6a32ed43ed
Fix mixed variable declaration.
2024-01-09 13:19:31 -08:00
310fe7cd5a
Fix spelling error. Fix CMake build broken since cryptocb refactor in PR #304 . Added CI tests for CMake.
2023-12-29 10:36:42 -08:00
93a2493dbf
Fixes for attestation with endorsement key. Enable the broken endorsement tests.
2023-12-29 09:32:49 -08:00
4c753683c2
Fix native test `TPM2_PolicyPCR`.
2023-12-29 09:21:44 -08:00
6322c91e53
Remove the `WOLFTPM2_KEYBLOB.name` (deprecated) and is in `handle.name` now.
2023-12-29 09:20:45 -08:00
88bff510bb
Merge pull request #312 from dgarske/tls_pkcb
...
Added support for TLS PK callbacks with ECC and RSA Sign using PKCSv1.5 and PSS padding
2023-12-08 15:10:32 -06:00
233bd33240
Merge pull request #315 from dgarske/keyblob_tests
...
Added tests for keyblob buffer export/import and support for getting sizes
2023-12-08 15:10:04 -06:00
a50e4fee6c
Add tests for the TLS PK with TPM.
2023-12-08 11:44:00 -08:00
65e03e15e6
Added Windows Visual Studio project for wolfTPM.
2023-12-06 15:10:44 -08:00
53b043dafa
Tests for keyblob buffer export/import. Added support for getting the keyblob sizes.
2023-12-06 11:20:18 -08:00
53acf0bcbf
Use localhost 127.0.0.1 for CSR. Add TLS server option `-self` to use the self signed certs.
2023-12-01 14:37:34 -08:00
137a348c14
TLS PK callback RSA PSS Padding cleanups. TLS server/client cleanups. Added server `-i` option to keep running unless failure.
2023-12-01 14:12:57 -08:00
e601803f1b
Added support for PK callbacks with RSA Sign using PKCSv1.5 and PSS.
...
Fixes for building wolfTPM without crypto callbacks.
Fixes for building/running with FIPS.
2023-12-01 08:25:53 -08:00
50137547ed
Fix for policy_sign issue when r or s is less than key size (needs zero padding).
2023-11-29 13:10:04 -08:00
18531274da
Fix TLS bidirectional shutdown socket issue. Just use 11111 for all TLS tests, to avoid real random port collision with SWTPM sockets. Resolves TLS issue with "ERROR: failed to bind! errno 98".
2023-11-29 12:34:06 -08:00
4b433f24fb
Troubleshooting issues with socket `tcp bind failed: Address already in use`.
2023-11-20 15:42:26 -08:00
249f9d4942
Fixes for building wolfCrypt without PEM to DER support.
2023-11-15 21:53:50 -08:00
df89f497e5
Remove error-ssl.h
2023-11-01 17:17:28 -07:00
9cad7f4e24
Fix some of the example TODO's. Fixes for seal/unseal example. Fixes for TLS with param enc. Fix signed_timestamp with ECC.
2023-10-30 12:00:37 -07:00
2d14cd2297
Fixes for building wolfCrypt with no RSA (--disable-rsa / NO_RSA).
2023-10-23 14:05:10 -07:00
1041898120
Compiler warning files with `NO_FILESYSTEM`.
2023-10-23 14:04:44 -07:00
7a11cb2213
Fix support for ECC 384-bit only support. Tested with: `./configure --enable-wolftpm CFLAGS="-DECC_USER_CURVES -DNO_ECC256 -DHAVE_ECC384" --disable-examples --disable-crypttests && make`
2023-10-20 15:08:45 -07:00
f3e1bbbf3d
Refactor of the command authentication. If command does not require auth do not supply it. ZD 16689
2023-10-12 13:48:04 -07:00
0c7254d7c0
Fixes for building with C++.
2023-10-11 15:56:04 -07:00
49699b08fb
Fix for building without public MP.
2023-09-22 11:07:55 -07:00
96cd17af1d
Improvements/fixes to NV auth and session auth set/unset:
...
* Fix bug with NV name after first write (only appears when using HMAC session).
* Add new API `wolfTPM2_UnsetAuthSession` to unset auth index for a session and save off the nonce from the TPM. This allows auth to be unset/set again with the same session.
* Cleanup in the NV API's for unsetting of the auth to be handled by caller, not in API.
2023-09-15 14:03:11 -07:00
31cd20e645
Added new policy_nv example.
2023-09-11 14:37:12 -07:00
027ae8a4e9
Make sure PCR extend has the session auth cleared. Added -nvhandle argument to nvram examples. Cleanups for examples.
2023-09-08 08:14:39 -07:00
23a5d2595b
Fixes for small stack.
2023-08-31 13:37:22 -07:00
8e1dce2c76
Take run_examples.sh out of make check and run manually in CI test to avoid parallel builds.
2023-08-31 13:04:33 -07:00
8968d89f90
More CI fixes.
2023-08-31 12:29:13 -07:00
e2d502e773
Peer review fixes and getting CI to pass.
2023-08-31 09:53:39 -07:00
97d8845c6f
Added CI tests for all examples and additional build tests.
2023-08-30 15:11:24 -07:00
78cd7190be
Cleanups from testing.
2023-08-30 11:21:43 -07:00
a15260342f
wolfTPM Support for sealing/unsealing based on a PCR that is signed externally. Use an external key to sign a PCR digest. Allows a new signed policy to be sent with updates to continue allowing a sealed secret to be unsealed when PCR's change. This resolves the issue with PCR brittleness.
2023-08-29 18:47:18 -07:00
d508180ee3
Fix custom -nvIndex= argument.
2023-08-16 08:08:10 -07:00
5b6c7c0368
Improvements to the secure_rot example. Add support for manually placing hash.
2023-08-15 14:41:09 -07:00
649c257093
Improve SRK ECC support detection / handling.
2023-08-15 10:51:53 -07:00
6126d04be3
Support for importing and loading public ECC/RSA keys formatted as PEM or DER.
2023-08-15 08:27:00 -07:00
3f29c59e87
Add support for encrypting secret using ECC key. Allows using ECC for parameter encryption and importing ECC keys with custom seed. Requires https://github.com/wolfSSL/wolfssl/pull/6683
2023-08-08 16:15:18 -07:00
bb18c4c550
Added `wolfTPM2_ChangePlatformAuth` wrapper to help set the platform auth. This is useful from the bootloader to make sure no one can use the platform hierarchy from application.
2023-08-07 11:08:02 -07:00
5a20647313
Minor cleanups. Update wolfSSL test certs. Added TPM_TIS_MAX_WAIT. Fix build with WOLFTPM_DEBUG_VERBOSE only.
2023-08-07 11:08:02 -07:00
c35b532724
Add support for NV lock.
2023-08-07 11:08:02 -07:00
14a331d648
Example for secure boot solution to store root of trust in NV. Provides authentication and tamper protection. Fixed uses of arg= in examples.
2023-08-07 11:08:02 -07:00
bb1ec4acc9
Add code to test external import between two TPM's.
2023-08-01 13:12:44 -07:00
e646c5701e
Peer review fixes. Avoid using a struct for the seed.
2023-07-20 12:28:39 -07:00
7fcbcab634
Fixes for edge case builds !HAVE_ECC or NO_RSA.
2023-07-20 09:29:45 -07:00
ae6bac26c5
Added documentation and tests.
2023-07-19 13:28:50 -07:00
d1cd4eff52
use correct session index for wrap test so parameter encryption works
2023-05-03 19:29:45 -04:00
382ff91eb3
Support for disabling ASN.1 (--disable-asn) and still provide parameter encryption support.
2023-05-02 18:11:15 -07:00
4242f2f6cf
Fixes for building without ASN. Fix for ECC disabled with `WOLFSSL_PUBLIC_MP` set.
2023-05-02 17:27:48 -07:00
0ceeebeaf7
Fix for building with no PEM to DER. Fix for building with static library and no debug, due to missing stdio in examples. Fix for TLS examples missing WOLFCRYPT_ONLY check. Fix for building with WC_NO_RNG. Fix for RSA salt with RNG using crypto cb.
2023-05-02 16:18:21 -07:00
7a14f45355
update policy sealing code and documentation based on pr comments
2023-04-18 13:05:42 -04:00
6678ea7c4b
add external nvram policy sealing example, fix wolfTPM2_SealWithAuthSigNV
...
wolfTPM2_SealWithAuthSigNV needs to have PolicyPCR called as a part of its logic since it uses wolfTPM2_SetAuthPassword, which interferes with the policy digest
2023-04-17 18:29:18 -04:00
b4a8ba698e
Sealing secrets with PolicyPCR and PolicyAuthorize ( #261 )
...
* Support for PCR with policy. Issue #109
* Progress on PCR policy. Work from John Bland.
* add wrapper functions to seal secrets the NVM with policy authorization
fix the seal and unseal with policy functions to work with non trial policies
update policy examples to allow multiple pcr indicies to be used, currently only 2 can be used because TPML_PCR_SELECTION only allows 2 pcr sellections, may need to be refactored but I didn't want to blow that part of the codebase up
* fix TPM2_SetupPCRSel to correctly use hash type banks
* update policy functions and examples based on pr comments
fixed rsa keys not working due to null default signing algorithm, seal_policy_auth can now be called with no arguments and will pick defaults
* update policy examples based on pcr comments
added error codes and htons macro for use when wolfcrypt is not available
* added policySigned logic to policy seal with nv functions
currently the policy seal with auth nv example is broken due to strange session issues
* Improvements to the session authentication for policy sessions.
* update the sealNV functions, add PolicyRestart and manual htnos
wolfTPM2_SealWithAuthSigNV allows for sealing secrets to NV with just the public part of the sealing key and a pre signed signature so that the private part of the key can be kept off the system. PolicyRestart was added to make reseting the policyDigest easy and a manual htnos function was added for use in wolfBoot
* update policy code based on pr comments
* reconfigure wolfTPM after setting up ibm simulator
* define XREWIND in wolfTPM since it is no longer in wolfssl
* fix scan-build warnings
* remove RSA_SIG_SZ
* use signed char in HexCharToByte for strict build options
* update based on pr comments
---------
Co-authored-by: David Garske <david@wolfssl.com>
2023-04-13 11:24:37 -07:00
219038639a
Merge pull request #266 from jpbland1/evict-control-example-fix
...
fix broken evict control example
2023-04-13 08:26:13 -07:00
c8fd9c6359
fix broken evict control example
...
evict control had an issue where the default noauth session was being used
alongisde the encrypted section. to fix this wolfTPM2_SetAuthSession needs
to be called with index 0 to override the default session, it's possible we've
made this mistake in many places
2023-04-13 01:13:04 -04:00
af0668eafd
Fix for building with wolfTPM without wolfCrypt `--disable-wolfcrypt`. Added test.
2023-04-12 15:07:46 -07:00
f2a95f3902
Fix for Microchip Harmony build settings. Rename to `WOLFTPM_MICROCHIP_HARMONY`. Avoids confusion with the TPM 2.0 module ATTPM from Microchip. Now enabled with `WOLFTPM_MICROCHIP` and provides backwards compatibility for `WOLFTPM_MCHP`. The new `WOLFTPM_MICROCHIP` has not been released (was added in PR #251 ).
2023-02-03 10:49:29 -08:00
10ad0399c3
Support for TPM benchmarking with Microchip MPLABX (`WOLFTPM_MICROCHIP`) ZD 15350
2023-02-02 10:56:19 -08:00
ae280a7e71
fix casting and unused variable problems on windows ( #255 )
2023-01-27 14:34:02 -08:00
3a1ece8da1
Add RSA key import methods to handle PEM and DER encoding directly ( #252 )
2023-01-27 14:17:19 -08:00
c05bf659c2
Fix broken paths with HAL refactor. Update TLS examples to use latest TLS version (allowing downgrade).
2023-01-20 08:29:53 -08:00
1ea4a591a8
HAL refactor and documentation improvements. Move example HAL implementations into new `hal` directory. Include the example HAL in the library when building. Updated HAL IO documentation.
2023-01-18 12:38:04 -08:00
c038cede44
Minor build fixes.
2023-01-18 12:38:04 -08:00
7d1a3a31b5
Add support for Microchip Harmony MPLAB X SPI driver in wolfTPM.
2023-01-18 12:38:04 -08:00
25dd0d46c0
Fix for using type not available with wolfCrypt only.
2023-01-12 16:59:25 -08:00
e22fd122d9
Support for Infineon TriCore (TC2XX/TC3XX) using macro `WOLFTPM_INFINEON_TRICORE`.
2022-12-21 16:21:15 -08:00
032f10d120
Fix for keyed hash with HMAC.
2022-10-04 13:27:43 -07:00
41e5750ff2
Peer review fixes. Cleanups for return code checking, stdlib functions, unknown args and coding standards.
2022-10-04 13:19:51 -07:00
fac51233c3
Added example for NV counter increment. Fixes for NV auth handling.
2022-10-04 13:09:05 -07:00
d491437e08
Use `strcmp` since `argv` is guaranteed to be NULL terminated. Fix keygen example whitespace alignment.
2022-10-04 11:44:16 -07:00
14a4b00873
Key generation example for Keyed Hash. ZD 14876.
2022-09-28 11:55:05 -05:00
94b59d5255
wolfTPM v2.6.0
...
* Fix CMakeList.txt to fix include order.
* Remove execute bit on code files.
2022-09-01 10:41:42 -07:00
3f84b2efbc
wolfTPM v2.5.0 release prep
2022-07-22 09:32:57 -07:00
9d2483d327
New CSR wrappers to assist with TPM based CSR/Self-Signed-Cert generation including CSharp wrappers. This includes support for subject, key usage, custom request extensions and output as PEM or DER. New structure `WOLFTPM2_CSR`. New API's `wolfTPM2_CSR_*`. New CSharp class `Csr`.
2022-07-12 13:53:04 -07:00
baae8ee523
Merge pull request #214 from dgarske/slb9672
...
Infineon SLB9672 support
2022-07-01 11:24:23 -05:00
de7f1d6d30
Fix keygen example compiler error on possible NULL string in printf
2022-07-01 08:40:07 -05:00
f0c2f02a20
Peer review cleanups.
2022-06-29 14:40:39 -07:00
b41a14689f
Add create primary key example. Add support for using a unique template with create and create primary.
2022-06-28 16:40:46 -07:00
a22277a07d
Infineon SLB9672 support.
2022-06-28 16:07:30 -07:00
9cb60b14ad
Improve the inline code comments for loading the public key using the `wolfSSL_CTX_use_PrivateKey_buffer` API.
2022-06-27 10:29:38 -07:00
c7b28c1445
TPM support for using the public key with TLS.
2022-06-24 16:21:47 -07:00
a787dab931
Fix tests and wrapper example with no wolfcrypt
2022-05-06 21:43:15 -07:00
b4ddd7e736
fix unseal: Unload handles on exit
2022-04-07 17:02:33 -07:00
a37d2387e0
cmake: fix `unseal` warning and add build to ignore
2022-04-07 12:01:13 -07:00
fd1474c68b
cmake: Add to readme and fix native test
2022-04-07 10:55:15 -07:00
084ef170b7
cmake: windows fixes and spell fixes
...
* Examples working on Windows and SWTPM
* Check command availability (including for windows blocking it).
* update unseal to work without persistent NV storage
* cleanup cmake from review
* fix a few spelling mistakes
2022-04-07 10:55:11 -07:00
f2b7bec392
cmake: Initial cmake build
...
Includes fixes for windows builds using both msys and MSVC
2022-04-07 10:54:52 -07:00
a2613bcae7
Fix for `TPM2_GetRandom2` to fallback to normal command if not found. Some older STM33 TPM firmware does not support this command. Fix to make sure we don't request more random data than the response can physically handle.
2022-02-04 09:51:09 -08:00
4ced78d002
Added test for `TPM2_GetRandom2`
2022-02-04 09:28:03 -08:00
4523d9bce1
Merge pull request #199 from dgarske/spell
2021-12-08 09:22:25 -08:00
d035cd239c
Fix for a few spelling errors. Whitespace cleanup.
2021-12-07 11:10:50 -08:00
eebd30a4d5
Improve `TPM2_SetupPCRSel` to allow calling multiple times to select additional PCR's. Improved the PCR example code.
2021-12-06 14:48:01 -08:00
ede184c735
configure: keep example directory strcuture during install
2021-11-18 12:04:41 -08:00
7f717f506b
configure: make all examples not installed (eg `noinst`)
2021-11-18 11:04:03 -08:00
56a827ae44
Fix `make install` by renaming pcr example `read.c`
...
example files are installed into the same directory and must have
unique names.
2021-11-18 10:22:15 -08:00
5af1360f3d
Merge pull request #195 from dgarske/rel_v2.3.0
2021-11-09 11:18:21 -08:00
4ea2520856
Peer review fixes.
2021-11-09 09:57:43 -08:00
0f9e8b5768
wolfTPM Release v2.3.0
2021-11-08 15:49:00 -08:00
c78d395a5c
Refactor GPIO support.
2021-11-08 15:13:03 -08:00
85b73ad75f
Improve the IO layer try again logic.
2021-11-08 11:59:11 -08:00
4adbbc560a
Improve the printing of the capabilities vendor firmware number. Spelling fixes.
2021-11-08 11:59:11 -08:00
91174287b3
RSA_Encrypt: Fix for RSAES padding
2021-09-16 08:42:23 -07:00
5dfa13ec75
Added PCR Read example
...
Signed-off-by: Dimitar Tomov <dimi@wolfssl.com>
2021-07-28 14:48:58 +03:00
02b8834244
test: Allow `CreateLoaded` to pass on unsupported systems
...
Some hardware may not support these, but allow native and wrap tests to pass with comment
2021-07-26 11:18:33 -07:00
54d3fea42b
Fix for mismatch memset size.
2021-07-22 11:33:13 -07:00
ba1339b055
Fix for compiler warning for file read in make_credential.c. Updated attestation example documentation.
2021-07-22 11:09:16 -07:00
4931ea0e51
Fix unused variables `--disable-wolfcrypt`
2021-07-21 16:30:22 -07:00
b40574f545
Fix for keyload broken with PR 174. Added GPIO note about no input support for Nuvoton.
2021-07-13 16:06:33 -07:00
d05e503784
Fix for possible leak of ephemeral key in TLS server example.
2021-07-13 12:57:39 -07:00
6abca6dc78
Fix for building with `--disable-wrapper`.
2021-07-13 12:02:25 -07:00
6ddcdb0763
Fixes for building with `--disable-wolfcrypt`.
2021-07-13 11:58:17 -07:00
d17a182c30
Fix scan-build warnings.
2021-07-13 11:53:43 -07:00
8455beaae4
Fixes for Public PEM functions. Cleanups.
2021-07-12 17:12:22 -07:00
bc9434aec9
Update examples README files
...
Signed-off-by: Dimitar Tomov <dimi@wolfssl.com>
2021-07-12 15:09:28 -07:00
8528a326be
Added fixes and unit tests for wolfTPM2_CreateLoadedKey and TPM2_CreateLoaded
...
* Added new units tests and fixed missing XMEMSET
* Renamed and modified PemToTpm to PubPemToTpm, works only with Pub keys
* Fixes from peer feedback
Signed-off-by: Dimitar Tomov <dimi@wolfssl.com>
2021-07-12 15:09:28 -07:00
3e217cc497
Made keygen and attestation examples work with EH keys
...
* Added option in keygen example to create and use keys under the EK
- Added PolicySecret to provide EK auth
* Fix wrong total auth area size when multiple auth sessions are used
* Workaround policy Session for EK auth
* Added flag in WOLFTPM2_HANDLE to specify when policyAuth is used
* Added three macros to check TPM2.0 Policy session type
* Added option to use keys under Endorsement Hierarchy in attestation examples
- MakeCredential modified to work without auth as TCG spec defines
- MakeCredential can now use EK pub to encrypt challenge
- AcivateCredential can now work with EK pub to decrypt challenge
* Added new wolfTPM2 wrapper for TPM2_CreateLoaded
- Added missing TPM2_CreateLoaded command in tpm2.c
- Create and load a key in single TPM 2.0 operation
* Added new wolfTPM2 wrappers to use PEM format in keygen
- wolfTPM2_RsaKey_TpmToPem
- wolfTPM2_RsaKey_PemToTpm
* Improved keygen, output in PEM format and saving EK's TPM2B_PUBLIC
- Added keygen option to output PEM files for TPM public keys
- Added saving of EK's TPM2B_PUBLIC for attestation purposes
* Modified keygen
- Uses new wolfTPM2_CreateLoaded wrapper to acquire correct AK name
- Stores AK name for attestation purposes
* Modified keyload to be able to load keys created under the EK/EH
- Uses new wrapper
- Can load keys created under EK/EH, non-AK and AK
* Added new wrapper for satisfying EK policy
* Applied fixes from peer review
Signed-off-by: Dimitar Tomov <dimi@wolfssl.com>
2021-07-12 15:09:28 -07:00
da5a1adf9c
Merge pull request #172 from tomoveu/add-nuvoton-gpio
...
Add GPIO example for NPCT7xx
2021-07-12 15:08:31 -07:00
aa71cfd73d
Minor cleanups.
2021-07-12 15:07:45 -07:00
8946234c48
Added GPIO examples for Nuvoton NPCT75x TPM 2.0 Modules
...
* Added GPIO configuration logic
* Added more NV attributes per Nuvoton specification
* Fixes from testing on the hardware
* Improvements on tpm2.h definitions
* Fixes after vendor feedback
* Updated the examples README with NPCT75x information and ST33 differences
Signed-off-by: Dimitar Tomov <dimi@wolfssl.com>
2021-07-09 23:48:23 +03:00
fd6a768a3a
Fix typo for Linux macro.
2021-06-07 10:44:14 -07:00
ead4f66967
Fix for linux dev, tpmsw and winapi.
2021-06-07 10:31:53 -07:00
2f63aadf02
Revert include.am changes. Use macro magic to include the .c file from tpm_io.c for backwards compatibility and ease for new platforms with automake.
2021-06-07 10:20:51 -07:00
eafc20b47c
Fix automake issue.
2021-06-07 10:11:10 -07:00
a43797ca9c
Update all include.am example files
...
Signed-off-by: Dimitar Tomov <dimi@wolfssl.com>
2021-06-07 14:32:47 +03:00
ab93e61afd
Refactor examples/tpm_io into separate platform source files
...
* tpm_io_atmel.c contains only ASF code
* tpm_io_barebox.c contains only code for Barebox
* tpm_io_st.c to contain only STM32 specific code
* tpm_io_linux.c to contain only Linux specific code
* tpm_io_qnx includes the new QNX callback
* tpm_io_xilinx.c to contain only Xilinx code
- Noted that native Linux /dev/tpmX does not require an IO callback
- TPM Simulator and Windows TBS also does not require an IO callback
Signed-off-by: Dimitar Tomov <dimi@wolfssl.com>
2021-06-07 14:14:37 +03:00
1942b3fd05
Move doxy group defs to the same header files and remove `doxygen.h`.
2021-06-02 10:20:00 -07:00
2aaf60c068
Fix to make sure CS is de-asserted on failure case. The `spi_close` does not clear the CS.
2021-06-01 12:42:54 -07:00
ed1ec8c52d
Support for QNX with wolfTPM:
...
* Fix for `wolfTPM2_NVCreateAuth` to return `TPM_RC_NV_DEFINED` if already exists (it used to do this, but broke with GPIO changes).
* Fixes for building wolfTPM with wolfCrypt only (no TLS).
* Fix for building without RSA and ECC.
* Fix for `--enable-smallstack` with parameter encryption,
* Fix for nvram/store unused variable.
2021-06-01 10:34:28 -07:00
21e6a74d8b
Added unit test for TPM2_CertifyCreation
...
In a real-life use case, signHandle and objectHandle would
point to different objects. For unit testing, signHandle and
objectHandle can be the same object, because wolfTPM performs
the TPM2_CertifyCreation command the same.
Signed-off-by: Dimitar Tomov <dimi@wolfssl.com>
2021-05-31 19:51:32 +03:00
ccde8c0386
Merge pull request #166 from dgarske/wolf-with
...
Add support for `--with-wolfcrypt=/dir/` and fix minor build error/warn
2021-05-18 19:56:49 +03:00
4e351b16a9
Add support for `--with-wolfcrypt=/dir/`. Fix for build error with `--disable-wolfcrypt`. Fix for unused `auth` in store example. ZD 12204
2021-05-13 09:49:08 -07:00
d672e36b2f
Fix for building GPIO example without ST/auto-detect. Cleanup obsolete `txBuf[4] = 0x00;` replaced with SPI check wait state logic.
2021-05-06 11:52:51 -07:00
99851e601e
Fix a couple minor spelling errors.
2021-05-03 15:55:43 -07:00
8a996dff01
Added README for the new remote attestation related examples
...
Signed-off-by: Dimitar Tomov <dimi@wolfssl.com>
2021-04-29 23:27:27 +03:00
009a5df963
Added examples to create a remote attestation credential
...
Signed-off-by: Dimitar Tomov <dimi@wolfssl.com>
2021-04-29 23:26:24 +03:00
60ed683326
gpio: update program names in `README` and `usage()`
2021-04-21 14:43:58 -07:00
3d27101d58
make: Rename GPIO example source files to avoid conflict
...
New GPIO examples `read` conflicts with NVRAM example on `make install`
2021-04-21 14:24:57 -07:00
9910e34f52
Fixes from peer review.
2021-04-21 09:20:46 -07:00
58c8053feb
Changes for running seal example without wolfcrypt support
...
When wolfcrypt is not enabled:
* examples/keygen/keyload failed without error message
* examples/seal/seal did not generate an error message
* examples/seal/unseal was missing conditional compiling
Now, this is fixed.
Signed-off-by: Dimitar Tomov <dimi@wolfssl.com>
2021-04-20 15:33:08 +03:00
474ddb4d01
Minor changes based on peer feedback
...
Signed-off-by: Dimitar Tomov <dimi@wolfssl.com>
2021-04-20 15:15:40 +03:00
f1f4de5739
Added nameAlg hash algorithm option for a TPM key seal template
...
Signed-off-by: Dimitar Tomov <dimi@wolfssl.com>
2021-04-20 15:06:19 +03:00
b6c116e3a1
Updated the examples README with seal and unseal information
...
Signed-off-by: Dimitar Tomov <dimi@wolfssl.com>
2021-04-16 10:42:16 +03:00
a45a398850
Added option for persistent key to examples/keygen/keyload
...
Signed-off-by: Dimitar Tomov <dimi@wolfssl.com>
2021-04-16 10:41:01 +03:00
b7600a9348
Added new example for sealing a secret using TPM key
...
Signed-off-by: Dimitar Tomov <dimi@wolfssl.com>
2021-04-16 10:41:01 +03:00
35674052bb
Added new example to demo TPM 2.0 extra GPIO control
...
* Create NV Index for GPIO access right after TPM2_GPIO_Config
* Set and read example to use the NV index created by the config example
* Added instructions about the new gpio examples
* Added vendor check, right now only ST33 supports TPM extra GPIO
* NV Index for GPIO Input requires an extra step, included in gpio/config
* Added sanity check and NV Index delete before new GPIO configuration
* Changes based on peer review
Signed-off-by: Dimitar Tomov <dimi@wolfssl.com>
2021-04-08 08:35:14 -07:00
2b8cfb8692
wolfTPM Release v2.1.0 preparation.
...
* Updated copyright
* Fixed minor cast warning.
* Fixed minor scan-build warnings.
* Cleanup print public and fix possible print of uninitialized field.
2021-03-17 10:13:50 -07:00
d086eba2c3
Merge pull request #143 from tomoveu/add-sym-keygen
2021-03-15 18:27:49 -07:00
8ee41a3c09
Fix minor printf type issue.
2021-03-15 15:11:31 -07:00
3f7985b648
Fix for minor cast warning.
2021-03-12 15:15:30 -08:00
197754b109
Minor cleanups.
2021-03-12 15:10:58 -08:00
1769a3a264
Fixes for build error without wolfCrpyt (`--disable-wolfcrypt`). Fixes to better propagate errors when features are not compiled in. Add wolf error code descriptions when wolfCrypt is disabled.
2021-03-12 15:10:58 -08:00
53563acd6a
Update the wolfTPM and examples README.md files
...
Signed-off-by: Dimitar Tomov <dimi@wolfssl.com>
2021-03-12 15:10:58 -08:00
f0540d688e
Make NVRAM and Keygen examples store the encoded public key part to save space
...
Before examples were always storing the maximum public key part size,
using sizeof(TPM2B_PUBLIC), with many empty fields. This meant, always
storing 616 bytes of public part, even if the public key part was less.
* writekeyBlob/readKeyBlob use the actual size of public key part
* NVRAM store/read use the actual size of the public key part
* Minor fixes from peer review
* Added comment to nvram/store about Host Endianness, per peer review
* Added public API for appending/parsing TPM2B_PUBLIC to byte streams
Signed-off-by: Dimitar Tomov <dimi@wolfssl.com>
2021-03-12 15:10:58 -08:00
56db5fe67c
Make examples/nvram capable of using only the private/public key part
...
Signed-off-by: Dimitar Tomov <dimi@wolfssl.com>
2021-03-12 15:10:58 -08:00
db64d9fc29
examples/read: Load the key after it was extracted from NVRAM
...
Signed-off-by: Dimitar Tomov <dimi@wolfssl.com>
2021-03-12 15:10:58 -08:00
daa690293d
Add symmetric AES option to the keygen example
...
Signed-off-by: Dimitar Tomov <dimi@wolfssl.com>
2021-03-12 15:10:58 -08:00
4f6e35f7fd
Minor change for attestation examples, EK is not needed
...
* EK is not needed for Quote or GetTime
* Only Endorsement Hierarchy is needed for GetTime
Signed-off-by: Dimitar Tomov <dimi@wolfssl.com>
2021-03-12 23:47:12 +02:00
fd79729cc8
Merge pull request #142 from tomoveu/add-cubemx-i2c
...
Add STM32 CubeMX I2C support
2021-03-10 13:29:05 -08:00
d9360f035a
test: exit with 0 if test not supported by hardware
...
`native_test` attempts tests that may not be supported by hardware.
In these cases, warnings are printed, but the exectuable should still
return 0 for success.
2021-03-08 09:15:51 -08:00
228e8cfcec
Minor fixes for NVRAM examples when wolfCrypt is disabled
...
Signed-off-by: Dimitar Tomov <dimi@wolfssl.com>
2021-03-01 22:45:27 +02:00
e1d9c661bd
Minor fixes for NVRAM examples
...
Signed-off-by: Dimitar Tomov <dimi@wolfssl.com>
2021-03-01 10:52:02 +02:00
c18f421965
Update the examples README
...
Signed-off-by: Dimitar Tomov <dimi@wolfssl.com>
2021-02-26 11:38:17 +02:00
df13479ac7
Added new examples for storing TPM keys in NVRAM, with parameter encryption
...
* Added examples/nvram/store for storing TPM key in NVRAM
* Added examples/nvram/read for extracting keys from the TPM's NVRAM
Signed-off-by: Dimitar Tomov <dimi@wolfssl.com>
2021-02-26 11:15:54 +02:00
0c8948cde4
Changes from peer review, ifdef flow corrections
...
Signed-off-by: Dimitar Tomov <dimi@wolfssl.com>
2021-02-10 21:39:58 +02:00
a1a886cbc3
Revert "Correct naming convention for ifdefs related to STM32 CubeMX HAL"
...
This reverts commit 63c91cfa37
2021-02-10 21:28:50 +02:00
63c91cfa37
Correct naming convention for ifdefs related to STM32 CubeMX HAL
...
Signed-off-by: Dimitar Tomov <dimi@wolfssl.com>
2021-02-10 21:16:49 +02:00
cb9f97f063
Add tpm_io callback for STM32 CubeMX I2C HAL
...
Signed-off-by: Dimitar Tomov <dimi@wolfssl.com>
2021-02-10 21:13:33 +02:00
c0fa6423d5
Cleanup of the examples to use the key templates. The PKCS7 example was failing because of a key mismatch between the TPM private key and the public key used in the certificate setup using the CSR and ./certs/certreq/sh`.
2021-01-14 16:41:12 -08:00
4c086c2f2c
Fix for expired wolfSSL certs and note about where those files come from. Fixes #138 .
2021-01-11 11:58:46 -08:00
845b3d1da2
Release fixes and cleanups. Fixes for init of `WOLFTPM2_HASH` in `wolfTPM2_HashStart`. Fix for for various build configurations (--disable-wrapper). Fix for Microchip "sign" bit on symmetric keys. Fix for scan-build warnings. Cleanup whitespace.
2020-12-07 11:01:02 -08:00
523a9f905c
Fixes for properly setting auth (needs to include name for HMAC cpHash/rpHash calculation). Fix for sessionAttributes when command / response doesn't support it. Fixes for the TLS client / server examples. Added back the useful param enc / hmac debugging enabled with `--enable-debug=verbose`.
2020-12-02 16:47:46 -08:00
75db91c003
Updates to demonstrate using parameter encryption with the native test. Allow NULL key for the HmacSetKey (for unsalted / unbound).
2020-12-01 16:00:47 -08:00
d044360e38
Fixes for scan-build and g++ warnings.
2020-12-01 10:38:39 -08:00
8087afaf27
Fixes from peer review. Resolve issue with make check. Removed the TPM Simulator for make check (does not build out of the box on all platforms). Make dist was not including the new tpm2_socket.h.
2020-12-01 07:45:04 -08:00
4b0b70861c
Added parameter encryption support to more examples. Fix to not set "encrypt" or "decrypt" if command doesn't allow it. Updated documentation.
2020-11-30 12:00:54 -08:00
4c2e8d3f43
Added response HMAC validation. Fixes for nonce and auth count. Fix for AES CFB decrypt set key (requires `AES_ENCRYPTION` on SetKey). Cleanup verbose debugging. PR ready for review.
2020-11-25 16:04:04 -08:00
0e4c6672fd
TPM Parameter Encryption with AES CFB or XOR is fully working. Tested keygen, keyload, keyimport and PCR quote with parameter encryption using both ciphers. This commit includes a refactor of the auth command structure to adhere to TPM spec. Includes optimization for AES CFB and XOR to do done inline. For for the decryption nonce to use the newer for U in KDFa.
2020-11-25 13:00:42 -08:00
4b98d6d637
Fixed minor errors about missing header, variables not used and whitespaces
...
Signed-off-by: Dimitar Tomov <dimi@wolfssl.com>
2020-11-25 12:33:51 +02:00
409fd96502
Fixes for response decryption. Nonce from TPM captured correctly now. Added support for args to all examples.
2020-11-24 16:44:20 -08:00
5abeea75a9
Added object names to the command hash calculation (cpHash). Added HMAC key creation. Fixed outstanding TODO items.
2020-11-23 14:54:39 -08:00
dbd8e41b47
Refactor of the session authentication. Added "-e" option to some examples to enable parameter encryption and removed the _paramenc.c files. Fixup for the `getPrimaryStoragekey` to allow persisting if not `WOLFTPM_WINAPI`. Improve command line options. Added calculation of command hash and HMAC for sessions.
2020-11-20 16:47:14 -08:00
a31ef747f7
Keygen examples no longer need to manually generate nonceCaller
...
Signed-off-by: Dimitar Tomov <dimi@wolfssl.com>
2020-11-19 18:11:25 +02:00
72e365329c
New nonceTPM solution needed, restoring TPMS_AUTH_COMMAND to its TCG spec form
...
Signed-off-by: Dimitar Tomov <dimi@wolfssl.com>
2020-11-19 15:30:17 +02:00
701359a7dc
Fixes to keyload_paramenc, unloading of handles
...
Signed-off-by: Dimitar Tomov <dimi@wolfssl.com>
2020-11-19 15:24:18 +02:00
191412f86b
Minor change, remove obsolete code from keygen_paramenc example
...
Signed-off-by: Dimitar Tomov <dimi@wolfssl.com>
2020-11-19 15:08:30 +02:00
23e5b629fb
Added keyload with parameter encryption example
...
Signed-off-by: Dimitar Tomov <dimi@wolfssl.com>
2020-11-19 15:08:30 +02:00
324bdea6b4
Modify keygen_paramenc to use new wolfTPM2 wrappers for Create and Load
...
Signed-off-by: Dimitar Tomov <dimi@wolfssl.com>
2020-11-19 15:08:30 +02:00
24a49de385
Added AES CFB parameter support, salted TPM session, fixed KDFa and examples
...
* Added key generation example with parameter encryption
* Fixes and cleanups for KDFa
* Added KDFa unit test (passes)
* Added AES CFB support
* Fix for nonceTPM
* Added support for encrypted RSA salt and salted-unbounded session
* Removed unsalted-unbounded specific code for authValueKDF from KDFa
* Add innerWrap support
* Add missing wolfcrypt header for AES CFB
* Fixes for casting when calling KDFa for AES CFB parameter encryption
* Add outerWrap support
Signed-off-by: Dimitar Tomov <dimi@wolfssl.com>
2020-11-19 15:08:30 +02:00
b48f53f5e7
Improvements to the example tls_server to accept "RSA" or "ECC". Improvement to TLS examples to old load keys/certs that are needed (reduces max handle load count). Added missing `scripts/tls_setup.sh` to automake.
2020-11-13 16:33:14 -08:00
675f7deb22
Fixes for a couple minor build errors and warnings. Found using scan-build, CC=g++ and `NO_FILESYSTEM`.
2020-11-13 15:57:03 -08:00
951e27f706
examples: cleanup for mingw coexistence
2020-11-13 14:38:19 -08:00
0bff836fa2
examples: Cleanup TLS examples using keyblob
2020-11-13 11:31:01 -08:00
6bfebf7cb9
examples: tls_client ECC/RSA as command line option
2020-11-12 14:08:16 -08:00
3ce0a6871c
Rebase and leverage new API with KEYBLOB
2020-11-12 14:08:13 -08:00
045800ccf5
examples: factor out common key setup steps
2020-11-12 14:04:00 -08:00
1fcae21585
Refactor socket code to support win32
2020-11-12 14:04:00 -08:00
3c697c73ec
One more
2020-11-12 13:40:45 -08:00
a3baa279a9
Fix for `set but not used` with `--disable-wolfcrypt`.
2020-11-12 13:38:22 -08:00
fdc149854e
Fix build issues with `--disable-wolfcrypt`.
2020-11-12 13:28:50 -08:00
1a24bab50f
Minor fixes for keyload usage, examples README and whitespaces
...
Signed-off-by: Dimitar Tomov <dimi@designfirst.ee>
2020-11-12 16:18:03 +02:00
4ce00ecb26
Added usage and fixed key import API name
2020-11-06 16:08:19 -08:00
961710de63
Added support for importing external private key to get a key blob for easy re-loading.
2020-11-02 14:23:47 -08:00
72e2b73278
Return error code if file not found on key load.
2020-10-27 15:33:58 -07:00
6b61e85496
Improved the key blob storage. Added ECC support to keygen example.
2020-10-27 10:16:33 -07:00
21daf5a21c
Key generation and loading examples using disk to store the key. Leverage wolfSSL filesystem abstraction.
2020-10-26 15:49:51 -07:00
6a6f09a184
winapi: revert tls_common changes until a long term fix is in place
2020-10-13 15:58:49 -07:00
62ff638dc7
fix compile error in tls_common using wolfIO
2020-10-13 12:04:07 -07:00
efa2464496
winapi: cleanup debug and signed_timestamp example
2020-10-13 11:58:29 -07:00
3a1ef5a0a4
Add winapi for Windows TBS support (with minGW build)
...
TESTED:
`./configure --host=i686 CC=i686-w64-mingw32-gcc CFLAGS="-DWIN32 \
-DMINGW -D_WIN32_WINNT=0x0600" LIBS="-lws2_32 -ltbs" \
--enable-winapi`
2020-10-07 13:22:19 -07:00
0fb03c12b1
compiling with minGW
...
- mingw visibility fix
2020-10-07 13:21:49 -07:00
50cb2b5dbf
Remove execute bit on file.
2020-09-30 15:34:41 -07:00
0d6bb389ed
Merge pull request #122 from tomoveu/add-xor-param-enc
...
Add XOR parameter encryption
2020-09-30 15:15:54 -07:00
5ec8c5d0e1
Fix for building without wolfCrypt. Minor cleanups.
2020-09-30 15:14:46 -07:00
e75a36b82c
Update the README files
...
Signed-off-by: Dimitar Tomov <dimi@designfirst.ee>
2020-10-01 00:36:25 +03:00
9770252a20
Add flush tool for clearing transient TPM objects like keys and auth sessions
...
Signed-off-by: Dimitar Tomov <dimi@designfirst.ee>
2020-10-01 00:36:25 +03:00
3ff97f675b
Add TPM2.0 Quote example with Parameter Encryption over the user data
...
Signed-off-by: Dimitar Tomov <dimi@designfirst.ee>
2020-10-01 00:36:25 +03:00
0e2837b60d
Add TPM2.0 parameter encryption using XOR obfuscation
...
Signed-off-by: Dimitar Tomov <dimi@designfirst.ee>
2020-10-01 00:36:25 +03:00
4cc41ffa01
examples: Add test vectors for AES CFB and make it the default for tests
2020-09-30 13:22:29 -07:00
45a1dd27ce
Add comment for how to force ECC mode with the TLS tests.
2020-09-24 14:08:03 -07:00
b1e130ae65
Update help for `--enable-cryptocb` (don't use old enable name).
2020-09-24 13:41:16 -07:00
3b253a3e5f
Improve the TLS client mutual authentication example to clarify use of dummy key. ZD 10895.
2020-09-15 16:50:08 -07:00
69f01efb19
Cleanups based on peer review
...
Signed-off-by: Dimitar Tomov <dimi@designfirst.ee>
2020-09-03 19:49:31 +03:00
029fafdf87
Remove execute bit on source files.
2020-09-02 11:46:12 -07:00
ebfbd4dd2d
Moved the new clock_set example into the existing timestamp examples directory. Minor cleanups and fix for printf warning.
2020-09-02 11:46:12 -07:00
4ece9900cb
Add optional argument for the TPM clock example. Update examples README
...
Signed-off-by: Dimitar Tomov <dimi@designfirst.ee>
2020-09-02 11:46:12 -07:00
32d423cf71
Add TPM clock increment example
...
Signed-off-by: Dimitar Tomov <dimi@designfirst.ee>
2020-09-02 11:46:12 -07:00
72464dc621
Release v1.9 preparation
2020-08-24 12:12:11 -05:00
c28f9ea088
Merge pull request #113 from dgarske/oldnames
...
Fix when building wolfSSL with old names `NO_OLD_WC_NAMES`
2020-07-31 17:14:54 -05:00
ebd064d38a
Fix when building wolfSSL with old names `NO_OLD_WC_NAMES`.
2020-07-31 14:47:40 -07:00
6f822d62f5
Cleanups, removed unused code from the PCR examples
...
* Policy session is not used for PCR extend and reset
* Policy session is not required for generating a Quote using AIK under SRK
Signed-off-by: Dimitar Tomov <dimi@designfirst.ee>
2020-07-31 22:22:39 +03:00
11beec190b
Merge pull request #108 from dgarske/signed_timestamp
...
Improvements to the signed timestamp example
2020-07-23 17:40:27 -05:00
b78e93f9ca
Documentation and code cleanups. Enhanced pcr/quote example to use the existing SRK. Added "-?" help usage on PCR examples. Switched to atoi. Fixed .am issue in TLS example cause make dist to break. Added include of new files for make dist.
2020-07-23 09:46:06 -07:00
ebbb158959
Add script for Quote demo and detailed README about PCRs and attestation
...
Signed-off-by: Dimitar Tomov <dimi@designfirst.ee>
2020-07-23 15:52:08 +03:00
15661724d9
Change the level of debug prints for pcr examples to be normal
...
Signed-off-by: Dimitar Tomov <dimi@designfirst.ee>
2020-07-23 15:06:14 +03:00
8eb67b5bcf
Improvements to the signed timestamp example. Cleanup of the key template API's.
2020-07-21 15:24:10 -07:00
be3f9b7385
Cleanups based on peer review. Updated gitignore.
...
Signed-off-by: Dimitar Tomov <dimi@designfirst.ee>
2020-07-22 00:17:50 +03:00
a20c22e8ec
Add pcr reset example tool to compliment the TPM2 Quote example
...
Signed-off-by: Dimitar Tomov <dimi@designfirst.ee>
2020-07-21 17:11:44 +03:00
27995a1142
Add NO_WOLFCRYPT support to extend example, input file holds SHA256 digest
...
With Wolfcrypt enabled, the extend tool computes the hash from the input data
contained in the user file(argument).
With WolfCrypt disabled, the extend tool expects the input data contained in
the user file(argument) is already a computed SHA256 hash digest.
Signed-off-by: Dimitar Tomov <dimi@designfirst.ee>
2020-07-21 16:42:00 +03:00
70d2f4a9b3
Quickfix for missing header when building with NO_WOLFCRYPT
...
Signed-off-by: Dimitar Tomov <dimi@designfirst.ee>
2020-07-21 16:42:00 +03:00
4b33d75fcc
Quick fix for when bad arguments are passed to examples
...
Otherwise, TPM2_Cleanup() generated an error in TPM2_Shutdown,
because TPM2_DEV passed the NULL check, but was not initalized.
Since TPM2_DEV was not still open.
Signed-off-by: Dimitar Tomov <dimi@designfirst.ee>
2020-07-20 15:34:24 +03:00
b2e2884c6b
Enable pcr extend tool to accept user file for input data
...
Signed-off-by: Dimitar Tomov <dimi@designfirst.ee>
2020-07-20 15:34:24 +03:00
2de6ff80cb
Add pcr extend helper tool to compliment the TPM2 Quote example
...
Signed-off-by: Dimitar Tomov <dimi@designfirst.ee>
2020-07-20 15:34:24 +03:00
16088ac6be
Modify quote example to support parameters for PCR and file output
...
Signed-off-by: Dimitar Tomov <dimi@designfirst.ee>
2020-07-19 19:31:19 +03:00
3f9ebe79c6
Quick fixes of markdown headings in the examples README.md
...
Signed-off-by: Dimitar Tomov <dimi@designfirst.ee>
2020-07-17 18:16:15 +03:00
08cd7a0836
Add debug prints to the TPM2 Quote example plus changes from peer review
...
Signed-off-by: Dimitar Tomov <dimi@designfirst.ee>
2020-07-17 18:10:43 +03:00
0ad05b9554
Fix whitespaces and tabs in include.am files
...
Signed-off-by: Dimitar Tomov <dimi@designfirst.ee>
2020-07-17 18:09:52 +03:00
c4339fbb5a
Add example of generating a TPM2.0 Quote using wolfTPM
...
Signed-off-by: Dimitar Tomov <dimi@designfirst.ee>
2020-07-16 17:09:46 +03:00
ee3dc75d3e
Fixes for SPI CS auto-detection on Infineon SLB9670. I was able to reproduce issue on Pi 3b+. First run detects on `/dev/spidev0.1` then finds on `/dev/spidev0.0` afterwards (odd).
2020-07-13 11:16:18 -07:00
David Garske
Eric Blankenhorn
Tesfa Mael
John Bland
John Bland
Elms
Dimitar Tomov
Dimitar Tomov