Implemented TCG PTS Attributes
[strongswan.git] / src / libimcv / tcg / tcg_pts_attr_aik.c
1 /*
2 * Copyright (C) 2011 Sansar Choinyambuu
3 * HSR Hochschule fuer Technik Rapperswil
4 *
5 * This program is free software; you can redistribute it and/or modify it
6 * under the terms of the GNU General Public License as published by the
7 * Free Software Foundation; either version 2 of the License, or (at your
8 * option) any later version. See <http://www.fsf.org/copyleft/gpl.txt>.
9 *
10 * This program is distributed in the hope that it will be useful, but
11 * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
12 * or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
13 * for more details.
14 */
15
16 #include "tcg_pts_attr_aik.h"
17
18 #include <pa_tnc/pa_tnc_msg.h>
19 #include <bio/bio_writer.h>
20 #include <bio/bio_reader.h>
21 #include <debug.h>
22
23 typedef struct private_tcg_pts_attr_aik_t private_tcg_pts_attr_aik_t;
24
25 /**
26 * Attestation Identity Key (see section 3.13 of PTS Protocol: Binding to TNC IF-M Specification)
27 *
28 * 1 2 3
29 * 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
30 *
31 * +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
32 * | Flags | Attestation Identity Key (Variable Lenght) ~
33 * +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
34 * | Attestation Identity Key (Variable Lenght) ~
35 * +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
36 *
37 */
38
39 #define PTS_AIK_SIZE 4
40
41 /**
42 * Private data of an private_tcg_pts_attr_aik_t object.
43 */
44 struct private_tcg_pts_attr_aik_t {
45
46 /**
47 * Public members of private_tcg_pts_attr_tpm_version_info_t
48 */
49 tcg_pts_attr_aik_t public;
50
51 /**
52 * Attribute vendor ID
53 */
54 pen_t vendor_id;
55
56 /**
57 * Attribute type
58 */
59 u_int32_t type;
60
61 /**
62 * Attribute value
63 */
64 chunk_t value;
65
66 /**
67 * Noskip flag
68 */
69 bool noskip_flag;
70
71 /**
72 * Naked Public Key flag
73 */
74 bool naked_pub_aik;
75
76 /**
77 * Attestation Identity Key
78 */
79 chunk_t aik;
80 };
81
82 METHOD(pa_tnc_attr_t, get_vendor_id, pen_t,
83 private_tcg_pts_attr_aik_t *this)
84 {
85 return this->vendor_id;
86 }
87
88 METHOD(pa_tnc_attr_t, get_type, u_int32_t,
89 private_tcg_pts_attr_aik_t *this)
90 {
91 return this->type;
92 }
93
94 METHOD(pa_tnc_attr_t, get_value, chunk_t,
95 private_tcg_pts_attr_aik_t *this)
96 {
97 return this->value;
98 }
99
100 METHOD(pa_tnc_attr_t, get_noskip_flag, bool,
101 private_tcg_pts_attr_aik_t *this)
102 {
103 return this->noskip_flag;
104 }
105
106 METHOD(pa_tnc_attr_t, set_noskip_flag,void,
107 private_tcg_pts_attr_aik_t *this, bool noskip)
108 {
109 this->noskip_flag = noskip;
110 }
111
112 METHOD(pa_tnc_attr_t, build, void,
113 private_tcg_pts_attr_aik_t *this)
114 {
115 bio_writer_t *writer;
116 u_int8_t flags = 0;
117
118 writer = bio_writer_create(PTS_AIK_SIZE);
119
120 if(this->naked_pub_aik) flags += 128;
121 writer->write_uint8 (writer, flags);
122 writer->write_data(writer, this->aik);
123
124 this->value = chunk_clone(writer->get_buf(writer));
125 writer->destroy(writer);
126 }
127
128 METHOD(pa_tnc_attr_t, process, status_t,
129 private_tcg_pts_attr_aik_t *this)
130 {
131 bio_reader_t *reader;
132 u_int8_t flags;
133
134 if (this->value.len < PTS_AIK_SIZE)
135 {
136 DBG1(DBG_TNC, "insufficient data for Attestation Identity Key");
137 return FAILED;
138 }
139 reader = bio_reader_create(this->value);
140
141 reader->read_uint8(reader, &flags);
142 if(flags) this->naked_pub_aik = true;
143
144 reader->read_data (reader, sizeof(this->value - 1), &this->aik);
145 this->aik = chunk_clone(this->aik);
146 reader->destroy(reader);
147
148 return SUCCESS;
149 }
150
151 METHOD(pa_tnc_attr_t, destroy, void,
152 private_tcg_pts_attr_aik_t *this)
153 {
154 free(this->value.ptr);
155 free(this->aik.ptr);
156 free(this);
157 }
158
159 METHOD(pa_tnc_attr_t, get_naked_flag, bool,
160 private_tcg_pts_attr_aik_t *this)
161 {
162 return this->naked_pub_aik;
163 }
164
165 METHOD(pa_tnc_attr_t, set_naked_flag,void,
166 private_tcg_pts_attr_aik_t *this, bool naked)
167 {
168 this->naked_pub_aik = naked;
169 }
170
171 METHOD(tcg_pts_attr_aik_t, get_aik, chunk_t,
172 private_tcg_pts_attr_aik_t *this)
173 {
174 return this->aik;
175 }
176
177 METHOD(tcg_pts_attr_aik_t, set_aik, void,
178 private_tcg_pts_attr_aik_t *this,
179 chunk_t aik)
180 {
181 return this->aik = aik;
182 }
183
184 /**
185 * Described in header.
186 */
187 pa_tnc_attr_t *tcg_pts_attr_tpm_version_info_create(bool naked_pub_aik, chunk_t aik)
188 {
189 private_tcg_pts_attr_aik_t *this;
190
191 INIT(this,
192 .public = {
193 .pa_tnc_attribute = {
194 .get_vendor_id = _get_vendor_id,
195 .get_type = _get_type,
196 .get_value = _get_value,
197 .get_noskip_flag = _get_noskip_flag,
198 .set_noskip_flag = _set_noskip_flag,
199 .build = _build,
200 .process = _process,
201 .destroy = _destroy,
202 },
203 .get_naked_flag = get_naked_flag,
204 .set_naked_flag = set_naked_flag,
205 .get_aik = get_aik,
206 .set_aik = set_aik,
207 },
208 .vendor_id = PEN_TCG,
209 .type = TCG_PTS_AIK,
210 .naked_pub_aik = naked_pub_aik;
211 .aik = aik,
212 );
213
214 return &this->public.pa_tnc_attribute;
215 }
216
217
218 /**
219 * Described in header.
220 */
221 pa_tnc_attr_t *tcg_pts_attr_tpm_version_info_create_from_data(chunk_t data)
222 {
223 private_tcg_pts_attr_aik_t *this;
224
225 INIT(this,
226 .public = {
227 .pa_tnc_attribute = {
228 .get_vendor_id = _get_vendor_id,
229 .get_type = _get_type,
230 .get_value = _get_value,
231 .get_noskip_flag = _get_noskip_flag,
232 .set_noskip_flag = _set_noskip_flag,
233 .build = _build,
234 .process = _process,
235 .destroy = _destroy,
236 },
237 .get_naked_flag = get_naked_flag,
238 .set_naked_flag = set_naked_flag,
239 .get_aik = get_aik,
240 .set_aik = set_aik,
241 },
242 .vendor_id = PEN_TCG,
243 .type = TCG_PTS_AIK,
244 .value = chunk_clone(data),
245 );
246
247 return &this->public.pa_tnc_attribute;
248 }