71 lines
2.5 KiB
C
71 lines
2.5 KiB
C
// This file was extracted from the TCG Published
|
|
// Trusted Platform Module Library
|
|
// Part 3: Commands
|
|
// Family "2.0"
|
|
// Level 00 Revision 01.16
|
|
// October 30, 2014
|
|
|
|
#include "InternalRoutines.h"
|
|
#include "RSA_Encrypt_fp.h"
|
|
#ifdef TPM_ALG_RSA
|
|
//
|
|
//
|
|
// Error Returns Meaning
|
|
//
|
|
// TPM_RC_ATTRIBUTES decrypt attribute is not SET in key referenced by keyHandle
|
|
// TPM_RC_KEY keyHandle does not reference an RSA key
|
|
// TPM_RC_SCHEME incorrect input scheme, or the chosen scheme is not a valid RSA
|
|
// decrypt scheme
|
|
// TPM_RC_VALUE the numeric value of message is greater than the public modulus of
|
|
// the key referenced by keyHandle, or label is not a null-terminated
|
|
// string
|
|
//
|
|
TPM_RC
|
|
TPM2_RSA_Encrypt(
|
|
RSA_Encrypt_In *in, // IN: input parameter list
|
|
RSA_Encrypt_Out *out // OUT: output parameter list
|
|
)
|
|
{
|
|
TPM_RC result;
|
|
OBJECT *rsaKey;
|
|
TPMT_RSA_DECRYPT *scheme;
|
|
char *label = NULL;
|
|
|
|
// Input Validation
|
|
|
|
rsaKey = ObjectGet(in->keyHandle);
|
|
|
|
// selected key must be an RSA key
|
|
if(rsaKey->publicArea.type != TPM_ALG_RSA)
|
|
return TPM_RC_KEY + RC_RSA_Encrypt_keyHandle;
|
|
|
|
// selected key must have the decryption attribute
|
|
if(rsaKey->publicArea.objectAttributes.decrypt != SET)
|
|
return TPM_RC_ATTRIBUTES + RC_RSA_Encrypt_keyHandle;
|
|
|
|
// Is there a label?
|
|
if(in->label.t.size > 0)
|
|
{
|
|
// label is present, so make sure that is it NULL-terminated
|
|
if(in->label.t.buffer[in->label.t.size - 1] != 0)
|
|
return TPM_RC_VALUE + RC_RSA_Encrypt_label;
|
|
label = (char *)in->label.t.buffer;
|
|
}
|
|
|
|
// Command Output
|
|
|
|
// Select a scheme for encryption
|
|
scheme = CryptSelectRSAScheme(in->keyHandle, &in->inScheme);
|
|
if(scheme == NULL)
|
|
return TPM_RC_SCHEME + RC_RSA_Encrypt_inScheme;
|
|
|
|
// Encryption. TPM_RC_VALUE, or TPM_RC_SCHEME errors my be returned buy
|
|
// CryptEncyptRSA. Note: It can also return TPM_RC_ATTRIBUTES if the key does
|
|
// not have the decrypt attribute but that was checked above.
|
|
out->outData.t.size = sizeof(out->outData.t.buffer);
|
|
result = CryptEncryptRSA(&out->outData.t.size, out->outData.t.buffer, rsaKey,
|
|
scheme, in->message.t.size, in->message.t.buffer,
|
|
label);
|
|
return result;
|
|
}
|
|
#endif
|