Brandon Weeks
2f8dbfc94e
Restore changes accidentally reverted during reconciliation ( #256 )
2021-12-08 16:43:38 -08:00
copybara-service[bot]
f1f1b84491
Revert "Internal change"
...
PiperOrigin-RevId: 415106054
Co-authored-by: Brandon Weeks <bweeks@google.com>
2021-12-08 15:06:48 -08:00
Brandon Weeks
57a6cb587a
Internal change
...
PiperOrigin-RevId: 415099842
2021-12-08 14:37:13 -08:00
Brandon Weeks
be496f1149
Internal change
...
PiperOrigin-RevId: 394330027
2021-09-01 15:39:03 -07:00
Timo Lindfors
e8c5dc4fd5
Fix minor spelling issues in comments
2021-08-10 12:18:55 -07:00
Eric Chiang
339bdb245a
attest: add bounds checks for slice indexes ( #197 )
...
Found manually looking through the code. The activate credential could
crash the client, the secureboot and challenge generation could crash
the server.
2020-12-30 19:33:55 +01:00
Eric Chiang
7b7e21da78
attest: update go-tpm and switch hash method
...
go-tpm recently removed Algorithm.HashConstructor() in favor of
Algorithm.Hash(). Update go-tpm dependency and use the new method.
2019-10-18 10:39:55 -04:00
Brandon Weeks
2bc8d58530
ParseEventLog fuzz target
...
A go-fuzz target for the ParseEventLog function. It has been tested
with go-fuzz and go-fuzz + libFuzzer.
oss-fuzz requires a statically built fuzzer binary, so `gofuzz` build
tags are added to avoid building files that depend on go-tspi. A mock
tpm_other.go file is also included to satisfy the `platformTPM`
interface.
2019-10-09 10:05:21 +11:00
Brandon Weeks
73020b971b
Rename AIK to AK everywhere
...
AIK is the terminology used as part of the TPM 1.2 specifications.
2019-10-09 08:56:19 +11:00
Brandon Weeks
74a97ba02f
Revert WIP fuzzing work
2019-10-08 18:08:43 +11:00
Brandon Weeks
58786a4742
Target gofuzz build tag instead of cgo
...
go-fuzz + libFuzzer can't be built with `CGO_ENABLED=0`.
2019-10-08 17:52:40 +11:00
Brandon Weeks
355782cbf9
Fix building without cgo
2019-10-08 17:19:02 +11:00
Brandon Weeks
59a5f6851d
Simple fuzzer for ParseEventLog
2019-10-08 16:09:51 +11:00
Tom D
fefdb7d336
Add quote example, add note to Activation.Generate() about use of subtle to prevent timing attacks ( #84 )
2019-08-27 16:15:48 -07:00
Eric Chiang
9b6caf1273
attest: use provided randomness source when generating challenges ( #80 )
...
Currently the activation challenge lets a caller supply a source of
randomness other than crypto/rand, but it's not used in some places.
Plumb the source through the call chain.
2019-08-21 10:28:19 -07:00
Tom D
f3f08037f8
Make SRK/AIK templates consistent with go-tpm-tools ( #58 )
2019-07-26 13:16:47 -07:00
Tom D
8f4f17e679
Implement credential activation API ( #56 )
2019-07-23 15:22:53 -07:00