TPM2.0协议详解：架构与Level00Revision01.16介绍

2星需积分: 50 60 浏览量更新于2024-07-21 1 收藏 3.27MB PDF 举报

TPM2.0是Trusted Platform Module (TPM) 的第二代标准，它定义了一个安全平台的基础架构，旨在增强设备的安全性和可信度。该协议的"Part1: Architecture Family '2.0'"文档，发布于2014年10月30日，Level 00 Revision 1.16，由Trusted Computing Group (TCG) 发布并维护。这份文档的重要性在于它提供了对TPM核心组件的深入理解，包括硬件、软件接口以及安全功能的详细规格。在该文档中，首先明确了版权许可，用户被赋予全球范围内无限制、非独家、免版税的版权许可，允许他们复制、创建衍生作品、分发、展示和执行源代码（SourceCode），以及向其他人转让这些权利。对于文档中的其他部分，除了源代码，用户则被授权仅限于基于这些文档开发产品的目的进行复制、分发、展示和执行。源代码的分发条件要求在任何重新分发时必须保留上述版权许可声明、条件列表，以及以下规定：重新分发的源代码必须保持原作者的原始授权，不得用于商业用途之外的目的，且不得对原始许可条款进行修改或限制。 TPM2.0 Architecture Family 2.0定义了几个关键层次，包括基础架构层、命令接口层、测量逻辑层和固件管理器等。它关注的核心功能包括设备固件的保护、平台信息的可信度验证、加密存储和密钥管理，以及对敏感操作的审计和记录。此外，它还强调了与操作系统和其他硬件组件的交互，以确保整个系统环境的安全性。对于学习和实践TPM2.0的开发者和安全专业人员来说，理解这份协议至关重要，因为它为实现安全平台和实现安全相关的功能提供了一套标准化指南。通过遵循TPM2.0规范，制造商和用户可以确保设备之间的互操作性和长期的安全性，这对于云计算、物联网（IoT）和数据中心安全等领域具有重要意义。

Part 1: Architecture Trusted Platform Module Library

Family “2.0” TCG Published Page 1

Trusted Platform Module Library

Part 1: Architecture

1 Scope

This specification defines the Trusted Platform Module (TPM) a device that enables trust in computing

platforms in general. It is broken into parts to make the role of each part clear. All parts are required in

order to constitute a complete standard

For a complete definition of all requirements necessary to build a TPM, the designer will need to use the

appropriate platform-specific specification to understand all of the requirements for a TPM in a specific

application or make appropriate choices as an implementer.

Those wishing to create a TPM need to be aware that this specification does not provide a complete

picture of the options and commands necessary to implement a TPM. To implement a TPM the designer

needs to refer to the relevant platform-specific specification to understand the options and settings

required for a TPM in a specific type of platform or make appropriate choices as an implementer.

EXAMPLE The number of platform configuration registers and their attributes are not defined in this

specification. Those values would be specified by a platform specific specification or alternatively

determined by an implementer.

1.1 Change History

Revision 98 1.1.1

Fixed buffer overrun problem

Added parameter to MemoryMove(), MemoryCopy(), and MemoryConcat() to make sure that the data

being moved will fix into the receiving buffer

Change the size of local 2B buffers so that they are sized to the sum of the sizes of the elements rather

than any other mathematical construct. This forces the size of the local buffer to track any changes to the

sizes of the input components rather than have some assumed relationship.

Made multiple changes to code to eliminate “dead” code (code that could not be reached by any

perturbation of the inputs).

Removed the “+” from the handle parameter in TPM2_HMAC_Start().

Changed TPM_RC_BAD_TAG to 0x01e so that its value would match TPM_BADTAG from 1.2

Changed reference implementation so that it would only allow use of default exponent for creation of RSA

keys. It will allow other exponents for imported keys.

Changed _cpri__GenerateKeyRSA() in CpriRSA.c so that it no longer reads outside the bounds of an

array when getting a value to use for encrypting/decrypting with a key, generated from a seed.

Removed TPM_NV_INDEX entity name space.

Authorization check includes locality.

Trusted Platform Module Library Part 1: Architecture

Page 4 TCG Published Family “2.0”

TPM 2.0 Part 1: Architecture

TPM 2.0 Part 1 contains a narrative description of the properties, functions, and methods of a TPM.

Unless otherwise noted, this narrative description is informative. TPM 2.0 Part 1 contains descriptions of

some of the data manipulation routines that are used by this specification. The normative behavior for

these routines is in C code in TPM 2.0 Part 3 and TPM 2.0 Part 4. Algorithms and processes described in

this TPM 2.0 Part 1 may be made normative by reference from TPM 2.0 Part 2, TPM 2.0 Part 3, or TPM

2.0 Part 4.

TPM 2.0 Part 2: Structures

TPM 2.0 Part 2 contains a normative description of the constants, data types, structures, and unions for

the TPM interface. Unless otherwise noted: (1) all tables and C code in TPM 2.0 Part 2 are normative,

and (2) normative content in TPM 2.0 Part 2 takes precedence over any other part of this specification.

TPM 2.0 Part 3: Commands

TPM 2.0 Part 3 contains: (1) a normative description of commands, (2) tables describing the command

and response formats, and (3) C code that illustrates the actions performed by a TPM. Within TPM 2.0

Part 3, command and response tables have the highest precedence, followed by the C code, followed by

the narrative description of the command. TPM 2.0 Part 3 is subordinate to TPM 2.0 Part 2.

A TPM need not be implemented using the C code in TPM 2.0 Part 3. However, any implementation

should provide equivalent or, in most cases, identical results as observed at the TPM interface or

demonstrated through evaluation.

TPM 2.0 Part 4: Supporting Routines

TPM 2.0 Part 4 presents C code that describes the algorithms and methods used by the command code

in TPM 2.0 Part 3. The code in TPM 2.0 Part 4 augments Parts 2 and 3 to provide a complete description

of a TPM, including the supporting framework for the code that performs the command actions.

Any TPM 2.0 Part 4 code may be replaced by code that provides similar results when interfacing to the

action code in TPM 2.0 Part 3. The behavior of TPM 2.0 Part 4 code not included in an annex is

normative, as observed at the interfaces with TPM 2.0 Part 3 code. Code in an annex is provided for

completeness, that is, to allow a full implementation of the specification.

NOTE This specification does not provide code for lower-level cryptographic algorithms and use of external

libraries is required for a complete implementation.

Extensive modification of the code provided in TPM 2.0 Part 4 annexes is expected for any TPM

implementation. Modifications are required in order to interface the TPM code with actual TPM hardware

rather than the simulation framework provided. In addition, modifications of the code in TPM 2.0 Part 4

annexes would be necessary in order to meet the needs of applicable evaluation regimes.

剩余268页未读，继续阅读

旭日霞光

粉丝: 2
资源: 5

TPM2.0协议详解：架构与Level00Revision01.16介绍

TPM2.0.rar

X1 TPM驱动

TPM 2.0 Main part 2

TPM2.0 Architecture

基于Duplication_Authority的TPM2.0密钥迁移协议.pdf

TPM2.0 Structures part2

tpm2.0规范 草案 体系结构介绍

TCG TPM2.0 安全模块架构规范

linux tpm2.0 设备通信样例

如何学习TPM2.0标准？

最新资源

tpm2.0规范草案体系结构介绍