1 // This file was extracted from the TCG Published 2 // Trusted Platform Module Library 3 // Part 3: Commands 4 // Family "2.0" 5 // Level 00 Revision 01.16 6 // October 30, 2014 7 8 #include "InternalRoutines.h" 9 #include "Attest_spt_fp.h" 10 #include "CertifyCreation_fp.h" 11 // 12 // 13 // Error Returns Meaning 14 // 15 // TPM_RC_KEY key referenced by signHandle is not a signing key 16 // TPM_RC_SCHEME inScheme is not compatible with signHandle 17 // TPM_RC_TICKET creationTicket does not match objectHandle 18 // TPM_RC_VALUE digest generated for inScheme is greater or has larger size than the 19 // modulus of signHandle, or the buffer for the result in signature is too 20 // small (for an RSA key); invalid commit status (for an ECC key with a 21 // split scheme). 22 // 23 TPM_RC 24 TPM2_CertifyCreation( 25 CertifyCreation_In *in, // IN: input parameter list 26 CertifyCreation_Out *out // OUT: output parameter list 27 ) 28 { 29 TPM_RC result; 30 TPM2B_NAME name; 31 TPMT_TK_CREATION ticket; 32 TPMS_ATTEST certifyInfo; 33 34 // Input Validation 35 36 // CertifyCreation specific input validation 37 // Get certified object name 38 name.t.size = ObjectGetName(in->objectHandle, &name.t.name); 39 // Re-compute ticket 40 TicketComputeCreation(in->creationTicket.hierarchy, &name, 41 &in->creationHash, &ticket); 42 // Compare ticket 43 if(!Memory2BEqual(&ticket.digest.b, &in->creationTicket.digest.b)) 44 return TPM_RC_TICKET + RC_CertifyCreation_creationTicket; 45 46 // Command Output 47 // Common fields 48 result = FillInAttestInfo(in->signHandle, &in->inScheme, &in->qualifyingData, 49 &certifyInfo); 50 if(result != TPM_RC_SUCCESS) 51 { 52 if(result == TPM_RC_KEY) 53 return TPM_RC_KEY + RC_CertifyCreation_signHandle; 54 else 55 return RcSafeAddToResult(result, RC_CertifyCreation_inScheme); 56 } 57 58 // CertifyCreation specific fields 59 // Attestation type 60 certifyInfo.type = TPM_ST_ATTEST_CREATION; 61 certifyInfo.attested.creation.objectName = name; 62 63 // Copy the creationHash 64 certifyInfo.attested.creation.creationHash = in->creationHash; 65 66 // Sign attestation structure. A NULL signature will be returned if 67 // signHandle is TPM_RH_NULL. A TPM_RC_NV_UNAVAILABLE, TPM_RC_NV_RATE, 68 // TPM_RC_VALUE, TPM_RC_SCHEME or TPM_RC_ATTRIBUTES error may be returned at 69 // this point 70 result = SignAttestInfo(in->signHandle, 71 &in->inScheme, 72 &certifyInfo, 73 &in->qualifyingData, 74 &out->certifyInfo, 75 &out->signature); 76 77 // TPM_RC_ATTRIBUTES cannot be returned here as FillInAttestInfo would already 78 // have returned TPM_RC_KEY 79 pAssert(result != TPM_RC_ATTRIBUTES); 80 81 if(result != TPM_RC_SUCCESS) 82 return result; 83 84 // orderly state should be cleared because of the reporting of clock info 85 // if signing happens 86 if(in->signHandle != TPM_RH_NULL) 87 g_clearOrderly = TRUE; 88 89 return TPM_RC_SUCCESS; 90 } 91
