From: Daniel De Graaf Subject: Re: [PATCH v2 2/2] vtpmmgr: execute deep quote in locality 0 Date: Wed, 15 Apr 2015 11:07:18 -0400 Message-ID: <552E7EA6.4040000@tycho.nsa.gov> References: <1429002534-8759-1-git-send-email-emilcondrea@gmail.com> <1429002534-8759-3-git-send-email-emilcondrea@gmail.com> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; Format="flowed" Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: <1429002534-8759-3-git-send-email-emilcondrea@gmail.com> List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: xen-devel-bounces@lists.xen.org Errors-To: xen-devel-bounces@lists.xen.org To: Emil Condrea , xen-devel@lists.xen.org List-Id: xen-devel@lists.xenproject.org On 04/14/2015 05:08 AM, Emil Condrea wrote: > Enables deep quote execution for vtpmmgr which can not be started > using locality 2. Flags are used to request additional data to be > present when executing quote. They are interpreted as a bitmask of: > * VTPM_QUOTE_FLAGS_HASH_UUID > * VTPM_QUOTE_FLAGS_VTPM_MEASUREMENTS > * VTPM_QUOTE_FLAGS_GROUP_INFO > * VTPM_QUOTE_FLAGS_GROUP_PUBKEY > > The externData param for TPM_Quote is calculated as: > externData = SHA1 ( > extraInfoFlags > requestData > [SHA1 ( > [SHA1 (UUIDs if requested)] > [SHA1 (vTPM measurements if requested)] > [SHA1 (vTPM group update policy if requested)] > [SHA1 (vTPM group public key if requested)] > ) if flags !=0 ] > ) > > The response param pcrValues is an array containing requested hashes used > for externData calculation : UUIDs, vTPM measurements, vTPM group update > policy, group public key. At the end of these hashes the PCR values are > appended. > > Signed-off-by: Emil Condrea Acked-by: Daniel De Graaf