TPM各功能的简单实现.pdf

发布时间：2022-06-15 发布人：admin 分类：说明书资料大小：0.26M 资料格式：pdf 举报版权申诉

3fd0d813-6eea-4a05-b2cc-8dc7c8bde094.pdf-第1页.png

第1页 / 共62页

3fd0d813-6eea-4a05-b2cc-8dc7c8bde094.pdf-第2页.png

第2页 / 共62页

3fd0d813-6eea-4a05-b2cc-8dc7c8bde094.pdf-第3页.png

第3页 / 共62页

3fd0d813-6eea-4a05-b2cc-8dc7c8bde094.pdf-第4页.png

第4页 / 共62页

3fd0d813-6eea-4a05-b2cc-8dc7c8bde094.pdf-第5页.png

第5页 / 共62页

3fd0d813-6eea-4a05-b2cc-8dc7c8bde094.pdf-第6页.png

第6页 / 共62页

3fd0d813-6eea-4a05-b2cc-8dc7c8bde094.pdf-第7页.png

第7页 / 共62页

3fd0d813-6eea-4a05-b2cc-8dc7c8bde094.pdf-第8页.png

第8页 / 共62页

An Introduction to programming the TPM

Table of Contents

Getting your machine set up

Comment: Sample code

Includes

Error Reporting

Preamble (in virtually every program)

Cleanup (at end of every program)

Comments on Memory handling

Example

What to do in the middle

Authorization

The middle - authorization

Example code

Keys

Create Key

Code example: Create Binding Key

Create a Signing Key, register it and get its public portion

Create AIK

Sample Code

Load Key by UUID

Sample Code

Get a public key, given its handle

Sample Code

Binding data – the data object

Sample Code

UnBinding data

Example Code

Sealing data

Code example

Unsealing data

Code example

Signing with a Sign Key

Sample Code

Verify Signature

Sample Code

NVRAM

Example Code (only run once!)

NVRAM

Example Code (Write to NVRAM)

NVRAM

Example Code (Read fromNVRAM)

PCR objects

Create PCR object, read PCRs

Extend a PCR value

Attestation

Sample Code for both quote and verify Quote

Reading the log file (Note: use latest Trousers)

RNG

Sample Code

Hashing data

Example code: Hashing a string

Get a public key, given its handle

Sample Code

OwnerEvictKey

Sample Code

Migration: making a ticket

Migrating a key

Loading a migrated key

More on authorization

Problem Scenario

Your mission:

An Introduction to programming the TPM TSS / Trousers basics Johns Hopkins University Applied Physics Laboratory David Challener 1

Table of Contents Getting the machine set up…………………………………………………………. 3 Includes……………………………………………………………………………… 5 Error reporting……………………………………………………………………... 6 Preamble…………………………………………………………………………….. 7 Postlude – Cleanup…………………………………………………………………. 8 Memory handling…………………………………………………………………… 9 Authorization……………………………………………………………………….. 11 Keys…………………………………………………………………………………. 15 Binding data ………………………………………………………………………. 25 Sealing data………………………………………………………………………… 29 Signing……………………………………………………………………………… 33 NVRAM…………………………………………………………………………….. 37 PCRs………………………………………………………………………………… 43 RNG…………………………………………………………………………………. 52 HASH……………………………………………………………………………….. 54 Owner evict keys …………………………………………………………………….56 Scenario………………………………………………………………………………59 2

Getting your machine set up Assumption: You are using Fedora 12 Linux or Ubuntu Linux with gcc • Main install (Fedora 12 Linux w/ gcc) • • • • yum install trousers yum install tpm-tools yum install trousers-devel yum install gcc Ubuntu Linux w/ gcc sudo apt-get install trousers sudo apt-get install tpm-tools sudo apt-get install libtspi-dev sudo apt-get install gcc • Turn on the TPM • Go to BIOS and make sure the TPM is on (if it is and you don’t know owner auth, you may want to clear it and start over). • • The procedures differ from PC to PC unfortunately • Start up tcsd (sudo tcsd start) • Make sure you can run the TPM tools (use tpm_getpubek) •Take ownership using tpm_takeownership –z (The –z sets the SRK password to all zeros, the default “well known secret”) • • Use 123 for the owner_auth for this class Note: If your machine doesn’t have the TPM listed in its ACPI table, you can still get the device driver to use it In that case you must use: • • sudo modprobe tpm_tis force=1 interrupts=0 sudo tcsd start • 3

Comment: Sample code • The Trousers test suite exercises each command at • As a result, sample code using each command is least once. available • http://sourceforge.net/projects/trousers/files/ – Download TSS API Test Suite 4

Includes //Basic includes look like this: #include #include #include #include #include #include #include #include #include 5

Error Reporting If a trousers api fails, you need to translate the error code it gives you into English Fortunately, that is already coded into trousers include in your includes Use a debugging statement like: #define DEBUG 0 #define DBG(message,tResult) if(DEBUG) {fprintf(“(Line %d, %s) %s returned 0x%08x. %s.\n", __LINE__, __func__, message, tResult, trspi_Error_String(tResult));} Example use: DBG(“Created my signing key”, result); 6

Preamble (in virtually every program) int main(int argc, char **argv) { TSS_HCONTEXT TSS_HTPM TSS_RESULT TSS_HKEY TSS_HPOLICY TSS_UUID BYTE memset(wks,0,20); hContext=0; hTPM = 0; result; hSRK = 0; hSRKPolicy=0; SRK_UUID = TSS_UUID_SRK; wks[20]; // Place to put the well known secret // Set wks to the well known secret of 20 bytes of all zeros // Pick the TPM you are talking to in this case the system TPM (which you connect to with “NULL”) result =Tspi_Context_Create(&hContext); result=Tspi_Context_Connect(hContext, NULL); // Get the TPM handle DBG(" Create a Context\n",result); DBG(" Connect to TPM\n“, result); result=Tspi_Context_GetTpmObject(hContext, &hTPM); DBG(" GetTPM Handle\n“,result); // Get the SRK handle result=Tspi_Context_LoadKeyByUUID(hContext, TSS_PS_TYPE_SYSTEM, SRK_UUID, &hSRK); DBG(" Tspi_Context_Connect\n“,result); //Get the SRK policy result=Tspi_GetPolicyObject(hSRK, TSS_POLICY_USAGE, &hSRKPolicy); DBG(" Get TPM Policy\n“ ,result; ); // Then we set the SRK policy to be the well known secret result=Tspi_Policy_SetSecret(hSRKPolicy,TSS_SECRET_MODE_SHA1,20, wks); // Note: TSS_SECRET_MODE_SHA1 says “Don’t hash this. Just use the 20 bytes as is. DBG(" Tspi_Policy_Set_Secret\n“ ,result); 7

Cleanup (at end of every program) /* Clean up */ Tspi_Context_Close (h objects you have created); Tspi_Context_FreeMemory(hContext, NULL); // this frees memory that was automatically allocated for you Tspi_Context_Close(hContext); return 0; } gcc file –o file.exe -ltspi -Wall 8

分享到：

赞收藏

资料库

TPM各功能的简单实现.pdf

相关推荐

后端

热门标签

最新资料