92 lines
2.7 KiB
C
92 lines
2.7 KiB
C
// This file was extracted from the TCG Published
|
|
// Trusted Platform Module Library
|
|
// Part 3: Commands
|
|
// Family "2.0"
|
|
// Level 00 Revision 01.16
|
|
// October 30, 2014
|
|
|
|
#include "InternalRoutines.h"
|
|
#include "PolicyPCR_fp.h"
|
|
//
|
|
//
|
|
// Error Returns Meaning
|
|
//
|
|
// TPM_RC_VALUE if provided, pcrDigest does not match the current PCR settings
|
|
// TPM_RC_PCR_CHANGED a previous TPM2_PolicyPCR() set pcrCounter and it has changed
|
|
//
|
|
TPM_RC
|
|
TPM2_PolicyPCR(
|
|
PolicyPCR_In *in // IN: input parameter list
|
|
)
|
|
{
|
|
SESSION *session;
|
|
TPM2B_DIGEST pcrDigest;
|
|
BYTE pcrs[sizeof(TPML_PCR_SELECTION)];
|
|
UINT32 pcrSize;
|
|
BYTE *buffer;
|
|
INT32 bufferSize;
|
|
TPM_CC commandCode = TPM_CC_PolicyPCR;
|
|
HASH_STATE hashState;
|
|
|
|
// Input Validation
|
|
|
|
// Get pointer to the session structure
|
|
session = SessionGet(in->policySession);
|
|
|
|
// Do validation for non trial session
|
|
if(session->attributes.isTrialPolicy == CLEAR)
|
|
{
|
|
// Make sure that this is not going to invalidate a previous PCR check
|
|
if(session->pcrCounter != 0 && session->pcrCounter != gr.pcrCounter)
|
|
return TPM_RC_PCR_CHANGED;
|
|
|
|
// Compute current PCR digest
|
|
PCRComputeCurrentDigest(session->authHashAlg, &in->pcrs, &pcrDigest);
|
|
|
|
// If the caller specified the PCR digest and it does not
|
|
// match the current PCR settings, return an error..
|
|
if(in->pcrDigest.t.size != 0)
|
|
{
|
|
if(!Memory2BEqual(&in->pcrDigest.b, &pcrDigest.b))
|
|
return TPM_RC_VALUE + RC_PolicyPCR_pcrDigest;
|
|
}
|
|
}
|
|
else
|
|
{
|
|
// For trial session, just use the input PCR digest
|
|
pcrDigest = in->pcrDigest;
|
|
}
|
|
// Internal Data Update
|
|
|
|
// Update policy hash
|
|
// policyDigestnew = hash( policyDigestold || TPM_CC_PolicyPCR
|
|
// || pcrs || pcrDigest)
|
|
// Start hash
|
|
CryptStartHash(session->authHashAlg, &hashState);
|
|
|
|
// add old digest
|
|
CryptUpdateDigest2B(&hashState, &session->u2.policyDigest.b);
|
|
|
|
// add commandCode
|
|
CryptUpdateDigestInt(&hashState, sizeof(TPM_CC), &commandCode);
|
|
|
|
// add PCRS
|
|
buffer = pcrs;
|
|
bufferSize = sizeof(TPML_PCR_SELECTION);
|
|
pcrSize = TPML_PCR_SELECTION_Marshal(&in->pcrs, &buffer, &bufferSize);
|
|
CryptUpdateDigest(&hashState, pcrSize, pcrs);
|
|
|
|
// add PCR digest
|
|
CryptUpdateDigest2B(&hashState, &pcrDigest.b);
|
|
|
|
// complete the hash and get the results
|
|
CryptCompleteHash2B(&hashState, &session->u2.policyDigest.b);
|
|
|
|
// update pcrCounter in session context for non trial session
|
|
if(session->attributes.isTrialPolicy == CLEAR)
|
|
{
|
|
session->pcrCounter = gr.pcrCounter;
|
|
}
|
|
|
|
return TPM_RC_SUCCESS;
|
|
}
|