没有合适的资源?快使用搜索试试~ 我知道了~
首页TCG软件栈:安全技术规范分析
"TCG软件栈相关规范文档,版本1.2,级别1,修正版A,部分内容涉及命令和结构"
TCG(Trusted Computing Group,可信计算组)软件栈是实现可信计算体系中的核心组件,它是一系列软件层的集合,用于确保计算设备的安全性和数据的完整性。TCG软件栈的主要目标是建立一个安全、可信的计算环境,通过硬件、固件和软件的紧密协作来保护计算过程中的敏感信息。
TCG软件栈的组成部分通常包括以下层次:
1. **固件/硬件接口**:这是软件栈的最底层,与特定的硬件平台相关,如TPM(Trusted Platform Module)模块,提供基本的信任根(Root of Trust)和加密功能。
2. **固件层**:包括BIOS/UEFI固件扩展,负责在系统启动时执行安全检查,并与TPM交互以验证系统的初始状态。
3. **操作系统支持**:这部分包括驱动程序和操作系统内核模块,它们允许操作系统与TPM通信,提供安全服务,如PCR(Platform Configuration Registers)的管理。
4. **应用程序接口(API)**:为开发者提供访问TCG服务的接口,使得应用程序能够利用这些服务进行安全操作,例如完整性度量、数据加密等。
5. **中间件**:这层处理更高级别的安全策略和任务,如密钥管理、远程证明、安全启动等。
6. **应用层**:最终用户和应用程序可以利用这些服务,例如安全的文件存储、数字版权管理(DRM)、防病毒软件等。
文档中提到的“Specification Version 1.2 Level 1 Errata A Part1: Commands and Structures”是指TCG软件栈规范的1.2版第1级修订版A的部分,这部分主要关注命令和结构的定义,这是实现TCG软件栈的基础。这些命令和结构定义了如何在不同层之间进行通信,以及如何执行安全操作。
值得注意的是,TCG在提供该规范时明确声明不承担任何责任,包括但不限于对任何专有权利的侵犯,以及因使用此规范或其中信息可能导致的采购替代商品或服务的成本、利润损失、数据丢失、直接、间接、后果性或特殊损害。此外,虽然没有明示或暗示的许可,但TCG可能在此授予对某些TCG或其成员知识产权的有限许可。
TCG软件栈是一个复杂的、多层的软件架构,旨在为计算环境提供信任基础,确保数据的安全性和计算过程的不可篡改性。理解和实施TCG软件栈规范对于构建安全的计算平台至关重要。
![](https://csdnimg.cn/release/download_crawler_static/2755417/bg10.jpg)
TCG Software Stack (TSS) Specification Page 16
4.3.4.21.10 Tspi_GetPolicyObject....................................................................................................... 371
4.3.4.22 Monotonic Counter functions................................................................................................... 372
4.3.4.22.1 Tspi_TPM_ReadCurrentCounter........................................................................................ 372
4.3.4.23 Time Stamping Function Definitions......................................................................................... 373
4.3.4.23.1 Tspi_TPM_ReadCurrentTicks............................................................................................ 373
4.3.4.23.2 Tspi_Hash_TickStampBlob................................................................................................ 374
4.3.4.24 DIR Commands........................................................................................................................ 375
4.3.4.24.1 Tspi_TPM_DirWrite............................................................................................................ 375
4.3.4.24.2 Tspi_TPM_DirRead............................................................................................................ 376
4.3.4.25 Tspi_NV Class Definition.......................................................................................................... 377
4.3.4.25.1 Tspi_SetAttribUint32.......................................................................................................... 377
4.3.4.25.2 Tspi_GetAttribUint32.......................................................................................................... 378
4.3.4.25.3 Tspi_SetAttribData............................................................................................................. 379
4.3.4.25.4 Tspi_GetAttribData............................................................................................................. 380
4.3.4.25.5 Tspi_NV_DefineSpace....................................................................................................... 381
4.3.4.25.6 Tspi_NV_ReleaseSpace.................................................................................................... 383
4.3.4.25.7 Tspi_NV_WriteValue.......................................................................................................... 384
4.3.4.25.8 Tspi_NV_ReadValue.......................................................................................................... 386
4.3.4.26 GPIO......................................................................................................................................... 387
4.3.4.27 Delegation TSPI functions........................................................................................................ 389
4.3.4.27.1 Tspi_SetAttribUint32.......................................................................................................... 389
4.3.4.27.2 Tspi_GetAttribUint32.......................................................................................................... 391
4.3.4.27.3 Tspi_SetAttribData............................................................................................................. 392
4.3.4.27.4 Tspi_GetAttribData............................................................................................................. 393
4.3.4.27.5 Tspi_TPM_Delegate_AddFamily........................................................................................ 394
4.3.4.27.6 Tspi_TPM_Delegate_GetFamily........................................................................................ 395
4.3.4.27.7 Tspi_TPM_Delegate_InvalidateFamily............................................................................... 396
4.3.4.27.8 Tspi_TPM_Delegate_CreateDelegation............................................................................. 397
4.3.4.27.9 Tspi_TPM_Delegate_CacheOwnerDelegation................................................................... 400
4.3.4.27.10 Tspi_TPM_Delegate_UpdateVerificationCount................................................................ 402
4.3.4.27.11 Tspi_TPM_Delegate_VerifyDelegation............................................................................ 403
4.3.4.27.12 Tspi_TPM_Delegate_ReadTables................................................................................... 404
4.3.4.28 DAA Commands....................................................................................................................... 406
4.3.4.28.1 Introduction......................................................................................................................... 406
4.3.4.28.2 Components....................................................................................................................... 406
4.3.4.29 DAA Protocols........................................................................................................................... 408
4.3.4.29.1 DAA Join............................................................................................................................ 408
4.3.4.29.2 Limitation............................................................................................................................ 410
Version 1.2 Golden Candidate 2, March 7, 2007 Copyright TCG 1/07
TCG Software Stack (TSS) Specification
![](https://csdnimg.cn/release/download_crawler_static/2755417/bg11.jpg)
TCG Software Stack (TSS) Specification Page 17
4.3.4.29.3 DAA Sign............................................................................................................................ 412
4.3.4.29.4 Keys of DAA Issuer............................................................................................................ 413
4.3.4.29.5 Notation.............................................................................................................................. 415
4.3.4.29.6 Join Protocol....................................................................................................................... 416
4.3.4.29.7 Sign Protocol...................................................................................................................... 417
4.3.4.29.8 Definitions........................................................................................................................... 418
4.3.4.29.9 Lengths.............................................................................................................................. 418
4.3.4.29.10 Input to hash functions..................................................................................................... 418
4.3.4.30 DAA Functions.......................................................................................................................... 420
4.3.4.30.1 Tspi_SetAttribUint32.......................................................................................................... 420
4.3.4.30.2 Tspi_GetAttribUint32.......................................................................................................... 421
4.3.4.30.3 Tspi_SetAttribData............................................................................................................. 422
4.3.4.30.4 Tspi_GetAttribData............................................................................................................. 423
4.3.4.30.5 Tspi_SetAttribUint32.......................................................................................................... 424
4.3.4.30.6 Tspi_GetAttribUint32.......................................................................................................... 424
4.3.4.30.7 Tspi_SetAttribData............................................................................................................. 425
4.3.4.30.8 Tspi_GetAttribData............................................................................................................. 426
4.3.4.30.9 Tspi_SetAttribUint32.......................................................................................................... 427
4.3.4.30.10 Tspi_GetAttribUint32........................................................................................................ 427
4.3.4.30.11 Tspi_SetAttribData........................................................................................................... 428
4.3.4.30.12 Tspi_GetAttribData........................................................................................................... 429
4.3.4.30.13 Tspi_TPM_DAA_JoinInit.................................................................................................. 431
4.3.4.30.14 Tspi_TPM_DAA_JoinCreateDaaPubKey......................................................................... 435
4.3.4.30.15 Tspi_TPM_DAA_JoinStoreCredential.............................................................................. 440
4.3.4.30.16 Tspi_TPM_DAA_Sign...................................................................................................... 441
4.3.4.30.17 Tspi_DAA_IssuerKeyVerify.............................................................................................. 449
4.3.4.30.18 Tspi_DAA_Issuer_GenerateKey...................................................................................... 451
4.3.4.30.19 Tspi_DAA_Issuer_InitCredential...................................................................................... 454
4.3.4.30.20 Tspi_DAA_Issuer_IssueCredential................................................................................... 457
4.3.4.30.21 Tspi_DAA_Verifier_Init..................................................................................................... 460
4.3.4.30.22 Tspi_DAA_VerifySignature............................................................................................... 462
4.3.4.30.23 Tspi_DAA_ARA_GenerateKey......................................................................................... 467
4.3.4.30.24 Tspi_DAA_ARA_RevokeAnonymity................................................................................. 469
4.3.4.31 Audit Commands:..................................................................................................................... 472
4.3.4.31.1 Tspi_SetAttribUint32.......................................................................................................... 472
4.3.4.31.2 Tspi_TPM_GetAuditDigest................................................................................................. 472
4.3.4.32 Callback Function Definitions.................................................................................................... 475
4.3.4.32.1 Tspicb_CallbackHMACAuth............................................................................................... 475
Version 1.2 Golden Candidate 2, March 7, 2007 Copyright TCG 1/07
TCG Software Stack (TSS) Specification
![](https://csdnimg.cn/release/download_crawler_static/2755417/bg12.jpg)
TCG Software Stack (TSS) Specification Page 18
4.3.4.32.2 Tspicb_CallbackXorEnc..................................................................................................... 478
4.3.4.32.3 Tspicb_CallbackTakeOwnership........................................................................................ 481
4.3.4.32.4 Tspicb_CallbackSealxMask................................................................................................ 483
4.3.4.32.5 Tspicb_CallbackChangeAuthAsym.................................................................................... 485
4.3.4.32.6 Tspicb_CollateIdentity........................................................................................................ 487
4.3.4.32.7 Tspicb_ActivateIdentity...................................................................................................... 489
4.3.4.32.8 Tspicb_DAA_Sign.............................................................................................................. 490
4.3.4.32.9 Tspicb_DAA_VerifySignature............................................................................................. 492
5. TCG Core Services (TCS)............................................................................................................................. 504
5.1.1 TCS Memory Manager...................................................................................................................... 504
5.1.2 TCS Data Marshalling....................................................................................................................... 504
5.1.3 TCS Interface Dynamics.................................................................................................................... 504
5.2 TCS-specific Return Code Defines.......................................................................................................... 506
5.3 TSPI-specific Return code Rules............................................................................................................. 507
5.4 Structures and Definitions........................................................................................................................ 508
5.4.1 Data Types of the Tcsi....................................................................................................................... 508
5.4.2 TCS_LOADKEY_INFO...................................................................................................................... 508
5.5 TCS Context Manager............................................................................................................................. 509
5.5.1 TCS Context Manager Functions and Operations............................................................................. 509
5.5.2 TCS Context Manager Interface........................................................................................................ 510
5.5.2.1 Tcsi_OpenContext...................................................................................................................... 510
5.5.2.2 Tcsi_CloseContext...................................................................................................................... 511
5.5.2.3 Tcsi_FreeMemory....................................................................................................................... 512
5.5.2.4 Tcsi_GetCapability...................................................................................................................... 513
5.6 TCS Key and Credential Manager........................................................................................................... 516
5.6.1 TCS Key & Credential Manager Functions and Operations.............................................................. 516
5.6.1.1 TCS Key Manager...................................................................................................................... 516
5.6.1.2 TCS Key Cache Manager........................................................................................................... 517
5.6.1.3 TCS Credential Management..................................................................................................... 519
5.6.2 TCS Key and Credential Manager Interface...................................................................................... 520
5.6.2.1 Interfaces.................................................................................................................................... 520
5.6.2.2 Key Registration.......................................................................................................................... 520
5.6.2.2.1 Tcsi_RegisterKey................................................................................................................. 520
5.6.2.2.2 Tcsip_UnregisterKey............................................................................................................ 522
5.6.2.2.3 Tcsip_KeyControlOwner...................................................................................................... 523
5.6.2.3 TCS Get Key Hierarchy Information............................................................................................ 525
5.6.2.3.1 Tcsi_EnumRegisteredKeys.................................................................................................. 525
5.6.2.3.2 Tcsi_GetRegisteredKey....................................................................................................... 527
Version 1.2 Golden Candidate 2, March 7, 2007 Copyright TCG 1/07
TCG Software Stack (TSS) Specification
![](https://csdnimg.cn/release/download_crawler_static/2755417/bg13.jpg)
TCG Software Stack (TSS) Specification Page 19
5.6.2.3.3 Tcsi_GetRegisteredKeyBlob................................................................................................ 528
5.6.2.3.4 Tcsip_GetRegisteredKeyByPublicInfo.................................................................................. 530
5.6.2.4 TCS Loading a Key..................................................................................................................... 532
5.6.2.4.1 Tcsip_LoadKeyByBlob......................................................................................................... 532
5.6.2.4.2 Tcsip_LoadKeyByUUID........................................................................................................ 535
5.6.2.4.3 Tcsip_EvictKey..................................................................................................................... 538
5.6.2.5 TCS Creating a Key.................................................................................................................... 539
5.6.2.5.1 Tcsip_CreateWrapKey......................................................................................................... 539
5.6.2.6 TCS Working with Keys.............................................................................................................. 541
5.6.2.6.1 Tcsip_GetPubKey................................................................................................................ 541
5.6.2.6.2 Tcsip_OwnerReadInternalPub............................................................................................. 543
5.6.2.7 TCS Credential Management..................................................................................................... 545
5.6.2.7.1 Tcsip_MakeIdentity.............................................................................................................. 545
5.6.2.7.2 Tcsip_MakeIdentity2............................................................................................................ 548
5.6.2.7.3 Tcsi_GetCredentials............................................................................................................. 551
5.6.3 TCS Use Models............................................................................................................................... 553
5.6.3.1 TCS Load Key by UUID.............................................................................................................. 553
5.7 TCS Event Manager................................................................................................................................ 555
5.7.1 TCS Event Manager Functions and Operations................................................................................ 555
5.7.2 TCS Event Manager Interface........................................................................................................... 555
5.7.2.1 TCS Event Manager Interface Structures and Definitions........................................................... 555
5.7.2.1.1 TCS The Event Log.............................................................................................................. 555
5.7.2.2 TCS Event Manager Interface Functions.................................................................................... 556
5.7.2.2.1 Tcsi_LogPcrEvent ............................................................................................................... 556
5.7.2.2.2 Tcsi_GetPcrEvent................................................................................................................ 558
5.7.2.2.3 Tcsi_GetPcrEventsByPcr..................................................................................................... 560
5.7.2.2.4 Tcsi_GetPcrEventLog.......................................................................................................... 562
5.7.2.2.5 Tcsi_GetCredential............................................................................................................... 564
5.8 TCS TPM Parameter Block Generator..................................................................................................... 566
5.8.1 TCS TPM Parameter Block Generator Functions and Operations.................................................... 566
5.8.2 TCS TPM Parameter Block Generator Interface............................................................................... 566
5.8.2.1 Functions.................................................................................................................................... 566
5.8.2.2 TPM Ownership, Authorization, and Identity............................................................................... 568
5.8.2.2.1 Tcsip_SetOwnerInstall......................................................................................................... 568
5.8.2.2.2 Tcsip_TakeOwnership.......................................................................................................... 569
5.8.2.2.3 Tcsip_OIAP.......................................................................................................................... 572
5.8.2.2.4 Tcsip_OSAP......................................................................................................................... 573
5.8.2.2.5 Tcsip_ChangeAuth............................................................................................................... 574
Version 1.2 Golden Candidate 2, March 7, 2007 Copyright TCG 1/07
TCG Software Stack (TSS) Specification
![](https://csdnimg.cn/release/download_crawler_static/2755417/bg14.jpg)
TCG Software Stack (TSS) Specification Page 20
5.8.2.2.6 Tcsip_ChangeAuthOwner.................................................................................................... 576
5.8.2.2.7 Tcsip_ChangeAuthAsymStart.............................................................................................. 577
5.8.2.2.8 Tcsip_ChangeAuthAsymFinish............................................................................................ 580
5.8.2.2.9 Tcsip_TerminateHandle....................................................................................................... 583
5.8.2.2.10 Tcsip_ActivateTPMIdentity................................................................................................. 584
5.8.2.3 TCS Context............................................................................................................................... 586
5.8.2.4 Transport Protection .................................................................................................................. 586
5.8.2.4.1 Tcsip_EstablishTransport..................................................................................................... 586
5.8.2.4.2 Tcsip_ExecuteTransport...................................................................................................... 588
5.8.2.4.3 Tcsip_ReleaseTransportSigned........................................................................................... 591
5.8.2.5 TPM Mandatory.......................................................................................................................... 593
5.8.2.5.1 Tcsip_Extend........................................................................................................................ 593
5.8.2.5.2 Tcsip_PcrRead..................................................................................................................... 595
5.8.2.5.3 Tcsip_Quote......................................................................................................................... 596
5.8.2.5.4 Tcsip_Quote2....................................................................................................................... 598
5.8.2.5.5 Tcsip_DirWriteAuth.............................................................................................................. 601
5.8.2.6 Tcsip_DirRead............................................................................................................................ 602
5.8.2.6.1 Tcsip_Seal............................................................................................................................ 603
5.8.2.6.2 Tcsip_Unseal........................................................................................................................ 605
5.8.2.6.3 Tcsip_UnBind....................................................................................................................... 607
5.8.2.6.4 Tcsip_Sealx.......................................................................................................................... 609
5.8.2.6.5 Tcsip_LoadKey2ByBlob....................................................................................................... 611
5.8.2.6.6 Tcsip_CreateMigrationBlob.................................................................................................. 613
5.8.2.6.7 Tcsip_ConvertMigrationBlob................................................................................................ 615
5.8.2.6.8 Tcsip_AuthorizeMigrationKey............................................................................................... 617
5.8.2.6.9 Tcsip_SetOperatorAuth........................................................................................................ 619
5.8.2.7 TPM Cryptographic Capabilities.................................................................................................. 620
5.8.2.7.1 Tcsip_CertifyKey.................................................................................................................. 620
5.8.2.7.2 Tcsip_CertifyKey2................................................................................................................ 622
5.8.2.7.3 Tcsip_Sign............................................................................................................................ 624
5.8.2.7.4 Tcsip_GetRandom............................................................................................................... 625
5.8.2.7.5 Tcsip_StirRandom................................................................................................................ 626
5.8.2.7.6 Tcsip_GetCapability............................................................................................................. 627
5.8.2.7.7 Tcsip_GetCapabilitySigned.................................................................................................. 629
5.8.2.7.8 Tcsip_GetCapabilityOwner................................................................................................... 632
5.8.2.7.9 Tcsip_CreateEndorsementKeyPair...................................................................................... 633
5.8.2.7.10 Tcsip_ReadPubek.............................................................................................................. 635
5.8.2.7.11 Tcsip_DisablePubekRead.................................................................................................. 636
Version 1.2 Golden Candidate 2, March 7, 2007 Copyright TCG 1/07
TCG Software Stack (TSS) Specification
剩余756页未读,继续阅读
2023-06-08 上传
2023-05-29 上传
2023-12-17 上传
2023-04-01 上传
2024-06-28 上传
2023-09-25 上传
2023-08-01 上传
2024-08-20 上传
2023-07-28 上传
![](https://profile-avatar.csdnimg.cn/f8b12f9b33c7410b9e7c8c4943d73cd3_xgwang78.jpg!1)
「已注销」
- 粉丝: 0
- 资源: 14
上传资源 快速赚钱
我的内容管理 展开
我的资源 快来上传第一个资源
我的收益
登录查看自己的收益我的积分 登录查看自己的积分
我的C币 登录后查看C币余额
我的收藏
我的下载
下载帮助
![](https://csdnimg.cn/release/wenkucmsfe/public/img/voice.245cc511.png)
最新资源
- 解决本地连接丢失无法上网的问题
- BIOS报警声音解析:故障原因与解决方法
- 广义均值移动跟踪算法在视频目标跟踪中的应用研究
- C++Builder快捷键大全:高效编程的秘密武器
- 网页制作入门:常用代码详解
- TX2440A开发板网络远程监控系统移植教程:易搭建与通用解决方案
- WebLogic10虚拟内存配置详解与优化技巧
- C#网络编程深度解析:Socket基础与应用
- 掌握Struts1:Java MVC轻量级框架详解
- 20个必备CSS代码段提升Web开发效率
- CSS样式大全:字体、文本、列表样式详解
- Proteus元件库大全:从基础到高级组件
- 74HC08芯片:高速CMOS四输入与门详细资料
- C#获取当前路径的多种方法详解
- 修复MySQL乱码问题:设置字符集为GB2312
- C语言的诞生与演进:从汇编到系统编程的革命
安全验证
文档复制为VIP权益,开通VIP直接复制
![](https://csdnimg.cn/release/wenkucmsfe/public/img/green-success.6a4acb44.png)