Tom D
709b568a93
Add two missing enums ( #48 )
...
* Add in two missing enum values.
2019-07-03 11:32:22 -07:00
Tom D
5c6b9242df
Add support for multiple certificate directories ( #47 )
2019-07-03 10:07:16 -07:00
Tom D
372fcf25d0
Try reading the EKCert from PCP_EKNVCERT ( #46 )
2019-06-25 15:19:12 -07:00
Tom D
113729bb8b
Add indication to EKCert error string for when NVRAM value was unwrapped ( #45 )
2019-06-20 10:58:41 -07:00
Tom D
7585e609b4
Remove main.go ( #44 )
2019-06-18 09:11:08 -07:00
Tom D
ba4708dfc8
Rename attest-tool to match rules for BUILD targets ( #43 )
...
* Implement example cmd-line binary.
* Add ability to generate random nonce
* Rename attest-tool to match rules for BUILD files
2019-06-18 09:09:39 -07:00
Tom D
04f428d103
Implement example cmd-line binary. ( #42 )
...
* Implement example cmd-line binary.
* Add ability to generate random nonce
2019-06-17 15:50:05 -07:00
Tom D
6fede8c9ab
Remove ekcert blacklist. ( #37 )
...
* Fix broken build on windows.
* Remove cert blacklist now that certtransparency parsing is laxer by default.
2019-06-17 09:49:16 -07:00
Tom D
1eb89bd0b8
Use certificate-transparency asn1 parser ( #41 )
2019-06-12 11:14:43 -07:00
Tom D
7c3baced09
Fix typos. ( #40 )
2019-06-12 10:15:42 -07:00
Tom D
8afa43fc13
Better error messages for parseCert() ( #39 )
2019-06-12 10:11:18 -07:00
Tom D
8ac2846c80
Attempt fix for EKCert parsing errors when falling back to NVRAM ( #38 )
...
* Fix parsing errors for EKCert when falling back to NVRAM
2019-06-11 10:52:49 -07:00
Tom D
7f17046a60
Fix broken build on windows. ( #36 )
...
* Attempt to read the EK from NVRAM if the system cert store cannot provide it.
* Fix broken build on windows.
2019-06-06 13:15:55 -07:00
Tom D
3dc8a7d841
Attempt to read the EK from NVRAM if the system cert store cannot provide it. ( #35 )
2019-06-06 13:11:40 -07:00
Tom D
a801f7333b
Import verifier library into go-attestation. ( #13 )
...
* Upstream the verifier sub-library.
* Rename proto package to go_attestation
2019-06-06 10:43:36 -07:00
Tom D
1611c5ab72
Fix quote generation on windows TPM 1.2 devices ( #34 )
2019-05-20 12:34:17 -07:00
Tom D
5b7e00554a
Implement new credential activation scheme for windows ( #33 )
...
* Implement new credential activation scheme for windows
2019-05-16 15:51:01 -07:00
Tom D
70c839779d
Moar error codes ( #32 )
2019-05-15 12:57:08 -07:00
Tom D
dbbcfcc4b8
Fix conversion to more specific windows error messages. ( #31 )
2019-05-15 12:27:19 -07:00
Tom D
20b39443ef
Fix ActivateCredential for TPM 1.2 on windows ( #30 )
2019-05-15 10:36:54 -07:00
Tom D
7b5f790215
Fix broken DLL MustFindProc. ( #29 )
2019-05-14 14:44:33 -07:00
Tom D
55ce06b8f2
Decode windows TPM/PCP errors to more specific descriptions. ( #28 )
2019-05-14 11:42:44 -07:00
Tom D
ac78180218
Implement key deletion on Windows ( #27 )
...
* Implement key deletion on Windows
* Dont forget 2nd parameter in call to NCryptDeleteKey
2019-05-13 14:41:55 -07:00
Tom D
2ff4e84fcb
Check the state of the TPM before opening it on windows ( #26 )
...
* Check the state of the TPM before opening it on windows
2019-05-13 14:13:16 -07:00
Tom D
2da0098d9d
Switch over to trying the PCP provider for TPM 1.2, to mitigate missing ownerauth. ( #25 )
...
* Implement decoding for TPM 1.2 PCP AIK properties
* Switch all TPM 1.2 methods that rely on ownerAuth to use the PCP API.
2019-05-03 13:27:48 -07:00
Tom D
8e4a5ce762
Ignore slightly malformed EKs so attestation can continue. ( #24 )
2019-05-02 13:43:50 -07:00
Tom D
b6bb3dba4c
Update go-tpm version ( #23 )
2019-04-30 12:41:38 -07:00
Tom D
4ee1aa81b1
Add more logging to MintAIK() ( #22 )
2019-04-30 08:47:44 -07:00
Denis Karch
125f464487
Fix typo (had nonce and pcr data backwards)
2019-04-25 10:15:54 -07:00
Denis Karch
1643d281b5
Fix call to NewQuoteInfo
2019-04-24 14:26:48 -07:00
DenisKarch
4e11f744d1
Fix mod files ( #19 )
2019-04-24 14:05:27 -07:00
DenisKarch
97d50a1edc
Use go-tpm NewQuoteInfo ( #18 )
2019-04-24 13:55:44 -07:00
DenisKarch
0d33e753a1
Have Quote return TPM_QUOTE_INFO ( #17 )
2019-04-24 13:18:36 -07:00
DenisKarch
3829815b47
Extract and return PCR digest for Quote on TPM1.2 ( #16 )
...
go-tspi and go-tpm return different values for "quote".
In both cases we want the PCR digest so we extract it from the data
returned.
2019-04-24 11:19:18 -07:00
DenisKarch
4342561e0f
Fix quote12 (previously only getting PCR0) ( #15 )
2019-04-23 18:28:51 -07:00
Tom D
0c3df93f04
Update dependencies ( #14 )
2019-04-23 14:37:53 -07:00
Tom D'Netto
24ccdf576a
Improve error messages on windows
2019-04-11 10:57:45 -07:00
DenisKarch
b128fd7448
Move AIK to Storage hierarchy ( #10 )
...
Moving AIK to storage hierarchy so that the key blob can be saved and
loaded instead of recreating the aik each time.
2019-04-10 11:03:02 -07:00
DenisKarch
b15816bdc8
Fix to imports (update.go could not map properly) ( #11 )
2019-04-09 11:33:23 -07:00
Denis Karch
dc8d5cb824
Added TPM1.2 support for Windows
2019-04-09 10:48:16 -07:00
Tom D
0a5a5f0656
Refactor tests: remove build tags, de-dupe, use flags to control test runs from now on ( #8 )
2019-04-05 14:49:36 -07:00
Tom D
063d2bdf7e
Implement full coverage for TPM 1.2 tests. ( #7 )
...
* Generate and store a fake EK certificate in TPM 1.2 test setup.
* Fix run of gen_ekcert.go
* Write out NVRAM cert header when generating ek cert
* Remove build flag gating tpm12 tests.
2019-04-04 15:33:00 -07:00
Tom D
509d8074f1
Make TPM 1.2 test setup take ownership & define space for the EK cert ( #6 )
2019-04-03 16:07:03 -07:00
Tom D
790d3ba149
Script setup of fake filesystem objects for tpm12 tests, fix build of tpm12 tests. ( #5 )
2019-04-03 12:19:25 -07:00
Tom D'Netto
fc3b10963c
Update certificate-transparency-go dependency to fix broken reference
2019-04-03 09:37:57 -07:00
Tom D
2bffdc1753
Implement CI scripts for TPM 1.2 simulator and tcsd. ( #2 )
...
* Implement CI scripts for TPM 1.2 simulator and tcsd.
* Set tcsd env vars in run_tcsd()
2019-04-02 16:31:00 -07:00
Tom D'Netto
6624eb9601
Add CI script for setting up TPM 1.2 simulator
2019-04-02 11:04:13 -07:00
Tom D
028c06c785
Merge pull request #1 from twitchy-jsonp/master
...
Make a Go module, use build tags to mask tests that need special system setup.
2019-04-01 12:51:52 -07:00
Tom
47f6a02149
Update README
2019-04-01 12:50:53 -07:00
Tom
7ada84720a
go mod tidy
2019-04-01 11:07:36 -07:00
