"TPM 软件栈技术规范 TSS版本1.2 Level 1详解"

需积分: 1 66 浏览量更新于2024-03-14 收藏 2.91MB PDF 举报

The TCG Software Stack (TSS) Specification Version 1.2 Level 1 document, also known as TSS_Version_1.2_Level_1_FINAL.pdf, provides detailed information on the TPM software stack technology. Published by the Trusted Computing Group, Incorporated on January 6, 2006, this specification outlines the commands, structures, and functionalities of the TSS at Level 1. The document serves as a comprehensive guide for developers and engineers working with Trusted Platform Modules (TPM). It covers key aspects of TPM software stack implementation, including command interfaces, data structures, and security protocols. It is important to note that the TCG Software Stack (TSS) Specification Version 1.2 Level 1 is provided "as is" with no warranties whatsoever. This includes any warranty of merchantability, noninfringement, fitness for a particular purpose, or any other warranty arising out of any proposal, specification, or sample. The Trusted Computing Group (TCG) explicitly disclaims all liability, including liability for infringement. Overall, the TSS_Version_1.2_Level_1_FINAL.pdf document is a vital resource for understanding and implementing TPM software stack technology. It provides a detailed framework for developing secure and reliable systems that leverage Trusted Platform Modules for enhanced security and integrity. Developers and engineers can use this specification to ensure that their TPM implementations adhere to industry standards and best practices.

TCG Software Stack (TSS) Specification Page 16

4.3.4.24 Time Stamping Function Definitions..................................................................................... 370

4.3.4.24.1 Tspi_TPM_ReadCurrentTicks.................................................................................... 370

4.3.4.24.2 Tspi_Hash_TickStampBlob........................................................................................ 371

4.3.4.25 DIR Commands.................................................................................................................... 372

4.3.4.25.1 Tspi_TPM_DirWrite.................................................................................................... 372

4.3.4.25.2 Tspi_TPM_DirRead.................................................................................................... 373

4.3.4.26 Tspi_NV Class Definition...................................................................................................... 374

4.3.4.26.1 Tspi_SetAttribUint32................................................................................................... 374

4.3.4.26.2 Tspi_GetAttribUint32.................................................................................................. 375

4.3.4.26.3 Tspi_SetAttribData...................................................................................................... 376

4.3.4.26.4 Tspi_GetAttribData..................................................................................................... 377

4.3.4.26.5 Tspi_NV_DefineSpace............................................................................................... 378

4.3.4.26.6 Tspi_NV_ReleaseSpace............................................................................................. 380

4.3.4.26.7 Tspi_NV_WriteValue.................................................................................................. 381

4.3.4.26.8 Tspi_NV_ReadValue.................................................................................................. 383

4.3.4.27 GPIO..................................................................................................................................... 384

4.3.4.28 Delegation TSPI functions.................................................................................................... 386

4.3.4.28.1 Tspi_SetAttribUint32................................................................................................... 386

4.3.4.28.2 Tspi_GetAttribUint32.................................................................................................. 388

4.3.4.28.3 Tspi_SetAttribData...................................................................................................... 389

4.3.4.28.4 Tspi_GetAttribData..................................................................................................... 390

4.3.4.28.5 Tspi_TPM_Delegate_AddFamily................................................................................ 391

4.3.4.28.6 Tspi_TPM_Delegate_GetFamily................................................................................. 392

4.3.4.28.7 Tspi_TPM_Delegate_InvalidateFamily....................................................................... 393

4.3.4.28.8 Tspi_TPM_Delegate_CreateDelegation..................................................................... 394

4.3.4.28.9 Tspi_TPM_Delegate_CacheOwnerDelegation........................................................... 396

4.3.4.28.10 Tspi_TPM_Delegate_UpdateVerificationCount........................................................ 398

4.3.4.28.11 Tspi_TPM_Delegate_VerifyDelegation..................................................................... 399

4.3.4.28.12 Tspi_TPM_Delegate_ReadTables............................................................................ 400

4.3.4.29 DAA Commands................................................................................................................... 402

4.3.4.29.1 Introduction................................................................................................................. 402

4.3.4.29.2 Components............................................................................................................... 402

4.3.4.30 DAA Protocols...................................................................................................................... 404

4.3.4.30.1 DAA Join..................................................................................................................... 404

4.3.4.30.2 Limitation.................................................................................................................... 406

4.3.4.30.3 DAA Sign.................................................................................................................... 408

4.3.4.30.4 Keys of DAA Issuer..................................................................................................... 409

4.3.4.30.5 Notation...................................................................................................................... 411

Version 1.2 Level 1 Jan 11, 2006 Copyright TCG 2006

TCG Software Stack (TSS) Specification

TCG Software Stack (TSS) Specification Page 17

4.3.4.30.6 Join Protocol............................................................................................................... 412

4.3.4.30.7 Sign Protocol.............................................................................................................. 412

4.3.4.30.8 Definitions................................................................................................................... 414

4.3.4.30.9 Lengths....................................................................................................................... 414

4.3.4.30.10 Input to hash functions.............................................................................................. 414

4.3.4.31 DAA Functions...................................................................................................................... 416

4.3.4.31.1 Tspi_SetAttribUint32................................................................................................... 416

4.3.4.31.2 Tspi_GetAttribUint32.................................................................................................. 417

4.3.4.31.3 Tspi_SetAttribData...................................................................................................... 418

4.3.4.31.4 Tspi_GetAttribData..................................................................................................... 419

4.3.4.31.5 Tspi_TPM_DAA_JoinInit............................................................................................. 420

4.3.4.31.6 Tspi_TPM_DAA_JoinCreateDaaPubKey.................................................................... 424

4.3.4.31.7 Tspi_TPM_DAA_JoinStoreCredential......................................................................... 429

4.3.4.31.8 Tspi_TPM_DAA_Sign................................................................................................. 431

4.3.4.31.9 Tspi_DAA_IssuerKeyVerification................................................................................ 438

4.3.4.31.10 Tspi_DAA_IssueSetup.............................................................................................. 441

4.3.4.31.11 Tspi_DAA_IssueInit.................................................................................................. 444

4.3.4.31.12 Tspi_DAA_IssueCredential....................................................................................... 447

4.3.4.31.13 Tspi_DAA_VerifyInit.................................................................................................. 451

4.3.4.31.14 Tspi_DAA_VerifySignature....................................................................................... 453

4.3.4.31.15 Tspi_DAA_RevokeSetup.......................................................................................... 458

4.3.4.31.16 Tspi_DAA_ARDecrypt.............................................................................................. 460

4.3.4.32 Audit Commands:................................................................................................................. 463

4.3.4.32.1 New Attribute Definitions for a TPM Object................................................................ 463

4.3.4.32.2 Tspi_SetAttribUint32................................................................................................... 464

4.3.4.32.3 Tspi_TPM_GetAuditDigest......................................................................................... 464

4.3.4.32.4 Tspi_TPM_SetOrdinalAuditStatus.............................................................................. 467

4.3.4.33 Callback Function Definitions................................................................................................ 468

4.3.4.33.1 Tspicb_CallbackHMACAuth....................................................................................... 468

4.3.4.33.2 Tspicb_CallbackXorEnc.............................................................................................. 471

4.3.4.33.3 Tspicb_CallbackTakeOwnership................................................................................ 474

4.3.4.33.4 Tspicb_CallbackSealxMask........................................................................................ 476

4.3.4.33.5 Tspicb_CallbackChangeAuthAsym............................................................................. 478

4.3.4.33.6 Tspicb_CollateIdentity................................................................................................ 480

4.3.4.33.7 Tspicb_ActivateIdentity............................................................................................... 482

4.3.4.33.8 Tspicb_DAA_Sign....................................................................................................... 483

4.3.4.33.9 Tspicb_DAA_VerifySignature..................................................................................... 485

4.3.4.34 Platform Class Command..................................................................................................... 488

Version 1.2 Level 1 Jan 11, 2006 Copyright TCG 2006

TCG Software Stack (TSS) Specification

TCG Software Stack (TSS) Specification Page 18

4.3.4.34.1 Tspi_TPM_ReturnPlatformClass................................................................................ 488

5. TCG Core Services (TCS)............................................................................................................................. 496

5.1 TCS Architecture and Interface Description............................................................................................ 496

5.1.1 TCS Memory Manager...................................................................................................................... 496

5.1.2 TCS Data Marshalling....................................................................................................................... 496

5.1.3 TCS Interface Dynamics................................................................................................................... 496

5.2 TCS-specific Return Code Defines......................................................................................................... 498

5.3 TSPI-specific Return code Rules............................................................................................................ 499

5.4 Structures and Definitions....................................................................................................................... 500

5.4.1 Data Types of the Tcsi...................................................................................................................... 500

5.4.2 TCS_LOADKEY_INFO..................................................................................................................... 500

5.5 TCS Context Manager............................................................................................................................ 501

5.5.1 TCS Context Manager Functions and Operations............................................................................ 501

5.5.2 TCS Context Manager Interface....................................................................................................... 502

5.5.2.1 Tcsi_OpenContext.................................................................................................................. 502

5.5.2.2 Tcsi_CloseContext.................................................................................................................. 503

5.5.2.3 Tcsi_FreeMemory................................................................................................................... 504

5.5.2.4 Tcsi_GetCapability.................................................................................................................. 505

5.6 TCS Key and Credential Manager.......................................................................................................... 507

5.6.1 TCS Key & Credential Manager Functions and Operations.............................................................. 507

5.6.1.1 TCS Key Manager.................................................................................................................. 507

5.6.1.2 TCS Key Cache Manager....................................................................................................... 508

5.6.1.3 TCS Credential Management................................................................................................. 510

5.6.2 TCS Key and Credential Manager Interface..................................................................................... 511

5.6.2.1 Interfaces................................................................................................................................ 511

5.6.2.2 Key Registration..................................................................................................................... 511

5.6.2.2.1 Tcsi_RegisterKey.......................................................................................................... 511

5.6.2.2.2 Tcsip_UnregisterKey.................................................................................................... 513

5.6.2.2.3 Tcsip_KeyControlOwner............................................................................................... 514

5.6.2.3 TCS Get Key Hierarchy Information....................................................................................... 516

5.6.2.3.1 Tcsi_EnumRegisteredKeys.......................................................................................... 516

5.6.2.3.2 Tcsi_GetRegisteredKey................................................................................................ 518

5.6.2.3.3 Tcsi_GetRegisteredKeyBlob......................................................................................... 519

5.6.2.3.4 Tcsip_GetRegisteredKeyByPublicInfo.......................................................................... 521

5.6.2.4 TCS Loading a Key................................................................................................................. 523

5.6.2.4.1 Tcsip_LoadKeyByBlob.................................................................................................. 523

5.6.2.4.2 Tcsip_LoadKeyByUUID................................................................................................ 526

5.6.2.4.3 Tcsip_EvictKey............................................................................................................. 529

Version 1.2 Level 1 Jan 11, 2006 Copyright TCG 2006

TCG Software Stack (TSS) Specification

TCG Software Stack (TSS) Specification Page 19

5.6.2.5 TCS Creating a Key................................................................................................................ 530

5.6.2.5.1 Tcsip_CreateWrapKey.................................................................................................. 530

5.6.2.6 TCS Working with Keys.......................................................................................................... 532

5.6.2.6.1 Tcsip_GetPubKey......................................................................................................... 532

5.6.2.6.2 Tcsip_OwnerReadInternalPub...................................................................................... 534

5.6.2.7 TCS Credential Management................................................................................................. 536

5.6.2.7.1 Tcsip_MakeIdentity....................................................................................................... 536

5.6.3 TCS Use Models............................................................................................................................... 539

5.6.3.1 TCS Load Key by UUID.......................................................................................................... 539

5.7 TCS Event Manager................................................................................................................................ 541

5.7.1 TCS Event Manager Functions and Operations................................................................................ 541

5.7.2 TCS Event Manager Interface.......................................................................................................... 541

5.7.2.1 TCS Event Manager Interface Structures and Definitions....................................................... 541

5.7.2.1.1 TCS The Event Log...................................................................................................... 541

5.7.2.2 TCS Event Manager Interface Functions................................................................................ 542

5.7.2.2.1 Tcsi_LogPcrEvent ........................................................................................................ 542

5.7.2.2.2 Tcsi_GetPcrEvent......................................................................................................... 544

5.7.2.2.3 Tcsi_GetPcrEventsByPcr............................................................................................. 546

5.7.2.2.4 Tcsi_GetPcrEventLog................................................................................................... 548

5.8 TCS TPM Parameter Block Generator................................................................................................... 550

5.8.1 TCS TPM Parameter Block Generator Functions and Operations.................................................... 550

5.8.2 TCS TPM Parameter Block Generator Interface............................................................................... 550

5.8.2.1 Functions................................................................................................................................ 550

5.8.2.2 TPM Ownership, Authorization, and Identity........................................................................... 552

5.8.2.2.1 Tcsip_SetOwnerInstall.................................................................................................. 552

5.8.2.2.2 Tcsip_TakeOwnership.................................................................................................. 553

5.8.2.2.3 Tcsip_OIAP.................................................................................................................. 556

5.8.2.2.4 Tcsip_OSAP................................................................................................................. 557

5.8.2.2.5 Tcsip_ChangeAuth....................................................................................................... 558

5.8.2.2.6 Tcsip_ChangeAuthOwner............................................................................................. 560

5.8.2.2.7 Tcsip_ChangeAuthAsymStart....................................................................................... 561

5.8.2.2.8 Tcsip_ChangeAuthAsymFinish..................................................................................... 564

5.8.2.2.9 Tcsip_TerminateHandle................................................................................................ 567

5.8.2.2.10 Tcsip_ActivateTPMIdentity......................................................................................... 568

5.8.2.3 TCS Context........................................................................................................................... 570

5.8.2.3.1 Tcsi_GetCapability (Versioning, Platform-Type)........................................................... 570

5.8.2.4 Transport Protection .............................................................................................................. 571

5.8.2.4.1 Tcsip_EstablishTransport............................................................................................. 571

TCG Software Stack (TSS) Specification

TCG Software Stack (TSS) Specification Page 20

5.8.2.4.2 Tcsip_ExecuteTransport............................................................................................... 574

5.8.2.4.3 Tcsip_ReleaseTransportSigned................................................................................... 577

5.8.2.5 TPM Mandatory...................................................................................................................... 579

5.8.2.5.1 Tcsip_Extend................................................................................................................ 579

5.8.2.5.2 Tcsip_PcrRead............................................................................................................. 581

5.8.2.5.3 Tcsip_Quote................................................................................................................. 582

5.8.2.5.4 Tcsip_Quote2............................................................................................................... 584

5.8.2.5.5 Tcsip_DirWriteAuth....................................................................................................... 587

5.8.2.6 Tcsip_DirRead........................................................................................................................ 588

5.8.2.6.1 Tcsip_Seal.................................................................................................................... 589

5.8.2.6.2 Tcsip_Unseal................................................................................................................ 591

5.8.2.6.3 Tcsip_UnBind............................................................................................................... 593

5.8.2.6.4 Tcsip_Sealx.................................................................................................................. 595

5.8.2.6.5 Tcsip_LoadKey2ByBlob................................................................................................ 597

5.8.2.6.6 Tcsip_CreateMigrationBlob.......................................................................................... 599

5.8.2.6.7 Tcsip_ConvertMigrationBlob......................................................................................... 601

5.8.2.6.8 Tcsip_AuthorizeMigrationKey....................................................................................... 603

5.8.2.6.9 Tcsip_SetOperatorAuth................................................................................................ 605

5.8.2.7 TPM Cryptographic Capabilities............................................................................................. 606

5.8.2.7.1 Tcsip_CertifyKey.......................................................................................................... 606

5.8.2.7.2 Tcsip_CertifyKey2......................................................................................................... 608

5.8.2.7.3 Tcsip_Sign.................................................................................................................... 610

5.8.2.7.4 Tcsip_GetRandom........................................................................................................ 611

5.8.2.7.5 Tcsip_StirRandom........................................................................................................ 612

5.8.2.7.6 Tcsip_GetCapability...................................................................................................... 613

5.8.2.7.7 Tcsip_GetCapabilitySigned.......................................................................................... 615

5.8.2.7.8 Tcsip_GetCapabilityOwner........................................................................................... 618

5.8.2.7.9 Tcsip_CreateEndorsementKeyPair............................................................................... 619

5.8.2.7.10 Tcsip_ReadPubek...................................................................................................... 621

5.8.2.7.11 Tcsip_DisablePubekRead.......................................................................................... 622

5.8.2.7.12 Tcsip_OwnerReadPubek............................................................................................ 623

5.8.2.8 TPM Self-Test and Management............................................................................................ 624

5.8.2.8.1 Tcsip_SelfTestFull........................................................................................................ 624

5.8.2.8.2 Tcsip_CertifySelfTest.................................................................................................... 625

5.8.2.8.3 Tcsip_ContinueSelfTest................................................................................................ 627

5.8.2.8.4 Tcsip_GetTestResult.................................................................................................... 628

5.8.2.8.5 Tcsip_OwnerSetDisable............................................................................................... 629

5.8.2.8.6 Tcsip_OwnerClear........................................................................................................ 630

TCG Software Stack (TSS) Specification

剩余741页未读，继续阅读

书香度年华

粉丝: 1w+
资源: 383

"TPM 软件栈技术规范 TSS版本1.2 Level 1详解"

SSL TSL证书1.2版本升级.zip

undefined symbol: PyThread_tss_get

怎样解压缩mm10.tss.bed.gz这个文件?

CLion使用tpm2-tss

关键字 为什么这个jstree不在jsitem里

对源码tpm2-tss-3.2.x\test\integration目录下的main-fapi.c进行调试分析，熟悉TSS FAPI层的基本开发流程

查询menu表中的client_id=TSS的menu_id，再通过上面查到过的menu_id查询role表中的role_id

tspl中text能使用什么font

最新资源

关键字

{{tss.key.slice(0,4)}}年({{tss.doc_count}})

为什么这个jstree不在jsitem里