diff options
| author | Miquel Raynal <miquel.raynal@bootlin.com> | 2018-05-15 11:57:15 +0200 |
|---|---|---|
| committer | Tom Rini <trini@konsulko.com> | 2018-05-25 20:12:57 -0400 |
| commit | 6284be5a904ef808c939c3d926ee720d1b988264 (patch) | |
| tree | 64d3c64632b6b8b069aafa45b34f23a4b49ae4ba /lib/tpm-v2.c | |
| parent | bad8ff569d1d0a0eb20355845f27b4f6dad48b63 (diff) | |
| download | u-boot-6284be5a904ef808c939c3d926ee720d1b988264.tar.gz u-boot-6284be5a904ef808c939c3d926ee720d1b988264.tar.bz2 u-boot-6284be5a904ef808c939c3d926ee720d1b988264.zip | |
tpm: add TPM2_PCR_Extend command support
Add support for the TPM2_PCR_Extend command.
Change the command file and the help accordingly.
Signed-off-by: Miquel Raynal <miquel.raynal@bootlin.com>
Reviewed-by: Simon Glass <sjg@chromium.org>
Reviewed-by: Tom Rini <trini@konsulko.com>
Diffstat (limited to 'lib/tpm-v2.c')
| -rw-r--r-- | lib/tpm-v2.c | 38 |
1 files changed, 38 insertions, 0 deletions
diff --git a/lib/tpm-v2.c b/lib/tpm-v2.c index 34a93ab067..476b4ee0d0 100644 --- a/lib/tpm-v2.c +++ b/lib/tpm-v2.c @@ -77,3 +77,41 @@ u32 tpm2_clear(u32 handle, const char *pw, const ssize_t pw_sz) return tpm_sendrecv_command(command_v2, NULL, NULL); } + +u32 tpm2_pcr_extend(u32 index, const uint8_t *digest) +{ + u8 command_v2[COMMAND_BUFFER_SIZE] = { + tpm_u16(TPM2_ST_SESSIONS), /* TAG */ + tpm_u32(33 + TPM2_DIGEST_LEN), /* Length */ + tpm_u32(TPM2_CC_PCR_EXTEND), /* Command code */ + + /* HANDLE */ + tpm_u32(index), /* Handle (PCR Index) */ + + /* AUTH_SESSION */ + tpm_u32(9), /* Authorization size */ + tpm_u32(TPM2_RS_PW), /* Session handle */ + tpm_u16(0), /* Size of <nonce> */ + /* <nonce> (if any) */ + 0, /* Attributes: Cont/Excl/Rst */ + tpm_u16(0), /* Size of <hmac/password> */ + /* <hmac/password> (if any) */ + tpm_u32(1), /* Count (number of hashes) */ + tpm_u16(TPM2_ALG_SHA256), /* Algorithm of the hash */ + /* STRING(digest) Digest */ + }; + unsigned int offset = 33; + int ret; + + /* + * Fill the command structure starting from the first buffer: + * - the digest + */ + ret = pack_byte_string(command_v2, sizeof(command_v2), "s", + offset, digest, TPM2_DIGEST_LEN); + offset += TPM2_DIGEST_LEN; + if (ret) + return TPM_LIB_ERROR; + + return tpm_sendrecv_command(command_v2, NULL, NULL); +} |