denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Implemented the ReceiveMessage function on imc/v

Browse Source
This commit is contained in:
Sansar Choinyambuu
2011-09-08 12:08:11 +02:00
committed by Andreas Steffen
parent 525d191a42
commit c7787eac47
2 changed files with 194 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libimcv/plugins/imc_attestation/imc_attestation.c
+103 -11
View File
@@ -22,10 +22,15 @@
#include <tcg/tcg_pts_attr_proto_caps.h>
#include <tcg/tcg_pts_attr_meas_algo.h>
#include <tcg/tcg_pts_attr_get_tpm_version_info.h>
#include <tcg/tcg_pts_attr_tpm_version_info.h>
#include <tcg/tcg_pts_attr_get_aik.h>
#include <tcg/tcg_pts_attr_aik.h>
#include <tcg/tcg_pts_attr_req_funct_comp_evid.h>
#include <tcg/tcg_pts_attr_gen_attest_evid.h>
#include <tcg/tcg_pts_attr_simple_comp_evid.h>
#include <tcg/tcg_pts_attr_simple_evid_final.h>
#include <tcg/tcg_pts_attr_req_file_meas.h>
#include <tcg/tcg_pts_attr_file_meas.h>
#include <tncif_pa_subtypes.h>
@@ -56,6 +61,11 @@ static imc_agent_t *imc_attestation;
*/
static pts_meas_algorithms_t supported_algorithms = 0;
/**
* PTS Protocol capabilities
*/
static pts_proto_caps_flag_t proto_caps;
/**
* Selected PTS measurement algorithm after attribute exchange
*/
@@ -226,7 +236,7 @@ static TNC_Result hash_file(char *path, char *out)
}
/**
* Get all the files in a directory
* Get hash of all the files in a directory
*/
static TNC_Result hash_directory(char *path)
{
@@ -287,7 +297,14 @@ static TNC_Result send_message(TNC_ConnectionID connection_id)
case IMC_ATTESTATION_STATE_REQ_PROTO_CAP:
{
pts_proto_caps_flag_t flags;
flags = PTS_PROTO_CAPS_T | PTS_PROTO_CAPS_V;
if(proto_caps & PTS_PROTO_CAPS_T)
{
flags = PTS_PROTO_CAPS_T;
}
if(proto_caps & PTS_PROTO_CAPS_V)
{
flags |= PTS_PROTO_CAPS_V;
}
attr = tcg_pts_attr_proto_caps_create(flags, FALSE);
break;
}
@@ -445,6 +462,9 @@ TNC_Result TNC_IMC_ReceiveMessage(TNC_IMCID imc_id,
{
pa_tnc_msg_t *pa_tnc_msg;
pa_tnc_attr_t *attr;
imc_state_t *state;
imc_attestation_state_t *attestation_state;
imc_attestation_handshake_state_t handshake_state;
enumerator_t *enumerator;
TNC_Result result;
bool fatal_error = FALSE;
@@ -504,26 +524,98 @@ TNC_Result TNC_IMC_ReceiveMessage(TNC_IMCID imc_id,
/**
* Handle TCG PTS attributes
*/
/* get current IMC state */
if (!imc_attestation->get_state(imc_attestation, connection_id, &state))
{
return TNC_RESULT_FATAL;
}
attestation_state = (imc_attestation_state_t*)state;
switch(attr->get_type(attr))
{
case TCG_PTS_REQ_PROTO_CAPS:
break;
case TCG_PTS_MEAS_ALGO:
/* TODO: save the selected algorithm here */
//selected_algorithm =
break;
case TCG_PTS_GET_TPM_VERSION_INFO:
break;
case TCG_PTS_GET_AIK:
break;
{
tcg_pts_attr_proto_caps_t *attr_req_proto_caps;
attr_req_proto_caps = (tcg_pts_attr_proto_caps_t*)attr;
proto_caps = attr_req_proto_caps->get_flags(attr_req_proto_caps);
handshake_state = IMC_ATTESTATION_STATE_REQ_PROTO_CAP;
attestation_state->set_handshake_state(attestation_state,
handshake_state);
break;
}
case TCG_PTS_MEAS_ALGO:
{
tcg_pts_attr_meas_algo_t *attr_meas_algo;
attr_meas_algo = (tcg_pts_attr_meas_algo_t*)attr;
selected_algorithm = attr_meas_algo->get_algorithms(attr_meas_algo);
if((supported_algorithms & PTS_MEAS_ALGO_SHA384) &&
(selected_algorithm & PTS_MEAS_ALGO_SHA384))
{
selected_algorithm = PTS_MEAS_ALGO_SHA384;
}
else if((supported_algorithms & PTS_MEAS_ALGO_SHA256) &&
(selected_algorithm & PTS_MEAS_ALGO_SHA256))
{
selected_algorithm = PTS_MEAS_ALGO_SHA256;
}
else
{
selected_algorithm = PTS_MEAS_ALGO_SHA1;
}
handshake_state = IMC_ATTESTATION_STATE_REQ_MEAS_ALGO;
attestation_state->set_handshake_state(attestation_state,
handshake_state);
break;
}
case TCG_PTS_GET_TPM_VERSION_INFO:
{
handshake_state = IMC_ATTESTATION_STATE_GET_TPM_INFO;
attestation_state->set_handshake_state(attestation_state,
handshake_state);
break;
}
case TCG_PTS_GET_AIK:
{
handshake_state = IMC_ATTESTATION_STATE_GET_AIK;
attestation_state->set_handshake_state(attestation_state,
handshake_state);
break;
}
/* PTS-based Attestation Evidence */
case TCG_PTS_REQ_FUNCT_COMP_EVID:
break;
case TCG_PTS_GEN_ATTEST_EVID:
break;
case TCG_PTS_REQ_FILE_MEAS:
{
tcg_pts_attr_req_file_meas_t *attr_req_file_meas;
measurement_req_entry_t *entry;
u_int32_t delimiter;
attr_req_file_meas = (tcg_pts_attr_req_file_meas_t*)attr;
file_list = linked_list_create();
directory_list = linked_list_create();
delimiter = attr_req_file_meas->get_delimiter(attr_req_file_meas);
entry = malloc_thing(measurement_req_entry_t);
entry->request_id = attr_req_file_meas->get_request_id(attr_req_file_meas);
entry->path = attr_req_file_meas->get_file_path(attr_req_file_meas).ptr;
(attr_req_file_meas->get_directory_flag(attr_req_file_meas)) ?
directory_list->insert_last(directory_list, entry) :
file_list->insert_last(file_list, entry);
handshake_state = IMC_ATTESTATION_STATE_REQ_FILE_MEAS;
attestation_state->set_handshake_state(attestation_state,
handshake_state);
break;
}
/* TODO: Not implemented yet */
case TCG_PTS_DH_NONCE_PARAMS_REQ:
src/libimcv/plugins/imv_attestation/imv_attestation.c
+91 -1
View File
@@ -24,10 +24,15 @@
#include <tcg/tcg_pts_attr_proto_caps.h>
#include <tcg/tcg_pts_attr_meas_algo.h>
#include <tcg/tcg_pts_attr_get_tpm_version_info.h>
#include <tcg/tcg_pts_attr_tpm_version_info.h>
#include <tcg/tcg_pts_attr_get_aik.h>
#include <tcg/tcg_pts_attr_aik.h>
#include <tcg/tcg_pts_attr_req_funct_comp_evid.h>
#include <tcg/tcg_pts_attr_gen_attest_evid.h>
#include <tcg/tcg_pts_attr_simple_comp_evid.h>
#include <tcg/tcg_pts_attr_simple_evid_final.h>
#include <tcg/tcg_pts_attr_req_file_meas.h>
#include <tcg/tcg_pts_attr_file_meas.h>
#include <tncif_pa_subtypes.h>
@@ -337,7 +342,8 @@ TNC_Result TNC_IMV_ReceiveMessage(TNC_IMVID imv_id,
pa_tnc_msg_t *pa_tnc_msg;
pa_tnc_attr_t *attr;
imv_state_t *state;
imv_attestation_state_t *imv_attestation_state;
imv_attestation_state_t *attestation_state;
imv_attestation_handshake_state_t handshake_state;
enumerator_t *enumerator;
TNC_Result result;
bool fatal_error = FALSE;
@@ -403,16 +409,83 @@ TNC_Result TNC_IMV_ReceiveMessage(TNC_IMVID imv_id,
/**
* Handle TCG PTS attributes
*/
/* get current IMC state */
if (!imv_attestation->get_state(imv_attestation, connection_id, &state))
{
return TNC_RESULT_FATAL;
}
attestation_state = (imv_attestation_state_t*)state;
switch(attr->get_type(attr))
{
case TCG_PTS_PROTO_CAPS:
{
tcg_pts_attr_proto_caps_t *attr_proto_caps;
pts_proto_caps_flag_t proto_caps;
attr_proto_caps = (tcg_pts_attr_proto_caps_t*)attr;
proto_caps = attr_proto_caps->get_flags(attr_proto_caps);
/* TODO: What to do with the protocol capabilities from imc */
handshake_state = IMV_ATTESTATION_STATE_PROTO_CAP;
attestation_state->set_handshake_state(attestation_state,
handshake_state);
break;
}
case TCG_PTS_MEAS_ALGO_SELECTION:
{
tcg_pts_attr_meas_algo_t *attr_meas_algo_selection;
pts_meas_algorithms_t selected_algorithm;
attr_meas_algo_selection = (tcg_pts_attr_meas_algo_t*)attr;
selected_algorithm = attr_meas_algo_selection->get_algorithms(attr_meas_algo_selection);
/* TODO: What to do with the selected algorithm from imc */
handshake_state = IMV_ATTESTATION_STATE_MEAS_ALGO;
attestation_state->set_handshake_state(attestation_state,
handshake_state);
break;
}
case TCG_PTS_TPM_VERSION_INFO:
{
tcg_pts_attr_tpm_version_info_t *attr_tpm_version_info;
chunk_t tpm_version_info;
TSS_RESULT uiResult;
TPM_CAP_VERSION_INFO versionInfo;
UINT64 offset = 0;
attr_tpm_version_info = (tcg_pts_attr_tpm_version_info_t*)attr;
tpm_version_info = attr_tpm_version_info->get_tpm_version_info(attr_tpm_version_info);
uiResult = Trspi_UnloadBlob_CAP_VERSION_INFO(&offset, tpm_version_info.ptr, &versionInfo);
if (uiResult != TSS_SUCCESS) {
DBG1(DBG_IMV, "Error 0x%x on Trspi_UnloadBlob_CAP_VERSION_INFO\n", uiResult);
return TNC_RESULT_FATAL;
}
DBG3(DBG_IMV, " TPM 1.2 Version Info:\n");
DBG3(DBG_IMV, " Chip Version: %hhu.%hhu.%hhu.%hhu\n",
versionInfo.version.major, versionInfo.version.minor,
versionInfo.version.revMajor, versionInfo.version.revMinor);
DBG3(DBG_IMV, " Spec Level: %hu\n", versionInfo.specLevel);
DBG3(DBG_IMV, " Errata Revision: %hhu\n", versionInfo.errataRev);
DBG3(DBG_IMV, " TPM Vendor ID: %c%c%c%c\n",
versionInfo.tpmVendorID[0], versionInfo.tpmVendorID[1],
versionInfo.tpmVendorID[2], versionInfo.tpmVendorID[3]);
handshake_state = IMV_ATTESTATION_STATE_TPM_INFO;
attestation_state->set_handshake_state(attestation_state,
handshake_state);
break;
}
case TCG_PTS_AIK:
{
/* TODO: Save the AIK key and certificate */
handshake_state = IMV_ATTESTATION_STATE_AIK;
attestation_state->set_handshake_state(attestation_state,
handshake_state);
break;
}
/* PTS-based Attestation Evidence */
case TCG_PTS_SIMPLE_COMP_EVID:
@@ -420,7 +493,24 @@ TNC_Result TNC_IMV_ReceiveMessage(TNC_IMVID imv_id,
case TCG_PTS_SIMPLE_EVID_FINAL:
break;
case TCG_PTS_FILE_MEAS:
{
tcg_pts_attr_file_meas_t *attr_file_meas;
u_int64_t num_of_files;
u_int16_t request_id;
u_int16_t meas_len;
attr_file_meas = (tcg_pts_attr_file_meas_t*)attr;
num_of_files = attr_file_meas->get_number_of_files(attr_file_meas);
request_id = attr_file_meas->get_request_id(attr_file_meas);
meas_len = attr_file_meas->get_meas_len(attr_file_meas);
/* TODO: Start working here */
handshake_state = IMV_ATTESTATION_STATE_FILE_MEAS;
attestation_state->set_handshake_state(attestation_state,
handshake_state);
break;
}
/* TODO: Not implemented yet */
case TCG_PTS_DH_NONCE_PARAMS_RESP: