-
Notifications
You must be signed in to change notification settings - Fork 52
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add ActivateCredential support for TKC #284
Merged
Merged
Commits on Nov 10, 2021
-
Add ActivateCredential support for TKC
This commit adds support for two operations, enabling key attestation via the ActivateCredential call. A test has also been added to verify attestation using the Endorsement Key. Signed-off-by: Ionut Mihalcea <[email protected]>
Configuration menu - View commit details
-
Copy full SHA for d57afb1 - Browse repository at this point
Copy the full SHA d57afb1View commit details -
Split up the setup for the attesting key into different methods so it's clearer what is being done. Signed-off-by: Ionut Mihalcea <[email protected]>
Configuration menu - View commit details
-
Copy full SHA for 84a79ae - Browse repository at this point
Copy the full SHA 84a79aeView commit details -
Allow the setting more hierarchy auths in TKC
This commit expands the scope of the TransientKeyContextBuilder to adding more than one hierarchy auth value. This is needed for attesting keys with the default Endorsement Key which uses the Endorsement Hierarchy for authorization by default. Signed-off-by: Ionut Mihalcea <[email protected]>
Configuration menu - View commit details
-
Copy full SHA for 9d11249 - Browse repository at this point
Copy the full SHA 9d11249View commit details -
* Changed the serialisation of the TPM2B_Public to use the marshaling command * Changed the MakeCredParams struct to be fully public to avoid needless clones * Factored out the code for obtaining the EK public key Signed-off-by: Ionut Mihalcea <[email protected]>
Configuration menu - View commit details
-
Copy full SHA for 1f170fc - Browse repository at this point
Copy the full SHA 1f170fcView commit details
Commits on Nov 15, 2021
-
Return marshaled TPMT_PUBLIC instead
Instead of serializing TPM2B_PUBLIC, use the embedded TPMT_PUBLIC instead, as this is what the key name is computed over. Signed-off-by: Ionut Mihalcea <[email protected]>
Configuration menu - View commit details
-
Copy full SHA for 41a3f9d - Browse repository at this point
Copy the full SHA 41a3f9dView commit details -
Adding more tests for the key attestation operations. Signed-off-by: Ionut Mihalcea <[email protected]>
Configuration menu - View commit details
-
Copy full SHA for ec43a0e - Browse repository at this point
Copy the full SHA ec43a0eView commit details -
This commit fixes the conversion from `TPMT_PUBLIC` size to the input of Tss2_MU_TPMT_PUBLIC_Marshal. A new WrapperErrorKind variant is added for internal errors which were not expected (essentially as a replacement for `unwrap`). The cross-compilation script was also moved to run per-commit in the CI instead of nightly - the fix above would've been obvious if we tried cross-compilation. Signed-off-by: Ionut Mihalcea <[email protected]>
Configuration menu - View commit details
-
Copy full SHA for d574d3c - Browse repository at this point
Copy the full SHA d574d3cView commit details
Commits on Nov 17, 2021
-
Improved the tests to check for the exact response code expected. Improved the documentation on `MakeCredentialParams` to detail what the contents are meant for. Signed-off-by: Ionut Mihalcea <[email protected]>
Configuration menu - View commit details
-
Copy full SHA for c01cf01 - Browse repository at this point
Copy the full SHA c01cf01View commit details
Commits on Nov 18, 2021
-
Signed-off-by: Ionut Mihalcea <[email protected]>
Configuration menu - View commit details
-
Copy full SHA for d523ce2 - Browse repository at this point
Copy the full SHA d523ce2View commit details
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.