没有合适的资源?快使用搜索试试~ 我知道了~
首页可信计算组TSS1.2规范详解
可信计算组TSS1.2规范详解
![](https://csdnimg.cn/release/wenkucmsfe/public/img/starY.0159711c.png)
"TSS1.2规范是一个由Trusted Computing Group (TCG)发布的软件栈规范,旨在为初学者提供可信计算领域的基础知识。该规范的版本为1.2,主要内容包括命令和结构,适用于2006年1月6日。TSS是可信平台模块(Trusted Platform Module, TPM)相关软件栈的一部分,用于确保计算设备的安全性和可靠性。"
在可信计算领域,TSS1.2规范扮演着关键角色,它定义了如何与TPM硬件交互的一系列标准和接口。TPM是一种安全芯片,能够存储加密密钥、验证系统的完整性,并协助执行安全操作。TSS1.2中的"Level 1 Part 1: Commands and Structures"部分详细说明了这些命令和结构,使得开发者可以构建与TPM兼容的应用程序和服务。
规范的这一部分涵盖了以下几个核心知识点:
1. **命令接口**:TSS1.2详细定义了如何向TPM发送命令并接收响应。这些命令涵盖了各种安全功能,如密钥生成、签名和验证、哈希计算等。
2. **数据结构**:规范中包含了各种数据结构的定义,这些结构用于封装命令参数和响应数据。理解这些结构对于正确地与TPM通信至关重要。
3. **安全协议**:TSS1.2还定义了如何安全地使用TPM,包括如何保护敏感数据的传输、防止中间人攻击和确保TPM的隐私。
4. **平台配置注册(PCR)**:PCR是TPM中用于存储系统状态信息(如固件、操作系统加载器等)的寄存器。TSS1.2描述了如何利用PCR进行完整性测量,以验证系统的完整性。
5. **认证和密钥管理**:TSS规范提供了认证过程和密钥管理机制,使得只有经过授权的实体才能访问TPM的资源。
6. **错误处理**:规范还详细规定了当命令执行失败时的错误报告和处理机制,这有助于开发者调试和优化代码。
虽然TSS1.2提供了使用TPM的框架,但需要注意的是,TCG在提供此规范时明确声明不承担任何责任,包括但不限于对使用该规范或基于该规范实现的产品可能引发的侵权责任、损失或损害。此外,TSS1.2并未授予任何知识产权许可,除非TCG明确表示授予。
TSS1.2规范是理解和开发基于TPM的可信计算应用的基础,它为系统安全性和完整性提供了坚实的基础。对于希望深入研究可信计算、安全硬件和密码学应用的开发者来说,这是一个非常有价值的参考资料。
![](https://csdnimg.cn/release/download_crawler_static/4704274/bg10.jpg)
TCG Software Stack (TSS) Specification Page 16
4.3.4.24 Time Stamping Function Definitions..................................................................................... 370
4.3.4.24.1 Tspi_TPM_ReadCurrentTicks.................................................................................... 370
4.3.4.24.2 Tspi_Hash_TickStampBlob........................................................................................ 371
4.3.4.25 DIR Commands.................................................................................................................... 372
4.3.4.25.1 Tspi_TPM_DirWrite.................................................................................................... 372
4.3.4.25.2 Tspi_TPM_DirRead.................................................................................................... 373
4.3.4.26 Tspi_NV Class Definition...................................................................................................... 374
4.3.4.26.1 Tspi_SetAttribUint32................................................................................................... 374
4.3.4.26.2 Tspi_GetAttribUint32.................................................................................................. 375
4.3.4.26.3 Tspi_SetAttribData...................................................................................................... 376
4.3.4.26.4 Tspi_GetAttribData..................................................................................................... 377
4.3.4.26.5 Tspi_NV_DefineSpace............................................................................................... 378
4.3.4.26.6 Tspi_NV_ReleaseSpace............................................................................................. 380
4.3.4.26.7 Tspi_NV_WriteValue.................................................................................................. 381
4.3.4.26.8 Tspi_NV_ReadValue.................................................................................................. 383
4.3.4.27 GPIO..................................................................................................................................... 384
4.3.4.28 Delegation TSPI functions.................................................................................................... 386
4.3.4.28.1 Tspi_SetAttribUint32................................................................................................... 386
4.3.4.28.2 Tspi_GetAttribUint32.................................................................................................. 388
4.3.4.28.3 Tspi_SetAttribData...................................................................................................... 389
4.3.4.28.4 Tspi_GetAttribData..................................................................................................... 390
4.3.4.28.5 Tspi_TPM_Delegate_AddFamily................................................................................ 391
4.3.4.28.6 Tspi_TPM_Delegate_GetFamily................................................................................. 392
4.3.4.28.7 Tspi_TPM_Delegate_InvalidateFamily....................................................................... 393
4.3.4.28.8 Tspi_TPM_Delegate_CreateDelegation..................................................................... 394
4.3.4.28.9 Tspi_TPM_Delegate_CacheOwnerDelegation........................................................... 396
4.3.4.28.10 Tspi_TPM_Delegate_UpdateVerificationCount........................................................ 398
4.3.4.28.11 Tspi_TPM_Delegate_VerifyDelegation..................................................................... 399
4.3.4.28.12 Tspi_TPM_Delegate_ReadTables............................................................................ 400
4.3.4.29 DAA Commands................................................................................................................... 402
4.3.4.29.1 Introduction................................................................................................................. 402
4.3.4.29.2 Components............................................................................................................... 402
4.3.4.30 DAA Protocols...................................................................................................................... 404
4.3.4.30.1 DAA Join..................................................................................................................... 404
4.3.4.30.2 Limitation.................................................................................................................... 406
4.3.4.30.3 DAA Sign.................................................................................................................... 408
4.3.4.30.4 Keys of DAA Issuer..................................................................................................... 409
4.3.4.30.5 Notation...................................................................................................................... 411
Version 1.2 Level 1 Jan 11, 2006 Copyright TCG 2006
TCG Software Stack (TSS) Specification
![](https://csdnimg.cn/release/download_crawler_static/4704274/bg11.jpg)
TCG Software Stack (TSS) Specification Page 17
4.3.4.30.6 Join Protocol............................................................................................................... 412
4.3.4.30.7 Sign Protocol.............................................................................................................. 412
4.3.4.30.8 Definitions................................................................................................................... 414
4.3.4.30.9 Lengths....................................................................................................................... 414
4.3.4.30.10 Input to hash functions.............................................................................................. 414
4.3.4.31 DAA Functions...................................................................................................................... 416
4.3.4.31.1 Tspi_SetAttribUint32................................................................................................... 416
4.3.4.31.2 Tspi_GetAttribUint32.................................................................................................. 417
4.3.4.31.3 Tspi_SetAttribData...................................................................................................... 418
4.3.4.31.4 Tspi_GetAttribData..................................................................................................... 419
4.3.4.31.5 Tspi_TPM_DAA_JoinInit............................................................................................. 420
4.3.4.31.6 Tspi_TPM_DAA_JoinCreateDaaPubKey.................................................................... 424
4.3.4.31.7 Tspi_TPM_DAA_JoinStoreCredential......................................................................... 429
4.3.4.31.8 Tspi_TPM_DAA_Sign................................................................................................. 431
4.3.4.31.9 Tspi_DAA_IssuerKeyVerification................................................................................ 438
4.3.4.31.10 Tspi_DAA_IssueSetup.............................................................................................. 441
4.3.4.31.11 Tspi_DAA_IssueInit.................................................................................................. 444
4.3.4.31.12 Tspi_DAA_IssueCredential....................................................................................... 447
4.3.4.31.13 Tspi_DAA_VerifyInit.................................................................................................. 451
4.3.4.31.14 Tspi_DAA_VerifySignature....................................................................................... 453
4.3.4.31.15 Tspi_DAA_RevokeSetup.......................................................................................... 458
4.3.4.31.16 Tspi_DAA_ARDecrypt.............................................................................................. 460
4.3.4.32 Audit Commands:................................................................................................................. 463
4.3.4.32.1 New Attribute Definitions for a TPM Object................................................................ 463
4.3.4.32.2 Tspi_SetAttribUint32................................................................................................... 464
4.3.4.32.3 Tspi_TPM_GetAuditDigest......................................................................................... 464
4.3.4.32.4 Tspi_TPM_SetOrdinalAuditStatus.............................................................................. 467
4.3.4.33 Callback Function Definitions................................................................................................ 468
4.3.4.33.1 Tspicb_CallbackHMACAuth....................................................................................... 468
4.3.4.33.2 Tspicb_CallbackXorEnc.............................................................................................. 471
4.3.4.33.3 Tspicb_CallbackTakeOwnership................................................................................ 474
4.3.4.33.4 Tspicb_CallbackSealxMask........................................................................................ 476
4.3.4.33.5 Tspicb_CallbackChangeAuthAsym............................................................................. 478
4.3.4.33.6 Tspicb_CollateIdentity................................................................................................ 480
4.3.4.33.7 Tspicb_ActivateIdentity............................................................................................... 482
4.3.4.33.8 Tspicb_DAA_Sign....................................................................................................... 483
4.3.4.33.9 Tspicb_DAA_VerifySignature..................................................................................... 485
4.3.4.34 Platform Class Command..................................................................................................... 488
Version 1.2 Level 1 Jan 11, 2006 Copyright TCG 2006
TCG Software Stack (TSS) Specification
![](https://csdnimg.cn/release/download_crawler_static/4704274/bg12.jpg)
TCG Software Stack (TSS) Specification Page 18
4.3.4.34.1 Tspi_TPM_ReturnPlatformClass................................................................................ 488
5. TCG Core Services (TCS)............................................................................................................................. 496
5.1 TCS Architecture and Interface Description............................................................................................ 496
5.1.1 TCS Memory Manager...................................................................................................................... 496
5.1.2 TCS Data Marshalling....................................................................................................................... 496
5.1.3 TCS Interface Dynamics................................................................................................................... 496
5.2 TCS-specific Return Code Defines......................................................................................................... 498
5.3 TSPI-specific Return code Rules............................................................................................................ 499
5.4 Structures and Definitions....................................................................................................................... 500
5.4.1 Data Types of the Tcsi...................................................................................................................... 500
5.4.2 TCS_LOADKEY_INFO..................................................................................................................... 500
5.5 TCS Context Manager............................................................................................................................ 501
5.5.1 TCS Context Manager Functions and Operations............................................................................ 501
5.5.2 TCS Context Manager Interface....................................................................................................... 502
5.5.2.1 Tcsi_OpenContext.................................................................................................................. 502
5.5.2.2 Tcsi_CloseContext.................................................................................................................. 503
5.5.2.3 Tcsi_FreeMemory................................................................................................................... 504
5.5.2.4 Tcsi_GetCapability.................................................................................................................. 505
5.6 TCS Key and Credential Manager.......................................................................................................... 507
5.6.1 TCS Key & Credential Manager Functions and Operations.............................................................. 507
5.6.1.1 TCS Key Manager.................................................................................................................. 507
5.6.1.2 TCS Key Cache Manager....................................................................................................... 508
5.6.1.3 TCS Credential Management................................................................................................. 510
5.6.2 TCS Key and Credential Manager Interface..................................................................................... 511
5.6.2.1 Interfaces................................................................................................................................ 511
5.6.2.2 Key Registration..................................................................................................................... 511
5.6.2.2.1 Tcsi_RegisterKey.......................................................................................................... 511
5.6.2.2.2 Tcsip_UnregisterKey.................................................................................................... 513
5.6.2.2.3 Tcsip_KeyControlOwner............................................................................................... 514
5.6.2.3 TCS Get Key Hierarchy Information....................................................................................... 516
5.6.2.3.1 Tcsi_EnumRegisteredKeys.......................................................................................... 516
5.6.2.3.2 Tcsi_GetRegisteredKey................................................................................................ 518
5.6.2.3.3 Tcsi_GetRegisteredKeyBlob......................................................................................... 519
5.6.2.3.4 Tcsip_GetRegisteredKeyByPublicInfo.......................................................................... 521
5.6.2.4 TCS Loading a Key................................................................................................................. 523
5.6.2.4.1 Tcsip_LoadKeyByBlob.................................................................................................. 523
5.6.2.4.2 Tcsip_LoadKeyByUUID................................................................................................ 526
5.6.2.4.3 Tcsip_EvictKey............................................................................................................. 529
Version 1.2 Level 1 Jan 11, 2006 Copyright TCG 2006
TCG Software Stack (TSS) Specification
![](https://csdnimg.cn/release/download_crawler_static/4704274/bg13.jpg)
TCG Software Stack (TSS) Specification Page 19
5.6.2.5 TCS Creating a Key................................................................................................................ 530
5.6.2.5.1 Tcsip_CreateWrapKey.................................................................................................. 530
5.6.2.6 TCS Working with Keys.......................................................................................................... 532
5.6.2.6.1 Tcsip_GetPubKey......................................................................................................... 532
5.6.2.6.2 Tcsip_OwnerReadInternalPub...................................................................................... 534
5.6.2.7 TCS Credential Management................................................................................................. 536
5.6.2.7.1 Tcsip_MakeIdentity....................................................................................................... 536
5.6.3 TCS Use Models............................................................................................................................... 539
5.6.3.1 TCS Load Key by UUID.......................................................................................................... 539
5.7 TCS Event Manager................................................................................................................................ 541
5.7.1 TCS Event Manager Functions and Operations................................................................................ 541
5.7.2 TCS Event Manager Interface.......................................................................................................... 541
5.7.2.1 TCS Event Manager Interface Structures and Definitions....................................................... 541
5.7.2.1.1 TCS The Event Log...................................................................................................... 541
5.7.2.2 TCS Event Manager Interface Functions................................................................................ 542
5.7.2.2.1 Tcsi_LogPcrEvent ........................................................................................................ 542
5.7.2.2.2 Tcsi_GetPcrEvent......................................................................................................... 544
5.7.2.2.3 Tcsi_GetPcrEventsByPcr............................................................................................. 546
5.7.2.2.4 Tcsi_GetPcrEventLog................................................................................................... 548
5.8 TCS TPM Parameter Block Generator................................................................................................... 550
5.8.1 TCS TPM Parameter Block Generator Functions and Operations.................................................... 550
5.8.2 TCS TPM Parameter Block Generator Interface............................................................................... 550
5.8.2.1 Functions................................................................................................................................ 550
5.8.2.2 TPM Ownership, Authorization, and Identity........................................................................... 552
5.8.2.2.1 Tcsip_SetOwnerInstall.................................................................................................. 552
5.8.2.2.2 Tcsip_TakeOwnership.................................................................................................. 553
5.8.2.2.3 Tcsip_OIAP.................................................................................................................. 556
5.8.2.2.4 Tcsip_OSAP................................................................................................................. 557
5.8.2.2.5 Tcsip_ChangeAuth....................................................................................................... 558
5.8.2.2.6 Tcsip_ChangeAuthOwner............................................................................................. 560
5.8.2.2.7 Tcsip_ChangeAuthAsymStart....................................................................................... 561
5.8.2.2.8 Tcsip_ChangeAuthAsymFinish..................................................................................... 564
5.8.2.2.9 Tcsip_TerminateHandle................................................................................................ 567
5.8.2.2.10 Tcsip_ActivateTPMIdentity......................................................................................... 568
5.8.2.3 TCS Context........................................................................................................................... 570
5.8.2.3.1 Tcsi_GetCapability (Versioning, Platform-Type)........................................................... 570
5.8.2.4 Transport Protection .............................................................................................................. 571
5.8.2.4.1 Tcsip_EstablishTransport............................................................................................. 571
Version 1.2 Level 1 Jan 11, 2006 Copyright TCG 2006
TCG Software Stack (TSS) Specification
![](https://csdnimg.cn/release/download_crawler_static/4704274/bg14.jpg)
TCG Software Stack (TSS) Specification Page 20
5.8.2.4.2 Tcsip_ExecuteTransport............................................................................................... 574
5.8.2.4.3 Tcsip_ReleaseTransportSigned................................................................................... 577
5.8.2.5 TPM Mandatory...................................................................................................................... 579
5.8.2.5.1 Tcsip_Extend................................................................................................................ 579
5.8.2.5.2 Tcsip_PcrRead............................................................................................................. 581
5.8.2.5.3 Tcsip_Quote................................................................................................................. 582
5.8.2.5.4 Tcsip_Quote2............................................................................................................... 584
5.8.2.5.5 Tcsip_DirWriteAuth....................................................................................................... 587
5.8.2.6 Tcsip_DirRead........................................................................................................................ 588
5.8.2.6.1 Tcsip_Seal.................................................................................................................... 589
5.8.2.6.2 Tcsip_Unseal................................................................................................................ 591
5.8.2.6.3 Tcsip_UnBind............................................................................................................... 593
5.8.2.6.4 Tcsip_Sealx.................................................................................................................. 595
5.8.2.6.5 Tcsip_LoadKey2ByBlob................................................................................................ 597
5.8.2.6.6 Tcsip_CreateMigrationBlob.......................................................................................... 599
5.8.2.6.7 Tcsip_ConvertMigrationBlob......................................................................................... 601
5.8.2.6.8 Tcsip_AuthorizeMigrationKey....................................................................................... 603
5.8.2.6.9 Tcsip_SetOperatorAuth................................................................................................ 605
5.8.2.7 TPM Cryptographic Capabilities............................................................................................. 606
5.8.2.7.1 Tcsip_CertifyKey.......................................................................................................... 606
5.8.2.7.2 Tcsip_CertifyKey2......................................................................................................... 608
5.8.2.7.3 Tcsip_Sign.................................................................................................................... 610
5.8.2.7.4 Tcsip_GetRandom........................................................................................................ 611
5.8.2.7.5 Tcsip_StirRandom........................................................................................................ 612
5.8.2.7.6 Tcsip_GetCapability...................................................................................................... 613
5.8.2.7.7 Tcsip_GetCapabilitySigned.......................................................................................... 615
5.8.2.7.8 Tcsip_GetCapabilityOwner........................................................................................... 618
5.8.2.7.9 Tcsip_CreateEndorsementKeyPair............................................................................... 619
5.8.2.7.10 Tcsip_ReadPubek...................................................................................................... 621
5.8.2.7.11 Tcsip_DisablePubekRead.......................................................................................... 622
5.8.2.7.12 Tcsip_OwnerReadPubek............................................................................................ 623
5.8.2.8 TPM Self-Test and Management............................................................................................ 624
5.8.2.8.1 Tcsip_SelfTestFull........................................................................................................ 624
5.8.2.8.2 Tcsip_CertifySelfTest.................................................................................................... 625
5.8.2.8.3 Tcsip_ContinueSelfTest................................................................................................ 627
5.8.2.8.4 Tcsip_GetTestResult.................................................................................................... 628
5.8.2.8.5 Tcsip_OwnerSetDisable............................................................................................... 629
5.8.2.8.6 Tcsip_OwnerClear........................................................................................................ 630
Version 1.2 Level 1 Jan 11, 2006 Copyright TCG 2006
TCG Software Stack (TSS) Specification
剩余741页未读,继续阅读
2023-07-21 上传
2020-09-08 上传
2021-10-04 上传
2023-06-01 上传
2023-05-27 上传
2023-05-31 上传
2023-04-03 上传
2023-07-07 上传
2023-11-22 上传
![](https://profile-avatar.csdnimg.cn/7471f76224a24916a055138fbbf3eeb0_zdpeter.jpg!1)
zdpeter
- 粉丝: 0
- 资源: 2
上传资源 快速赚钱
我的内容管理 展开
我的资源 快来上传第一个资源
我的收益
登录查看自己的收益我的积分 登录查看自己的积分
我的C币 登录后查看C币余额
我的收藏
我的下载
下载帮助
![](https://csdnimg.cn/release/wenkucmsfe/public/img/voice.245cc511.png)
最新资源
- Hadoop生态系统与MapReduce详解
- MDS系列三相整流桥模块技术规格与特性
- MFC编程:指针与句柄获取全面解析
- LM06:多模4G高速数据模块,支持GSM至TD-LTE
- 使用Gradle与Nexus构建私有仓库
- JAVA编程规范指南:命名规则与文件样式
- EMC VNX5500 存储系统日常维护指南
- 大数据驱动的互联网用户体验深度管理策略
- 改进型Booth算法:32位浮点阵列乘法器的高速设计与算法比较
- H3CNE网络认证重点知识整理
- Linux环境下MongoDB的详细安装教程
- 压缩文法的等价变换与多余规则删除
- BRMS入门指南:JBOSS安装与基础操作详解
- Win7环境下Android开发环境配置全攻略
- SHT10 C语言程序与LCD1602显示实例及精度校准
- 反垃圾邮件技术:现状与前景
安全验证
文档复制为VIP权益,开通VIP直接复制
![](https://csdnimg.cn/release/wenkucmsfe/public/img/green-success.6a4acb44.png)