理解TPM2.0结构：编码关键点解析

需积分: 10 136 浏览量更新于2024-07-18 收藏 1.34MB PDF 举报

"TPM2.0 Structures part2 深入探讨了TPM2.0的结构定义，对编程工作具有很高的实用价值。" TPM2.0（Trusted Platform Module 2.0）是可信计算组（Trusted Computing Group, TCG）发布的一种安全芯片标准，它为计算机系统提供了安全基础，支持各种安全功能，如密钥存储、数字签名、加密和平台完整性度量。这部分内容主要聚焦于TPM2.0的结构设计，涵盖了各种数据结构和接口，这些对于理解和实现与TPM2.0兼容的软件至关重要。在"Family ‘2.0’ Level 00 Revision 01.38"的版本中，TPM2.0 Structures详细定义了TPM的内部组件、命令和响应的结构，以及如何与主机系统交互。该文档的日期为2016年9月29日，表明这是当时最新的规范。在TPM2.0的结构中，有几个核心概念： 1. TPM对象：包括存储密钥、证书和其他安全实体的结构。例如，NV存储区可以持久保存数据，而荷载（Payload）则包含执行命令或响应的数据。 2. 命令和响应：TPM与主机间的通信通过一系列命令和响应进行，每个命令和响应都由特定的结构体定义，包含了命令代码、参数和返回值。 3. PCR（Platform Configuration Registers）：用于存储平台状态的哈希，反映了系统的固件更新和硬件变更，是平台完整性度量的关键组成部分。 4. TPM命令和状态：TPM支持多种安全操作，如生成密钥、加密解密、签名验签等，每个命令都有其特定的输入输出参数和执行状态。 5. ESYS_TR：在软件层面上，ESYS_TR（Esys Trusted Reference）是一种抽象，代表了TPM中的一个资源，如对象、会话或NV存储区，用于管理TPM操作。 TPM2.0 Structures文档详细规定了这些结构的布局、大小和填充规则，以便开发者能够正确地创建和解析与TPM交互所需的软件。在开发过程中，遵守这些结构定义可以确保软件与不同制造商的TPM2.0芯片兼容，并且能正确执行安全操作。源代码分发条件部分强调了版权许可条款，允许用户复制、创建衍生作品、分发、显示和执行源代码，并向其他人授予相同权利。但同时要求在重新分发源代码时保留原有的版权许可信息，遵守相关条件。 TPM2.0 Structures part2提供了理解TPM2.0功能和实现所需的基础知识，对于开发安全相关的应用程序和驱动程序尤其重要。它详细定义了TPM与系统软件交互的方式，有助于确保软件的互操作性和安全性。

Part 2: Structures Trusted Platform Module Library

Family “2.0” TCG Published Page xvi

Figures

Figure 1 — Command Format .................................................................................................................... 29

Figure 2 — Format-Zero Response Codes ................................................................................................. 35

Figure 3 — Format-One Response Codes ................................................................................................. 35

Figure 4 — TPM 1.2 TPM_NV_INDEX ..................................................................................................... 140

Figure 5 — TPM 2.0 TPM_NV_INDEX ..................................................................................................... 140

Part 2: Structures Trusted Platform Module Library

Family “2.0” TCG Published Page 1

Trusted Platform Module Library

Part 2: Structures

1 Scope

This part of the Trusted Platform Module Library specification contains the definitions of the constants,

flags, structure, and union definitions used to communicate with the TPM. Values defined in this

document are used by the TPM commands defined in TPM 2.0 Part 3: Commands and by the functions in

TPM 2.0 Part 4: Supporting Routines.

NOTE The structures in this document are the canonical form of the structures on the interface. All structures

are "packed" with no octets of padding between structure elements. The TPM-internal form of the

structures is dependent on the processor and compiler for the TPM implementation.

2 Terms and definitions

For the purposes of this document, the terms and definitions given in TPM 2.0 Part 1 apply.

Symbols and abbreviated terms

For the purposes of this document, the symbols and abbreviated terms given in TPM 2.0 Part 1 apply.

Notation

4.1 Introduction

The information in this document is formatted so that it may be converted to standard computer-language

formats by an automated process. The purpose of this automated process is to minimize the transcription

errors that often occur during the conversion process.

For the purposes of this document, the conventions given in TPM 2.0 Part 1 apply.

In addition, the conventions and notations in clause 4 describe the representation of various data so that

it is both human readable and amenable to automated processing.

When a table row contains the keyword “reserved” (all lower case) in columns 1 or 2, the tools will not

produce any values for the row in the table.

NOTE The unmarshaling code examples are the actual code that would be produced by the automatic code

generator used in the construction of the reference code. The actual code contains additional parameter

checking that is omitted for clarity of the principle being illustrated. Actual examples of the code are found

in TPM 2.0 Part 4.

Part 2: Structures Trusted Platform Module Library

Family “2.0” TCG Published Page 3

4.3 Data Type Aliases (typedefs)

When a group of named items is assigned a type, it is placed in a table that has a title starting with

“Definition of Types.” In this specification, defined types have names that use all upper-case characters.

The table in Example 1 shows how typedefs would be defined in this specification and Example 2 shows

the C-compatible code that might be produced from that table by an automated process.

EXAMPLE 1

Table xx — Definition of Types for Some Purpose

Type Name Description

unsigned short UINT16

UINT16 SOME_TYPE

unsigned long UINT32

UINT32 LAST_TYPE

EXAMPLE 2

/* C language equivalent of the typedefs from the table above */

typedef unsigned short UINT16;

typedef UINT16 SOME_TYPE;

typedef unsigned long UINT32;

typedef UINT32 LAST_TYPE;

4.4 Enumerations

A table that defines an enumerated data type will start with the word “Definition” and end with “Values.”

A value in parenthesis will denote the intrinsic data size of the value and may have the values "INT8",

"UINT8", "INT16", “UINT16”, "INT32", and “UINT32.” If this value is not present, “UINT16” is assumed.

Most C compilers set the type of an enumerated value to be an integer on the machine – often 16 bits –

but this is not always consistent. To ensure interoperability, the enumeration values may not exceed

32,384.

The table in Example 1 shows how an enumeration would be defined in this specification. Example 2

shows the C code that might be produced from that table by an automated process.

EXAMPLE 1

Table xx — Definition of (UINT16) CARD_SUIT Values

Suit Names Value Description

CLUBS 0x0000

DIAMONDS 0x000D

HEARTS 0x001A

SPADES 0x0027

EXAMPLE 2

/* C language equivalent of the structure defined in the table above */

typedef enum {

CLUBS = 0x0000,

DIAMONDS = 0x000D,

HEARTS = 0x001A,

SPADES = 0x0027

} CARD_SUIT;

剩余165页未读，继续阅读

June_Hou

粉丝: 90
资源: 36

理解TPM2.0结构：编码关键点解析

TPM 2.0规范特点

TPM 2.0 规范 完整版

TPM 2.0 Main part 2

TPM2.0 Commands part3

IBM's TPM 2.0 TSS:IBM 的 TPM 2.0 TSS-开源

TPM2.0 Architecture

TPM2.0.rar

TPM2.0的协议1

tpm2-utils:用于TPM 2.0设备Linux实用程序

eltt2:适用于 TPM 2.0 的 Infineon Embedded Linux TPM Toolbox 2 (ELTT2)

最新资源

TPM 2.0 规范完整版