CoCalc -- Tpm12.h

GitHub Repository: freebsd/freebsd-src
Path: blob/main/sys/contrib/edk2/Include/IndustryStandard/Tpm12.h
⁹⁶³³⁹ views
1
/** @file
2
  TPM Specification data structures (TCG TPM Specification Version 1.2 Revision 103)
3
  See http://trustedcomputinggroup.org for latest specification updates
4

5
  Copyright (c) 2006 - 2018, Intel Corporation. All rights reserved.<BR>
6
  SPDX-License-Identifier: BSD-2-Clause-Patent
7
**/
8

9
#ifndef _TPM12_H_
10
#define _TPM12_H_
11

12
///
13
/// The start of TPM return codes
14
///
15
#define TPM_BASE  0
16

17
//
18
// All structures MUST be packed on a byte boundary.
19
//
20

21
#pragma pack (1)
22

23
//
24
// Part 2, section 2.2.3: Helper redefinitions
25
//
26
///
27
/// Indicates the conditions where it is required that authorization be presented
28
///
29
typedef UINT8 TPM_AUTH_DATA_USAGE;
30
///
31
/// The information as to what the payload is in an encrypted structure
32
///
33
typedef UINT8 TPM_PAYLOAD_TYPE;
34
///
35
/// The version info breakdown
36
///
37
typedef UINT8 TPM_VERSION_BYTE;
38
///
39
/// The state of the dictionary attack mitigation logic
40
///
41
typedef UINT8 TPM_DA_STATE;
42
///
43
/// The request or response authorization type
44
///
45
typedef UINT16 TPM_TAG;
46
///
47
/// The protocol in use
48
///
49
typedef UINT16 TPM_PROTOCOL_ID;
50
///
51
/// Indicates the start state
52
///
53
typedef UINT16 TPM_STARTUP_TYPE;
54
///
55
/// The definition of the encryption scheme
56
///
57
typedef UINT16 TPM_ENC_SCHEME;
58
///
59
/// The definition of the signature scheme
60
///
61
typedef UINT16 TPM_SIG_SCHEME;
62
///
63
/// The definition of the migration scheme
64
///
65
typedef UINT16 TPM_MIGRATE_SCHEME;
66
///
67
/// Sets the state of the physical presence mechanism
68
///
69
typedef UINT16 TPM_PHYSICAL_PRESENCE;
70
///
71
/// Indicates the types of entity that are supported by the TPM
72
///
73
typedef UINT16 TPM_ENTITY_TYPE;
74
///
75
/// Indicates the permitted usage of the key
76
///
77
typedef UINT16 TPM_KEY_USAGE;
78
///
79
/// The type of asymmetric encrypted structure in use by the endorsement key
80
///
81
typedef UINT16 TPM_EK_TYPE;
82
///
83
/// The tag for the structure
84
///
85
typedef UINT16 TPM_STRUCTURE_TAG;
86
///
87
/// The platform specific spec to which the information relates to
88
///
89
typedef UINT16 TPM_PLATFORM_SPECIFIC;
90
///
91
/// The command ordinal
92
///
93
typedef UINT32 TPM_COMMAND_CODE;
94
///
95
/// Identifies a TPM capability area
96
///
97
typedef UINT32 TPM_CAPABILITY_AREA;
98
///
99
/// Indicates information regarding a key
100
///
101
typedef UINT32 TPM_KEY_FLAGS;
102
///
103
/// Indicates the type of algorithm
104
///
105
typedef UINT32 TPM_ALGORITHM_ID;
106
///
107
/// The locality modifier
108
///
109
typedef UINT32 TPM_MODIFIER_INDICATOR;
110
///
111
/// The actual number of a counter
112
///
113
typedef UINT32 TPM_ACTUAL_COUNT;
114
///
115
/// Attributes that define what options are in use for a transport session
116
///
117
typedef UINT32 TPM_TRANSPORT_ATTRIBUTES;
118
///
119
/// Handle to an authorization session
120
///
121
typedef UINT32 TPM_AUTHHANDLE;
122
///
123
/// Index to a DIR register
124
///
125
typedef UINT32 TPM_DIRINDEX;
126
///
127
/// The area where a key is held assigned by the TPM
128
///
129
typedef UINT32 TPM_KEY_HANDLE;
130
///
131
/// Index to a PCR register
132
///
133
typedef UINT32 TPM_PCRINDEX;
134
///
135
/// The return code from a function
136
///
137
typedef UINT32 TPM_RESULT;
138
///
139
/// The types of resources that a TPM may have using internal resources
140
///
141
typedef UINT32 TPM_RESOURCE_TYPE;
142
///
143
/// Allows for controlling of the key when loaded and how to handle TPM_Startup issues
144
///
145
typedef UINT32 TPM_KEY_CONTROL;
146
///
147
/// The index into the NV storage area
148
///
149
typedef UINT32 TPM_NV_INDEX;
150
///
151
/// The family ID. Family IDs are automatically assigned a sequence number by the TPM.
152
/// A trusted process can set the FamilyID value in an individual row to NULL, which
153
/// invalidates that row. The family ID resets to NULL on each change of TPM Owner.
154
///
155
typedef UINT32 TPM_FAMILY_ID;
156
///
157
/// IA value used as a label for the most recent verification of this family. Set to zero when not in use.
158
///
159
typedef UINT32 TPM_FAMILY_VERIFICATION;
160
///
161
/// How the TPM handles var
162
///
163
typedef UINT32 TPM_STARTUP_EFFECTS;
164
///
165
/// The mode of a symmetric encryption
166
///
167
typedef UINT32 TPM_SYM_MODE;
168
///
169
/// The family flags
170
///
171
typedef UINT32 TPM_FAMILY_FLAGS;
172
///
173
/// The index value for the delegate NV table
174
///
175
typedef UINT32 TPM_DELEGATE_INDEX;
176
///
177
/// The restrictions placed on delegation of CMK commands
178
///
179
typedef UINT32 TPM_CMK_DELEGATE;
180
///
181
/// The ID value of a monotonic counter
182
///
183
typedef UINT32 TPM_COUNT_ID;
184
///
185
/// A command to execute
186
///
187
typedef UINT32 TPM_REDIT_COMMAND;
188
///
189
/// A transport session handle
190
///
191
typedef UINT32 TPM_TRANSHANDLE;
192
///
193
/// A generic handle could be key, transport etc
194
///
195
typedef UINT32 TPM_HANDLE;
196
///
197
/// What operation is happening
198
///
199
typedef UINT32 TPM_FAMILY_OPERATION;
200

201
//
202
// Part 2, section 2.2.4: Vendor specific
203
// The following defines allow for the quick specification of a
204
// vendor specific item.
205
//
206
#define TPM_Vendor_Specific32  ((UINT32) 0x00000400)
207
#define TPM_Vendor_Specific8   ((UINT8) 0x80)
208

209
//
210
// Part 2, section 3.1: TPM_STRUCTURE_TAG
211
//
212
#define TPM_TAG_CONTEXTBLOB          ((TPM_STRUCTURE_TAG) 0x0001)
213
#define TPM_TAG_CONTEXT_SENSITIVE    ((TPM_STRUCTURE_TAG) 0x0002)
214
#define TPM_TAG_CONTEXTPOINTER       ((TPM_STRUCTURE_TAG) 0x0003)
215
#define TPM_TAG_CONTEXTLIST          ((TPM_STRUCTURE_TAG) 0x0004)
216
#define TPM_TAG_SIGNINFO             ((TPM_STRUCTURE_TAG) 0x0005)
217
#define TPM_TAG_PCR_INFO_LONG        ((TPM_STRUCTURE_TAG) 0x0006)
218
#define TPM_TAG_PERSISTENT_FLAGS     ((TPM_STRUCTURE_TAG) 0x0007)
219
#define TPM_TAG_VOLATILE_FLAGS       ((TPM_STRUCTURE_TAG) 0x0008)
220
#define TPM_TAG_PERSISTENT_DATA      ((TPM_STRUCTURE_TAG) 0x0009)
221
#define TPM_TAG_VOLATILE_DATA        ((TPM_STRUCTURE_TAG) 0x000A)
222
#define TPM_TAG_SV_DATA              ((TPM_STRUCTURE_TAG) 0x000B)
223
#define TPM_TAG_EK_BLOB              ((TPM_STRUCTURE_TAG) 0x000C)
224
#define TPM_TAG_EK_BLOB_AUTH         ((TPM_STRUCTURE_TAG) 0x000D)
225
#define TPM_TAG_COUNTER_VALUE        ((TPM_STRUCTURE_TAG) 0x000E)
226
#define TPM_TAG_TRANSPORT_INTERNAL   ((TPM_STRUCTURE_TAG) 0x000F)
227
#define TPM_TAG_TRANSPORT_LOG_IN     ((TPM_STRUCTURE_TAG) 0x0010)
228
#define TPM_TAG_TRANSPORT_LOG_OUT    ((TPM_STRUCTURE_TAG) 0x0011)
229
#define TPM_TAG_AUDIT_EVENT_IN       ((TPM_STRUCTURE_TAG) 0x0012)
230
#define TPM_TAG_AUDIT_EVENT_OUT      ((TPM_STRUCTURE_TAG) 0x0013)
231
#define TPM_TAG_CURRENT_TICKS        ((TPM_STRUCTURE_TAG) 0x0014)
232
#define TPM_TAG_KEY                  ((TPM_STRUCTURE_TAG) 0x0015)
233
#define TPM_TAG_STORED_DATA12        ((TPM_STRUCTURE_TAG) 0x0016)
234
#define TPM_TAG_NV_ATTRIBUTES        ((TPM_STRUCTURE_TAG) 0x0017)
235
#define TPM_TAG_NV_DATA_PUBLIC       ((TPM_STRUCTURE_TAG) 0x0018)
236
#define TPM_TAG_NV_DATA_SENSITIVE    ((TPM_STRUCTURE_TAG) 0x0019)
237
#define TPM_TAG_DELEGATIONS          ((TPM_STRUCTURE_TAG) 0x001A)
238
#define TPM_TAG_DELEGATE_PUBLIC      ((TPM_STRUCTURE_TAG) 0x001B)
239
#define TPM_TAG_DELEGATE_TABLE_ROW   ((TPM_STRUCTURE_TAG) 0x001C)
240
#define TPM_TAG_TRANSPORT_AUTH       ((TPM_STRUCTURE_TAG) 0x001D)
241
#define TPM_TAG_TRANSPORT_PUBLIC     ((TPM_STRUCTURE_TAG) 0x001E)
242
#define TPM_TAG_PERMANENT_FLAGS      ((TPM_STRUCTURE_TAG) 0x001F)
243
#define TPM_TAG_STCLEAR_FLAGS        ((TPM_STRUCTURE_TAG) 0x0020)
244
#define TPM_TAG_STANY_FLAGS          ((TPM_STRUCTURE_TAG) 0x0021)
245
#define TPM_TAG_PERMANENT_DATA       ((TPM_STRUCTURE_TAG) 0x0022)
246
#define TPM_TAG_STCLEAR_DATA         ((TPM_STRUCTURE_TAG) 0x0023)
247
#define TPM_TAG_STANY_DATA           ((TPM_STRUCTURE_TAG) 0x0024)
248
#define TPM_TAG_FAMILY_TABLE_ENTRY   ((TPM_STRUCTURE_TAG) 0x0025)
249
#define TPM_TAG_DELEGATE_SENSITIVE   ((TPM_STRUCTURE_TAG) 0x0026)
250
#define TPM_TAG_DELG_KEY_BLOB        ((TPM_STRUCTURE_TAG) 0x0027)
251
#define TPM_TAG_KEY12                ((TPM_STRUCTURE_TAG) 0x0028)
252
#define TPM_TAG_CERTIFY_INFO2        ((TPM_STRUCTURE_TAG) 0x0029)
253
#define TPM_TAG_DELEGATE_OWNER_BLOB  ((TPM_STRUCTURE_TAG) 0x002A)
254
#define TPM_TAG_EK_BLOB_ACTIVATE     ((TPM_STRUCTURE_TAG) 0x002B)
255
#define TPM_TAG_DAA_BLOB             ((TPM_STRUCTURE_TAG) 0x002C)
256
#define TPM_TAG_DAA_CONTEXT          ((TPM_STRUCTURE_TAG) 0x002D)
257
#define TPM_TAG_DAA_ENFORCE          ((TPM_STRUCTURE_TAG) 0x002E)
258
#define TPM_TAG_DAA_ISSUER           ((TPM_STRUCTURE_TAG) 0x002F)
259
#define TPM_TAG_CAP_VERSION_INFO     ((TPM_STRUCTURE_TAG) 0x0030)
260
#define TPM_TAG_DAA_SENSITIVE        ((TPM_STRUCTURE_TAG) 0x0031)
261
#define TPM_TAG_DAA_TPM              ((TPM_STRUCTURE_TAG) 0x0032)
262
#define TPM_TAG_CMK_MIGAUTH          ((TPM_STRUCTURE_TAG) 0x0033)
263
#define TPM_TAG_CMK_SIGTICKET        ((TPM_STRUCTURE_TAG) 0x0034)
264
#define TPM_TAG_CMK_MA_APPROVAL      ((TPM_STRUCTURE_TAG) 0x0035)
265
#define TPM_TAG_QUOTE_INFO2          ((TPM_STRUCTURE_TAG) 0x0036)
266
#define TPM_TAG_DA_INFO              ((TPM_STRUCTURE_TAG) 0x0037)
267
#define TPM_TAG_DA_LIMITED           ((TPM_STRUCTURE_TAG) 0x0038)
268
#define TPM_TAG_DA_ACTION_TYPE       ((TPM_STRUCTURE_TAG) 0x0039)
269

270
//
271
// Part 2, section 4: TPM Types
272
//
273

274
//
275
// Part 2, section 4.1: TPM_RESOURCE_TYPE
276
//
277
#define TPM_RT_KEY       ((TPM_RESOURCE_TYPE) 0x00000001)            ///< The handle is a key handle and is the result of a LoadKey type operation
278
#define TPM_RT_AUTH      ((TPM_RESOURCE_TYPE) 0x00000002)            ///< The handle is an authorization handle. Auth handles come from TPM_OIAP, TPM_OSAP and TPM_DSAP
279
#define TPM_RT_HASH      ((TPM_RESOURCE_TYPE) 0x00000003)            ///< Reserved for hashes
280
#define TPM_RT_TRANS     ((TPM_RESOURCE_TYPE) 0x00000004)            ///< The handle is for a transport session. Transport handles come from TPM_EstablishTransport
281
#define TPM_RT_CONTEXT   ((TPM_RESOURCE_TYPE) 0x00000005)            ///< Resource wrapped and held outside the TPM using the context save/restore commands
282
#define TPM_RT_COUNTER   ((TPM_RESOURCE_TYPE) 0x00000006)            ///< Reserved for counters
283
#define TPM_RT_DELEGATE  ((TPM_RESOURCE_TYPE) 0x00000007)            ///< The handle is for a delegate row. These are the internal rows held in NV storage by the TPM
284
#define TPM_RT_DAA_TPM   ((TPM_RESOURCE_TYPE) 0x00000008)            ///< The value is a DAA TPM specific blob
285
#define TPM_RT_DAA_V0    ((TPM_RESOURCE_TYPE) 0x00000009)            ///< The value is a DAA V0 parameter
286
#define TPM_RT_DAA_V1    ((TPM_RESOURCE_TYPE) 0x0000000A)            ///< The value is a DAA V1 parameter
287

288
//
289
// Part 2, section 4.2: TPM_PAYLOAD_TYPE
290
//
291
#define TPM_PT_ASYM                ((TPM_PAYLOAD_TYPE) 0x01)  ///< The entity is an asymmetric key
292
#define TPM_PT_BIND                ((TPM_PAYLOAD_TYPE) 0x02)  ///< The entity is bound data
293
#define TPM_PT_MIGRATE             ((TPM_PAYLOAD_TYPE) 0x03)  ///< The entity is a migration blob
294
#define TPM_PT_MAINT               ((TPM_PAYLOAD_TYPE) 0x04)  ///< The entity is a maintenance blob
295
#define TPM_PT_SEAL                ((TPM_PAYLOAD_TYPE) 0x05)  ///< The entity is sealed data
296
#define TPM_PT_MIGRATE_RESTRICTED  ((TPM_PAYLOAD_TYPE) 0x06)  ///< The entity is a restricted-migration asymmetric key
297
#define TPM_PT_MIGRATE_EXTERNAL    ((TPM_PAYLOAD_TYPE) 0x07)  ///< The entity is a external migratable key
298
#define TPM_PT_CMK_MIGRATE         ((TPM_PAYLOAD_TYPE) 0x08)  ///< The entity is a CMK migratable blob
299
#define TPM_PT_VENDOR_SPECIFIC     ((TPM_PAYLOAD_TYPE) 0x80)  ///< 0x80 - 0xFF Vendor specific payloads
300

301
//
302
// Part 2, section 4.3: TPM_ENTITY_TYPE
303
//
304
#define TPM_ET_KEYHANDLE        ((UINT16) 0x0001)     ///< The entity is a keyHandle or key
305
#define TPM_ET_OWNER            ((UINT16) 0x0002)     ///< The entity is the TPM Owner
306
#define TPM_ET_DATA             ((UINT16) 0x0003)     ///< The entity is some data
307
#define TPM_ET_SRK              ((UINT16) 0x0004)     ///< The entity is the SRK
308
#define TPM_ET_KEY              ((UINT16) 0x0005)     ///< The entity is a key or keyHandle
309
#define TPM_ET_REVOKE           ((UINT16) 0x0006)     ///< The entity is the RevokeTrust value
310
#define TPM_ET_DEL_OWNER_BLOB   ((UINT16) 0x0007)     ///< The entity is a delegate owner blob
311
#define TPM_ET_DEL_ROW          ((UINT16) 0x0008)     ///< The entity is a delegate row
312
#define TPM_ET_DEL_KEY_BLOB     ((UINT16) 0x0009)     ///< The entity is a delegate key blob
313
#define TPM_ET_COUNTER          ((UINT16) 0x000A)     ///< The entity is a counter
314
#define TPM_ET_NV               ((UINT16) 0x000B)     ///< The entity is a NV index
315
#define TPM_ET_OPERATOR         ((UINT16) 0x000C)     ///< The entity is the operator
316
#define TPM_ET_RESERVED_HANDLE  ((UINT16) 0x0040)     ///< Reserved. This value avoids collisions with the handle MSB setting.
317
//
318
// TPM_ENTITY_TYPE MSB Values: The MSB is used to indicate the ADIP encryption sheme when applicable
319
//
320
#define TPM_ET_XOR     ((UINT16) 0x0000)              ///< ADIP encryption scheme: XOR
321
#define TPM_ET_AES128  ((UINT16) 0x0006)              ///< ADIP encryption scheme: AES 128 bits
322

323
//
324
// Part 2, section 4.4.1: Reserved Key Handles
325
//
326
#define TPM_KH_SRK        ((TPM_KEY_HANDLE) 0x40000000)           ///< The handle points to the SRK
327
#define TPM_KH_OWNER      ((TPM_KEY_HANDLE) 0x40000001)           ///< The handle points to the TPM Owner
328
#define TPM_KH_REVOKE     ((TPM_KEY_HANDLE) 0x40000002)           ///< The handle points to the RevokeTrust value
329
#define TPM_KH_TRANSPORT  ((TPM_KEY_HANDLE) 0x40000003)           ///< The handle points to the EstablishTransport static authorization
330
#define TPM_KH_OPERATOR   ((TPM_KEY_HANDLE) 0x40000004)           ///< The handle points to the Operator auth
331
#define TPM_KH_ADMIN      ((TPM_KEY_HANDLE) 0x40000005)           ///< The handle points to the delegation administration auth
332
#define TPM_KH_EK         ((TPM_KEY_HANDLE) 0x40000006)           ///< The handle points to the PUBEK, only usable with TPM_OwnerReadInternalPub
333

334
//
335
// Part 2, section 4.5: TPM_STARTUP_TYPE
336
//
337
#define TPM_ST_CLEAR        ((TPM_STARTUP_TYPE) 0x0001)         ///< The TPM is starting up from a clean state
338
#define TPM_ST_STATE        ((TPM_STARTUP_TYPE) 0x0002)         ///< The TPM is starting up from a saved state
339
#define TPM_ST_DEACTIVATED  ((TPM_STARTUP_TYPE) 0x0003)         ///< The TPM is to startup and set the deactivated flag to TRUE
340

341
//
342
// Part 2, section 4.6: TPM_STATUP_EFFECTS
343
// The table makeup is still an open issue.
344
//
345

346
//
347
// Part 2, section 4.7: TPM_PROTOCOL_ID
348
//
349
#define TPM_PID_OIAP       ((TPM_PROTOCOL_ID) 0x0001)          ///< The OIAP protocol.
350
#define TPM_PID_OSAP       ((TPM_PROTOCOL_ID) 0x0002)          ///< The OSAP protocol.
351
#define TPM_PID_ADIP       ((TPM_PROTOCOL_ID) 0x0003)          ///< The ADIP protocol.
352
#define TPM_PID_ADCP       ((TPM_PROTOCOL_ID) 0x0004)          ///< The ADCP protocol.
353
#define TPM_PID_OWNER      ((TPM_PROTOCOL_ID) 0x0005)          ///< The protocol for taking ownership of a TPM.
354
#define TPM_PID_DSAP       ((TPM_PROTOCOL_ID) 0x0006)          ///< The DSAP protocol
355
#define TPM_PID_TRANSPORT  ((TPM_PROTOCOL_ID) 0x0007)          ///< The transport protocol
356

357
//
358
// Part 2, section 4.8: TPM_ALGORITHM_ID
359
//   The TPM MUST support the algorithms TPM_ALG_RSA, TPM_ALG_SHA, TPM_ALG_HMAC,
360
//   TPM_ALG_MGF1
361
//
362
#define TPM_ALG_RSA     ((TPM_ALGORITHM_ID) 0x00000001)             ///< The RSA algorithm.
363
#define TPM_ALG_DES     ((TPM_ALGORITHM_ID) 0x00000002)             ///< The DES algorithm
364
#define TPM_ALG_3DES    ((TPM_ALGORITHM_ID) 0x00000003)             ///< The 3DES algorithm in EDE mode
365
#define TPM_ALG_SHA     ((TPM_ALGORITHM_ID) 0x00000004)             ///< The SHA1 algorithm
366
#define TPM_ALG_HMAC    ((TPM_ALGORITHM_ID) 0x00000005)             ///< The RFC 2104 HMAC algorithm
367
#define TPM_ALG_AES128  ((TPM_ALGORITHM_ID) 0x00000006)             ///< The AES algorithm, key size 128
368
#define TPM_ALG_MGF1    ((TPM_ALGORITHM_ID) 0x00000007)             ///< The XOR algorithm using MGF1 to create a string the size of the encrypted block
369
#define TPM_ALG_AES192  ((TPM_ALGORITHM_ID) 0x00000008)             ///< AES, key size 192
370
#define TPM_ALG_AES256  ((TPM_ALGORITHM_ID) 0x00000009)             ///< AES, key size 256
371
#define TPM_ALG_XOR     ((TPM_ALGORITHM_ID) 0x0000000A)             ///< XOR using the rolling nonces
372

373
//
374
// Part 2, section 4.9: TPM_PHYSICAL_PRESENCE
375
//
376
#define TPM_PHYSICAL_PRESENCE_HW_DISABLE     ((TPM_PHYSICAL_PRESENCE) 0x0200) ///< Sets the physicalPresenceHWEnable to FALSE
377
#define TPM_PHYSICAL_PRESENCE_CMD_DISABLE    ((TPM_PHYSICAL_PRESENCE) 0x0100) ///< Sets the physicalPresenceCMDEnable to FALSE
378
#define TPM_PHYSICAL_PRESENCE_LIFETIME_LOCK  ((TPM_PHYSICAL_PRESENCE) 0x0080) ///< Sets the physicalPresenceLifetimeLock to TRUE
379
#define TPM_PHYSICAL_PRESENCE_HW_ENABLE      ((TPM_PHYSICAL_PRESENCE) 0x0040) ///< Sets the physicalPresenceHWEnable to TRUE
380
#define TPM_PHYSICAL_PRESENCE_CMD_ENABLE     ((TPM_PHYSICAL_PRESENCE) 0x0020) ///< Sets the physicalPresenceCMDEnable to TRUE
381
#define TPM_PHYSICAL_PRESENCE_NOTPRESENT     ((TPM_PHYSICAL_PRESENCE) 0x0010) ///< Sets PhysicalPresence = FALSE
382
#define TPM_PHYSICAL_PRESENCE_PRESENT        ((TPM_PHYSICAL_PRESENCE) 0x0008) ///< Sets PhysicalPresence = TRUE
383
#define TPM_PHYSICAL_PRESENCE_LOCK           ((TPM_PHYSICAL_PRESENCE) 0x0004) ///< Sets PhysicalPresenceLock = TRUE
384

385
//
386
// Part 2, section 4.10: TPM_MIGRATE_SCHEME
387
//
388
#define TPM_MS_MIGRATE                  ((TPM_MIGRATE_SCHEME) 0x0001)     ///< A public key that can be used with all TPM migration commands other than 'ReWrap' mode.
389
#define TPM_MS_REWRAP                   ((TPM_MIGRATE_SCHEME) 0x0002)     ///< A public key that can be used for the ReWrap mode of TPM_CreateMigrationBlob.
390
#define TPM_MS_MAINT                    ((TPM_MIGRATE_SCHEME) 0x0003)     ///< A public key that can be used for the Maintenance commands
391
#define TPM_MS_RESTRICT_MIGRATE         ((TPM_MIGRATE_SCHEME) 0x0004)     ///< The key is to be migrated to a Migration Authority.
392
#define TPM_MS_RESTRICT_APPROVE_DOUBLE  ((TPM_MIGRATE_SCHEME) 0x0005)     ///< The key is to be migrated to an entity approved by a Migration Authority using double wrapping
393

394
//
395
// Part 2, section 4.11: TPM_EK_TYPE
396
//
397
#define TPM_EK_TYPE_ACTIVATE  ((TPM_EK_TYPE) 0x0001)       ///< The blob MUST be TPM_EK_BLOB_ACTIVATE
398
#define TPM_EK_TYPE_AUTH      ((TPM_EK_TYPE) 0x0002)       ///< The blob MUST be TPM_EK_BLOB_AUTH
399

400
//
401
// Part 2, section 4.12: TPM_PLATFORM_SPECIFIC
402
//
403
#define TPM_PS_PC_11      ((TPM_PLATFORM_SPECIFIC) 0x0001)           ///< PC Specific version 1.1
404
#define TPM_PS_PC_12      ((TPM_PLATFORM_SPECIFIC) 0x0002)           ///< PC Specific version 1.2
405
#define TPM_PS_PDA_12     ((TPM_PLATFORM_SPECIFIC) 0x0003)           ///< PDA Specific version 1.2
406
#define TPM_PS_Server_12  ((TPM_PLATFORM_SPECIFIC) 0x0004)           ///< Server Specific version 1.2
407
#define TPM_PS_Mobile_12  ((TPM_PLATFORM_SPECIFIC) 0x0005)           ///< Mobil Specific version 1.2
408

409
//
410
// Part 2, section 5: Basic Structures
411
//
412

413
///
414
/// Part 2, section 5.1: TPM_STRUCT_VER
415
///
416
typedef struct tdTPM_STRUCT_VER {
417
  UINT8    major;
418
  UINT8    minor;
419
  UINT8    revMajor;
420
  UINT8    revMinor;
421
} TPM_STRUCT_VER;
422

423
///
424
/// Part 2, section 5.3: TPM_VERSION
425
///
426
typedef struct tdTPM_VERSION {
427
  TPM_VERSION_BYTE    major;
428
  TPM_VERSION_BYTE    minor;
429
  UINT8               revMajor;
430
  UINT8               revMinor;
431
} TPM_VERSION;
432

433
#define TPM_SHA1_160_HASH_LEN    0x14
434
#define TPM_SHA1BASED_NONCE_LEN  TPM_SHA1_160_HASH_LEN
435

436
///
437
/// Part 2, section 5.4: TPM_DIGEST
438
///
439
typedef struct tdTPM_DIGEST {
440
  UINT8    digest[TPM_SHA1_160_HASH_LEN];
441
} TPM_DIGEST;
442

443
///
444
/// This SHALL be the digest of the chosen identityLabel and privacyCA for a new TPM identity
445
///
446
typedef TPM_DIGEST TPM_CHOSENID_HASH;
447
///
448
/// This SHALL be the hash of a list of PCR indexes and PCR values that a key or data is bound to
449
///
450
typedef TPM_DIGEST TPM_COMPOSITE_HASH;
451
///
452
/// This SHALL be the value of a DIR register
453
///
454
typedef TPM_DIGEST TPM_DIRVALUE;
455

456
typedef TPM_DIGEST TPM_HMAC;
457
///
458
/// The value inside of the PCR
459
///
460
typedef TPM_DIGEST TPM_PCRVALUE;
461
///
462
/// This SHALL be the value of the current internal audit state
463
///
464
typedef TPM_DIGEST TPM_AUDITDIGEST;
465

466
///
467
/// Part 2, section 5.5: TPM_NONCE
468
///
469
typedef struct tdTPM_NONCE {
470
  UINT8    nonce[20];
471
} TPM_NONCE;
472

473
///
474
/// This SHALL be a random value generated by a TPM immediately after the EK is installed
475
/// in that TPM, whenever an EK is installed in that TPM
476
///
477
typedef TPM_NONCE TPM_DAA_TPM_SEED;
478
///
479
/// This SHALL be a random value
480
///
481
typedef TPM_NONCE TPM_DAA_CONTEXT_SEED;
482

483
//
484
// Part 2, section 5.6: TPM_AUTHDATA
485
//
486
///
487
/// The AuthData data is the information that is saved or passed to provide proof of ownership
488
/// 296 of an entity
489
///
490
typedef UINT8 tdTPM_AUTHDATA[20];
491

492
typedef tdTPM_AUTHDATA TPM_AUTHDATA;
493
///
494
/// A secret plaintext value used in the authorization process
495
///
496
typedef TPM_AUTHDATA TPM_SECRET;
497
///
498
/// A ciphertext (encrypted) version of AuthData data. The encryption mechanism depends on the context
499
///
500
typedef TPM_AUTHDATA TPM_ENCAUTH;
501

502
///
503
/// Part 2, section 5.7: TPM_KEY_HANDLE_LIST
504
/// Size of handle is loaded * sizeof(TPM_KEY_HANDLE)
505
///
506
typedef struct tdTPM_KEY_HANDLE_LIST {
507
  UINT16            loaded;
508
  TPM_KEY_HANDLE    handle[1];
509
} TPM_KEY_HANDLE_LIST;
510

511
//
512
// Part 2, section 5.8: TPM_KEY_USAGE values
513
//
514
///
515
/// TPM_KEY_SIGNING SHALL indicate a signing key. The [private] key SHALL be
516
/// used for signing operations, only. This means that it MUST be a leaf of the
517
/// Protected Storage key hierarchy.
518
///
519
#define TPM_KEY_SIGNING  ((UINT16) 0x0010)
520
///
521
/// TPM_KEY_STORAGE SHALL indicate a storage key. The key SHALL be used to wrap
522
/// and unwrap other keys in the Protected Storage hierarchy
523
///
524
#define TPM_KEY_STORAGE  ((UINT16) 0x0011)
525
///
526
/// TPM_KEY_IDENTITY SHALL indicate an identity key. The key SHALL be used for
527
/// operations that require a TPM identity, only.
528
///
529
#define TPM_KEY_IDENTITY  ((UINT16) 0x0012)
530
///
531
/// TPM_KEY_AUTHCHANGE SHALL indicate an ephemeral key that is in use during
532
/// the ChangeAuthAsym process, only.
533
///
534
#define TPM_KEY_AUTHCHANGE  ((UINT16) 0x0013)
535
///
536
/// TPM_KEY_BIND SHALL indicate a key that can be used for TPM_Bind and
537
/// TPM_Unbind operations only.
538
///
539
#define TPM_KEY_BIND  ((UINT16) 0x0014)
540
///
541
/// TPM_KEY_LEGACY SHALL indicate a key that can perform signing and binding
542
/// operations. The key MAY be used for both signing and binding operations.
543
/// The TPM_KEY_LEGACY key type is to allow for use by applications where both
544
/// signing and encryption operations occur with the same key. The use of this
545
/// key type is not recommended TPM_KEY_MIGRATE 0x0016 This SHALL indicate a
546
/// key in use for TPM_MigrateKey
547
///
548
#define TPM_KEY_LEGACY  ((UINT16) 0x0015)
549
///
550
/// TPM_KEY_MIGRAGE SHALL indicate a key in use for TPM_MigrateKey
551
///
552
#define TPM_KEY_MIGRATE  ((UINT16) 0x0016)
553

554
//
555
// Part 2, section 5.8.1: Mandatory Key Usage Schemes
556
//
557

558
#define TPM_ES_NONE                 ((TPM_ENC_SCHEME) 0x0001)
559
#define TPM_ES_RSAESPKCSv15         ((TPM_ENC_SCHEME) 0x0002)
560
#define TPM_ES_RSAESOAEP_SHA1_MGF1  ((TPM_ENC_SCHEME) 0x0003)
561
#define TPM_ES_SYM_CNT              ((TPM_ENC_SCHEME) 0x0004)  ///< rev94 defined
562
#define TPM_ES_SYM_CTR              ((TPM_ENC_SCHEME) 0x0004)
563
#define TPM_ES_SYM_OFB              ((TPM_ENC_SCHEME) 0x0005)
564

565
#define TPM_SS_NONE                 ((TPM_SIG_SCHEME) 0x0001)
566
#define TPM_SS_RSASSAPKCS1v15_SHA1  ((TPM_SIG_SCHEME) 0x0002)
567
#define TPM_SS_RSASSAPKCS1v15_DER   ((TPM_SIG_SCHEME) 0x0003)
568
#define TPM_SS_RSASSAPKCS1v15_INFO  ((TPM_SIG_SCHEME) 0x0004)
569

570
//
571
// Part 2, section 5.9: TPM_AUTH_DATA_USAGE values
572
//
573
#define TPM_AUTH_NEVER          ((TPM_AUTH_DATA_USAGE) 0x00)
574
#define TPM_AUTH_ALWAYS         ((TPM_AUTH_DATA_USAGE) 0x01)
575
#define TPM_AUTH_PRIV_USE_ONLY  ((TPM_AUTH_DATA_USAGE) 0x03)
576

577
///
578
/// Part 2, section 5.10: TPM_KEY_FLAGS
579
///
580
typedef enum tdTPM_KEY_FLAGS {
581
  redirection      = 0x00000001,
582
  migratable       = 0x00000002,
583
  isVolatile       = 0x00000004,
584
  pcrIgnoredOnRead = 0x00000008,
585
  migrateAuthority = 0x00000010
586
} TPM_KEY_FLAGS_BITS;
587

588
///
589
/// Part 2, section 5.11: TPM_CHANGEAUTH_VALIDATE
590
///
591
typedef struct tdTPM_CHANGEAUTH_VALIDATE {
592
  TPM_SECRET    newAuthSecret;
593
  TPM_NONCE     n1;
594
} TPM_CHANGEAUTH_VALIDATE;
595

596
///
597
/// Part 2, section 5.12: TPM_MIGRATIONKEYAUTH
598
///   declared after section 10 to catch declaration of TPM_PUBKEY
599
///
600
/// Part 2 section 10.1: TPM_KEY_PARMS
601
///   [size_is(parmSize)] BYTE* parms;
602
///
603
typedef struct tdTPM_KEY_PARMS {
604
  TPM_ALGORITHM_ID    algorithmID;
605
  TPM_ENC_SCHEME      encScheme;
606
  TPM_SIG_SCHEME      sigScheme;
607
  UINT32              parmSize;
608
  UINT8               *parms;
609
} TPM_KEY_PARMS;
610

611
///
612
/// Part 2, section 10.4: TPM_STORE_PUBKEY
613
///
614
typedef struct tdTPM_STORE_PUBKEY {
615
  UINT32    keyLength;
616
  UINT8     key[1];
617
} TPM_STORE_PUBKEY;
618

619
///
620
/// Part 2, section 10.5: TPM_PUBKEY
621
///
622
typedef struct tdTPM_PUBKEY {
623
  TPM_KEY_PARMS       algorithmParms;
624
  TPM_STORE_PUBKEY    pubKey;
625
} TPM_PUBKEY;
626

627
///
628
/// Part 2, section 5.12: TPM_MIGRATIONKEYAUTH
629
///
630
typedef struct tdTPM_MIGRATIONKEYAUTH {
631
  TPM_PUBKEY            migrationKey;
632
  TPM_MIGRATE_SCHEME    migrationScheme;
633
  TPM_DIGEST            digest;
634
} TPM_MIGRATIONKEYAUTH;
635

636
///
637
/// Part 2, section 5.13: TPM_COUNTER_VALUE
638
///
639
typedef struct tdTPM_COUNTER_VALUE {
640
  TPM_STRUCTURE_TAG    tag;
641
  UINT8                label[4];
642
  TPM_ACTUAL_COUNT     counter;
643
} TPM_COUNTER_VALUE;
644

645
///
646
/// Part 2, section 5.14: TPM_SIGN_INFO
647
///   Size of data indicated by dataLen
648
///
649
typedef struct tdTPM_SIGN_INFO {
650
  TPM_STRUCTURE_TAG    tag;
651
  UINT8                fixed[4];
652
  TPM_NONCE            replay;
653
  UINT32               dataLen;
654
  UINT8                *data;
655
} TPM_SIGN_INFO;
656

657
///
658
/// Part 2, section 5.15: TPM_MSA_COMPOSITE
659
///   Number of migAuthDigest indicated by MSAlist
660
///
661
typedef struct tdTPM_MSA_COMPOSITE {
662
  UINT32        MSAlist;
663
  TPM_DIGEST    migAuthDigest[1];
664
} TPM_MSA_COMPOSITE;
665

666
///
667
/// Part 2, section 5.16: TPM_CMK_AUTH
668
///
669
typedef struct tdTPM_CMK_AUTH {
670
  TPM_DIGEST    migrationAuthorityDigest;
671
  TPM_DIGEST    destinationKeyDigest;
672
  TPM_DIGEST    sourceKeyDigest;
673
} TPM_CMK_AUTH;
674

675
//
676
// Part 2, section 5.17: TPM_CMK_DELEGATE
677
//
678
#define TPM_CMK_DELEGATE_SIGNING  ((TPM_CMK_DELEGATE) BIT31)
679
#define TPM_CMK_DELEGATE_STORAGE  ((TPM_CMK_DELEGATE) BIT30)
680
#define TPM_CMK_DELEGATE_BIND     ((TPM_CMK_DELEGATE) BIT29)
681
#define TPM_CMK_DELEGATE_LEGACY   ((TPM_CMK_DELEGATE) BIT28)
682
#define TPM_CMK_DELEGATE_MIGRATE  ((TPM_CMK_DELEGATE) BIT27)
683

684
///
685
/// Part 2, section 5.18: TPM_SELECT_SIZE
686
///
687
typedef struct tdTPM_SELECT_SIZE {
688
  UINT8     major;
689
  UINT8     minor;
690
  UINT16    reqSize;
691
} TPM_SELECT_SIZE;
692

693
///
694
/// Part 2, section 5,19: TPM_CMK_MIGAUTH
695
///
696
typedef struct tdTPM_CMK_MIGAUTH {
697
  TPM_STRUCTURE_TAG    tag;
698
  TPM_DIGEST           msaDigest;
699
  TPM_DIGEST           pubKeyDigest;
700
} TPM_CMK_MIGAUTH;
701

702
///
703
/// Part 2, section 5.20: TPM_CMK_SIGTICKET
704
///
705
typedef struct tdTPM_CMK_SIGTICKET {
706
  TPM_STRUCTURE_TAG    tag;
707
  TPM_DIGEST           verKeyDigest;
708
  TPM_DIGEST           signedData;
709
} TPM_CMK_SIGTICKET;
710

711
///
712
/// Part 2, section 5.21: TPM_CMK_MA_APPROVAL
713
///
714
typedef struct tdTPM_CMK_MA_APPROVAL {
715
  TPM_STRUCTURE_TAG    tag;
716
  TPM_DIGEST           migrationAuthorityDigest;
717
} TPM_CMK_MA_APPROVAL;
718

719
//
720
// Part 2, section 6: Command Tags
721
//
722
#define TPM_TAG_RQU_COMMAND        ((TPM_STRUCTURE_TAG) 0x00C1)
723
#define TPM_TAG_RQU_AUTH1_COMMAND  ((TPM_STRUCTURE_TAG) 0x00C2)
724
#define TPM_TAG_RQU_AUTH2_COMMAND  ((TPM_STRUCTURE_TAG) 0x00C3)
725
#define TPM_TAG_RSP_COMMAND        ((TPM_STRUCTURE_TAG) 0x00C4)
726
#define TPM_TAG_RSP_AUTH1_COMMAND  ((TPM_STRUCTURE_TAG) 0x00C5)
727
#define TPM_TAG_RSP_AUTH2_COMMAND  ((TPM_STRUCTURE_TAG) 0x00C6)
728

729
///
730
/// Part 2, section 7.1: TPM_PERMANENT_FLAGS
731
///
732
typedef struct tdTPM_PERMANENT_FLAGS {
733
  TPM_STRUCTURE_TAG    tag;
734
  BOOLEAN              disable;
735
  BOOLEAN              ownership;
736
  BOOLEAN              deactivated;
737
  BOOLEAN              readPubek;
738
  BOOLEAN              disableOwnerClear;
739
  BOOLEAN              allowMaintenance;
740
  BOOLEAN              physicalPresenceLifetimeLock;
741
  BOOLEAN              physicalPresenceHWEnable;
742
  BOOLEAN              physicalPresenceCMDEnable;
743
  BOOLEAN              CEKPUsed;
744
  BOOLEAN              TPMpost;
745
  BOOLEAN              TPMpostLock;
746
  BOOLEAN              FIPS;
747
  BOOLEAN              operator_;
748
  BOOLEAN              enableRevokeEK;
749
  BOOLEAN              nvLocked;
750
  BOOLEAN              readSRKPub;
751
  BOOLEAN              tpmEstablished;
752
  BOOLEAN              maintenanceDone;
753
  BOOLEAN              disableFullDALogicInfo;
754
} TPM_PERMANENT_FLAGS;
755

756
//
757
// Part 2, section 7.1.1: Flag Restrictions (of TPM_PERMANENT_FLAGS)
758
//
759
#define TPM_PF_DISABLE                       ((TPM_CAPABILITY_AREA) 1)
760
#define TPM_PF_OWNERSHIP                     ((TPM_CAPABILITY_AREA) 2)
761
#define TPM_PF_DEACTIVATED                   ((TPM_CAPABILITY_AREA) 3)
762
#define TPM_PF_READPUBEK                     ((TPM_CAPABILITY_AREA) 4)
763
#define TPM_PF_DISABLEOWNERCLEAR             ((TPM_CAPABILITY_AREA) 5)
764
#define TPM_PF_ALLOWMAINTENANCE              ((TPM_CAPABILITY_AREA) 6)
765
#define TPM_PF_PHYSICALPRESENCELIFETIMELOCK  ((TPM_CAPABILITY_AREA) 7)
766
#define TPM_PF_PHYSICALPRESENCEHWENABLE      ((TPM_CAPABILITY_AREA) 8)
767
#define TPM_PF_PHYSICALPRESENCECMDENABLE     ((TPM_CAPABILITY_AREA) 9)
768
#define TPM_PF_CEKPUSED                      ((TPM_CAPABILITY_AREA) 10)
769
#define TPM_PF_TPMPOST                       ((TPM_CAPABILITY_AREA) 11)
770
#define TPM_PF_TPMPOSTLOCK                   ((TPM_CAPABILITY_AREA) 12)
771
#define TPM_PF_FIPS                          ((TPM_CAPABILITY_AREA) 13)
772
#define TPM_PF_OPERATOR                      ((TPM_CAPABILITY_AREA) 14)
773
#define TPM_PF_ENABLEREVOKEEK                ((TPM_CAPABILITY_AREA) 15)
774
#define TPM_PF_NV_LOCKED                     ((TPM_CAPABILITY_AREA) 16)
775
#define TPM_PF_READSRKPUB                    ((TPM_CAPABILITY_AREA) 17)
776
#define TPM_PF_TPMESTABLISHED                ((TPM_CAPABILITY_AREA) 18)
777
#define TPM_PF_MAINTENANCEDONE               ((TPM_CAPABILITY_AREA) 19)
778
#define TPM_PF_DISABLEFULLDALOGICINFO        ((TPM_CAPABILITY_AREA) 20)
779

780
///
781
/// Part 2, section 7.2: TPM_STCLEAR_FLAGS
782
///
783
typedef struct tdTPM_STCLEAR_FLAGS {
784
  TPM_STRUCTURE_TAG    tag;
785
  BOOLEAN              deactivated;
786
  BOOLEAN              disableForceClear;
787
  BOOLEAN              physicalPresence;
788
  BOOLEAN              physicalPresenceLock;
789
  BOOLEAN              bGlobalLock;
790
} TPM_STCLEAR_FLAGS;
791

792
//
793
// Part 2, section 7.2.1: Flag Restrictions (of TPM_STCLEAR_FLAGS)
794
//
795
#define TPM_SF_DEACTIVATED           ((TPM_CAPABILITY_AREA) 1)
796
#define TPM_SF_DISABLEFORCECLEAR     ((TPM_CAPABILITY_AREA) 2)
797
#define TPM_SF_PHYSICALPRESENCE      ((TPM_CAPABILITY_AREA) 3)
798
#define TPM_SF_PHYSICALPRESENCELOCK  ((TPM_CAPABILITY_AREA) 4)
799
#define TPM_SF_BGLOBALLOCK           ((TPM_CAPABILITY_AREA) 5)
800

801
///
802
/// Part 2, section 7.3: TPM_STANY_FLAGS
803
///
804
typedef struct tdTPM_STANY_FLAGS {
805
  TPM_STRUCTURE_TAG         tag;
806
  BOOLEAN                   postInitialise;
807
  TPM_MODIFIER_INDICATOR    localityModifier;
808
  BOOLEAN                   transportExclusive;
809
  BOOLEAN                   TOSPresent;
810
} TPM_STANY_FLAGS;
811

812
//
813
// Part 2, section 7.3.1: Flag Restrictions (of TPM_STANY_FLAGS)
814
//
815
#define TPM_AF_POSTINITIALISE      ((TPM_CAPABILITY_AREA) 1)
816
#define TPM_AF_LOCALITYMODIFIER    ((TPM_CAPABILITY_AREA) 2)
817
#define TPM_AF_TRANSPORTEXCLUSIVE  ((TPM_CAPABILITY_AREA) 3)
818
#define TPM_AF_TOSPRESENT          ((TPM_CAPABILITY_AREA) 4)
819

820
//
821
// All those structures defined in section 7.4, 7.5, 7.6 are not normative and
822
// thus no definitions here
823
//
824
// Part 2, section 7.4: TPM_PERMANENT_DATA
825
//
826
#define TPM_MIN_COUNTERS          4     ///< the minimum number of counters is 4
827
#define TPM_DELEGATE_KEY          TPM_KEY
828
#define TPM_NUM_PCR               16
829
#define TPM_MAX_NV_WRITE_NOOWNER  64
830

831
//
832
// Part 2, section 7.4.1: PERMANENT_DATA Subcap for SetCapability
833
//
834
#define TPM_PD_REVMAJOR               ((TPM_CAPABILITY_AREA) 1)
835
#define TPM_PD_REVMINOR               ((TPM_CAPABILITY_AREA) 2)
836
#define TPM_PD_TPMPROOF               ((TPM_CAPABILITY_AREA) 3)
837
#define TPM_PD_OWNERAUTH              ((TPM_CAPABILITY_AREA) 4)
838
#define TPM_PD_OPERATORAUTH           ((TPM_CAPABILITY_AREA) 5)
839
#define TPM_PD_MANUMAINTPUB           ((TPM_CAPABILITY_AREA) 6)
840
#define TPM_PD_ENDORSEMENTKEY         ((TPM_CAPABILITY_AREA) 7)
841
#define TPM_PD_SRK                    ((TPM_CAPABILITY_AREA) 8)
842
#define TPM_PD_DELEGATEKEY            ((TPM_CAPABILITY_AREA) 9)
843
#define TPM_PD_CONTEXTKEY             ((TPM_CAPABILITY_AREA) 10)
844
#define TPM_PD_AUDITMONOTONICCOUNTER  ((TPM_CAPABILITY_AREA) 11)
845
#define TPM_PD_MONOTONICCOUNTER       ((TPM_CAPABILITY_AREA) 12)
846
#define TPM_PD_PCRATTRIB              ((TPM_CAPABILITY_AREA) 13)
847
#define TPM_PD_ORDINALAUDITSTATUS     ((TPM_CAPABILITY_AREA) 14)
848
#define TPM_PD_AUTHDIR                ((TPM_CAPABILITY_AREA) 15)
849
#define TPM_PD_RNGSTATE               ((TPM_CAPABILITY_AREA) 16)
850
#define TPM_PD_FAMILYTABLE            ((TPM_CAPABILITY_AREA) 17)
851
#define TPM_DELEGATETABLE             ((TPM_CAPABILITY_AREA) 18)
852
#define TPM_PD_EKRESET                ((TPM_CAPABILITY_AREA) 19)
853
#define TPM_PD_MAXNVBUFSIZE           ((TPM_CAPABILITY_AREA) 20)
854
#define TPM_PD_LASTFAMILYID           ((TPM_CAPABILITY_AREA) 21)
855
#define TPM_PD_NOOWNERNVWRITE         ((TPM_CAPABILITY_AREA) 22)
856
#define TPM_PD_RESTRICTDELEGATE       ((TPM_CAPABILITY_AREA) 23)
857
#define TPM_PD_TPMDAASEED             ((TPM_CAPABILITY_AREA) 24)
858
#define TPM_PD_DAAPROOF               ((TPM_CAPABILITY_AREA) 25)
859

860
///
861
/// Part 2, section 7.5: TPM_STCLEAR_DATA
862
///   available inside TPM only
863
///
864
typedef struct tdTPM_STCLEAR_DATA {
865
  TPM_STRUCTURE_TAG    tag;
866
  TPM_NONCE            contextNonceKey;
867
  TPM_COUNT_ID         countID;
868
  UINT32               ownerReference;
869
  BOOLEAN              disableResetLock;
870
  TPM_PCRVALUE         PCR[TPM_NUM_PCR];
871
  UINT32               deferredPhysicalPresence;
872
} TPM_STCLEAR_DATA;
873

874
//
875
// Part 2, section 7.5.1: STCLEAR_DATA Subcap for SetCapability
876
//
877
#define TPM_SD_CONTEXTNONCEKEY           ((TPM_CAPABILITY_AREA)0x00000001)
878
#define TPM_SD_COUNTID                   ((TPM_CAPABILITY_AREA)0x00000002)
879
#define TPM_SD_OWNERREFERENCE            ((TPM_CAPABILITY_AREA)0x00000003)
880
#define TPM_SD_DISABLERESETLOCK          ((TPM_CAPABILITY_AREA)0x00000004)
881
#define TPM_SD_PCR                       ((TPM_CAPABILITY_AREA)0x00000005)
882
#define TPM_SD_DEFERREDPHYSICALPRESENCE  ((TPM_CAPABILITY_AREA)0x00000006)
883

884
//
885
// Part 2, section 7.6.1: STANY_DATA Subcap for SetCapability
886
//
887
#define TPM_AD_CONTEXTNONCESESSION  ((TPM_CAPABILITY_AREA) 1)
888
#define TPM_AD_AUDITDIGEST          ((TPM_CAPABILITY_AREA) 2)
889
#define TPM_AD_CURRENTTICKS         ((TPM_CAPABILITY_AREA) 3)
890
#define TPM_AD_CONTEXTCOUNT         ((TPM_CAPABILITY_AREA) 4)
891
#define TPM_AD_CONTEXTLIST          ((TPM_CAPABILITY_AREA) 5)
892
#define TPM_AD_SESSIONS             ((TPM_CAPABILITY_AREA) 6)
893

894
//
895
// Part 2, section 8: PCR Structures
896
//
897

898
///
899
/// Part 2, section 8.1: TPM_PCR_SELECTION
900
///   Size of pcrSelect[] indicated by sizeOfSelect
901
///
902
typedef struct tdTPM_PCR_SELECTION {
903
  UINT16    sizeOfSelect;
904
  UINT8     pcrSelect[1];
905
} TPM_PCR_SELECTION;
906

907
///
908
/// Part 2, section 8.2: TPM_PCR_COMPOSITE
909
///   Size of pcrValue[] indicated by valueSize
910
///
911
typedef struct tdTPM_PCR_COMPOSITE {
912
  TPM_PCR_SELECTION    select;
913
  UINT32               valueSize;
914
  TPM_PCRVALUE         pcrValue[1];
915
} TPM_PCR_COMPOSITE;
916

917
///
918
/// Part 2, section 8.3: TPM_PCR_INFO
919
///
920
typedef struct tdTPM_PCR_INFO {
921
  TPM_PCR_SELECTION     pcrSelection;
922
  TPM_COMPOSITE_HASH    digestAtRelease;
923
  TPM_COMPOSITE_HASH    digestAtCreation;
924
} TPM_PCR_INFO;
925

926
///
927
/// Part 2, section 8.6: TPM_LOCALITY_SELECTION
928
///
929
typedef UINT8 TPM_LOCALITY_SELECTION;
930

931
#define TPM_LOC_FOUR   ((UINT8) 0x10)
932
#define TPM_LOC_THREE  ((UINT8) 0x08)
933
#define TPM_LOC_TWO    ((UINT8) 0x04)
934
#define TPM_LOC_ONE    ((UINT8) 0x02)
935
#define TPM_LOC_ZERO   ((UINT8) 0x01)
936

937
///
938
/// Part 2, section 8.4: TPM_PCR_INFO_LONG
939
///
940
typedef struct tdTPM_PCR_INFO_LONG {
941
  TPM_STRUCTURE_TAG         tag;
942
  TPM_LOCALITY_SELECTION    localityAtCreation;
943
  TPM_LOCALITY_SELECTION    localityAtRelease;
944
  TPM_PCR_SELECTION         creationPCRSelection;
945
  TPM_PCR_SELECTION         releasePCRSelection;
946
  TPM_COMPOSITE_HASH        digestAtCreation;
947
  TPM_COMPOSITE_HASH        digestAtRelease;
948
} TPM_PCR_INFO_LONG;
949

950
///
951
/// Part 2, section 8.5: TPM_PCR_INFO_SHORT
952
///
953
typedef struct tdTPM_PCR_INFO_SHORT {
954
  TPM_PCR_SELECTION         pcrSelection;
955
  TPM_LOCALITY_SELECTION    localityAtRelease;
956
  TPM_COMPOSITE_HASH        digestAtRelease;
957
} TPM_PCR_INFO_SHORT;
958

959
///
960
/// Part 2, section 8.8: TPM_PCR_ATTRIBUTES
961
///
962
typedef struct tdTPM_PCR_ATTRIBUTES {
963
  BOOLEAN                   pcrReset;
964
  TPM_LOCALITY_SELECTION    pcrExtendLocal;
965
  TPM_LOCALITY_SELECTION    pcrResetLocal;
966
} TPM_PCR_ATTRIBUTES;
967

968
//
969
// Part 2, section 9: Storage Structures
970
//
971

972
///
973
/// Part 2, section 9.1: TPM_STORED_DATA
974
///   [size_is(sealInfoSize)] BYTE* sealInfo;
975
///   [size_is(encDataSize)] BYTE* encData;
976
///
977
typedef struct tdTPM_STORED_DATA {
978
  TPM_STRUCT_VER    ver;
979
  UINT32            sealInfoSize;
980
  UINT8             *sealInfo;
981
  UINT32            encDataSize;
982
  UINT8             *encData;
983
} TPM_STORED_DATA;
984

985
///
986
/// Part 2, section 9.2: TPM_STORED_DATA12
987
///   [size_is(sealInfoSize)] BYTE* sealInfo;
988
///   [size_is(encDataSize)] BYTE* encData;
989
///
990
typedef struct tdTPM_STORED_DATA12 {
991
  TPM_STRUCTURE_TAG    tag;
992
  TPM_ENTITY_TYPE      et;
993
  UINT32               sealInfoSize;
994
  UINT8                *sealInfo;
995
  UINT32               encDataSize;
996
  UINT8                *encData;
997
} TPM_STORED_DATA12;
998

999
///
1000
/// Part 2, section 9.3: TPM_SEALED_DATA
1001
///   [size_is(dataSize)] BYTE* data;
1002
///
1003
typedef struct tdTPM_SEALED_DATA {
1004
  TPM_PAYLOAD_TYPE    payload;
1005
  TPM_SECRET          authData;
1006
  TPM_NONCE           tpmProof;
1007
  TPM_DIGEST          storedDigest;
1008
  UINT32              dataSize;
1009
  UINT8               *data;
1010
} TPM_SEALED_DATA;
1011

1012
///
1013
/// Part 2, section 9.4: TPM_SYMMETRIC_KEY
1014
///   [size_is(size)] BYTE* data;
1015
///
1016
typedef struct tdTPM_SYMMETRIC_KEY {
1017
  TPM_ALGORITHM_ID    algId;
1018
  TPM_ENC_SCHEME      encScheme;
1019
  UINT16              dataSize;
1020
  UINT8               *data;
1021
} TPM_SYMMETRIC_KEY;
1022

1023
///
1024
/// Part 2, section 9.5: TPM_BOUND_DATA
1025
///
1026
typedef struct tdTPM_BOUND_DATA {
1027
  TPM_STRUCT_VER      ver;
1028
  TPM_PAYLOAD_TYPE    payload;
1029
  UINT8               payloadData[1];
1030
} TPM_BOUND_DATA;
1031

1032
//
1033
// Part 2 section 10: TPM_KEY complex
1034
//
1035

1036
//
1037
// Section 10.1, 10.4, and 10.5 have been defined previously
1038
//
1039

1040
///
1041
/// Part 2, section 10.2: TPM_KEY
1042
///   [size_is(encDataSize)] BYTE* encData;
1043
///
1044
typedef struct tdTPM_KEY {
1045
  TPM_STRUCT_VER         ver;
1046
  TPM_KEY_USAGE          keyUsage;
1047
  TPM_KEY_FLAGS          keyFlags;
1048
  TPM_AUTH_DATA_USAGE    authDataUsage;
1049
  TPM_KEY_PARMS          algorithmParms;
1050
  UINT32                 PCRInfoSize;
1051
  UINT8                  *PCRInfo;
1052
  TPM_STORE_PUBKEY       pubKey;
1053
  UINT32                 encDataSize;
1054
  UINT8                  *encData;
1055
} TPM_KEY;
1056

1057
///
1058
/// Part 2, section 10.3: TPM_KEY12
1059
///   [size_is(encDataSize)] BYTE* encData;
1060
///
1061
typedef struct tdTPM_KEY12 {
1062
  TPM_STRUCTURE_TAG      tag;
1063
  UINT16                 fill;
1064
  TPM_KEY_USAGE          keyUsage;
1065
  TPM_KEY_FLAGS          keyFlags;
1066
  TPM_AUTH_DATA_USAGE    authDataUsage;
1067
  TPM_KEY_PARMS          algorithmParms;
1068
  UINT32                 PCRInfoSize;
1069
  UINT8                  *PCRInfo;
1070
  TPM_STORE_PUBKEY       pubKey;
1071
  UINT32                 encDataSize;
1072
  UINT8                  *encData;
1073
} TPM_KEY12;
1074

1075
///
1076
/// Part 2, section 10.7: TPM_STORE_PRIVKEY
1077
///   [size_is(keyLength)] BYTE* key;
1078
///
1079
typedef struct tdTPM_STORE_PRIVKEY {
1080
  UINT32    keyLength;
1081
  UINT8     *key;
1082
} TPM_STORE_PRIVKEY;
1083

1084
///
1085
/// Part 2, section 10.6: TPM_STORE_ASYMKEY
1086
///
1087
typedef struct tdTPM_STORE_ASYMKEY {
1088
  // pos len total
1089
  TPM_PAYLOAD_TYPE     payload;                     // 0    1   1
1090
  TPM_SECRET           usageAuth;                   // 1    20  21
1091
  TPM_SECRET           migrationAuth;               // 21   20  41
1092
  TPM_DIGEST           pubDataDigest;               // 41   20  61
1093
  TPM_STORE_PRIVKEY    privKey;                     // 61 132-151 193-214
1094
} TPM_STORE_ASYMKEY;
1095

1096
///
1097
/// Part 2, section 10.8: TPM_MIGRATE_ASYMKEY
1098
///   [size_is(partPrivKeyLen)] BYTE* partPrivKey;
1099
///
1100
typedef struct tdTPM_MIGRATE_ASYMKEY {
1101
  // pos  len  total
1102
  TPM_PAYLOAD_TYPE    payload;                      //   0    1       1
1103
  TPM_SECRET          usageAuth;                    //   1   20      21
1104
  TPM_DIGEST          pubDataDigest;                //  21   20      41
1105
  UINT32              partPrivKeyLen;               //  41    4      45
1106
  UINT8               *partPrivKey;                 //  45 112-127 157-172
1107
} TPM_MIGRATE_ASYMKEY;
1108

1109
///
1110
/// Part 2, section 10.9: TPM_KEY_CONTROL
1111
///
1112
#define TPM_KEY_CONTROL_OWNER_EVICT  ((UINT32) 0x00000001)
1113

1114
//
1115
// Part 2, section 11: Signed Structures
1116
//
1117

1118
///
1119
/// Part 2, section 11.1: TPM_CERTIFY_INFO Structure
1120
///
1121
typedef struct tdTPM_CERTIFY_INFO {
1122
  TPM_STRUCT_VER         version;
1123
  TPM_KEY_USAGE          keyUsage;
1124
  TPM_KEY_FLAGS          keyFlags;
1125
  TPM_AUTH_DATA_USAGE    authDataUsage;
1126
  TPM_KEY_PARMS          algorithmParms;
1127
  TPM_DIGEST             pubkeyDigest;
1128
  TPM_NONCE              data;
1129
  BOOLEAN                parentPCRStatus;
1130
  UINT32                 PCRInfoSize;
1131
  UINT8                  *PCRInfo;
1132
} TPM_CERTIFY_INFO;
1133

1134
///
1135
/// Part 2, section 11.2: TPM_CERTIFY_INFO2 Structure
1136
///
1137
typedef struct tdTPM_CERTIFY_INFO2 {
1138
  TPM_STRUCTURE_TAG      tag;
1139
  UINT8                  fill;
1140
  TPM_PAYLOAD_TYPE       payloadType;
1141
  TPM_KEY_USAGE          keyUsage;
1142
  TPM_KEY_FLAGS          keyFlags;
1143
  TPM_AUTH_DATA_USAGE    authDataUsage;
1144
  TPM_KEY_PARMS          algorithmParms;
1145
  TPM_DIGEST             pubkeyDigest;
1146
  TPM_NONCE              data;
1147
  BOOLEAN                parentPCRStatus;
1148
  UINT32                 PCRInfoSize;
1149
  UINT8                  *PCRInfo;
1150
  UINT32                 migrationAuthoritySize;
1151
  UINT8                  *migrationAuthority;
1152
} TPM_CERTIFY_INFO2;
1153

1154
///
1155
/// Part 2, section 11.3 TPM_QUOTE_INFO Structure
1156
///
1157
typedef struct tdTPM_QUOTE_INFO {
1158
  TPM_STRUCT_VER        version;
1159
  UINT8                 fixed[4];
1160
  TPM_COMPOSITE_HASH    digestValue;
1161
  TPM_NONCE             externalData;
1162
} TPM_QUOTE_INFO;
1163

1164
///
1165
/// Part 2, section 11.4 TPM_QUOTE_INFO2 Structure
1166
///
1167
typedef struct tdTPM_QUOTE_INFO2 {
1168
  TPM_STRUCTURE_TAG     tag;
1169
  UINT8                 fixed[4];
1170
  TPM_NONCE             externalData;
1171
  TPM_PCR_INFO_SHORT    infoShort;
1172
} TPM_QUOTE_INFO2;
1173

1174
//
1175
// Part 2, section 12: Identity Structures
1176
//
1177

1178
///
1179
/// Part 2, section 12.1 TPM_EK_BLOB
1180
///
1181
typedef struct tdTPM_EK_BLOB {
1182
  TPM_STRUCTURE_TAG    tag;
1183
  TPM_EK_TYPE          ekType;
1184
  UINT32               blobSize;
1185
  UINT8                *blob;
1186
} TPM_EK_BLOB;
1187

1188
///
1189
/// Part 2, section 12.2 TPM_EK_BLOB_ACTIVATE
1190
///
1191
typedef struct tdTPM_EK_BLOB_ACTIVATE {
1192
  TPM_STRUCTURE_TAG     tag;
1193
  TPM_SYMMETRIC_KEY     sessionKey;
1194
  TPM_DIGEST            idDigest;
1195
  TPM_PCR_INFO_SHORT    pcrInfo;
1196
} TPM_EK_BLOB_ACTIVATE;
1197

1198
///
1199
/// Part 2, section 12.3 TPM_EK_BLOB_AUTH
1200
///
1201
typedef struct tdTPM_EK_BLOB_AUTH {
1202
  TPM_STRUCTURE_TAG    tag;
1203
  TPM_SECRET           authValue;
1204
} TPM_EK_BLOB_AUTH;
1205

1206
///
1207
/// Part 2, section 12.5 TPM_IDENTITY_CONTENTS
1208
///
1209
typedef struct tdTPM_IDENTITY_CONTENTS {
1210
  TPM_STRUCT_VER       ver;
1211
  UINT32               ordinal;
1212
  TPM_CHOSENID_HASH    labelPrivCADigest;
1213
  TPM_PUBKEY           identityPubKey;
1214
} TPM_IDENTITY_CONTENTS;
1215

1216
///
1217
/// Part 2, section 12.6 TPM_IDENTITY_REQ
1218
///
1219
typedef struct tdTPM_IDENTITY_REQ {
1220
  UINT32           asymSize;
1221
  UINT32           symSize;
1222
  TPM_KEY_PARMS    asymAlgorithm;
1223
  TPM_KEY_PARMS    symAlgorithm;
1224
  UINT8            *asymBlob;
1225
  UINT8            *symBlob;
1226
} TPM_IDENTITY_REQ;
1227

1228
///
1229
/// Part 2, section 12.7 TPM_IDENTITY_PROOF
1230
///
1231
typedef struct tdTPM_IDENTITY_PROOF {
1232
  TPM_STRUCT_VER    ver;
1233
  UINT32            labelSize;
1234
  UINT32            identityBindingSize;
1235
  UINT32            endorsementSize;
1236
  UINT32            platformSize;
1237
  UINT32            conformanceSize;
1238
  TPM_PUBKEY        identityKey;
1239
  UINT8             *labelArea;
1240
  UINT8             *identityBinding;
1241
  UINT8             *endorsementCredential;
1242
  UINT8             *platformCredential;
1243
  UINT8             *conformanceCredential;
1244
} TPM_IDENTITY_PROOF;
1245

1246
///
1247
/// Part 2, section 12.8 TPM_ASYM_CA_CONTENTS
1248
///
1249
typedef struct tdTPM_ASYM_CA_CONTENTS {
1250
  TPM_SYMMETRIC_KEY    sessionKey;
1251
  TPM_DIGEST           idDigest;
1252
} TPM_ASYM_CA_CONTENTS;
1253

1254
///
1255
/// Part 2, section 12.9 TPM_SYM_CA_ATTESTATION
1256
///
1257
typedef struct tdTPM_SYM_CA_ATTESTATION {
1258
  UINT32           credSize;
1259
  TPM_KEY_PARMS    algorithm;
1260
  UINT8            *credential;
1261
} TPM_SYM_CA_ATTESTATION;
1262

1263
///
1264
/// Part 2, section 15: Tick Structures
1265
///   Placed here out of order because definitions are used in section 13.
1266
///
1267
typedef struct tdTPM_CURRENT_TICKS {
1268
  TPM_STRUCTURE_TAG    tag;
1269
  UINT64               currentTicks;
1270
  UINT16               tickRate;
1271
  TPM_NONCE            tickNonce;
1272
} TPM_CURRENT_TICKS;
1273

1274
///
1275
/// Part 2, section 13: Transport structures
1276
///
1277

1278
///
1279
/// Part 2, section 13.1: TPM _TRANSPORT_PUBLIC
1280
///
1281
typedef struct tdTPM_TRANSPORT_PUBLIC {
1282
  TPM_STRUCTURE_TAG           tag;
1283
  TPM_TRANSPORT_ATTRIBUTES    transAttributes;
1284
  TPM_ALGORITHM_ID            algId;
1285
  TPM_ENC_SCHEME              encScheme;
1286
} TPM_TRANSPORT_PUBLIC;
1287

1288
//
1289
// Part 2, section 13.1.1 TPM_TRANSPORT_ATTRIBUTES Definitions
1290
//
1291
#define TPM_TRANSPORT_ENCRYPT    ((UINT32)BIT0)
1292
#define TPM_TRANSPORT_LOG        ((UINT32)BIT1)
1293
#define TPM_TRANSPORT_EXCLUSIVE  ((UINT32)BIT2)
1294

1295
///
1296
/// Part 2, section 13.2 TPM_TRANSPORT_INTERNAL
1297
///
1298
typedef struct tdTPM_TRANSPORT_INTERNAL {
1299
  TPM_STRUCTURE_TAG       tag;
1300
  TPM_AUTHDATA            authData;
1301
  TPM_TRANSPORT_PUBLIC    transPublic;
1302
  TPM_TRANSHANDLE         transHandle;
1303
  TPM_NONCE               transNonceEven;
1304
  TPM_DIGEST              transDigest;
1305
} TPM_TRANSPORT_INTERNAL;
1306

1307
///
1308
/// Part 2, section 13.3 TPM_TRANSPORT_LOG_IN structure
1309
///
1310
typedef struct tdTPM_TRANSPORT_LOG_IN {
1311
  TPM_STRUCTURE_TAG    tag;
1312
  TPM_DIGEST           parameters;
1313
  TPM_DIGEST           pubKeyHash;
1314
} TPM_TRANSPORT_LOG_IN;
1315

1316
///
1317
/// Part 2, section 13.4 TPM_TRANSPORT_LOG_OUT structure
1318
///
1319
typedef struct tdTPM_TRANSPORT_LOG_OUT {
1320
  TPM_STRUCTURE_TAG         tag;
1321
  TPM_CURRENT_TICKS         currentTicks;
1322
  TPM_DIGEST                parameters;
1323
  TPM_MODIFIER_INDICATOR    locality;
1324
} TPM_TRANSPORT_LOG_OUT;
1325

1326
///
1327
/// Part 2, section 13.5 TPM_TRANSPORT_AUTH structure
1328
///
1329
typedef struct tdTPM_TRANSPORT_AUTH {
1330
  TPM_STRUCTURE_TAG    tag;
1331
  TPM_AUTHDATA         authData;
1332
} TPM_TRANSPORT_AUTH;
1333

1334
//
1335
// Part 2, section 14: Audit Structures
1336
//
1337

1338
///
1339
/// Part 2, section 14.1 TPM_AUDIT_EVENT_IN structure
1340
///
1341
typedef struct tdTPM_AUDIT_EVENT_IN {
1342
  TPM_STRUCTURE_TAG    tag;
1343
  TPM_DIGEST           inputParms;
1344
  TPM_COUNTER_VALUE    auditCount;
1345
} TPM_AUDIT_EVENT_IN;
1346

1347
///
1348
/// Part 2, section 14.2 TPM_AUDIT_EVENT_OUT structure
1349
///
1350
typedef struct tdTPM_AUDIT_EVENT_OUT {
1351
  TPM_STRUCTURE_TAG    tag;
1352
  TPM_COMMAND_CODE     ordinal;
1353
  TPM_DIGEST           outputParms;
1354
  TPM_COUNTER_VALUE    auditCount;
1355
  TPM_RESULT           returnCode;
1356
} TPM_AUDIT_EVENT_OUT;
1357

1358
//
1359
// Part 2, section 16: Return Codes
1360
//
1361

1362
#define TPM_VENDOR_ERROR  TPM_Vendor_Specific32
1363
#define TPM_NON_FATAL     0x00000800
1364

1365
#define TPM_SUCCESS                 ((TPM_RESULT) TPM_BASE)
1366
#define TPM_AUTHFAIL                ((TPM_RESULT) (TPM_BASE + 1))
1367
#define TPM_BADINDEX                ((TPM_RESULT) (TPM_BASE + 2))
1368
#define TPM_BAD_PARAMETER           ((TPM_RESULT) (TPM_BASE + 3))
1369
#define TPM_AUDITFAILURE            ((TPM_RESULT) (TPM_BASE + 4))
1370
#define TPM_CLEAR_DISABLED          ((TPM_RESULT) (TPM_BASE + 5))
1371
#define TPM_DEACTIVATED             ((TPM_RESULT) (TPM_BASE + 6))
1372
#define TPM_DISABLED                ((TPM_RESULT) (TPM_BASE + 7))
1373
#define TPM_DISABLED_CMD            ((TPM_RESULT) (TPM_BASE + 8))
1374
#define TPM_FAIL                    ((TPM_RESULT) (TPM_BASE + 9))
1375
#define TPM_BAD_ORDINAL             ((TPM_RESULT) (TPM_BASE + 10))
1376
#define TPM_INSTALL_DISABLED        ((TPM_RESULT) (TPM_BASE + 11))
1377
#define TPM_INVALID_KEYHANDLE       ((TPM_RESULT) (TPM_BASE + 12))
1378
#define TPM_KEYNOTFOUND             ((TPM_RESULT) (TPM_BASE + 13))
1379
#define TPM_INAPPROPRIATE_ENC       ((TPM_RESULT) (TPM_BASE + 14))
1380
#define TPM_MIGRATEFAIL             ((TPM_RESULT) (TPM_BASE + 15))
1381
#define TPM_INVALID_PCR_INFO        ((TPM_RESULT) (TPM_BASE + 16))
1382
#define TPM_NOSPACE                 ((TPM_RESULT) (TPM_BASE + 17))
1383
#define TPM_NOSRK                   ((TPM_RESULT) (TPM_BASE + 18))
1384
#define TPM_NOTSEALED_BLOB          ((TPM_RESULT) (TPM_BASE + 19))
1385
#define TPM_OWNER_SET               ((TPM_RESULT) (TPM_BASE + 20))
1386
#define TPM_RESOURCES               ((TPM_RESULT) (TPM_BASE + 21))
1387
#define TPM_SHORTRANDOM             ((TPM_RESULT) (TPM_BASE + 22))
1388
#define TPM_SIZE                    ((TPM_RESULT) (TPM_BASE + 23))
1389
#define TPM_WRONGPCRVAL             ((TPM_RESULT) (TPM_BASE + 24))
1390
#define TPM_BAD_PARAM_SIZE          ((TPM_RESULT) (TPM_BASE + 25))
1391
#define TPM_SHA_THREAD              ((TPM_RESULT) (TPM_BASE + 26))
1392
#define TPM_SHA_ERROR               ((TPM_RESULT) (TPM_BASE + 27))
1393
#define TPM_FAILEDSELFTEST          ((TPM_RESULT) (TPM_BASE + 28))
1394
#define TPM_AUTH2FAIL               ((TPM_RESULT) (TPM_BASE + 29))
1395
#define TPM_BADTAG                  ((TPM_RESULT) (TPM_BASE + 30))
1396
#define TPM_IOERROR                 ((TPM_RESULT) (TPM_BASE + 31))
1397
#define TPM_ENCRYPT_ERROR           ((TPM_RESULT) (TPM_BASE + 32))
1398
#define TPM_DECRYPT_ERROR           ((TPM_RESULT) (TPM_BASE + 33))
1399
#define TPM_INVALID_AUTHHANDLE      ((TPM_RESULT) (TPM_BASE + 34))
1400
#define TPM_NO_ENDORSEMENT          ((TPM_RESULT) (TPM_BASE + 35))
1401
#define TPM_INVALID_KEYUSAGE        ((TPM_RESULT) (TPM_BASE + 36))
1402
#define TPM_WRONG_ENTITYTYPE        ((TPM_RESULT) (TPM_BASE + 37))
1403
#define TPM_INVALID_POSTINIT        ((TPM_RESULT) (TPM_BASE + 38))
1404
#define TPM_INAPPROPRIATE_SIG       ((TPM_RESULT) (TPM_BASE + 39))
1405
#define TPM_BAD_KEY_PROPERTY        ((TPM_RESULT) (TPM_BASE + 40))
1406
#define TPM_BAD_MIGRATION           ((TPM_RESULT) (TPM_BASE + 41))
1407
#define TPM_BAD_SCHEME              ((TPM_RESULT) (TPM_BASE + 42))
1408
#define TPM_BAD_DATASIZE            ((TPM_RESULT) (TPM_BASE + 43))
1409
#define TPM_BAD_MODE                ((TPM_RESULT) (TPM_BASE + 44))
1410
#define TPM_BAD_PRESENCE            ((TPM_RESULT) (TPM_BASE + 45))
1411
#define TPM_BAD_VERSION             ((TPM_RESULT) (TPM_BASE + 46))
1412
#define TPM_NO_WRAP_TRANSPORT       ((TPM_RESULT) (TPM_BASE + 47))
1413
#define TPM_AUDITFAIL_UNSUCCESSFUL  ((TPM_RESULT) (TPM_BASE + 48))
1414
#define TPM_AUDITFAIL_SUCCESSFUL    ((TPM_RESULT) (TPM_BASE + 49))
1415
#define TPM_NOTRESETABLE            ((TPM_RESULT) (TPM_BASE + 50))
1416
#define TPM_NOTLOCAL                ((TPM_RESULT) (TPM_BASE + 51))
1417
#define TPM_BAD_TYPE                ((TPM_RESULT) (TPM_BASE + 52))
1418
#define TPM_INVALID_RESOURCE        ((TPM_RESULT) (TPM_BASE + 53))
1419
#define TPM_NOTFIPS                 ((TPM_RESULT) (TPM_BASE + 54))
1420
#define TPM_INVALID_FAMILY          ((TPM_RESULT) (TPM_BASE + 55))
1421
#define TPM_NO_NV_PERMISSION        ((TPM_RESULT) (TPM_BASE + 56))
1422
#define TPM_REQUIRES_SIGN           ((TPM_RESULT) (TPM_BASE + 57))
1423
#define TPM_KEY_NOTSUPPORTED        ((TPM_RESULT) (TPM_BASE + 58))
1424
#define TPM_AUTH_CONFLICT           ((TPM_RESULT) (TPM_BASE + 59))
1425
#define TPM_AREA_LOCKED             ((TPM_RESULT) (TPM_BASE + 60))
1426
#define TPM_BAD_LOCALITY            ((TPM_RESULT) (TPM_BASE + 61))
1427
#define TPM_READ_ONLY               ((TPM_RESULT) (TPM_BASE + 62))
1428
#define TPM_PER_NOWRITE             ((TPM_RESULT) (TPM_BASE + 63))
1429
#define TPM_FAMILYCOUNT             ((TPM_RESULT) (TPM_BASE + 64))
1430
#define TPM_WRITE_LOCKED            ((TPM_RESULT) (TPM_BASE + 65))
1431
#define TPM_BAD_ATTRIBUTES          ((TPM_RESULT) (TPM_BASE + 66))
1432
#define TPM_INVALID_STRUCTURE       ((TPM_RESULT) (TPM_BASE + 67))
1433
#define TPM_KEY_OWNER_CONTROL       ((TPM_RESULT) (TPM_BASE + 68))
1434
#define TPM_BAD_COUNTER             ((TPM_RESULT) (TPM_BASE + 69))
1435
#define TPM_NOT_FULLWRITE           ((TPM_RESULT) (TPM_BASE + 70))
1436
#define TPM_CONTEXT_GAP             ((TPM_RESULT) (TPM_BASE + 71))
1437
#define TPM_MAXNVWRITES             ((TPM_RESULT) (TPM_BASE + 72))
1438
#define TPM_NOOPERATOR              ((TPM_RESULT) (TPM_BASE + 73))
1439
#define TPM_RESOURCEMISSING         ((TPM_RESULT) (TPM_BASE + 74))
1440
#define TPM_DELEGATE_LOCK           ((TPM_RESULT) (TPM_BASE + 75))
1441
#define TPM_DELEGATE_FAMILY         ((TPM_RESULT) (TPM_BASE + 76))
1442
#define TPM_DELEGATE_ADMIN          ((TPM_RESULT) (TPM_BASE + 77))
1443
#define TPM_TRANSPORT_NOTEXCLUSIVE  ((TPM_RESULT) (TPM_BASE + 78))
1444
#define TPM_OWNER_CONTROL           ((TPM_RESULT) (TPM_BASE + 79))
1445
#define TPM_DAA_RESOURCES           ((TPM_RESULT) (TPM_BASE + 80))
1446
#define TPM_DAA_INPUT_DATA0         ((TPM_RESULT) (TPM_BASE + 81))
1447
#define TPM_DAA_INPUT_DATA1         ((TPM_RESULT) (TPM_BASE + 82))
1448
#define TPM_DAA_ISSUER_SETTINGS     ((TPM_RESULT) (TPM_BASE + 83))
1449
#define TPM_DAA_TPM_SETTINGS        ((TPM_RESULT) (TPM_BASE + 84))
1450
#define TPM_DAA_STAGE               ((TPM_RESULT) (TPM_BASE + 85))
1451
#define TPM_DAA_ISSUER_VALIDITY     ((TPM_RESULT) (TPM_BASE + 86))
1452
#define TPM_DAA_WRONG_W             ((TPM_RESULT) (TPM_BASE + 87))
1453
#define TPM_BAD_HANDLE              ((TPM_RESULT) (TPM_BASE + 88))
1454
#define TPM_BAD_DELEGATE            ((TPM_RESULT) (TPM_BASE + 89))
1455
#define TPM_BADCONTEXT              ((TPM_RESULT) (TPM_BASE + 90))
1456
#define TPM_TOOMANYCONTEXTS         ((TPM_RESULT) (TPM_BASE + 91))
1457
#define TPM_MA_TICKET_SIGNATURE     ((TPM_RESULT) (TPM_BASE + 92))
1458
#define TPM_MA_DESTINATION          ((TPM_RESULT) (TPM_BASE + 93))
1459
#define TPM_MA_SOURCE               ((TPM_RESULT) (TPM_BASE + 94))
1460
#define TPM_MA_AUTHORITY            ((TPM_RESULT) (TPM_BASE + 95))
1461
#define TPM_PERMANENTEK             ((TPM_RESULT) (TPM_BASE + 97))
1462
#define TPM_BAD_SIGNATURE           ((TPM_RESULT) (TPM_BASE + 98))
1463
#define TPM_NOCONTEXTSPACE          ((TPM_RESULT) (TPM_BASE + 99))
1464

1465
#define TPM_RETRY                ((TPM_RESULT) (TPM_BASE + TPM_NON_FATAL))
1466
#define TPM_NEEDS_SELFTEST       ((TPM_RESULT) (TPM_BASE + TPM_NON_FATAL + 1))
1467
#define TPM_DOING_SELFTEST       ((TPM_RESULT) (TPM_BASE + TPM_NON_FATAL + 2))
1468
#define TPM_DEFEND_LOCK_RUNNING  ((TPM_RESULT) (TPM_BASE + TPM_NON_FATAL + 3))
1469

1470
//
1471
// Part 2, section 17: Ordinals
1472
//
1473
// Ordinals are 32 bit values. The upper byte contains values that serve as
1474
// flag indicators, the next byte contains values indicating what committee
1475
// designated the ordinal, and the final two bytes contain the Command
1476
// Ordinal Index.
1477
//      3                   2                   1
1478
//    1 0 9 8 7 6 5 4 3 2 1 0 9 8 7 6 5 4 3 2 1 0 9 8 7 6 5 4 3 2 1 0
1479
//   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
1480
//   |P|C|V| Reserved| Purview |     Command Ordinal Index           |
1481
//   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
1482
//
1483
//  Where:
1484
//
1485
//    * P is Protected/Unprotected command. When 0 the command is a Protected
1486
//      command, when 1 the command is an Unprotected command.
1487
//
1488
//    * C is Non-Connection/Connection related command. When 0 this command
1489
//      passes through to either the protected (TPM) or unprotected (TSS)
1490
//      components.
1491
//
1492
//    * V is TPM/Vendor command. When 0 the command is TPM defined, when 1 the
1493
//      command is vendor defined.
1494
//
1495
//    * All reserved area bits are set to 0.
1496
//
1497

1498
#define TPM_ORD_ActivateIdentity                ((TPM_COMMAND_CODE) 0x0000007A)
1499
#define TPM_ORD_AuthorizeMigrationKey           ((TPM_COMMAND_CODE) 0x0000002B)
1500
#define TPM_ORD_CertifyKey                      ((TPM_COMMAND_CODE) 0x00000032)
1501
#define TPM_ORD_CertifyKey2                     ((TPM_COMMAND_CODE) 0x00000033)
1502
#define TPM_ORD_CertifySelfTest                 ((TPM_COMMAND_CODE) 0x00000052)
1503
#define TPM_ORD_ChangeAuth                      ((TPM_COMMAND_CODE) 0x0000000C)
1504
#define TPM_ORD_ChangeAuthAsymFinish            ((TPM_COMMAND_CODE) 0x0000000F)
1505
#define TPM_ORD_ChangeAuthAsymStart             ((TPM_COMMAND_CODE) 0x0000000E)
1506
#define TPM_ORD_ChangeAuthOwner                 ((TPM_COMMAND_CODE) 0x00000010)
1507
#define TPM_ORD_CMK_ApproveMA                   ((TPM_COMMAND_CODE) 0x0000001D)
1508
#define TPM_ORD_CMK_ConvertMigration            ((TPM_COMMAND_CODE) 0x00000024)
1509
#define TPM_ORD_CMK_CreateBlob                  ((TPM_COMMAND_CODE) 0x0000001B)
1510
#define TPM_ORD_CMK_CreateKey                   ((TPM_COMMAND_CODE) 0x00000013)
1511
#define TPM_ORD_CMK_CreateTicket                ((TPM_COMMAND_CODE) 0x00000012)
1512
#define TPM_ORD_CMK_SetRestrictions             ((TPM_COMMAND_CODE) 0x0000001C)
1513
#define TPM_ORD_ContinueSelfTest                ((TPM_COMMAND_CODE) 0x00000053)
1514
#define TPM_ORD_ConvertMigrationBlob            ((TPM_COMMAND_CODE) 0x0000002A)
1515
#define TPM_ORD_CreateCounter                   ((TPM_COMMAND_CODE) 0x000000DC)
1516
#define TPM_ORD_CreateEndorsementKeyPair        ((TPM_COMMAND_CODE) 0x00000078)
1517
#define TPM_ORD_CreateMaintenanceArchive        ((TPM_COMMAND_CODE) 0x0000002C)
1518
#define TPM_ORD_CreateMigrationBlob             ((TPM_COMMAND_CODE) 0x00000028)
1519
#define TPM_ORD_CreateRevocableEK               ((TPM_COMMAND_CODE) 0x0000007F)
1520
#define TPM_ORD_CreateWrapKey                   ((TPM_COMMAND_CODE) 0x0000001F)
1521
#define TPM_ORD_DAA_JOIN                        ((TPM_COMMAND_CODE) 0x00000029)
1522
#define TPM_ORD_DAA_SIGN                        ((TPM_COMMAND_CODE) 0x00000031)
1523
#define TPM_ORD_Delegate_CreateKeyDelegation    ((TPM_COMMAND_CODE) 0x000000D4)
1524
#define TPM_ORD_Delegate_CreateOwnerDelegation  ((TPM_COMMAND_CODE) 0x000000D5)
1525
#define TPM_ORD_Delegate_LoadOwnerDelegation    ((TPM_COMMAND_CODE) 0x000000D8)
1526
#define TPM_ORD_Delegate_Manage                 ((TPM_COMMAND_CODE) 0x000000D2)
1527
#define TPM_ORD_Delegate_ReadTable              ((TPM_COMMAND_CODE) 0x000000DB)
1528
#define TPM_ORD_Delegate_UpdateVerification     ((TPM_COMMAND_CODE) 0x000000D1)
1529
#define TPM_ORD_Delegate_VerifyDelegation       ((TPM_COMMAND_CODE) 0x000000D6)
1530
#define TPM_ORD_DirRead                         ((TPM_COMMAND_CODE) 0x0000001A)
1531
#define TPM_ORD_DirWriteAuth                    ((TPM_COMMAND_CODE) 0x00000019)
1532
#define TPM_ORD_DisableForceClear               ((TPM_COMMAND_CODE) 0x0000005E)
1533
#define TPM_ORD_DisableOwnerClear               ((TPM_COMMAND_CODE) 0x0000005C)
1534
#define TPM_ORD_DisablePubekRead                ((TPM_COMMAND_CODE) 0x0000007E)
1535
#define TPM_ORD_DSAP                            ((TPM_COMMAND_CODE) 0x00000011)
1536
#define TPM_ORD_EstablishTransport              ((TPM_COMMAND_CODE) 0x000000E6)
1537
#define TPM_ORD_EvictKey                        ((TPM_COMMAND_CODE) 0x00000022)
1538
#define TPM_ORD_ExecuteTransport                ((TPM_COMMAND_CODE) 0x000000E7)
1539
#define TPM_ORD_Extend                          ((TPM_COMMAND_CODE) 0x00000014)
1540
#define TPM_ORD_FieldUpgrade                    ((TPM_COMMAND_CODE) 0x000000AA)
1541
#define TPM_ORD_FlushSpecific                   ((TPM_COMMAND_CODE) 0x000000BA)
1542
#define TPM_ORD_ForceClear                      ((TPM_COMMAND_CODE) 0x0000005D)
1543
#define TPM_ORD_GetAuditDigest                  ((TPM_COMMAND_CODE) 0x00000085)
1544
#define TPM_ORD_GetAuditDigestSigned            ((TPM_COMMAND_CODE) 0x00000086)
1545
#define TPM_ORD_GetAuditEvent                   ((TPM_COMMAND_CODE) 0x00000082)
1546
#define TPM_ORD_GetAuditEventSigned             ((TPM_COMMAND_CODE) 0x00000083)
1547
#define TPM_ORD_GetCapability                   ((TPM_COMMAND_CODE) 0x00000065)
1548
#define TPM_ORD_GetCapabilityOwner              ((TPM_COMMAND_CODE) 0x00000066)
1549
#define TPM_ORD_GetCapabilitySigned             ((TPM_COMMAND_CODE) 0x00000064)
1550
#define TPM_ORD_GetOrdinalAuditStatus           ((TPM_COMMAND_CODE) 0x0000008C)
1551
#define TPM_ORD_GetPubKey                       ((TPM_COMMAND_CODE) 0x00000021)
1552
#define TPM_ORD_GetRandom                       ((TPM_COMMAND_CODE) 0x00000046)
1553
#define TPM_ORD_GetTestResult                   ((TPM_COMMAND_CODE) 0x00000054)
1554
#define TPM_ORD_GetTicks                        ((TPM_COMMAND_CODE) 0x000000F1)
1555
#define TPM_ORD_IncrementCounter                ((TPM_COMMAND_CODE) 0x000000DD)
1556
#define TPM_ORD_Init                            ((TPM_COMMAND_CODE) 0x00000097)
1557
#define TPM_ORD_KeyControlOwner                 ((TPM_COMMAND_CODE) 0x00000023)
1558
#define TPM_ORD_KillMaintenanceFeature          ((TPM_COMMAND_CODE) 0x0000002E)
1559
#define TPM_ORD_LoadAuthContext                 ((TPM_COMMAND_CODE) 0x000000B7)
1560
#define TPM_ORD_LoadContext                     ((TPM_COMMAND_CODE) 0x000000B9)
1561
#define TPM_ORD_LoadKey                         ((TPM_COMMAND_CODE) 0x00000020)
1562
#define TPM_ORD_LoadKey2                        ((TPM_COMMAND_CODE) 0x00000041)
1563
#define TPM_ORD_LoadKeyContext                  ((TPM_COMMAND_CODE) 0x000000B5)
1564
#define TPM_ORD_LoadMaintenanceArchive          ((TPM_COMMAND_CODE) 0x0000002D)
1565
#define TPM_ORD_LoadManuMaintPub                ((TPM_COMMAND_CODE) 0x0000002F)
1566
#define TPM_ORD_MakeIdentity                    ((TPM_COMMAND_CODE) 0x00000079)
1567
#define TPM_ORD_MigrateKey                      ((TPM_COMMAND_CODE) 0x00000025)
1568
#define TPM_ORD_NV_DefineSpace                  ((TPM_COMMAND_CODE) 0x000000CC)
1569
#define TPM_ORD_NV_ReadValue                    ((TPM_COMMAND_CODE) 0x000000CF)
1570
#define TPM_ORD_NV_ReadValueAuth                ((TPM_COMMAND_CODE) 0x000000D0)
1571
#define TPM_ORD_NV_WriteValue                   ((TPM_COMMAND_CODE) 0x000000CD)
1572
#define TPM_ORD_NV_WriteValueAuth               ((TPM_COMMAND_CODE) 0x000000CE)
1573
#define TPM_ORD_OIAP                            ((TPM_COMMAND_CODE) 0x0000000A)
1574
#define TPM_ORD_OSAP                            ((TPM_COMMAND_CODE) 0x0000000B)
1575
#define TPM_ORD_OwnerClear                      ((TPM_COMMAND_CODE) 0x0000005B)
1576
#define TPM_ORD_OwnerReadInternalPub            ((TPM_COMMAND_CODE) 0x00000081)
1577
#define TPM_ORD_OwnerReadPubek                  ((TPM_COMMAND_CODE) 0x0000007D)
1578
#define TPM_ORD_OwnerSetDisable                 ((TPM_COMMAND_CODE) 0x0000006E)
1579
#define TPM_ORD_PCR_Reset                       ((TPM_COMMAND_CODE) 0x000000C8)
1580
#define TPM_ORD_PcrRead                         ((TPM_COMMAND_CODE) 0x00000015)
1581
#define TPM_ORD_PhysicalDisable                 ((TPM_COMMAND_CODE) 0x00000070)
1582
#define TPM_ORD_PhysicalEnable                  ((TPM_COMMAND_CODE) 0x0000006F)
1583
#define TPM_ORD_PhysicalSetDeactivated          ((TPM_COMMAND_CODE) 0x00000072)
1584
#define TPM_ORD_Quote                           ((TPM_COMMAND_CODE) 0x00000016)
1585
#define TPM_ORD_Quote2                          ((TPM_COMMAND_CODE) 0x0000003E)
1586
#define TPM_ORD_ReadCounter                     ((TPM_COMMAND_CODE) 0x000000DE)
1587
#define TPM_ORD_ReadManuMaintPub                ((TPM_COMMAND_CODE) 0x00000030)
1588
#define TPM_ORD_ReadPubek                       ((TPM_COMMAND_CODE) 0x0000007C)
1589
#define TPM_ORD_ReleaseCounter                  ((TPM_COMMAND_CODE) 0x000000DF)
1590
#define TPM_ORD_ReleaseCounterOwner             ((TPM_COMMAND_CODE) 0x000000E0)
1591
#define TPM_ORD_ReleaseTransportSigned          ((TPM_COMMAND_CODE) 0x000000E8)
1592
#define TPM_ORD_Reset                           ((TPM_COMMAND_CODE) 0x0000005A)
1593
#define TPM_ORD_ResetLockValue                  ((TPM_COMMAND_CODE) 0x00000040)
1594
#define TPM_ORD_RevokeTrust                     ((TPM_COMMAND_CODE) 0x00000080)
1595
#define TPM_ORD_SaveAuthContext                 ((TPM_COMMAND_CODE) 0x000000B6)
1596
#define TPM_ORD_SaveContext                     ((TPM_COMMAND_CODE) 0x000000B8)
1597
#define TPM_ORD_SaveKeyContext                  ((TPM_COMMAND_CODE) 0x000000B4)
1598
#define TPM_ORD_SaveState                       ((TPM_COMMAND_CODE) 0x00000098)
1599
#define TPM_ORD_Seal                            ((TPM_COMMAND_CODE) 0x00000017)
1600
#define TPM_ORD_Sealx                           ((TPM_COMMAND_CODE) 0x0000003D)
1601
#define TPM_ORD_SelfTestFull                    ((TPM_COMMAND_CODE) 0x00000050)
1602
#define TPM_ORD_SetCapability                   ((TPM_COMMAND_CODE) 0x0000003F)
1603
#define TPM_ORD_SetOperatorAuth                 ((TPM_COMMAND_CODE) 0x00000074)
1604
#define TPM_ORD_SetOrdinalAuditStatus           ((TPM_COMMAND_CODE) 0x0000008D)
1605
#define TPM_ORD_SetOwnerInstall                 ((TPM_COMMAND_CODE) 0x00000071)
1606
#define TPM_ORD_SetOwnerPointer                 ((TPM_COMMAND_CODE) 0x00000075)
1607
#define TPM_ORD_SetRedirection                  ((TPM_COMMAND_CODE) 0x0000009A)
1608
#define TPM_ORD_SetTempDeactivated              ((TPM_COMMAND_CODE) 0x00000073)
1609
#define TPM_ORD_SHA1Complete                    ((TPM_COMMAND_CODE) 0x000000A2)
1610
#define TPM_ORD_SHA1CompleteExtend              ((TPM_COMMAND_CODE) 0x000000A3)
1611
#define TPM_ORD_SHA1Start                       ((TPM_COMMAND_CODE) 0x000000A0)
1612
#define TPM_ORD_SHA1Update                      ((TPM_COMMAND_CODE) 0x000000A1)
1613
#define TPM_ORD_Sign                            ((TPM_COMMAND_CODE) 0x0000003C)
1614
#define TPM_ORD_Startup                         ((TPM_COMMAND_CODE) 0x00000099)
1615
#define TPM_ORD_StirRandom                      ((TPM_COMMAND_CODE) 0x00000047)
1616
#define TPM_ORD_TakeOwnership                   ((TPM_COMMAND_CODE) 0x0000000D)
1617
#define TPM_ORD_Terminate_Handle                ((TPM_COMMAND_CODE) 0x00000096)
1618
#define TPM_ORD_TickStampBlob                   ((TPM_COMMAND_CODE) 0x000000F2)
1619
#define TPM_ORD_UnBind                          ((TPM_COMMAND_CODE) 0x0000001E)
1620
#define TPM_ORD_Unseal                          ((TPM_COMMAND_CODE) 0x00000018)
1621
#define TSC_ORD_PhysicalPresence                ((TPM_COMMAND_CODE) 0x4000000A)
1622
#define TSC_ORD_ResetEstablishmentBit           ((TPM_COMMAND_CODE) 0x4000000B)
1623

1624
//
1625
// Part 2, section 18: Context structures
1626
//
1627

1628
///
1629
/// Part 2, section 18.1: TPM_CONTEXT_BLOB
1630
///
1631
typedef struct tdTPM_CONTEXT_BLOB {
1632
  TPM_STRUCTURE_TAG    tag;
1633
  TPM_RESOURCE_TYPE    resourceType;
1634
  TPM_HANDLE           handle;
1635
  UINT8                label[16];
1636
  UINT32               contextCount;
1637
  TPM_DIGEST           integrityDigest;
1638
  UINT32               additionalSize;
1639
  UINT8                *additionalData;
1640
  UINT32               sensitiveSize;
1641
  UINT8                *sensitiveData;
1642
} TPM_CONTEXT_BLOB;
1643

1644
///
1645
/// Part 2, section 18.2 TPM_CONTEXT_SENSITIVE
1646
///
1647
typedef struct tdTPM_CONTEXT_SENSITIVE {
1648
  TPM_STRUCTURE_TAG    tag;
1649
  TPM_NONCE            contextNonce;
1650
  UINT32               internalSize;
1651
  UINT8                *internalData;
1652
} TPM_CONTEXT_SENSITIVE;
1653

1654
//
1655
// Part 2, section 19: NV Structures
1656
//
1657

1658
//
1659
// Part 2, section 19.1.1: Required TPM_NV_INDEX values
1660
//
1661
#define TPM_NV_INDEX_LOCK          ((UINT32)0xffffffff)
1662
#define TPM_NV_INDEX0              ((UINT32)0x00000000)
1663
#define TPM_NV_INDEX_DIR           ((UINT32)0x10000001)
1664
#define TPM_NV_INDEX_EKCert        ((UINT32)0x0000f000)
1665
#define TPM_NV_INDEX_TPM_CC        ((UINT32)0x0000f001)
1666
#define TPM_NV_INDEX_PlatformCert  ((UINT32)0x0000f002)
1667
#define TPM_NV_INDEX_Platform_CC   ((UINT32)0x0000f003)
1668
//
1669
// Part 2, section 19.1.2: Reserved Index values
1670
//
1671
#define TPM_NV_INDEX_TSS_BASE         ((UINT32)0x00011100)
1672
#define TPM_NV_INDEX_PC_BASE          ((UINT32)0x00011200)
1673
#define TPM_NV_INDEX_SERVER_BASE      ((UINT32)0x00011300)
1674
#define TPM_NV_INDEX_MOBILE_BASE      ((UINT32)0x00011400)
1675
#define TPM_NV_INDEX_PERIPHERAL_BASE  ((UINT32)0x00011500)
1676
#define TPM_NV_INDEX_GROUP_RESV_BASE  ((UINT32)0x00010000)
1677

1678
///
1679
/// Part 2, section 19.2: TPM_NV_ATTRIBUTES
1680
///
1681
typedef struct tdTPM_NV_ATTRIBUTES {
1682
  TPM_STRUCTURE_TAG    tag;
1683
  UINT32               attributes;
1684
} TPM_NV_ATTRIBUTES;
1685

1686
#define TPM_NV_PER_READ_STCLEAR   (BIT31)
1687
#define TPM_NV_PER_AUTHREAD       (BIT18)
1688
#define TPM_NV_PER_OWNERREAD      (BIT17)
1689
#define TPM_NV_PER_PPREAD         (BIT16)
1690
#define TPM_NV_PER_GLOBALLOCK     (BIT15)
1691
#define TPM_NV_PER_WRITE_STCLEAR  (BIT14)
1692
#define TPM_NV_PER_WRITEDEFINE    (BIT13)
1693
#define TPM_NV_PER_WRITEALL       (BIT12)
1694
#define TPM_NV_PER_AUTHWRITE      (BIT2)
1695
#define TPM_NV_PER_OWNERWRITE     (BIT1)
1696
#define TPM_NV_PER_PPWRITE        (BIT0)
1697

1698
///
1699
/// Part 2, section 19.3: TPM_NV_DATA_PUBLIC
1700
///
1701
typedef struct tdTPM_NV_DATA_PUBLIC {
1702
  TPM_STRUCTURE_TAG     tag;
1703
  TPM_NV_INDEX          nvIndex;
1704
  TPM_PCR_INFO_SHORT    pcrInfoRead;
1705
  TPM_PCR_INFO_SHORT    pcrInfoWrite;
1706
  TPM_NV_ATTRIBUTES     permission;
1707
  BOOLEAN               bReadSTClear;
1708
  BOOLEAN               bWriteSTClear;
1709
  BOOLEAN               bWriteDefine;
1710
  UINT32                dataSize;
1711
} TPM_NV_DATA_PUBLIC;
1712

1713
//
1714
// Part 2, section 20: Delegate Structures
1715
//
1716

1717
#define TPM_DEL_OWNER_BITS  ((UINT32)0x00000001)
1718
#define TPM_DEL_KEY_BITS    ((UINT32)0x00000002)
1719
///
1720
/// Part 2, section 20.2: Delegate Definitions
1721
///
1722
typedef struct tdTPM_DELEGATIONS {
1723
  TPM_STRUCTURE_TAG    tag;
1724
  UINT32               delegateType;
1725
  UINT32               per1;
1726
  UINT32               per2;
1727
} TPM_DELEGATIONS;
1728

1729
//
1730
// Part 2, section 20.2.1: Owner Permission Settings
1731
//
1732
#define TPM_DELEGATE_SetOrdinalAuditStatus           (BIT30)
1733
#define TPM_DELEGATE_DirWriteAuth                    (BIT29)
1734
#define TPM_DELEGATE_CMK_ApproveMA                   (BIT28)
1735
#define TPM_DELEGATE_NV_WriteValue                   (BIT27)
1736
#define TPM_DELEGATE_CMK_CreateTicket                (BIT26)
1737
#define TPM_DELEGATE_NV_ReadValue                    (BIT25)
1738
#define TPM_DELEGATE_Delegate_LoadOwnerDelegation    (BIT24)
1739
#define TPM_DELEGATE_DAA_Join                        (BIT23)
1740
#define TPM_DELEGATE_AuthorizeMigrationKey           (BIT22)
1741
#define TPM_DELEGATE_CreateMaintenanceArchive        (BIT21)
1742
#define TPM_DELEGATE_LoadMaintenanceArchive          (BIT20)
1743
#define TPM_DELEGATE_KillMaintenanceFeature          (BIT19)
1744
#define TPM_DELEGATE_OwnerReadInteralPub             (BIT18)
1745
#define TPM_DELEGATE_ResetLockValue                  (BIT17)
1746
#define TPM_DELEGATE_OwnerClear                      (BIT16)
1747
#define TPM_DELEGATE_DisableOwnerClear               (BIT15)
1748
#define TPM_DELEGATE_NV_DefineSpace                  (BIT14)
1749
#define TPM_DELEGATE_OwnerSetDisable                 (BIT13)
1750
#define TPM_DELEGATE_SetCapability                   (BIT12)
1751
#define TPM_DELEGATE_MakeIdentity                    (BIT11)
1752
#define TPM_DELEGATE_ActivateIdentity                (BIT10)
1753
#define TPM_DELEGATE_OwnerReadPubek                  (BIT9)
1754
#define TPM_DELEGATE_DisablePubekRead                (BIT8)
1755
#define TPM_DELEGATE_SetRedirection                  (BIT7)
1756
#define TPM_DELEGATE_FieldUpgrade                    (BIT6)
1757
#define TPM_DELEGATE_Delegate_UpdateVerification     (BIT5)
1758
#define TPM_DELEGATE_CreateCounter                   (BIT4)
1759
#define TPM_DELEGATE_ReleaseCounterOwner             (BIT3)
1760
#define TPM_DELEGATE_DelegateManage                  (BIT2)
1761
#define TPM_DELEGATE_Delegate_CreateOwnerDelegation  (BIT1)
1762
#define TPM_DELEGATE_DAA_Sign                        (BIT0)
1763

1764
//
1765
// Part 2, section 20.2.3: Key Permission settings
1766
//
1767
#define TPM_KEY_DELEGATE_CMK_ConvertMigration    (BIT28)
1768
#define TPM_KEY_DELEGATE_TickStampBlob           (BIT27)
1769
#define TPM_KEY_DELEGATE_ChangeAuthAsymStart     (BIT26)
1770
#define TPM_KEY_DELEGATE_ChangeAuthAsymFinish    (BIT25)
1771
#define TPM_KEY_DELEGATE_CMK_CreateKey           (BIT24)
1772
#define TPM_KEY_DELEGATE_MigrateKey              (BIT23)
1773
#define TPM_KEY_DELEGATE_LoadKey2                (BIT22)
1774
#define TPM_KEY_DELEGATE_EstablishTransport      (BIT21)
1775
#define TPM_KEY_DELEGATE_ReleaseTransportSigned  (BIT20)
1776
#define TPM_KEY_DELEGATE_Quote2                  (BIT19)
1777
#define TPM_KEY_DELEGATE_Sealx                   (BIT18)
1778
#define TPM_KEY_DELEGATE_MakeIdentity            (BIT17)
1779
#define TPM_KEY_DELEGATE_ActivateIdentity        (BIT16)
1780
#define TPM_KEY_DELEGATE_GetAuditDigestSigned    (BIT15)
1781
#define TPM_KEY_DELEGATE_Sign                    (BIT14)
1782
#define TPM_KEY_DELEGATE_CertifyKey2             (BIT13)
1783
#define TPM_KEY_DELEGATE_CertifyKey              (BIT12)
1784
#define TPM_KEY_DELEGATE_CreateWrapKey           (BIT11)
1785
#define TPM_KEY_DELEGATE_CMK_CreateBlob          (BIT10)
1786
#define TPM_KEY_DELEGATE_CreateMigrationBlob     (BIT9)
1787
#define TPM_KEY_DELEGATE_ConvertMigrationBlob    (BIT8)
1788
#define TPM_KEY_DELEGATE_CreateKeyDelegation     (BIT7)
1789
#define TPM_KEY_DELEGATE_ChangeAuth              (BIT6)
1790
#define TPM_KEY_DELEGATE_GetPubKey               (BIT5)
1791
#define TPM_KEY_DELEGATE_UnBind                  (BIT4)
1792
#define TPM_KEY_DELEGATE_Quote                   (BIT3)
1793
#define TPM_KEY_DELEGATE_Unseal                  (BIT2)
1794
#define TPM_KEY_DELEGATE_Seal                    (BIT1)
1795
#define TPM_KEY_DELEGATE_LoadKey                 (BIT0)
1796

1797
//
1798
// Part 2, section 20.3: TPM_FAMILY_FLAGS
1799
//
1800
#define TPM_DELEGATE_ADMIN_LOCK  (BIT1)
1801
#define TPM_FAMFLAG_ENABLE       (BIT0)
1802

1803
///
1804
/// Part 2, section 20.4: TPM_FAMILY_LABEL
1805
///
1806
typedef struct tdTPM_FAMILY_LABEL {
1807
  UINT8    label;
1808
} TPM_FAMILY_LABEL;
1809

1810
///
1811
/// Part 2, section 20.5: TPM_FAMILY_TABLE_ENTRY
1812
///
1813
typedef struct tdTPM_FAMILY_TABLE_ENTRY {
1814
  TPM_STRUCTURE_TAG          tag;
1815
  TPM_FAMILY_LABEL           label;
1816
  TPM_FAMILY_ID              familyID;
1817
  TPM_FAMILY_VERIFICATION    verificationCount;
1818
  TPM_FAMILY_FLAGS           flags;
1819
} TPM_FAMILY_TABLE_ENTRY;
1820

1821
//
1822
// Part 2, section 20.6: TPM_FAMILY_TABLE
1823
//
1824
#define TPM_NUM_FAMILY_TABLE_ENTRY_MIN  8
1825

1826
typedef struct tdTPM_FAMILY_TABLE {
1827
  TPM_FAMILY_TABLE_ENTRY    famTableRow[TPM_NUM_FAMILY_TABLE_ENTRY_MIN];
1828
} TPM_FAMILY_TABLE;
1829

1830
///
1831
/// Part 2, section 20.7: TPM_DELEGATE_LABEL
1832
///
1833
typedef struct tdTPM_DELEGATE_LABEL {
1834
  UINT8    label;
1835
} TPM_DELEGATE_LABEL;
1836

1837
///
1838
/// Part 2, section 20.8: TPM_DELEGATE_PUBLIC
1839
///
1840
typedef struct tdTPM_DELEGATE_PUBLIC {
1841
  TPM_STRUCTURE_TAG          tag;
1842
  TPM_DELEGATE_LABEL         label;
1843
  TPM_PCR_INFO_SHORT         pcrInfo;
1844
  TPM_DELEGATIONS            permissions;
1845
  TPM_FAMILY_ID              familyID;
1846
  TPM_FAMILY_VERIFICATION    verificationCount;
1847
} TPM_DELEGATE_PUBLIC;
1848

1849
///
1850
/// Part 2, section 20.9: TPM_DELEGATE_TABLE_ROW
1851
///
1852
typedef struct tdTPM_DELEGATE_TABLE_ROW {
1853
  TPM_STRUCTURE_TAG      tag;
1854
  TPM_DELEGATE_PUBLIC    pub;
1855
  TPM_SECRET             authValue;
1856
} TPM_DELEGATE_TABLE_ROW;
1857

1858
//
1859
// Part 2, section 20.10: TPM_DELEGATE_TABLE
1860
//
1861
#define TPM_NUM_DELEGATE_TABLE_ENTRY_MIN  2
1862

1863
typedef struct tdTPM_DELEGATE_TABLE {
1864
  TPM_DELEGATE_TABLE_ROW    delRow[TPM_NUM_DELEGATE_TABLE_ENTRY_MIN];
1865
} TPM_DELEGATE_TABLE;
1866

1867
///
1868
/// Part 2, section 20.11: TPM_DELEGATE_SENSITIVE
1869
///
1870
typedef struct tdTPM_DELEGATE_SENSITIVE {
1871
  TPM_STRUCTURE_TAG    tag;
1872
  TPM_SECRET           authValue;
1873
} TPM_DELEGATE_SENSITIVE;
1874

1875
///
1876
/// Part 2, section 20.12: TPM_DELEGATE_OWNER_BLOB
1877
///
1878
typedef struct tdTPM_DELEGATE_OWNER_BLOB {
1879
  TPM_STRUCTURE_TAG      tag;
1880
  TPM_DELEGATE_PUBLIC    pub;
1881
  TPM_DIGEST             integrityDigest;
1882
  UINT32                 additionalSize;
1883
  UINT8                  *additionalArea;
1884
  UINT32                 sensitiveSize;
1885
  UINT8                  *sensitiveArea;
1886
} TPM_DELEGATE_OWNER_BLOB;
1887

1888
///
1889
/// Part 2, section 20.13: TTPM_DELEGATE_KEY_BLOB
1890
///
1891
typedef struct tdTPM_DELEGATE_KEY_BLOB {
1892
  TPM_STRUCTURE_TAG      tag;
1893
  TPM_DELEGATE_PUBLIC    pub;
1894
  TPM_DIGEST             integrityDigest;
1895
  TPM_DIGEST             pubKeyDigest;
1896
  UINT32                 additionalSize;
1897
  UINT8                  *additionalArea;
1898
  UINT32                 sensitiveSize;
1899
  UINT8                  *sensitiveArea;
1900
} TPM_DELEGATE_KEY_BLOB;
1901

1902
//
1903
// Part 2, section 20.14: TPM_FAMILY_OPERATION Values
1904
//
1905
#define TPM_FAMILY_CREATE      ((UINT32)0x00000001)
1906
#define TPM_FAMILY_ENABLE      ((UINT32)0x00000002)
1907
#define TPM_FAMILY_ADMIN       ((UINT32)0x00000003)
1908
#define TPM_FAMILY_INVALIDATE  ((UINT32)0x00000004)
1909

1910
//
1911
// Part 2, section 21.1: TPM_CAPABILITY_AREA for GetCapability
1912
//
1913
#define TPM_CAP_ORD           ((TPM_CAPABILITY_AREA) 0x00000001)
1914
#define TPM_CAP_ALG           ((TPM_CAPABILITY_AREA) 0x00000002)
1915
#define TPM_CAP_PID           ((TPM_CAPABILITY_AREA) 0x00000003)
1916
#define TPM_CAP_FLAG          ((TPM_CAPABILITY_AREA) 0x00000004)
1917
#define TPM_CAP_PROPERTY      ((TPM_CAPABILITY_AREA) 0x00000005)
1918
#define TPM_CAP_VERSION       ((TPM_CAPABILITY_AREA) 0x00000006)
1919
#define TPM_CAP_KEY_HANDLE    ((TPM_CAPABILITY_AREA) 0x00000007)
1920
#define TPM_CAP_CHECK_LOADED  ((TPM_CAPABILITY_AREA) 0x00000008)
1921
#define TPM_CAP_SYM_MODE      ((TPM_CAPABILITY_AREA) 0x00000009)
1922
#define TPM_CAP_KEY_STATUS    ((TPM_CAPABILITY_AREA) 0x0000000C)
1923
#define TPM_CAP_NV_LIST       ((TPM_CAPABILITY_AREA) 0x0000000D)
1924
#define TPM_CAP_MFR           ((TPM_CAPABILITY_AREA) 0x00000010)
1925
#define TPM_CAP_NV_INDEX      ((TPM_CAPABILITY_AREA) 0x00000011)
1926
#define TPM_CAP_TRANS_ALG     ((TPM_CAPABILITY_AREA) 0x00000012)
1927
#define TPM_CAP_HANDLE        ((TPM_CAPABILITY_AREA) 0x00000014)
1928
#define TPM_CAP_TRANS_ES      ((TPM_CAPABILITY_AREA) 0x00000015)
1929
#define TPM_CAP_AUTH_ENCRYPT  ((TPM_CAPABILITY_AREA) 0x00000017)
1930
#define TPM_CAP_SELECT_SIZE   ((TPM_CAPABILITY_AREA) 0x00000018)
1931
#define TPM_CAP_VERSION_VAL   ((TPM_CAPABILITY_AREA) 0x0000001A)
1932

1933
#define TPM_CAP_FLAG_PERMANENT  ((TPM_CAPABILITY_AREA) 0x00000108)
1934
#define TPM_CAP_FLAG_VOLATILE   ((TPM_CAPABILITY_AREA) 0x00000109)
1935

1936
//
1937
// Part 2, section 21.2: CAP_PROPERTY Subcap values for GetCapability
1938
//
1939
#define TPM_CAP_PROP_PCR               ((TPM_CAPABILITY_AREA) 0x00000101)
1940
#define TPM_CAP_PROP_DIR               ((TPM_CAPABILITY_AREA) 0x00000102)
1941
#define TPM_CAP_PROP_MANUFACTURER      ((TPM_CAPABILITY_AREA) 0x00000103)
1942
#define TPM_CAP_PROP_KEYS              ((TPM_CAPABILITY_AREA) 0x00000104)
1943
#define TPM_CAP_PROP_MIN_COUNTER       ((TPM_CAPABILITY_AREA) 0x00000107)
1944
#define TPM_CAP_PROP_AUTHSESS          ((TPM_CAPABILITY_AREA) 0x0000010A)
1945
#define TPM_CAP_PROP_TRANSESS          ((TPM_CAPABILITY_AREA) 0x0000010B)
1946
#define TPM_CAP_PROP_COUNTERS          ((TPM_CAPABILITY_AREA) 0x0000010C)
1947
#define TPM_CAP_PROP_MAX_AUTHSESS      ((TPM_CAPABILITY_AREA) 0x0000010D)
1948
#define TPM_CAP_PROP_MAX_TRANSESS      ((TPM_CAPABILITY_AREA) 0x0000010E)
1949
#define TPM_CAP_PROP_MAX_COUNTERS      ((TPM_CAPABILITY_AREA) 0x0000010F)
1950
#define TPM_CAP_PROP_MAX_KEYS          ((TPM_CAPABILITY_AREA) 0x00000110)
1951
#define TPM_CAP_PROP_OWNER             ((TPM_CAPABILITY_AREA) 0x00000111)
1952
#define TPM_CAP_PROP_CONTEXT           ((TPM_CAPABILITY_AREA) 0x00000112)
1953
#define TPM_CAP_PROP_MAX_CONTEXT       ((TPM_CAPABILITY_AREA) 0x00000113)
1954
#define TPM_CAP_PROP_FAMILYROWS        ((TPM_CAPABILITY_AREA) 0x00000114)
1955
#define TPM_CAP_PROP_TIS_TIMEOUT       ((TPM_CAPABILITY_AREA) 0x00000115)
1956
#define TPM_CAP_PROP_STARTUP_EFFECT    ((TPM_CAPABILITY_AREA) 0x00000116)
1957
#define TPM_CAP_PROP_DELEGATE_ROW      ((TPM_CAPABILITY_AREA) 0x00000117)
1958
#define TPM_CAP_PROP_DAA_MAX           ((TPM_CAPABILITY_AREA) 0x00000119)
1959
#define CAP_PROP_SESSION_DAA           ((TPM_CAPABILITY_AREA) 0x0000011A)
1960
#define TPM_CAP_PROP_CONTEXT_DIST      ((TPM_CAPABILITY_AREA) 0x0000011B)
1961
#define TPM_CAP_PROP_DAA_INTERRUPT     ((TPM_CAPABILITY_AREA) 0x0000011C)
1962
#define TPM_CAP_PROP_SESSIONS          ((TPM_CAPABILITY_AREA) 0x0000011D)
1963
#define TPM_CAP_PROP_MAX_SESSIONS      ((TPM_CAPABILITY_AREA) 0x0000011E)
1964
#define TPM_CAP_PROP_CMK_RESTRICTION   ((TPM_CAPABILITY_AREA) 0x0000011F)
1965
#define TPM_CAP_PROP_DURATION          ((TPM_CAPABILITY_AREA) 0x00000120)
1966
#define TPM_CAP_PROP_ACTIVE_COUNTER    ((TPM_CAPABILITY_AREA) 0x00000122)
1967
#define TPM_CAP_PROP_MAX_NV_AVAILABLE  ((TPM_CAPABILITY_AREA) 0x00000123)
1968
#define TPM_CAP_PROP_INPUT_BUFFER      ((TPM_CAPABILITY_AREA) 0x00000124)
1969

1970
//
1971
// Part 2, section 21.4: TPM_CAPABILITY_AREA for SetCapability
1972
//
1973
#define TPM_SET_PERM_FLAGS     ((TPM_CAPABILITY_AREA) 0x00000001)
1974
#define TPM_SET_PERM_DATA      ((TPM_CAPABILITY_AREA) 0x00000002)
1975
#define TPM_SET_STCLEAR_FLAGS  ((TPM_CAPABILITY_AREA) 0x00000003)
1976
#define TPM_SET_STCLEAR_DATA   ((TPM_CAPABILITY_AREA) 0x00000004)
1977
#define TPM_SET_STANY_FLAGS    ((TPM_CAPABILITY_AREA) 0x00000005)
1978
#define TPM_SET_STANY_DATA     ((TPM_CAPABILITY_AREA) 0x00000006)
1979

1980
///
1981
/// Part 2, section 21.6: TPM_CAP_VERSION_INFO
1982
///   [size_is(vendorSpecificSize)] BYTE* vendorSpecific;
1983
///
1984
typedef struct tdTPM_CAP_VERSION_INFO {
1985
  TPM_STRUCTURE_TAG    tag;
1986
  TPM_VERSION          version;
1987
  UINT16               specLevel;
1988
  UINT8                errataRev;
1989
  UINT8                tpmVendorID[4];
1990
  UINT16               vendorSpecificSize;
1991
  UINT8                *vendorSpecific;
1992
} TPM_CAP_VERSION_INFO;
1993

1994
///
1995
/// Part 2, section 21.10: TPM_DA_ACTION_TYPE
1996
///
1997
typedef struct tdTPM_DA_ACTION_TYPE {
1998
  TPM_STRUCTURE_TAG    tag;
1999
  UINT32               actions;
2000
} TPM_DA_ACTION_TYPE;
2001

2002
#define TPM_DA_ACTION_FAILURE_MODE  (((UINT32)1)<<3)
2003
#define TPM_DA_ACTION_DEACTIVATE    (((UINT32)1)<<2)
2004
#define TPM_DA_ACTION_DISABLE       (((UINT32)1)<<1)
2005
#define TPM_DA_ACTION_TIMEOUT       (((UINT32)1)<<0)
2006

2007
///
2008
/// Part 2, section 21.7: TPM_DA_INFO
2009
///
2010
typedef struct tdTPM_DA_INFO {
2011
  TPM_STRUCTURE_TAG     tag;
2012
  TPM_DA_STATE          state;
2013
  UINT16                currentCount;
2014
  UINT16                thresholdCount;
2015
  TPM_DA_ACTION_TYPE    actionAtThreshold;
2016
  UINT32                actionDependValue;
2017
  UINT32                vendorDataSize;
2018
  UINT8                 *vendorData;
2019
} TPM_DA_INFO;
2020

2021
///
2022
/// Part 2, section 21.8: TPM_DA_INFO_LIMITED
2023
///
2024
typedef struct tdTPM_DA_INFO_LIMITED {
2025
  TPM_STRUCTURE_TAG     tag;
2026
  TPM_DA_STATE          state;
2027
  TPM_DA_ACTION_TYPE    actionAtThreshold;
2028
  UINT32                vendorDataSize;
2029
  UINT8                 *vendorData;
2030
} TPM_DA_INFO_LIMITED;
2031

2032
//
2033
// Part 2, section 21.9: CAP_PROPERTY Subcap values for GetCapability
2034
//
2035
#define TPM_DA_STATE_INACTIVE  ((UINT8)0x00)
2036
#define TPM_DA_STATE_ACTIVE    ((UINT8)0x01)
2037

2038
//
2039
// Part 2, section 22: DAA Structures
2040
//
2041

2042
//
2043
// Part 2, section 22.1: Size definitions
2044
//
2045
#define TPM_DAA_SIZE_r0             (43)
2046
#define TPM_DAA_SIZE_r1             (43)
2047
#define TPM_DAA_SIZE_r2             (128)
2048
#define TPM_DAA_SIZE_r3             (168)
2049
#define TPM_DAA_SIZE_r4             (219)
2050
#define TPM_DAA_SIZE_NT             (20)
2051
#define TPM_DAA_SIZE_v0             (128)
2052
#define TPM_DAA_SIZE_v1             (192)
2053
#define TPM_DAA_SIZE_NE             (256)
2054
#define TPM_DAA_SIZE_w              (256)
2055
#define TPM_DAA_SIZE_issuerModulus  (256)
2056
//
2057
// Part 2, section 22.2: Constant definitions
2058
//
2059
#define TPM_DAA_power0  (104)
2060
#define TPM_DAA_power1  (1024)
2061

2062
///
2063
/// Part 2, section 22.3: TPM_DAA_ISSUER
2064
///
2065
typedef struct tdTPM_DAA_ISSUER {
2066
  TPM_STRUCTURE_TAG    tag;
2067
  TPM_DIGEST           DAA_digest_R0;
2068
  TPM_DIGEST           DAA_digest_R1;
2069
  TPM_DIGEST           DAA_digest_S0;
2070
  TPM_DIGEST           DAA_digest_S1;
2071
  TPM_DIGEST           DAA_digest_n;
2072
  TPM_DIGEST           DAA_digest_gamma;
2073
  UINT8                DAA_generic_q[26];
2074
} TPM_DAA_ISSUER;
2075

2076
///
2077
/// Part 2, section 22.4: TPM_DAA_TPM
2078
///
2079
typedef struct tdTPM_DAA_TPM {
2080
  TPM_STRUCTURE_TAG    tag;
2081
  TPM_DIGEST           DAA_digestIssuer;
2082
  TPM_DIGEST           DAA_digest_v0;
2083
  TPM_DIGEST           DAA_digest_v1;
2084
  TPM_DIGEST           DAA_rekey;
2085
  UINT32               DAA_count;
2086
} TPM_DAA_TPM;
2087

2088
///
2089
/// Part 2, section 22.5: TPM_DAA_CONTEXT
2090
///
2091
typedef struct tdTPM_DAA_CONTEXT {
2092
  TPM_STRUCTURE_TAG       tag;
2093
  TPM_DIGEST              DAA_digestContext;
2094
  TPM_DIGEST              DAA_digest;
2095
  TPM_DAA_CONTEXT_SEED    DAA_contextSeed;
2096
  UINT8                   DAA_scratch[256];
2097
  UINT8                   DAA_stage;
2098
} TPM_DAA_CONTEXT;
2099

2100
///
2101
/// Part 2, section 22.6: TPM_DAA_JOINDATA
2102
///
2103
typedef struct tdTPM_DAA_JOINDATA {
2104
  UINT8         DAA_join_u0[128];
2105
  UINT8         DAA_join_u1[138];
2106
  TPM_DIGEST    DAA_digest_n0;
2107
} TPM_DAA_JOINDATA;
2108

2109
///
2110
/// Part 2, section 22.8: TPM_DAA_BLOB
2111
///
2112
typedef struct tdTPM_DAA_BLOB {
2113
  TPM_STRUCTURE_TAG    tag;
2114
  TPM_RESOURCE_TYPE    resourceType;
2115
  UINT8                label[16];
2116
  TPM_DIGEST           blobIntegrity;
2117
  UINT32               additionalSize;
2118
  UINT8                *additionalData;
2119
  UINT32               sensitiveSize;
2120
  UINT8                *sensitiveData;
2121
} TPM_DAA_BLOB;
2122

2123
///
2124
/// Part 2, section 22.9: TPM_DAA_SENSITIVE
2125
///
2126
typedef struct tdTPM_DAA_SENSITIVE {
2127
  TPM_STRUCTURE_TAG    tag;
2128
  UINT32               internalSize;
2129
  UINT8                *internalData;
2130
} TPM_DAA_SENSITIVE;
2131

2132
//
2133
// Part 2, section 23: Redirection
2134
//
2135

2136
///
2137
/// Part 2 section 23.1: TPM_REDIR_COMMAND
2138
/// This section defines exactly one value but does not
2139
/// give it a name. The definition of TPM_SetRedirection in Part3
2140
/// refers to exactly one name but does not give its value. We join
2141
/// them here.
2142
///
2143
#define TPM_REDIR_GPIO  (0x00000001)
2144

2145
///
2146
/// TPM Command Headers defined in Part 3
2147
///
2148
typedef struct tdTPM_RQU_COMMAND_HDR {
2149
  TPM_STRUCTURE_TAG    tag;
2150
  UINT32               paramSize;
2151
  TPM_COMMAND_CODE     ordinal;
2152
} TPM_RQU_COMMAND_HDR;
2153

2154
///
2155
/// TPM Response Headers defined in Part 3
2156
///
2157
typedef struct tdTPM_RSP_COMMAND_HDR {
2158
  TPM_STRUCTURE_TAG    tag;
2159
  UINT32               paramSize;
2160
  TPM_RESULT           returnCode;
2161
} TPM_RSP_COMMAND_HDR;
2162

2163
#pragma pack ()
2164

2165
#endif
2166

2167
Product

Resources

Company
