WolfSSL
/
wolfTPM
mirror of https://github.com/wolfSSL/wolfTPM.git
1
0
Fork 0
Code Issues Releases Wiki Activity
wolfTPM/wolftpm/tpm2_types.h

1206 lines
38 KiB
C
Raw Blame History

/* tpm2_types.h
*
* Copyright (C) 2006-2026 wolfSSL Inc.
*
* This file is part of wolfTPM.
*
* wolfTPM is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation; either version 3 of the License, or
* (at your option) any later version.
*
* wolfTPM is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License
* along with this program; if not, write to the Free Software
* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1335, USA
*/
#ifndef __TPM2_TYPES_H__
#define __TPM2_TYPES_H__
/* Freestanding targets with no hosted C library define WOLFTPM_NO_STD_HEADERS
* and provide the fixed-width integer types (and the mem/str functions used via
* the X* wrappers) through user_settings.h instead of the standard headers. */
#ifndef WOLFTPM_NO_STD_HEADERS
#include <stdint.h>
#endif
#ifdef WOLFTPM_USER_SETTINGS
#include "user_settings.h"
#elif defined(USE_HAL_DRIVER) && !defined(HAVE_CONFIG_H)
/* STM Configuration File (generated by CubeMX) */
#include "wolfSSL.I-CUBE-wolfTPM_conf.h"
#else
/* use generated library options.h */
#include <wolftpm/options.h>
#endif
#ifndef WOLFTPM2_NO_WOLFCRYPT
#ifdef WOLFSSL_USER_SETTINGS
#include "user_settings.h"
#elif defined(USE_HAL_DRIVER) && !defined(HAVE_CONFIG_H)
/* STM Configuration File (generated by CubeMX) */
#include "wolfSSL.I-CUBE-wolfSSL_conf.h"
#else
/* use generated library options.h */
#include <wolfssl/options.h>
#endif
#endif
#include <wolftpm/visibility.h>
/* Resolve the TPM 2.0 v1.85 / post-quantum feature macros into a single,
* consistent set used by every translation unit. Entry points (set by the
* user or by configure) are the umbrella WOLFTPM_V185 / WOLFTPM_PQC and the
* WOLFTPM_NO_* opt-outs; the positive per-algorithm and per-operation macros
* below are derived here so the rest of the tree only tests the resolved set.
*
* WOLFTPM_V185 - full v1.85 spec; guards the non-PQC additions
* (firmware/SVN properties, alg-name/id mappings,
* debug print) and additively defines WOLFTPM_PQC
* WOLFTPM_PQC - ML-DSA / ML-KEM only (lean entry point; excludes
* the non-PQC v1.85 code guarded by WOLFTPM_V185)
* WOLFTPM_MLDSA - ML-DSA family: WOLFTPM_MLDSA_SIGN / _VERIFY /
* WOLFTPM_HASH_MLDSA
* WOLFTPM_MLKEM - ML-KEM family: WOLFTPM_MLKEM_ENCAP / _DECAP
*
* Everything is on by default once its parent is enabled; opt out with the
* matching WOLFTPM_NO_* macro. Existing --enable-v185 builds are unchanged.
*/
/* Tier 1: the full v1.85 umbrella additively enables the PQC subset. The
* non-PQC v1.85 spec code stays guarded by WOLFTPM_V185 directly, so a lean
* WOLFTPM_PQC build (without WOLFTPM_V185) leaves it out. */
#ifdef WOLFTPM_V185
#if !defined(WOLFTPM_NO_PQC) && !defined(WOLFTPM_PQC)
#define WOLFTPM_PQC
#endif
#endif
/* Tier 2: PQC algorithm families. */
#ifdef WOLFTPM_PQC
#if !defined(WOLFTPM_NO_MLDSA) && !defined(WOLFTPM_MLDSA)
#define WOLFTPM_MLDSA
#endif
#if !defined(WOLFTPM_NO_MLKEM) && !defined(WOLFTPM_MLKEM)
#define WOLFTPM_MLKEM
#endif
#endif
/* Tier 3: per-operation gates under each family. */
#ifdef WOLFTPM_MLDSA
#if !defined(WOLFTPM_NO_MLDSA_SIGN) && !defined(WOLFTPM_MLDSA_SIGN)
#define WOLFTPM_MLDSA_SIGN
#endif
#if !defined(WOLFTPM_NO_MLDSA_VERIFY) && !defined(WOLFTPM_MLDSA_VERIFY)
#define WOLFTPM_MLDSA_VERIFY
#endif
#if !defined(WOLFTPM_NO_HASH_MLDSA) && !defined(WOLFTPM_HASH_MLDSA)
#define WOLFTPM_HASH_MLDSA
#endif
#endif
#ifdef WOLFTPM_MLKEM
#if !defined(WOLFTPM_NO_MLKEM_ENCAP) && !defined(WOLFTPM_MLKEM_ENCAP)
#define WOLFTPM_MLKEM_ENCAP
#endif
#if !defined(WOLFTPM_NO_MLKEM_DECAP) && !defined(WOLFTPM_MLKEM_DECAP)
#define WOLFTPM_MLKEM_DECAP
#endif
#endif
/* Consistency fold-ups: drop a feature whose prerequisites are all disabled. */
#if defined(WOLFTPM_HASH_MLDSA) && !defined(WOLFTPM_MLDSA_SIGN) && \
!defined(WOLFTPM_MLDSA_VERIFY)
#undef WOLFTPM_HASH_MLDSA
#endif
#if defined(WOLFTPM_MLDSA) && !defined(WOLFTPM_MLDSA_SIGN) && \
!defined(WOLFTPM_MLDSA_VERIFY)
#undef WOLFTPM_MLDSA
#endif
#if defined(WOLFTPM_MLKEM) && !defined(WOLFTPM_MLKEM_ENCAP) && \
!defined(WOLFTPM_MLKEM_DECAP)
#undef WOLFTPM_MLKEM
#endif
#if defined(WOLFTPM_PQC) && !defined(WOLFTPM_MLDSA) && !defined(WOLFTPM_MLKEM)
#undef WOLFTPM_PQC
#endif
#ifdef WOLFTPM_WINAPI
#ifdef _WIN32
#include <winsock2.h>
#endif
#include <windows.h>
#endif
#ifdef __cplusplus
extern "C" {
#endif
/* ---------------------------------------------------------------------------*/
/* TPM TYPES */
/* ---------------------------------------------------------------------------*/
typedef uint8_t UINT8;
typedef uint8_t BYTE;
typedef int8_t INT8;
#if !defined(BOOL) && !defined(HAVE_BOOL)
typedef int BOOL;
#endif
typedef uint16_t UINT16;
typedef int16_t INT16;
typedef uint32_t UINT32;
typedef int32_t INT32;
#ifndef _W64
typedef uint64_t UINT64;
typedef int64_t INT64;
#endif
#ifndef YES
#define YES 1
#endif
#ifndef NO
#define NO 0
#endif
/* Debug build options */
#if defined(WOLFTPM_DEBUG_VERBOSE) && !defined(DEBUG_WOLFTPM)
#define DEBUG_WOLFTPM
#endif
/* WOLFTPM_DEBUG_SECRETS is an opt-in developer-only flag that enables
* printing of sensitive material (auth values, session keys, bind keys,
* HMAC keys, hierarchy auth, encryption secrets) to stdout when combined
* with DEBUG_WOLFTPM / WOLFTPM_DEBUG_VERBOSE. It is NOT enabled by any
* configure option and must be defined manually.
*
* WARNING: Never enable WOLFTPM_DEBUG_SECRETS in production builds, on
* devices that log stdout to persistent storage, or in any build where
* the output could be captured by an untrusted party. */
#ifdef WOLFTPM_DEBUG_SECRETS
#ifdef _MSC_VER
#pragma message("WARNING: WOLFTPM_DEBUG_SECRETS enabled — sensitive material will be printed to stdout. Disable for production.")
#else
#warning "WOLFTPM_DEBUG_SECRETS enabled — sensitive material will be printed to stdout. Disable for production."
#endif
#endif
/* ---------------------------------------------------------------------------*/
/* WOLFCRYPT */
/* ---------------------------------------------------------------------------*/
#ifndef WOLFTPM2_NO_WOLFCRYPT
/* enforce NO_THREAD_LS within wolfTPM */
#ifdef NO_THREAD_LS
#undef HAVE_THREAD_LS
#endif
#include <wolfssl/wolfcrypt/settings.h>
#include <wolfssl/wolfcrypt/types.h>
#include <wolfssl/wolfcrypt/logging.h>
#include <wolfssl/wolfcrypt/error-crypt.h>
#include <wolfssl/wolfcrypt/hash.h>
#include <wolfssl/wolfcrypt/rsa.h>
#include <wolfssl/wolfcrypt/ecc.h>
#if defined(HAVE_PK_CALLBACKS) && !defined(NO_RSA) && defined(WC_RSA_PSS)
#include <wolfssl/wolfcrypt/asn.h> /* for enum Hash_Sum */
#endif
#include <wolfssl/wolfcrypt/asn_public.h>
#include <wolfssl/wolfcrypt/hmac.h>
#include <wolfssl/wolfcrypt/aes.h>
#ifdef WOLF_CRYPTO_CB
#include <wolfssl/wolfcrypt/cryptocb.h>
#elif defined(WOLF_CRYPTO_DEV)
/* old name for crypto callback support */
#include <wolfssl/wolfcrypt/cryptodev.h>
#endif
#ifndef WOLFCRYPT_ONLY
/* for additional error codes */
#include <wolfssl/ssl.h> /* for wolfSSL_ERR_reason_error_string */
#endif
/* coexist-enabled wolfSSL only exposes WC_AES_BLOCK_SIZE; alias classic name */
#if defined(WC_NO_COMPAT_AES_BLOCK_SIZE) && !defined(AES_BLOCK_SIZE)
#define AES_BLOCK_SIZE WC_AES_BLOCK_SIZE
#endif
#if defined(DEBUG_WOLFTPM) && !defined(WOLFTPM_NO_STD_HEADERS)
#include <stdio.h>
#endif
#include <wolfssl/version.h>
#if defined(LIBWOLFSSL_VERSION_HEX) && LIBWOLFSSL_VERSION_HEX < 0x03015004
/* The wc_HashFree was added in v3.15.4, so use stub to allow building */
#define wc_HashFree(h, t) (0)
#endif
#if defined(LIBWOLFSSL_VERSION_HEX) && LIBWOLFSSL_VERSION_HEX < 0x05008004
/* wc_ForceZero was first declared in wolfssl/wolfcrypt/memory.h at
* v5.8.4. Mirror the upstream byte-wise volatile zero so older
* wolfSSL releases still build wolfTPM. */
static WC_INLINE void wc_ForceZero(void* mem, size_t len)
{
volatile byte* z = (volatile byte*)mem;
while (len--) *z++ = 0;
}
#endif
#define ENCODING_TYPE_PEM 1 /* CTC_FILETYPE_PEM */
#define ENCODING_TYPE_ASN1 2 /* CTC_FILETYPE_ASN1 */
#ifndef WOLFSSL_HAVE_ECC_KEY_GET_PRIV
#define wc_ecc_key_get_priv(key) (&((key)->k))
#define WOLFSSL_HAVE_ECC_KEY_GET_PRIV
#endif
#ifndef PRIVATE_KEY_LOCK
#define PRIVATE_KEY_LOCK() do {} while (0)
#endif
#ifndef PRIVATE_KEY_UNLOCK
#define PRIVATE_KEY_UNLOCK() do {} while (0)
#endif
#else
#ifndef WOLFTPM_NO_STD_HEADERS
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#endif
typedef uint8_t byte;
typedef uint16_t word16;
typedef uint32_t word32;
typedef uint64_t word64;
/* Errors from wolfssl/wolfcrypt/error-crypt.h */
#define BAD_MUTEX_E -106 /* Bad mutex operation */
#define WC_TIMEOUT_E -107 /* timeout error */
#define MEMORY_E -125 /* out of memory error */
#define BUFFER_E -132 /* output buffer too small or input too large */
#define BAD_FUNC_ARG -173 /* Bad function argument provided */
#define NOT_COMPILED_IN -174 /* Feature not compiled in */
#define LENGTH_ONLY_E -202 /* Returning output length only */
/* wolfCrypt is not compiled in, so wolfssl/wolfcrypt/memory.h is not
* available. Mirror the upstream volatile byte wipe so callers can
* still zero secrets without the compiler eliding the store. */
static inline void wc_ForceZero(void* mem, size_t len)
{
volatile byte* z = (volatile byte*)mem;
while (len--) *z++ = 0;
}
#define ENCODING_TYPE_PEM CTC_FILETYPE_PEM
#define ENCODING_TYPE_ASN1 CTC_FILETYPE_ASN1
/* wolfCrypt (which normally defines this) is not compiled in; provide an
* overridable fallback so the WOLFTPM2_ECC_DEFAULT_CURVE selection below
* still evaluates under -Werror=undef. Keeps the historical P256 default;
* override via -DECC_MIN_KEY_SZ to raise it. */
#ifndef ECC_MIN_KEY_SZ
#define ECC_MIN_KEY_SZ 256
#endif
#ifndef WOLFTPM_CUSTOM_TYPES
#ifndef WOLFTPM2_NO_HEAP
#define XMALLOC(s, h, t) malloc((size_t)(s))
#define XFREE(p, h, t) free(p)
#endif
#define XMEMCPY(d,s,l) memcpy((d),(s),(l))
#define XMEMMOVE(d,s,l) memmove((d),(s),(l))
#define XMEMSET(b,c,l) memset((b),(c),(l))
#define XMEMCMP(s1,s2,n) memcmp((s1),(s2),(n))
#define XSTRLEN(s1) strlen((s1))
#define XSTRCMP(s1,s2) strcmp((s1),(s2))
#define XSTRNCMP(s1,s2,n) strncmp((s1),(s2),(n))
#define XSTRSTR(s1,s2) strstr((s1),(s2))
#define XSTRNCMP(s1,s2,n) strncmp((s1),(s2),(n))
#endif /* !WOLFTPM_CUSTOM_TYPES */
/* Endianness */
#ifndef BIG_ENDIAN_ORDER
#define LITTLE_ENDIAN_ORDER
#endif
/* GCC Version */
#ifndef __GNUC_PREREQ
#if defined(__GNUC__) && defined(__GNUC_MINOR__)
#define __GNUC_PREREQ(maj, min) \
((__GNUC__ << 16) + __GNUC_MINOR__ >= ((maj) << 16) + (min))
#else
#define __GNUC_PREREQ(maj, min) (0) /* not GNUC */
#endif
#endif
#if !defined(WOLFTPM_CUSTOM_STDIO) && !defined(NO_FILESYSTEM)
/* stdio, default case */
#define XFILE FILE*
#define XFOPEN fopen
#define XFSEEK fseek
#define XFTELL ftell
#define XREWIND rewind
#define XFREAD fread
#define XFWRITE fwrite
#define XFCLOSE fclose
#define XSEEK_END SEEK_END
#define XBADFILE NULL
#define XFGETS fgets
#define XFEOF feof
#endif
/* set up thread local storage if available */
#ifdef HAVE_THREAD_LS
#if defined(_MSC_VER)
#define THREAD_LS_T __declspec(thread)
/* Thread local storage only in FreeRTOS v8.2.1 and higher */
#elif defined(FREERTOS) || defined(FREERTOS_TCP) || \
defined(WOLFSSL_ZEPHYR)
#define THREAD_LS_T
#else
#define THREAD_LS_T __thread
#endif
#else
#define THREAD_LS_T
#endif
#endif /* !WOLFTPM2_NO_WOLFCRYPT */
#ifndef WC_RSA_EXPONENT
#define WC_RSA_EXPONENT 65537L
#endif
#ifndef OFFSETOF
#if defined(__clang__) || (defined(__GNUC__) && (__GNUC__ >= 4))
#define OFFSETOF(type, field) __builtin_offsetof(type, field)
#else
#define OFFSETOF(type, field) ((size_t)&(((type *)0)->field))
#endif
#endif
/* if using older wolfSSL that does not have the pthread mutex initializer */
#ifndef WOLFSSL_MUTEX_INITIALIZER
#if defined(WOLFSSL_PTHREADS)
#define WOLFSSL_MUTEX_INITIALIZER PTHREAD_MUTEX_INITIALIZER
#endif
#endif
#ifndef WOLFSSL_MUTEX_INITIALIZER_CLAUSE
#ifdef WOLFSSL_MUTEX_INITIALIZER
#define WOLFSSL_MUTEX_INITIALIZER_CLAUSE(lockname) = WOLFSSL_MUTEX_INITIALIZER
#else
#define WOLFSSL_MUTEX_INITIALIZER_CLAUSE(lockname) /* null expansion */
#endif
#endif
#ifndef WOLFTPM_CUSTOM_TYPES
#ifndef WOLFTPM_NO_STD_HEADERS
#include <stdlib.h>
#endif
#define XSTRTOUL(s,e,b) strtoul((s),(e),(b))
#define XATOI(s) atoi((s))
#endif
/* make sure file IO macros are available for examples */
#ifndef XFEOF /* used in pcr/extend example */
#define XFEOF feof
#endif
#ifndef XREWIND /* used in tpm_test_keys.c */
#ifdef XFREWIND
#define XREWIND XFREWIND
#else
#define XREWIND rewind
#endif
#endif
/* enable way for customer to override printf */
#ifdef XPRINTF
#undef printf
#define printf XPRINTF
#endif
/* check if locking / mutex should be enabled */
#if defined(SINGLE_THREADED)
#undef WOLFTPM_NO_LOCK
#define WOLFTPM_NO_LOCK
#endif
/* Helper to convert macro to string */
#ifndef XSTRINGIFY
#define XSTRINGIFY(s) STRINGIFY(s)
#define STRINGIFY(s) #s
#endif
/* ---------------------------------------------------------------------------*/
/* TPM HARDWARE TYPE */
/* ---------------------------------------------------------------------------*/
/* Microchip ATTPM20 */
/* #define WOLFTPM_MICROCHIP */
/* #define WOLFTPM_MCHP (old) - for backwards compatibility */
#if defined(WOLFTPM_MCHP) && !defined(WOLFTPM_MICROCHIP)
#define WOLFTPM_MICROCHIP
#endif
/* ST ST33TP TPM 2.0 */
/* #define WOLFTPM_ST33 */
/* Nuvoton NPCT75x TPM 2.0 module */
/* #define WOLFTPM_NUVOTON */
/* Infineon SLB9670 TPM 2.0 (default) */
/* #define WOLFTPM_SLB9670 */
/* #define WOLFTPM_SLB9672 */
/* Chip Specific Settings */
#ifdef WOLFTPM_MICROCHIP
/* Microchip ATTPM20 */
/* Requires SPI wait states */
#ifndef WOLFTPM_CHECK_WAIT_STATE
#define WOLFTPM_CHECK_WAIT_STATE
#endif
/* Max: 36MHz (has issues so using 33MHz) */
#define TPM2_SPI_MAX_HZ_MICROCHIP 33000000
#ifndef TPM2_SPI_MAX_HZ
#define TPM2_SPI_MAX_HZ TPM2_SPI_MAX_HZ_MICROCHIP
#endif
#elif defined(WOLFTPM_ST33)
/* ST ST33TPM20 modules */
/* Requires wait state support */
#ifndef WOLFTPM_CHECK_WAIT_STATE
#define WOLFTPM_CHECK_WAIT_STATE
#endif
/* Max: 33MHz */
#define TPM2_SPI_MAX_HZ_ST 33000000
#ifndef TPM2_SPI_MAX_HZ
#define TPM2_SPI_MAX_HZ TPM2_SPI_MAX_HZ_ST
#endif
#elif defined(WOLFTPM_NUVOTON)
/* Nuvoton NPCT75x module */
/* Requires wait state support */
#ifndef WOLFTPM_CHECK_WAIT_STATE
#define WOLFTPM_CHECK_WAIT_STATE
#endif
#define TPM2_SPI_MAX_HZ_NUVOTON 43000000
#ifndef TPM2_SPI_MAX_HZ
/* Max: 43MHz */
#define TPM2_SPI_MAX_HZ TPM2_SPI_MAX_HZ_NUVOTON
#endif
#elif defined(WOLFTPM_SEALSQ)
/* SealSQ QVault TPM */
/* Requires wait state support */
#ifndef WOLFTPM_CHECK_WAIT_STATE
#define WOLFTPM_CHECK_WAIT_STATE
#endif
#define TPM2_SPI_MAX_HZ_SEALSQ 33000000
#ifndef TPM2_SPI_MAX_HZ
/* Max: 33MHz */
#define TPM2_SPI_MAX_HZ TPM2_SPI_MAX_HZ_SEALSQ
#endif
#else
/* Infineon OPTIGA SLB9670/SLB9672/SLB9673 */
#ifdef WOLFTPM_SLB9670
/* Max: 43MHz */
#define TPM2_SPI_MAX_HZ_INFINEON 43000000
#ifndef MAX_AES_KEY_BITS
#define MAX_AES_KEY_BITS 128
#endif
#elif !defined(WOLFTPM_AUTODETECT)
#ifdef WOLFTPM_I2C
#undef WOLFTPM_SLB9673
#define WOLFTPM_SLB9673
#else
#undef WOLFTPM_SLB9672
#define WOLFTPM_SLB9672
#endif
/* Max: 33MHz */
#define TPM2_SPI_MAX_HZ_INFINEON 33000000
#endif
#ifndef TPM2_SPI_MAX_HZ
#define TPM2_SPI_MAX_HZ TPM2_SPI_MAX_HZ_INFINEON
#endif
#endif
/* Auto-chip detection requires SPI wait state support and safe SPI bus speed */
#ifdef WOLFTPM_AUTODETECT
/* SPI wait state checking must be enabled */
#undef WOLFTPM_CHECK_WAIT_STATE
#define WOLFTPM_CHECK_WAIT_STATE
/* use a safe MHz (minimum of above) */
#undef TPM2_SPI_MAX_HZ
#define TPM2_SPI_MAX_HZ 33000000
/* always perform self-test (some chips require) */
#undef WOLFTPM_PERFORM_SELFTEST
#define WOLFTPM_PERFORM_SELFTEST
#endif
/* On Linux with autodetect, also try /dev/tpm0 kernel driver at runtime */
#if defined(WOLFTPM_AUTODETECT) && defined(__linux__) && \
!defined(WOLFTPM_LINUX_DEV) && !defined(WOLFTPM_SWTPM) && \
!defined(WOLFTPM_WINAPI) && !defined(WOLFTPM_FWTPM_HAL)
#define WOLFTPM_LINUX_DEV_AUTODETECT
#endif
/* Chip defaults */
#if defined(WOLFTPM_SLB9672) || defined(WOLFTPM_SLB9673)
#ifndef MAX_RSA_KEY_BITS
#define MAX_RSA_KEY_BITS 4096
#endif
#ifndef MAX_ECC_KEY_BITS
#define MAX_ECC_KEY_BITS 384
#endif
#ifndef HASH_COUNT
#define HASH_COUNT 3
#endif
#endif
/* ---------------------------------------------------------------------------*/
/* ALGORITHMS */
/* ---------------------------------------------------------------------------*/
#define TPM_MD5_DIGEST_SIZE 16
#define TPM_SHA_DIGEST_SIZE 20
#define TPM_SHA224_DIGEST_SIZE 28
#define TPM_SHA256_DIGEST_SIZE 32
#define TPM_SHA384_DIGEST_SIZE 48
#define TPM_SHA512_DIGEST_SIZE 64
#ifndef TPM_MAX_BLOCK_SIZE
#define TPM_MAX_BLOCK_SIZE 128
#endif
#ifndef TPM_MAX_DIGEST_SIZE
#define TPM_MAX_DIGEST_SIZE TPM_SHA512_DIGEST_SIZE
#endif
/* ---------------------------------------------------------------------------*/
/* CONFIGURABLE LIMITS */
/* ---------------------------------------------------------------------------*/
#ifndef MAX_SPI_FRAMESIZE
#if defined(WOLFSSL_ESPIDF)
/* ESP32 has a firm limit of 64 for burst + header. */
#define MAX_SPI_FRAMESIZE 60
#define ESP_SPI_ADDITIONAL_FRAME_BUFFER 4
#else
#define MAX_SPI_FRAMESIZE 64
#endif
#endif
#ifndef TPM_STARTUP_TEST_TRIES
#define TPM_STARTUP_TEST_TRIES 2
#endif
#ifndef TPM_TIMEOUT_TRIES
#if defined(WOLFTPM_LINUX_DEV) || defined(WOLFTPM_SWTPM) || defined(WOLFTPM_WINAPI)
#define TPM_TIMEOUT_TRIES 0
#else
#define TPM_TIMEOUT_TRIES 1000000
#endif
#endif
#ifndef TPM_SPI_WAIT_RETRY
#define TPM_SPI_WAIT_RETRY 50
#endif
/* Default number of times to transparently resubmit a command on TPM_RC_RETRY.
* The TPM returns TPM_RC_RETRY when momentarily busy (e.g. persisting the
* daUsed flag on first auth use of a non-noDA key). Disabled by default (0) to
* keep the raw TPM response code; opt in at runtime with TPM2_SetCommandRetries
* or at build time with -DWOLFTPM_MAX_RETRIES=N. Define WOLFTPM_NO_RETRY to
* compile the handling out entirely. */
#ifndef WOLFTPM_MAX_RETRIES
#define WOLFTPM_MAX_RETRIES 0
#endif
/* WOLFTPM_MAX_RETRIES is always defined by here, so the check below stays
* -Wundef-clean even when WOLFTPM_NO_RETRY is set without WOLFTPM_MAX_RETRIES. */
#if defined(WOLFTPM_NO_RETRY) && (WOLFTPM_MAX_RETRIES > 0)
#error "WOLFTPM_NO_RETRY conflicts with WOLFTPM_MAX_RETRIES > 0"
#endif
#ifndef MAX_SYM_BLOCK_SIZE
#define MAX_SYM_BLOCK_SIZE 20
#endif
#ifndef MAX_SYM_KEY_BYTES
#define MAX_SYM_KEY_BYTES 32
#endif
#ifndef LABEL_MAX_BUFFER
/* the TCG specification defines a label size not exceed 32 bytes */
#define LABEL_MAX_BUFFER 32
#endif
#ifndef MAX_RSA_KEY_BITS
#define MAX_RSA_KEY_BITS 2048
#endif
#ifndef MAX_RSA_KEY_BYTES
/* the TCG specification defines an RSA key as two max values */
#define MAX_RSA_KEY_BYTES (((MAX_RSA_KEY_BITS+7)/8)*2)
#endif
#ifndef MAX_ECC_KEY_BITS
#define MAX_ECC_KEY_BITS 521
#endif
#ifndef MAX_ECC_KEY_BYTES
#define MAX_ECC_KEY_BYTES ((MAX_ECC_KEY_BITS+7)/8)
#endif
#ifndef MAX_AES_KEY_BITS
#define MAX_AES_KEY_BITS 256
#endif
#ifndef MAX_AES_BLOCK_SIZE_BYTES
#define MAX_AES_BLOCK_SIZE_BYTES 16
#endif
#ifndef MAX_AES_KEY_BYTES
#define MAX_AES_KEY_BYTES (MAX_AES_KEY_BITS/8)
#endif
/* ---------------------------------------------------------------------------*/
/* IMPLEMENTATION SPECIFIC VALUES */
/* ---------------------------------------------------------------------------*/
/* Optional delay between polling */
#if defined(__linux__) && !defined(XTPM_WAIT)
/* Avoid excessive polling.
* For Infineon SLB9670 and SLB9672 adding 10us delay improves performance
* and prevents issue with rapid use at higher speeds */
#ifndef XTPM_WAIT_POLLING_US
#define XTPM_WAIT_POLLING_US 10 /* 0.01ms */
#endif
#include <unistd.h>
#define XTPM_WAIT() usleep(XTPM_WAIT_POLLING_US);
#elif defined(WOLFSSL_ESPIDF)
#define XTPM_WAIT() vTaskDelay(pdMS_TO_TICKS(1))
#endif
#ifndef XTPM_WAIT
#define XTPM_WAIT() /* just poll without delay by default */
#endif
/* sleep helper, used in firmware update */
#ifndef XSLEEP_MS
#if defined(WOLFTPM_ZEPHYR)
/* For Zephyr, use k_sleep() instead of usleep() */
#include <zephyr/kernel.h>
#define XSLEEP_MS(ms) k_msleep(ms)
#elif defined(WOLFSSL_ESPIDF)
#define XSLEEP_MS(ms) vTaskDelay(pdMS_TO_TICKS(ms))
#elif defined(__linux__) || defined(__ARM_EABI__)
#include <unistd.h>
static inline void XSLEEP_MS(unsigned int ms) {
if (ms >= 1000)
sleep(ms / 1000);
usleep((ms % 1000) * 1000);
}
#elif defined(_POSIX_C_SOURCE) && _POSIX_C_SOURCE >= 199309L
#include <time.h>
static inline void XSLEEP_MS(unsigned int ms) {
struct timespec ts;
ts.tv_sec = ms / 1000;
ts.tv_nsec = (ms % 1000) * 1000000;
nanosleep(&ts, NULL);
}
#elif defined(WIN32)
#include <windows.h>
#define XSLEEP_MS(ms) Sleep(ms)
#elif defined(FREERTOS)
#define XSLEEP_MS(ms) vTaskDelay(ms)
#else
#include <unistd.h>
static inline void XSLEEP_MS(unsigned int ms) {
if (ms >= 1000)
sleep(ms / 1000);
usleep((ms % 1000) * 1000);
}
#endif
#endif
#ifndef BUFFER_ALIGNMENT
#define BUFFER_ALIGNMENT 4
#endif
#ifndef IMPLEMENTATION_PCR
#define IMPLEMENTATION_PCR 24
#endif
#ifndef PLATFORM_PCR
#define PLATFORM_PCR 24
#endif
#ifndef DRTM_PCR
#define DRTM_PCR 17
#endif
#ifndef HCRTM_PCR
#define HCRTM_PCR 0
#endif
#ifndef NUM_LOCALITIES
#define NUM_LOCALITIES 1
#endif
#ifndef WOLFTPM_LOCALITY_MAX
/* Highest TPM locality index (localities 0-4 per TPM 2.0); not NUM_LOCALITIES,
* which is the platform locality count. */
#define WOLFTPM_LOCALITY_MAX 4
#endif
#ifndef MAX_HANDLE_NUM
#define MAX_HANDLE_NUM 3
#endif
#ifndef MAX_ACTIVE_SESSIONS
#define MAX_ACTIVE_SESSIONS 64
#endif
#ifndef MAX_LOADED_SESSIONS
#define MAX_LOADED_SESSIONS 3
#endif
#ifndef MAX_SESSION_NUM
#define MAX_SESSION_NUM 3
#endif
#ifndef MAX_LOADED_OBJECTS
#define MAX_LOADED_OBJECTS 3
#endif
#ifndef MIN_EVICT_OBJECTS
#define MIN_EVICT_OBJECTS 2
#endif
#ifndef PCR_SELECT_MIN
#define PCR_SELECT_MIN ((PLATFORM_PCR+7)/8)
#endif
#ifndef PCR_SELECT_MAX
#define PCR_SELECT_MAX ((IMPLEMENTATION_PCR+7)/8)
#endif
#ifndef MAX_CONTEXT_SIZE
#define MAX_CONTEXT_SIZE 2048
#endif
#ifndef MAX_DIGEST_BUFFER
#define MAX_DIGEST_BUFFER 1024
#endif
#ifndef MAX_NV_INDEX_SIZE
#define MAX_NV_INDEX_SIZE 2048
#endif
#ifndef MAX_NV_BUFFER_SIZE
#define MAX_NV_BUFFER_SIZE 768
#endif
#ifndef MAX_CAP_BUFFER
#define MAX_CAP_BUFFER 1024
#endif
#ifndef NV_MEMORY_SIZE
#define NV_MEMORY_SIZE 16384
#endif
#ifndef NUM_STATIC_PCR
#define NUM_STATIC_PCR 16
#endif
#ifndef MAX_ALG_LIST_SIZE
#define MAX_ALG_LIST_SIZE 64
#endif
#ifndef TIMER_PRESCALE
#define TIMER_PRESCALE 100000
#endif
#ifndef PRIMARY_SEED_SIZE
#define PRIMARY_SEED_SIZE 32
#endif
#ifndef CONTEXT_ENCRYPT_ALG
#define CONTEXT_ENCRYPT_ALG TPM_ALG_AES
#endif
#ifndef CONTEXT_ENCRYPT_KEY_BITS
#define CONTEXT_ENCRYPT_KEY_BITS MAX_SYM_KEY_BITS
#endif
#ifndef CONTEXT_ENCRYPT_KEY_BYTES
#define CONTEXT_ENCRYPT_KEY_BYTES ((CONTEXT_ENCRYPT_KEY_BITS+7 )/8)
#endif
#ifndef CONTEXT_INTEGRITY_HASH_ALG
#define CONTEXT_INTEGRITY_HASH_ALG TPM_ALG_SHA256
#endif
#ifndef CONTEXT_INTEGRITY_HASH_SIZE
#define CONTEXT_INTEGRITY_HASH_SIZE SHA256_DIGEST_SIZE
#endif
#ifndef PROOF_SIZE
#define PROOF_SIZE CONTEXT_INTEGRITY_HASH_SIZE
#endif
#ifndef NV_CLOCK_UPDATE_INTERVAL
#define NV_CLOCK_UPDATE_INTERVAL 12
#endif
#ifndef NUM_POLICY_PCR
#define NUM_POLICY_PCR 1
#endif
#ifndef MAX_COMMAND_SIZE
#ifdef WOLFTPM_PQC
#define MAX_COMMAND_SIZE 8192
#else
#define MAX_COMMAND_SIZE 4096
#endif
#endif
#ifndef MAX_RESPONSE_SIZE
#ifdef WOLFTPM_PQC
#define MAX_RESPONSE_SIZE 8192
#else
#define MAX_RESPONSE_SIZE 4096
#endif
#endif
#ifndef ORDERLY_BITS
#define ORDERLY_BITS 8
#endif
#ifndef MAX_ORDERLY_COUNT
#define MAX_ORDERLY_COUNT ((1 << ORDERLY_BITS) - 1)
#endif
#ifndef ALG_ID_FIRST
#define ALG_ID_FIRST TPM_ALG_FIRST
#endif
#ifndef ALG_ID_LAST
#define ALG_ID_LAST TPM_ALG_LAST
#endif
#ifndef MAX_SYM_DATA
#define MAX_SYM_DATA 128
#endif
#ifndef MAX_RNG_ENTROPY_SIZE
#define MAX_RNG_ENTROPY_SIZE 64
#endif
#ifndef MAX_RNG_REQ_SIZE
#define MAX_RNG_REQ_SIZE 32 /* ST33 and SLB9670 max is 32-bytes */
#endif
#ifndef RAM_INDEX_SPACE
#define RAM_INDEX_SPACE 512
#endif
#ifndef RSA_DEFAULT_PUBLIC_EXPONENT
#define RSA_DEFAULT_PUBLIC_EXPONENT 0x00010001
#endif
#ifndef ENABLE_PCR_NO_INCREMENT
#define ENABLE_PCR_NO_INCREMENT 1
#endif
#ifndef CRT_FORMAT_RSA
#define CRT_FORMAT_RSA 1
#endif
#ifndef PRIVATE_VENDOR_SPECIFIC_BYTES
#define PRIVATE_VENDOR_SPECIFIC_BYTES ((MAX_RSA_KEY_BYTES/2) * (3 + CRT_FORMAT_RSA * 2))
#endif
#ifndef MAX_CAP_CC
#define MAX_CAP_CC ((TPM_CC_LAST - TPM_CC_FIRST) + 1)
#endif
#ifndef MAX_CAP_DATA
#define MAX_CAP_DATA (MAX_CAP_BUFFER - sizeof(TPM_CAP) - sizeof(UINT32))
#endif
#ifndef MAX_CAP_HANDLES
#define MAX_CAP_HANDLES (MAX_CAP_DATA / sizeof(TPM_HANDLE))
#endif
#ifdef WOLFTPM_PQC
/* Post-Quantum Cryptography (PQC) Size Definitions - TCG v185 RC4.
* These size the public TPM2B_* ABI buffers, so they MUST match the
* largest spec-defined parameter set — a client only enabling MLDSA-44
* still has to parse a TPM response that uses MLDSA-87. Internal scratch
* sizing (fwTPM, NV storage) auto-shrinks separately in fwtpm.h. */
/* ML-DSA sizes (TCG v185 RC4 Table 207) */
#ifndef MAX_MLDSA_PUB_SIZE
#define MAX_MLDSA_PUB_SIZE 2592 /* ML-DSA-87 public key */
#endif
#ifndef MAX_MLDSA_SIG_SIZE
#define MAX_MLDSA_SIG_SIZE 4627 /* ML-DSA-87 signature */
#endif
#ifndef MAX_MLDSA_PRIV_SEED_SIZE
#define MAX_MLDSA_PRIV_SEED_SIZE 32 /* Private seed Xi (spec const) */
#endif
/* ML-KEM sizes (TCG v185 RC4 Table 204) */
#ifndef MAX_MLKEM_PUB_SIZE
#define MAX_MLKEM_PUB_SIZE 1568 /* ML-KEM-1024 public key */
#endif
#ifndef MAX_MLKEM_PRIV_SEED_SIZE
#define MAX_MLKEM_PRIV_SEED_SIZE 64 /* Private seed (d||z) */
#endif
/* MAX_SIGNATURE_CTX_SIZE is for the domain separation context parameter
* passed to ML-DSA sign/verify operations. Set large enough for general use.
* Note: ML-DSA signatures themselves can be up to 4627 bytes (ML-DSA-87). */
#ifndef MAX_SIGNATURE_CTX_SIZE
#define MAX_SIGNATURE_CTX_SIZE 255 /* Domain separation context max */
#endif
/* MAX_SIGNATURE_HINT_SIZE sizes TPM2B_SIGNATURE_HINT. Holds the encoded R
* value for EdDSA signatures; zero-length for ML-DSA and other schemes.
* Part 2 Sec.11.3.9 Table 221 does not fix a numeric cap; 256 covers Ed25519
* and Ed448 encoded R sizes with headroom. */
#ifndef MAX_SIGNATURE_HINT_SIZE
#define MAX_SIGNATURE_HINT_SIZE 256
#endif
#ifndef MAX_KEM_CIPHERTEXT_SIZE
#define MAX_KEM_CIPHERTEXT_SIZE 2048
#endif
/* MAX_MLKEM_CT_SIZE aliased to avoid collision with existing MAX_KEM_CIPHERTEXT_SIZE */
#ifndef MAX_MLKEM_CT_SIZE
#define MAX_MLKEM_CT_SIZE MAX_KEM_CIPHERTEXT_SIZE
#endif
/* Compile-time sanity check */
#if MAX_MLKEM_CT_SIZE < 1568
#error "MAX_MLKEM_CT_SIZE too small for ML-KEM-1024 ciphertext (1568 bytes)"
#endif
#ifndef MAX_SHARED_SECRET_SIZE
#define MAX_SHARED_SECRET_SIZE 64
#endif
#endif /* WOLFTPM_PQC */
#ifndef HASH_COUNT
#ifndef WOLFTPM2_NO_WOLFCRYPT
/* Calculate hash count based on wolfCrypt enables */
#ifndef NO_SHA
#define HASH_COUNT_SHA1 1
#else
#define HASH_COUNT_SHA1 0
#endif
#ifndef NO_SHA256
#define HASH_COUNT_SHA256 1
#else
#define HASH_COUNT_SHA256 0
#endif
#ifdef WOLFSSL_SHA384
#define HASH_COUNT_SHA384 1
#else
#define HASH_COUNT_SHA384 0
#endif
#ifdef WOLFSSL_SHA512
#define HASH_COUNT_SHA512 1
#else
#define HASH_COUNT_SHA512 0
#endif
#ifdef WOLFSSL_SHA3
#define HASH_COUNT_SHA3 1
#else
#define HASH_COUNT_SHA3 0
#endif
#define HASH_COUNT (HASH_COUNT_SHA1 + HASH_COUNT_SHA256 + \
HASH_COUNT_SHA384 + HASH_COUNT_SHA512 + \
HASH_COUNT_SHA3)
/* make sure hash count is at least 2 */
#if HASH_COUNT < 2
#undef HASH_COUNT
#define HASH_COUNT 2
#endif
#else
/* default to 2 for non-wolfCrypt builds */
#define HASH_COUNT 2
#endif
#endif
#ifndef MAX_CAP_ALGS
#define MAX_CAP_ALGS (MAX_CAP_DATA / sizeof(TPMS_ALG_PROPERTY))
#endif
#ifndef MAX_TPM_PROPERTIES
#define MAX_TPM_PROPERTIES (MAX_CAP_DATA / sizeof(TPMS_TAGGED_PROPERTY))
#endif
#ifndef MAX_PCR_PROPERTIES
#define MAX_PCR_PROPERTIES (MAX_CAP_DATA / sizeof(TPMS_TAGGED_PCR_SELECT))
#endif
#ifndef MAX_ECC_CURVES
#define MAX_ECC_CURVES (MAX_CAP_DATA / sizeof(TPM_ECC_CURVE))
#endif
#ifndef MAX_TAGGED_POLICIES
#define MAX_TAGGED_POLICIES (MAX_CAP_DATA / sizeof(TPMS_TAGGED_POLICY))
#endif
#ifndef MAX_ACT_DATA
#define MAX_ACT_DATA (MAX_CAP_DATA / sizeof(TPMS_ACT_DATA))
#endif
#ifndef MAX_AC_HANDLES
#define MAX_AC_HANDLES 16
#endif
/* ---------------------------------------------------------------------------*/
/* WRAPPER CONFIGURATION */
/* ---------------------------------------------------------------------------*/
/* Defines the default digest algo type to use for the wrapper functions */
#ifndef WOLFTPM2_WRAP_DIGEST
#define WOLFTPM2_WRAP_DIGEST TPM_ALG_SHA256
#endif
/* Defines the default RSA key bits for the wrapper functions */
#ifndef WOLFTPM2_WRAP_RSA_KEY_BITS
#define WOLFTPM2_WRAP_RSA_KEY_BITS MAX_RSA_KEY_BITS
#endif
#ifndef WOLFTPM2_WRAP_RSA_EXPONENT
#define WOLFTPM2_WRAP_RSA_EXPONENT RSA_DEFAULT_PUBLIC_EXPONENT
#endif
#ifndef WOLFTPM2_WRAP_ECC_KEY_BITS
#define WOLFTPM2_WRAP_ECC_KEY_BITS (MAX_ECC_KEY_BITS*8)
#endif
/* Defines the library-default ECC curve used by the wrapper key templates that
* default to P256: wolfTPM2_GetKeyTemplate_ECC[_ex] and the storage/attestation
* primaries (wolfTPM2_GetKeyTemplate_ECC_SRK / _AIK, used by
* wolfTPM2_CreateSRK(TPM_ALG_ECC)). A P256 request through these follows this
* default, so a build can opt in to a stronger default (e.g. P384) without
* editing call sites. Override at build time, e.g.
* -DWOLFTPM2_ECC_DEFAULT_CURVE=TPM_ECC_NIST_P384. The matching name/sig hash is
* derived from the curve via TPM2_GetCurveHashAlg, so only the curve needs to
* be set. When left at the default of P256 the behavior is unchanged. The EK
* templates (TCG-fixed curve and auth policy), the explicit-curve IAK/IDevID
* helpers, and crypto-callback keys (curve negotiated by wolfCrypt) keep their
* exact curve. If P256 is compiled out (NO_ECC256) the default falls back to an
* enabled curve. The auto-default also honors ECC_MIN_KEY_SZ: when P256 is
* compiled in (e.g. cannot be removed under FIPS-140) but ECC_MIN_KEY_SZ
* exceeds 256, the default rises to the smallest enabled curve that meets the
* minimum (e.g. P384), rather than picking a curve below the configured
* minimum key size. */
#ifndef WOLFTPM2_ECC_DEFAULT_CURVE
#if !defined(NO_ECC256) && ECC_MIN_KEY_SZ <= 256
#define WOLFTPM2_ECC_DEFAULT_CURVE TPM_ECC_NIST_P256
#elif defined(HAVE_ECC384) && ECC_MIN_KEY_SZ <= 384
#define WOLFTPM2_ECC_DEFAULT_CURVE TPM_ECC_NIST_P384
#elif defined(HAVE_ECC521) && ECC_MIN_KEY_SZ <= 521
#define WOLFTPM2_ECC_DEFAULT_CURVE TPM_ECC_NIST_P521
#else
#define WOLFTPM2_ECC_DEFAULT_CURVE TPM_ECC_NIST_P256
#endif
#endif
#if !defined(WOLFTPM2_NO_WOLFCRYPT) && \
(defined(WOLF_CRYPTO_DEV) || defined(WOLF_CRYPTO_CB))
/* Enable the crypto callback support */
#define WOLFTPM_CRYPTOCB
#endif
#if !defined(WOLFTPM2_NO_WOLFCRYPT) && defined(WOLFSSL_CERT_GEN) && \
(!defined(NO_RSA) || defined(HAVE_ECC))
/* Enable the certificate generation support */
#define WOLFTPM2_CERT_GEN
#endif
#if !defined(WOLFTPM2_NO_HEAP) && defined(WOLFSSL_PEM_TO_DER) && \
(defined(WOLFSSL_CERT_EXT) || defined(WOLFSSL_PUB_PEM_TO_DER)) && \
!defined(NO_ASN)
/* Enable the certificate PEM decode support */
#define WOLFTPM2_PEM_DECODE
#endif
/* Firmware upgrade supported for Infineon SLB9672/SLB9673 and STM ST33. */
/* If firmware upgrade is requested but none of these vendors (or AUTODETECT)
* are enabled, turn it off to avoid building unusable code. */
#if defined(WOLFTPM_FIRMWARE_UPGRADE) && (!defined(WOLFTPM_AUTODETECT) && \
(!defined(WOLFTPM_SLB9672) && !defined(WOLFTPM_SLB9673) && \
!defined(WOLFTPM_ST33)))
#undef WOLFTPM_FIRMWARE_UPGRADE
#endif
#if !defined(WOLFTPM2_NO_WOLFCRYPT) && \
!defined(NO_AES) && defined(WOLFSSL_AES_CFB) && !defined(NO_HMAC)
/* Support for importing external private keys */
#define WOLFTPM2_PRIVATE_IMPORT
#endif
/* ---------------------------------------------------------------------------*/
/* ENDIANNESS HELPERS */
/* ---------------------------------------------------------------------------*/
#ifdef __ICCARM__
#include "intrinsics.h"
#endif
#ifdef INTEL_INTRINSICS
/* for non visual studio probably need no long version, 32 bit only
* i.e., _rotl and _rotr */
#ifndef WOLFTPM_NO_STD_HEADERS
#include <stdlib.h> /* get intrinsic definitions */
#endif
#pragma intrinsic(_lrotl, _lrotr)
static inline word32 rotlFixed(word32 x, word32 y) {
return y ? _lrotl(x, y) : x;
}
static inline word32 rotrFixed(word32 x, word32 y) {
return y ? _lrotr(x, y) : x;
}
#elif defined(__CCRX__)
#include <builtin.h> /* get intrinsic definitions */
static inline word32 rotlFixed(word32 x, word32 y) {
return _builtin_rotl(x, y);
}
static inline word32 rotrFixed(word32 x, word32 y) {
return _builtin_rotr(x, y);
}
#else /* generic */
/* This routine performs a left circular arithmetic shift of <x> by <y> value. */
static inline word32 rotlFixed(word32 x, word32 y) {
return (x << y) | (x >> (sizeof(y) * 8 - y));
}
/* This routine performs a right circular arithmetic shift of <x> by <y> value. */
static inline word32 rotrFixed(word32 x, word32 y)
{
return (x >> y) | (x << (sizeof(y) * 8 - y));
}
#endif
static inline word16 ByteReverseWord16(word16 value)
{
#if defined(__ICCARM__)
return (word16)__REV16(value);
#elif defined(KEIL_INTRINSICS)
return (word16)__rev16(value);
#elif defined(__GNUC_PREREQ) && __GNUC_PREREQ(4, 3)
return (word16)__builtin_bswap16(value);
#else
return (value >> 8) | (value << 8);
#endif
}
static inline word32 ByteReverseWord32(word32 value)
{
#if defined(WOLF_ALLOW_BUILTIN) && defined(__GNUC_PREREQ) && __GNUC_PREREQ(4, 3)
return (word32)__builtin_bswap32(value);
#elif defined(PPC_INTRINSICS)
/* PPC: load reverse indexed instruction */
return (word32)__lwbrx(&value,0);
#elif defined(__ICCARM__)
return (word32)__REV(value);
#elif defined(KEIL_INTRINSICS)
return (word32)__rev(value);
#elif defined(__CCRX__)
return (word32)_builtin_revl(value);
#elif defined(WOLFSSL_BYTESWAP32_ASM) && defined(__GNUC__) && \
defined(__aarch64__)
__asm__ volatile (
"REV32 %0, %0 \n"
: "+r" (value)
:
);
return value;
#elif defined(WOLFSSL_BYTESWAP32_ASM) && defined(__GNUC__) && \
(defined(__thumb__) || defined(__arm__))
__asm__ volatile (
"REV %0, %0 \n"
: "+r" (value)
:
);
return value;
#elif defined(FAST_ROTATE)
/* 5 instructions with rotate instruction, 9 without */
return (rotrFixed(value, 8U) & 0xff00ff00) |
(rotlFixed(value, 8U) & 0x00ff00ff);
#else
/* 6 instructions with rotate instruction, 8 without */
value = ((value & 0xFF00FF00) >> 8) | ((value & 0x00FF00FF) << 8);
return rotlFixed(value, 16U);
#endif
}
static inline word64 ByteReverseWord64(word64 value)
{
#if defined(WOLF_ALLOW_BUILTIN) && defined(__GNUC_PREREQ) && __GNUC_PREREQ(4, 3)
return (word64)__builtin_bswap64(value);
#else
return (word64)((word64)ByteReverseWord32((word32)value)) << 32 |
(word64)ByteReverseWord32((word32)(value >> 32));
#endif
}
/* ---------------------------------------------------------------------------*/
/* INTEGER TYPE TO STORE POINTER */
/* ---------------------------------------------------------------------------*/
typedef uintptr_t wordptr;
#ifdef __cplusplus
} /* extern "C" */
#endif
#endif /* __TPM2_TYPES_H__ */
Reference in New Issue View Git Blame Copy Permalink