esys-nv-ram-extend-index.int.c 7.5 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272
  1. /* SPDX-License-Identifier: BSD-2-Clause */
  2. /*******************************************************************************
  3. * Copyright 2017-2018, Fraunhofer SIT sponsored by Infineon Technologies AG
  4. * All rights reserved.
  5. *******************************************************************************/
  6. #ifdef HAVE_CONFIG_H
  7. #include <config.h>
  8. #endif
  9. #include <stdlib.h>
  10. #include "tss2_esys.h"
  11. #include "esys_iutil.h"
  12. #define LOGMODULE test
  13. #include "util/log.h"
  14. #include "util/aux_util.h"
  15. /** This test is intended to test the ESYS nv define space, nv extend, and
  16. * nv read command.
  17. * The names stored in the ESYS resource are compared
  18. * with the names delivered from the TPM by the command ReadPublic.
  19. *
  20. * Tested ESYS commands:
  21. * - Esys_FlushContext() (M)
  22. * - Esys_NV_DefineSpace() (M)
  23. * - Esys_NV_Extend() (M)
  24. * - Esys_NV_Read() (M)
  25. * - Esys_NV_ReadPublic() (M)
  26. * - Esys_NV_UndefineSpace() (M)
  27. * - Esys_StartAuthSession() (M)
  28. *
  29. * Used compiler defines: TEST_SESSION
  30. *
  31. * @param[in,out] esys_context The ESYS_CONTEXT.
  32. * @retval EXIT_FAILURE
  33. * @retval EXIT_SUCCESS
  34. */
  35. int
  36. test_esys_nv_ram_extend_index(ESYS_CONTEXT * esys_context)
  37. {
  38. TSS2_RC r;
  39. ESYS_TR nvHandle = ESYS_TR_NONE;
  40. TPM2B_NV_PUBLIC *nvPublic = NULL;
  41. TPM2B_NAME *nvName = NULL;
  42. TPM2B_MAX_NV_BUFFER *nv_test_data2 = NULL;
  43. #ifdef TEST_SESSION
  44. ESYS_TR session = ESYS_TR_NONE;
  45. TPMT_SYM_DEF symmetric = {.algorithm = TPM2_ALG_AES,
  46. .keyBits = {.aes = 128},
  47. .mode = {.aes = TPM2_ALG_CFB}
  48. };
  49. TPMA_SESSION sessionAttributes;
  50. TPM2B_NONCE nonceCaller = {
  51. .size = 32,
  52. .buffer = { 1, 2, 3, 4, 5, 6, 7, 8, 9, 10,11, 12, 13, 14, 15, 16, 17,
  53. 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32 }
  54. };
  55. memset(&sessionAttributes, 0, sizeof sessionAttributes);
  56. r = Esys_StartAuthSession(esys_context, ESYS_TR_NONE, ESYS_TR_NONE,
  57. ESYS_TR_NONE, ESYS_TR_NONE, ESYS_TR_NONE,
  58. &nonceCaller,
  59. TPM2_SE_HMAC, &symmetric, TPM2_ALG_SHA256,
  60. &session);
  61. goto_if_error(r, "Error: During initialization of session", error);
  62. #endif /* TEST_SESSION */
  63. TPM2B_AUTH auth = {.size = 20,
  64. .buffer={10, 11, 12, 13, 14, 15, 16, 17, 18, 19,
  65. 20, 21, 22, 23, 24, 25, 26, 27, 28, 29}};
  66. TPM2B_NV_PUBLIC publicInfo = {
  67. .size = 0,
  68. .nvPublic = {
  69. .nvIndex =TPM2_NV_INDEX_FIRST,
  70. .nameAlg = TPM2_ALG_SHA256,
  71. .attributes = (
  72. TPMA_NV_OWNERWRITE |
  73. TPMA_NV_AUTHWRITE |
  74. TPMA_NV_WRITE_STCLEAR |
  75. TPMA_NV_AUTHREAD |
  76. TPMA_NV_OWNERREAD |
  77. TPM2_NT_EXTEND << TPMA_NV_TPM2_NT_SHIFT
  78. ),
  79. .authPolicy = {
  80. .size = 0,
  81. .buffer = {},
  82. },
  83. .dataSize = 32,
  84. }
  85. };
  86. r = Esys_NV_DefineSpace (
  87. esys_context,
  88. ESYS_TR_RH_OWNER,
  89. #ifdef TEST_SESSION
  90. session,
  91. #else
  92. ESYS_TR_PASSWORD,
  93. #endif
  94. ESYS_TR_NONE,
  95. ESYS_TR_NONE,
  96. &auth,
  97. &publicInfo,
  98. &nvHandle);
  99. goto_if_error(r, "Error esys define nv space", error);
  100. TPM2B_MAX_NV_BUFFER nv_test_data = { .size = 20,
  101. .buffer={0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 0,
  102. 1, 2, 3, 4, 5, 6, 7, 8, 9}};
  103. r = Esys_NV_ReadPublic(
  104. esys_context,
  105. nvHandle,
  106. ESYS_TR_NONE,
  107. ESYS_TR_NONE,
  108. ESYS_TR_NONE,
  109. &nvPublic,
  110. &nvName);
  111. goto_if_error(r, "Error: nv read public", error);
  112. RSRC_NODE_T *nvHandleNode;
  113. r = esys_GetResourceObject(esys_context, nvHandle, &nvHandleNode);
  114. goto_if_error(r, "Error: nv get resource object", error);
  115. if (nvName->size != nvHandleNode->rsrc.name.size ||
  116. memcmp(&nvName->name, &nvHandleNode->rsrc.name.name, nvName->size) != 0) {
  117. LOG_ERROR("Error: define space name not equal");
  118. goto error;
  119. }
  120. r = Esys_NV_Extend (
  121. esys_context,
  122. nvHandle,
  123. nvHandle,
  124. #ifdef TEST_SESSION
  125. session,
  126. #else
  127. ESYS_TR_PASSWORD,
  128. #endif
  129. ESYS_TR_NONE,
  130. ESYS_TR_NONE,
  131. &nv_test_data);
  132. goto_if_error(r, "Error esys nv write", error);
  133. Esys_Free(nvPublic);
  134. Esys_Free(nvName);
  135. r = Esys_NV_ReadPublic(
  136. esys_context,
  137. nvHandle,
  138. ESYS_TR_NONE,
  139. ESYS_TR_NONE,
  140. ESYS_TR_NONE,
  141. &nvPublic,
  142. &nvName);
  143. goto_if_error(r, "Error: nv read public", error);
  144. r = esys_GetResourceObject(esys_context, nvHandle, &nvHandleNode);
  145. goto_if_error(r, "Error: nv get resource object", error);
  146. if (nvName->size != nvHandleNode->rsrc.name.size ||
  147. memcmp(&nvName->name, &nvHandleNode->rsrc.name.name, nvName->size) != 0) {
  148. LOG_ERROR("Error: nv write name not equal");
  149. goto error;
  150. }
  151. r = Esys_NV_Read(
  152. esys_context,
  153. nvHandle,
  154. nvHandle,
  155. #ifdef TEST_SESSION
  156. session,
  157. #else
  158. ESYS_TR_PASSWORD,
  159. #endif
  160. ESYS_TR_NONE,
  161. ESYS_TR_NONE,
  162. 20,
  163. 0,
  164. &nv_test_data2);
  165. goto_if_error(r, "Error esys nv read", error);
  166. Esys_Free(nvPublic);
  167. Esys_Free(nvName);
  168. r = Esys_NV_ReadPublic(
  169. esys_context,
  170. nvHandle,
  171. ESYS_TR_NONE,
  172. ESYS_TR_NONE,
  173. ESYS_TR_NONE,
  174. &nvPublic,
  175. &nvName);
  176. goto_if_error(r, "Error: nv read public", error);
  177. r = esys_GetResourceObject(esys_context, nvHandle, &nvHandleNode);
  178. goto_if_error(r, "Error: nv get resource object", error);
  179. if (nvName->size != nvHandleNode->rsrc.name.size ||
  180. memcmp(&nvName->name, &nvHandleNode->rsrc.name.name, nvName->size) != 0) {
  181. LOG_ERROR("Error: nv read name not equal");
  182. goto error;
  183. }
  184. r = Esys_NV_UndefineSpace(esys_context,
  185. ESYS_TR_RH_OWNER,
  186. nvHandle,
  187. #ifdef TEST_SESSION
  188. session,
  189. #else
  190. ESYS_TR_PASSWORD,
  191. #endif
  192. ESYS_TR_NONE,
  193. ESYS_TR_NONE
  194. );
  195. goto_if_error(r, "Error: NV_UndefineSpace", error);
  196. #ifdef TEST_SESSION
  197. r = Esys_FlushContext(esys_context, session);
  198. goto_if_error(r, "Flushing context", error);
  199. #endif
  200. Esys_Free(nvPublic);
  201. Esys_Free(nvName);
  202. Esys_Free(nv_test_data2);
  203. return EXIT_SUCCESS;
  204. error:
  205. if (nvHandle != ESYS_TR_NONE) {
  206. if (Esys_NV_UndefineSpace(esys_context,
  207. ESYS_TR_RH_OWNER,
  208. nvHandle,
  209. #ifdef TEST_SESSION
  210. session,
  211. #else
  212. ESYS_TR_PASSWORD,
  213. #endif
  214. ESYS_TR_NONE,
  215. ESYS_TR_NONE) != TSS2_RC_SUCCESS) {
  216. LOG_ERROR("Cleanup nvHandle failed.");
  217. }
  218. }
  219. #ifdef TEST_SESSION
  220. if (session != ESYS_TR_NONE) {
  221. if (Esys_FlushContext(esys_context, session) != TSS2_RC_SUCCESS) {
  222. LOG_ERROR("Cleanup session failed.");
  223. }
  224. }
  225. #endif
  226. Esys_Free(nvPublic);
  227. Esys_Free(nvName);
  228. Esys_Free(nv_test_data2);
  229. return EXIT_FAILURE;
  230. }
  231. int
  232. test_invoke_esys(ESYS_CONTEXT * esys_context) {
  233. return test_esys_nv_ram_extend_index(esys_context);
  234. }