denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

added the IMV_ATTESTATION_STATE_NONCE_REQ state

Browse Source
This commit is contained in:
Andreas Steffen
2011-11-28 14:39:50 +01:00
parent 325704e1b4
commit 03fe2ed684
2 changed files with 38 additions and 44 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libimcv/plugins/imv_attestation/imv_attestation.c
+37 -44
View File
@@ -81,11 +81,6 @@ static pts_creds_t *pts_creds;
*/ */
static credential_manager_t *pts_credmgr; static credential_manager_t *pts_credmgr;
/**
* TRUE if DH Nonce Parameters Request attribute is sent
*/
static bool dh_nonce_req_sent = FALSE;
/** /**
* see section 3.7.1 of TCG TNC IF-IMV Specification 1.2 * see section 3.7.1 of TCG TNC IF-IMV Specification 1.2
*/ */
@@ -236,13 +231,12 @@ static TNC_Result send_message(TNC_ConnectionID connection_id)
msg = pa_tnc_msg_create(); msg = pa_tnc_msg_create();
/* Jump to Measurement state if IMC has no TPM */ if (handshake_state == IMV_ATTESTATION_STATE_NONCE_REQ &&
if (handshake_state == IMV_ATTESTATION_STATE_TPM_INIT &&
!(pts->get_proto_caps(pts) & PTS_PROTO_CAPS_T)) !(pts->get_proto_caps(pts) & PTS_PROTO_CAPS_T))
{ {
DBG1(DBG_IMV, "PTS-IMC has no TPM capability - "
"advancing to PTS measurement phase");
handshake_state = IMV_ATTESTATION_STATE_MEAS; handshake_state = IMV_ATTESTATION_STATE_MEAS;
DBG3(DBG_IMV, "TPM is not available on IMC side, ",
"jumping to measurement phase");
} }
/* Switch on the attribute type IMV has received */ /* Switch on the attribute type IMV has received */
@@ -263,52 +257,51 @@ static TNC_Result send_message(TNC_ConnectionID connection_id)
attr->set_noskip_flag(attr, TRUE); attr->set_noskip_flag(attr, TRUE);
msg->add_attribute(msg, attr); msg->add_attribute(msg, attr);
attestation_state->set_handshake_state(attestation_state,
IMV_ATTESTATION_STATE_NONCE_REQ);
break;
}
case IMV_ATTESTATION_STATE_NONCE_REQ:
{
int min_nonce_len;
/* Send DH nonce parameters request attribute */
min_nonce_len = lib->settings->get_int(lib->settings,
"libimcv.plugins.imv-attestation.min_nonce_len", 0);
attr = tcg_pts_attr_dh_nonce_params_req_create(min_nonce_len,
supported_dh_groups);
attr->set_noskip_flag(attr, TRUE);
msg->add_attribute(msg, attr);
attestation_state->set_handshake_state(attestation_state, attestation_state->set_handshake_state(attestation_state,
IMV_ATTESTATION_STATE_TPM_INIT); IMV_ATTESTATION_STATE_TPM_INIT);
break; break;
} }
case IMV_ATTESTATION_STATE_TPM_INIT: case IMV_ATTESTATION_STATE_TPM_INIT:
{ {
if (!dh_nonce_req_sent) pts_meas_algorithms_t selected_algorithm;
{ chunk_t initiator_value, initiator_nonce;
int min_nonce_len;
/* Send DH nonce parameters request attribute */ /* Send DH nonce finish attribute */
min_nonce_len = lib->settings->get_int(lib->settings, selected_algorithm = pts->get_meas_algorithm(pts);
"libimcv.plugins.imv-attestation.min_nonce_len", 0); pts->get_my_public_value(pts, &initiator_value, &initiator_nonce);
attr = tcg_pts_attr_dh_nonce_params_req_create(min_nonce_len, attr = tcg_pts_attr_dh_nonce_finish_create(selected_algorithm,
supported_dh_groups);
attr->set_noskip_flag(attr, TRUE);
msg->add_attribute(msg, attr);
dh_nonce_req_sent = TRUE;
}
else
{
pts_meas_algorithms_t selected_algorithm;
chunk_t initiator_value, initiator_nonce;
/* Send DH nonce finish attribute */
selected_algorithm = pts->get_meas_algorithm(pts);
pts->get_my_public_value(pts, &initiator_value, &initiator_nonce);
attr = tcg_pts_attr_dh_nonce_finish_create(selected_algorithm,
initiator_value, initiator_nonce); initiator_value, initiator_nonce);
attr->set_noskip_flag(attr, TRUE); attr->set_noskip_flag(attr, TRUE);
msg->add_attribute(msg, attr); msg->add_attribute(msg, attr);
/* Send Get TPM Version attribute */ /* Send Get TPM Version attribute */
attr = tcg_pts_attr_get_tpm_version_info_create(); attr = tcg_pts_attr_get_tpm_version_info_create();
attr->set_noskip_flag(attr, TRUE); attr->set_noskip_flag(attr, TRUE);
msg->add_attribute(msg, attr); msg->add_attribute(msg, attr);
/* Send Get AIK attribute */ /* Send Get AIK attribute */
attr = tcg_pts_attr_get_aik_create(); attr = tcg_pts_attr_get_aik_create();
attr->set_noskip_flag(attr, TRUE); attr->set_noskip_flag(attr, TRUE);
msg->add_attribute(msg, attr); msg->add_attribute(msg, attr);
attestation_state->set_handshake_state(attestation_state, attestation_state->set_handshake_state(attestation_state,
IMV_ATTESTATION_STATE_MEAS); IMV_ATTESTATION_STATE_MEAS);
}
break; break;
} }
case IMV_ATTESTATION_STATE_MEAS: case IMV_ATTESTATION_STATE_MEAS:
@@ -556,7 +549,7 @@ TNC_Result TNC_IMV_ReceiveMessage(TNC_IMVID imv_id,
} }
attr_list->destroy(attr_list); attr_list->destroy(attr_list);
if (attestation_state->get_handshake_state(attestation_state) & if (attestation_state->get_handshake_state(attestation_state) ==
IMV_ATTESTATION_STATE_END) IMV_ATTESTATION_STATE_END)
{ {
if (attestation_state->get_request_count(attestation_state)) if (attestation_state->get_request_count(attestation_state))
src/libimcv/plugins/imv_attestation/imv_attestation_state.h
+1
View File
@@ -34,6 +34,7 @@ typedef enum imv_attestation_handshake_state_t imv_attestation_handshake_state_t
*/ */
enum imv_attestation_handshake_state_t { enum imv_attestation_handshake_state_t {
IMV_ATTESTATION_STATE_INIT, IMV_ATTESTATION_STATE_INIT,
IMV_ATTESTATION_STATE_NONCE_REQ,
IMV_ATTESTATION_STATE_TPM_INIT, IMV_ATTESTATION_STATE_TPM_INIT,
IMV_ATTESTATION_STATE_MEAS, IMV_ATTESTATION_STATE_MEAS,
IMV_ATTESTATION_STATE_COMP_EVID, IMV_ATTESTATION_STATE_COMP_EVID,