ISO/IEC 11889-2:2015 - Trusted Platform Module Library, Part 2: Structures

需积分: 5 31 浏览量更新于2024-07-09 收藏 1.97MB PDF 举报

"ISO/IEC 11889-2:2015标准文档" ISO/IEC 11889-2是国际标准化组织（ISO）和国际电工委员会（IEC）联合发布的一项标准，属于《可信平台模块（Trusted Platform Module, TPM）图书馆》的第二部分，主要关注“结构”。这个标准详细定义了TPM技术的硬件、软件和安全结构，旨在确保计算平台的安全性和信任度。可信平台模块是一种安全芯片，常被集成在计算机主板上，用于提供安全服务，如加密、密钥管理、平台状态验证等。这一标准的第二版发布于2015年12月15日，对之前的版本进行了更新和改进，以适应不断发展的信息安全需求。该标准包含以下主要内容： 1. 范围：这部分将阐述ISO/IEC 11889-2标准的具体应用领域，可能包括TPM的适用环境、功能以及与其他标准的关系。 2. 引用规范：列出本标准所依赖的其他关键标准或规范，这些规范对于理解和实现TPM技术至关重要。 3. 术语和定义：对标准中涉及的专业词汇进行明确定义，帮助读者准确理解文档内容。 4. 结构：详细描述TPM的硬件和软件结构，包括模块的接口、通信协议以及数据存储格式。 5. 功能：可能会涵盖TPM的各种功能，如初始化、密钥生成和管理、平台状态校验（例如，启动完整性度量）等。 6. 安全性：描述TPM如何确保其操作的安全性，包括防篡改机制、隐私保护措施以及安全传输协议。 7. 兼容性和互操作性：确保不同供应商的TPM产品之间能够顺利工作，减少兼容性问题。 8. 测试和验证：提供一套测试方法和流程，用于验证TPM的合规性和性能。 9. 实现指南：可能包含指导开发者和制造商实施TPM技术的具体步骤和建议。此标准对于开发、制造和使用TPM的组织非常重要，因为它提供了统一的技术框架，确保了不同厂商的产品遵循一致的安全标准。同时，对于用户来说，这意味着更高的数据保护水平和更可靠的信任基础。由于是版权保护的文档，未经许可，任何部分不得复制或以任何形式使用，除非事先获得ISO或相应国家成员机构的书面许可。

ISO/IEC 11889-2:2015(E)

Figures

Figure 1 — Command

Format .................................................................................................................... 24

Figure 2 — Format-Zero Response Codes ................................................................................................. 30

Figure 3 — Format-One Response Codes ................................................................................................. 31

Figure 4 — ISO/IEC 11889 (first edition) TPM_NV_INDEX ..................................................................... 137

Figure 5 — ISO/IEC 11889 TPM_NV_INDEX .......................................................................................... 137

ISO/IEC 11889-2:2015(E)

Foreword

ISO (the International Organization for Standardization) and IEC (the International Electrotechnical

Commission) form the specialized system for worldwide standardization. National bodies that are

members of ISO or IEC participate in the development of International Standards through technical

committees established by the respective organization to deal with particular fields of technical activity.

ISO and IEC technical committees collaborate in fields of mutual interest. Other international

organizations, governmental and non-governmental, in liaison with ISO and IEC, also take part in the

work. In the field of information technology, ISO and IEC have established a joint technical committee,

ISO/IEC JTC 1.

The procedures used to develop this document and those intended for its further maintenance are

described in the ISO/IEC Directives, Part 1. In particular the different approval criteria needed for the

different types of document should be noted. This document was drafted in accordance with the editorial

rules of the ISO/IEC Directives, Part 2 (see www.iso.org/directives).

Attention is drawn to the possibility that some of the elements of this document may be the subject of

patent rights. ISO and IEC shall not be held responsible for identifying any or all such patent rights.

Details of any patent rights identified during the development of the document will be in the Introduction

and/or on the ISO list of patent declarations received (see www.iso.org/patents).

Any trade name used in this document is information given for the convenience of users and does not

constitute an endorsement.

For an explanation on the meaning of ISO specific terms and expressions related to conformity

assessment, as well as information about ISO's adherence to the WTO principles in the Technical

Barriers to Trade (TBT), see the following URL: Foreword — Supplementary information.

ISO/IEC 11889-2 was prepared by the Trusted Computing Group (TCG) and was adopted, under the

PAS procedure, by Joint Technical Committee ISO/IEC JTC 1, Information technology, in parallel with its

approval by national bodies of ISO and IEC.

This second edition cancels and replaces the first edition (ISO/IEC 11889-2:2009), which has been

technically revised.

ISO/IEC 11889 consists of the following parts, under the general title Information technology — Trusted

latform Module Library: P

art 1: Architecture  P

art 2: Structures



art 3: Commands



Part 4: Supporting routines

ISO/IEC 11889-2:2015(E)

Information technology — Trusted Platform Module Library —

Part 2: Structures

1 Scope

This part of ISO/IEC 11889 contains the definitions of the constants, flags, structure, and union definitions

used to communicate with the TPM. Values defined in this part of ISO/IEC 11889 are used by the TPM

commands defined in ISO/IEC 11899-3 and by the functions in ISO/IEC 11889-4.

NOTE The structures in this document are the canonical form of the structures on the interface. All structures

are "packed" with no octets of padding between structure elements. The TPM-internal form of the

structures is dependent on the processor and compiler for the TPM implementation.

2 Normative references

The following documents, in whole or in part, are normatively referenced in this document and are

indispensable for its application. For dated references, only the edition cited applies. For undated

references, the latest edition of the referenced document (including any amendments) applies.

 ISO/IEC 9797-2, Information technology -- Security techniques -- Message Authentication Codes

(MACs) -- Part 2: Mechanisms using a dedicated hash-function

 ISO/IEC 10116:2006, Information technology — Security techniques — Modes of operation for an n-

bit block cipher

 ISO/IEC 11889-1, Information technology — Trusted Platform Module Library — Part 1: Architecture

 ISO/IEC 11889-3, Information technology — Trusted Platform Module Library — Part 3: Commands

 ISO/IEC 11889-4, Information technology — Trusted Platform Module Library — Part 4: Supporting

routines

 TCG Algorithm Registry, available at

<http://www.trustedcomputinggroup.org/resources/tcg_algorithm_registry>

Terms and definitions

For the purposes of this part of ISO/IEC 11889, the terms and definitions given in ISO/IEC 11889-1 apply.

Symbols and abbreviated terms

For the purposes of this part of ISO/IEC 11889, the symbols and abbreviated terms given in

ISO/IEC 11889-1 apply.

Notation

5.1 Introduction

The information in this part of ISO/IEC 11889 is formatted so that it may be converted to standard

computer-language formats by an automated process. The purpose of this automated process is to

minimize the transcription errors that often occur during the conversion process.

For the purposes of this part of ISO/IEC 11889, the conventions given in ISO/IEC 11889-1 apply.

In addition, the conventions and notations in clause 5 describe the representation of various data so that

it is both human readable a

nd amenable to automated processing.

ISO/IEC 11889-2:2015(E)

When a table row contains the keyword “reserved” (all lower case) in columns 1 or 2, the tools will not

produce any values for the row in the table.

NOTE 1 In the examples in clause 5, the unmarshaling routines are shown as returning bool. In the code of the

reference implementation, the return value is a TPM_RC. A bool is used in the examples, because the

meaning of a TPM_RC is not yet defined.

NOTE 2 The unmarshaling code examples are the actual code that would be produced by the automatic code

generator used in the construction of the reference code. The actual code contains additional parameter

checking that is omitted for clarity of the principle being illustrated. Actual examples of the code are found

in ISO/IEC 11889-4.

5.2 Named Constants

A named constant is a numeric value to which a name has been assigned. In the C language, this is done

with a #define statement. In ISO/IEC 11889, a named constant is defined in a table that has a title that

starts with “Definition” and ends with “Constants.”

The table title will indicate the name of the class of constants that are being defined in the table. The title

will include the data type of the constants in parentheses.

The table in Example 1 names a collection of 16-bit constants and Example 2 shows the C code that

might be produced from that table by an automated process.

NOTE A named constant (#define) has no data type in C and an enumeration would be a better choice for

many of the defined constants. However, the C language does not allow an enumerated type to have a

storage type other than int so the method of using a combination of typedef and #define is used.

EXAMPLE 1

Table xx — Definition of (UINT16) COUNTING Constants

Parameter Value Description

first 1 decimal value is implicitly the size of the

second 0x0002 hex value will match the number of bits in the constant

third 3

fourth 0x0004

EXAMPLE 2

/* The C language equivalent of the constants from the table above */

typedef UINT16 COUNTING;

#define first 1

#define second 0x0002

#define third 3

#define fourth 0x0004

剩余177页未读，继续阅读

aaaMBWQ

粉丝: 0
资源: 26

ISO/IEC 11889-2:2015 - Trusted Platform Module Library, Part 2: ...

最新资源

ISO/IEC 11889-2:2015 - Trusted Platform Module Library, Part 2: ...

ISO_IEC_11889_2015.zip

ISO_IEC_11889-2_2015 TPM 2.0规范2015版第二部分

c066512_ISO_IEC_11889-3_2015.pdf

c066510_ISO_IEC_11889-1_2015.pdf

c066513_ISO_IEC_11889-4_2015.pdf

ISO-IEC-9899-2018-4.pdf.zip_ISO IEC 9899 2018_ISO/IEC 2018_ISO98

c060341_ISO_IEC_11179-5_2015.pdf

c061932_ISO_IEC_11179-1_2015.pdf

c069981_ISO_IEC_8825-7_2015.pdf

CStandard.zip_9899_IEC_ISO/IEC 9899_iso 9899_iso iec 9899 1990

最新资源