esys-clockset.int.c 4.6 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152
  1. /* SPDX-License-Identifier: BSD-2-Clause */
  2. /*******************************************************************************
  3. * Copyright 2017-2018, Fraunhofer SIT sponsored by Infineon Technologies AG
  4. * All rights reserved.
  5. *******************************************************************************/
  6. #ifdef HAVE_CONFIG_H
  7. #include <config.h>
  8. #endif
  9. #include <stdlib.h>
  10. #include "tss2_esys.h"
  11. #include "esys_iutil.h"
  12. #include "test-esys.h"
  13. #define LOGMODULE test
  14. #include "util/log.h"
  15. #include "util/aux_util.h"
  16. /** Test the ESYS function Esys_ClockSet and Esys_ReadClock.
  17. *
  18. *\b Note: platform authorization needed.
  19. *
  20. * Tested ESYS commands:
  21. * - Esys_ClockRateAdjust() (M)
  22. * - Esys_ClockSet() (M)
  23. * - Esys_ReadClock() (M)
  24. *
  25. * Used compiler defines: TEST_SESSION
  26. *
  27. * @param[in,out] esys_context The ESYS_CONTEXT.
  28. * @retval EXIT_FAILURE
  29. * @retval EXIT_SKIP
  30. * @retval EXIT_SUCCESS
  31. */
  32. int
  33. test_esys_clockset(ESYS_CONTEXT * esys_context)
  34. {
  35. TSS2_RC r;
  36. int failure_return = EXIT_FAILURE;
  37. ESYS_TR auth_handle = ESYS_TR_RH_OWNER;
  38. TPMS_TIME_INFO *currentTime = NULL;
  39. #ifdef TEST_SESSION
  40. ESYS_TR session = ESYS_TR_NONE;
  41. TPMT_SYM_DEF symmetric = { .algorithm = TPM2_ALG_NULL };
  42. TPM2B_NONCE nonceCaller = {
  43. .size = 20,
  44. .buffer = {1, 2, 3, 4, 5, 6, 7, 8, 9, 10,
  45. 11, 12, 13, 14, 15, 16, 17, 18, 19, 20}
  46. };
  47. /* Audit session */
  48. r = Esys_StartAuthSession(esys_context, ESYS_TR_NONE, ESYS_TR_NONE,
  49. ESYS_TR_NONE, ESYS_TR_NONE, ESYS_TR_NONE,
  50. &nonceCaller,
  51. TPM2_SE_HMAC, &symmetric, TPM2_ALG_SHA256,
  52. &session);
  53. goto_if_error(r, "Error: During initialization of session", error);
  54. TPMA_SESSION sessionAttributes = TPMA_SESSION_AUDIT |
  55. TPMA_SESSION_CONTINUESESSION;
  56. r = Esys_TRSess_SetAttributes(esys_context, session, sessionAttributes, 0xFF);
  57. goto_if_error(r, "Error: During SetAttributes", error);
  58. r = Esys_ReadClock(esys_context,
  59. session,
  60. ESYS_TR_NONE,
  61. ESYS_TR_NONE,
  62. &currentTime);
  63. /* TPMs before Revision 1.38 might not support session usage*/
  64. if ((r == TPM2_RC_AUTH_CONTEXT ) ||
  65. (r == (TPM2_RC_AUTH_CONTEXT | TSS2_RESMGR_RC_LAYER)) ||
  66. (r == (TPM2_RC_AUTH_CONTEXT | TSS2_RESMGR_TPM_RC_LAYER))) {
  67. LOG_WARNING("Session usage not supported by TPM.");
  68. failure_return = EXIT_SKIP;
  69. goto error;
  70. }
  71. #else
  72. r = Esys_ReadClock(esys_context,
  73. ESYS_TR_NONE,
  74. ESYS_TR_NONE,
  75. ESYS_TR_NONE,
  76. &currentTime);
  77. #endif
  78. goto_if_error(r, "Error: ReadClock", error);
  79. UINT64 newTime = currentTime->clockInfo.clock + 010000;
  80. r = Esys_ClockSet(esys_context,
  81. auth_handle,
  82. ESYS_TR_PASSWORD,
  83. ESYS_TR_NONE,
  84. ESYS_TR_NONE,
  85. newTime);
  86. if (number_rc(r) == TPM2_RC_BAD_AUTH) {
  87. /* Platform authorization not possible test will be skipped */
  88. LOG_WARNING("Platform authorization not possible.");
  89. failure_return = EXIT_SKIP;
  90. goto error;
  91. }
  92. goto_if_error(r, "Error: ClockSet", error);
  93. r = Esys_ClockRateAdjust(esys_context,
  94. auth_handle,
  95. ESYS_TR_PASSWORD,
  96. ESYS_TR_NONE,
  97. ESYS_TR_NONE,
  98. TPM2_CLOCK_MEDIUM_FASTER);
  99. goto_if_error(r, "Error: ClockRateAdjust", error);
  100. r = Esys_ClockRateAdjust(esys_context,
  101. auth_handle,
  102. ESYS_TR_PASSWORD,
  103. ESYS_TR_NONE,
  104. ESYS_TR_NONE,
  105. TPM2_CLOCK_MEDIUM_SLOWER);
  106. goto_if_error(r, "Error: ClockRateAdjust", error);
  107. Esys_Free(currentTime);
  108. #ifdef TEST_SESSION
  109. if (session != ESYS_TR_NONE) {
  110. if (Esys_FlushContext(esys_context, session) != TSS2_RC_SUCCESS) {
  111. LOG_ERROR("Cleanup session_enc failed.");
  112. }
  113. }
  114. #endif
  115. return EXIT_SUCCESS;
  116. error:
  117. Esys_Free(currentTime);
  118. #ifdef TEST_SESSION
  119. if (session != ESYS_TR_NONE) {
  120. if (Esys_FlushContext(esys_context, session) != TSS2_RC_SUCCESS) {
  121. LOG_ERROR("Cleanup session_enc failed.");
  122. }
  123. }
  124. #endif
  125. return failure_return;
  126. }
  127. int
  128. test_invoke_esys(ESYS_CONTEXT * esys_context) {
  129. return test_esys_clockset(esys_context);
  130. }