNER)
+ {
+ // If Owner provided authorization then ONWERWRITE must be SET
+ if(!IS_ATTRIBUTE(attributes, TPMA_NV, OWNERREAD))
+ return TPM_RC_NV_AUTHORIZATION;
+ }
+ else if(authHandle == TPM_RH_PLATFORM)
+ {
+ // If Platform provided authorization then PPWRITE must be SET
+ if(!IS_ATTRIBUTE(attributes, TPMA_NV, PPREAD))
+ return TPM_RC_NV_AUTHORIZATION;
+ }
+ // If neither Owner nor Platform provided authorization, make sure that it was
+ // provided by this index.
+ else if(authHandle != nvHandle)
+ return TPM_RC_NV_AUTHORIZATION;
+ // If the index has not been written, then the value cannot be read
+ // NOTE: This has to come after other access checks to make sure that
+ // the proper authorization is given to TPM2_NV_ReadLock()
+ if(!IS_ATTRIBUTE(attributes, TPMA_NV, WRITTEN))
+ return TPM_RC_NV_UNINITIALIZED;
+ return TPM_RC_SUCCESS;
+}
+/* 7.5.2.2 NvWriteAccessChecks() */
+/* Common routine for validating a write Used by TPM2_NV_Write(), TPM2_NV_Increment(),
+ TPM2_SetBits(), and TPM2_NV_WriteLock() */
+/* Error Returns Meaning */
+/* TPM_RC_NV_AUTHORIZATION Authorization fails */
+/* TPM_RC_NV_LOCKED Write locked */
+TPM_RC
+NvWriteAccessChecks(
+ TPM_HANDLE authHandle, // IN: the handle that provided the
+ // authorization
+ TPM_HANDLE nvHandle, // IN: the handle of the NV index to be written
+ TPMA_NV attributes // IN: the attributes of 'nvHandle'
+ )
+{
+ // If data is write locked, returns an error
+ if(IS_ATTRIBUTE(attributes, TPMA_NV, WRITELOCKED))
+ return TPM_RC_NV_LOCKED;
+ // If the authorization was provided by the owner or platform, then check
+ // that the attributes allow the write. If the authorization handle
+ // is the same as the index, then the checks were made when the authorization
+ // was checked..
+ if(authHandle == TPM_RH_OWNER)
+ {
+ // If Owner provided authorization then ONWERWRITE must be SET
+ if(!IS_ATTRIBUTE(attributes, TPMA_NV, OWNERWRITE))
+ return TPM_RC_NV_AUTHORIZATION;
+ }
+ else if(authHandle == TPM_RH_PLATFORM)
+ {
+ // If Platform provided authorization then PPWRITE must be SET
+ if(!IS_ATTRIBUTE(attributes, TPMA_NV, PPWRITE))
+ return TPM_RC_NV_AUTHORIZATION;
+ }
+ // If neither Owner nor Platform provided authorization, make sure that it was
+ // provided by this index.
+ else if(authHandle != nvHandle)
+ return TPM_RC_NV_AUTHORIZATION;
+ return TPM_RC_SUCCESS;
+}
+/* 7.5.2.3 NvClearOrderly() */
+/* This function is used to cause gp.orderlyState to be cleared to the non-orderly state. */
+TPM_RC
+NvClearOrderly(
+ void
+ )
+{
+ if(gp.orderlyState < SU_DA_USED_VALUE)
+ RETURN_IF_NV_IS_NOT_AVAILABLE;
+ g_clearOrderly = TRUE;
+ return TPM_RC_SUCCESS;
+}
+/* 7.5.2.4 NvIsPinPassIndex() */
+/* Function to check to see if an NV index is a PIN Pass Index */
+/* Return Value Meaning */
+/* TRUE is pin pass */
+/* FALSE is not pin pass */
+BOOL
+NvIsPinPassIndex(
+ TPM_HANDLE index // IN: Handle to check
+ )
+{
+ if(HandleGetType(index) == TPM_HT_NV_INDEX)
+ {
+ NV_INDEX *nvIndex = NvGetIndexInfo(index, NULL);
+ return IsNvPinPassIndex(nvIndex->publicArea.attributes);
+ }
+ return FALSE;
+}