Commit Graph

  • f3f08037f8
    Make SRK/AIK templates consistent with go-tpm-tools (#58) Tom D 2019-07-26 13:16:47 -0700
  • 7ef6ea698d go mod tidy #58 Tom D'Netto 2019-07-26 09:22:14 -0700
  • d3aedcc80b Put the cheeky ModulusRaw back Tom D'Netto 2019-07-26 09:20:47 -0700
  • 1c1ef81266 Revert modulusRaw - not sure we want unique set? Tom D'Netto 2019-07-25 15:59:29 -0700
  • 7073895a2a Update go-tpm Tom D'Netto 2019-07-25 15:50:25 -0700
  • b67aceb4d4 Merge branch 'master' of https://github.com/google/go-attestation into templates Tom D'Netto 2019-07-25 15:41:27 -0700
  • 8f4f17e679
    Implement credential activation API (#56) Tom D 2019-07-23 15:22:53 -0700
  • 582c2c367d Implement API to check and activate AIKs. #56 Tom D'Netto 2019-07-22 14:59:07 -0700
  • 8c8b720ae3 Make SRK/AIK templates consistent with go-tpm-tools Tom D'Netto 2019-07-23 12:50:45 -0700
  • a9a6195717 Update vendors list #57 Tom D'Netto 2019-07-23 12:39:37 -0700
  • 0a135c28bb Start working on refactor for credential activation Tom D'Netto 2019-07-22 13:04:07 -0700
  • 2464131d7c Add a Public() method to the AIK that returns a public key (#55) Eric Chiang 2019-07-22 09:18:51 -0700
  • 42241d58ba Add a Public() method to the AIK that returns a public key #55 Eric Chiang 2019-07-19 15:18:13 -0700
  • 5f05ce5cec
    Fix attest-tool (#54) Tom D 2019-07-19 14:07:02 -0700
  • 9dac895f9c Fix attest-tool #54 Tom D'Netto 2019-07-19 14:03:52 -0700
  • 6c2106f5be Merge branch 'master' of https://github.com/google/go-attestation into example Tom D'Netto 2019-07-19 14:01:57 -0700
  • 90e37eacce
    Refactor part 1: Refactor logic for keys into structs for each TPM/platform invariant. (#53) Tom D 2019-07-19 13:05:18 -0700
  • 8d8c0047bc Implement review feedback #53 Tom D'Netto 2019-07-19 12:54:13 -0700
  • 4290db65d3 Refactor key logic into separate structures for each platform/TPMversion invariant. Tom D'Netto 2019-07-19 10:38:12 -0700
  • 0e70a48350 Refactor serialized keys into own structure, in preparation for making Key an interface. #52 Tom D'Netto 2019-07-18 14:03:26 -0700
  • ed3b03ef7f
    Merge pull request #51 from twitchy-jsonp/intel Matthew Garrett 2019-07-17 15:22:14 -0700
  • da446762c0 Implement fetch from ekcert server if no EKs are found, and the TPM is from intel. #51 Tom D'Netto 2019-07-17 15:15:29 -0700
  • 0f6a187a1c
    Fix sig mismatch in AIK certification (#50) Tom D 2019-07-12 10:30:30 -0700
  • 79f8978484 Fix sig mismatch in AIK certification #50 Tom D'Netto 2019-07-12 10:25:25 -0700
  • 83cab51aec Remove protos only used internally, update package name Brandon Weeks 2019-07-07 15:17:14 -0700
  • 87d5a2ae4e Remove protos only used internally, update package name #49 Brandon Weeks 2019-07-07 15:17:14 -0700
  • 709b568a93
    Add two missing enums (#48) Tom D 2019-07-03 11:32:22 -0700
  • 9e417f47c8 Add in two missing enum values. #48 Tom D'Netto 2019-07-03 11:30:44 -0700
  • 5c6b9242df
    Add support for multiple certificate directories (#47) Tom D 2019-07-03 10:07:16 -0700
  • dd412f94bc Add support for multiple certificate directories #47 Tom D'Netto 2019-07-03 10:03:40 -0700
  • 372fcf25d0
    Try reading the EKCert from PCP_EKNVCERT (#46) Tom D 2019-06-25 15:19:12 -0700
  • 97cbf1a92c Try reading the EKCert from PCP_EKNVCERT property if the others dont work #46 Tom D'Netto 2019-06-25 15:18:21 -0700
  • d01c644e43 Merge remote-tracking branch 'upstream/master' into ekcert Tom D'Netto 2019-06-24 09:24:51 -0700
  • 113729bb8b
    Add indication to EKCert error string for when NVRAM value was unwrapped (#45) Tom D 2019-06-20 10:58:41 -0700
  • e57ef5f134 Added mark for when NVRAM structure was unwrapped #45 Tom D'Netto 2019-06-20 10:57:19 -0700
  • e319aad1dd Merge remote-tracking branch 'upstream/master' into example Tom D'Netto 2019-06-20 10:50:44 -0700
  • 7585e609b4
    Remove main.go (#44) Tom D 2019-06-18 09:11:08 -0700
  • 9db01930a8 Remove main.go #44 Tom D'Netto 2019-06-18 09:10:15 -0700
  • d651c663e3 Merge branch 'master' of https://github.com/google/go-attestation into example Tom D'Netto 2019-06-18 09:09:58 -0700
  • ba4708dfc8
    Rename attest-tool to match rules for BUILD targets (#43) Tom D 2019-06-18 09:09:39 -0700
  • 6a9af5c593 Rename attest-tool to match rules for BUILD files #43 Tom D'Netto 2019-06-18 09:08:11 -0700
  • 04f428d103
    Implement example cmd-line binary. (#42) Tom D 2019-06-17 15:50:05 -0700
  • 3c479e240c Add ability to generate random nonce #42 Tom D'Netto 2019-06-17 14:24:21 -0700
  • 6fede8c9ab
    Remove ekcert blacklist. (#37) Tom D 2019-06-17 09:49:16 -0700
  • bad310773e Implement example cmd-line binary. Tom D'Netto 2019-06-17 09:45:38 -0700
  • 1eb89bd0b8
    Use certificate-transparency asn1 parser (#41) Tom D 2019-06-12 11:14:43 -0700
  • c94996fc71 Use certificate-transparency asn1 parser #41 Tom D'Netto 2019-06-12 11:12:52 -0700
  • 7c3baced09
    Fix typos. (#40) Tom D 2019-06-12 10:15:42 -0700
  • bf504161a4 Merge remote-tracking branch 'upstream/master' into fixcerts #40 Tom D'Netto 2019-06-12 10:14:27 -0700
  • 99cfd38291 Fix typos Tom D'Netto 2019-06-12 10:14:16 -0700
  • 8afa43fc13
    Better error messages for parseCert() (#39) Tom D 2019-06-12 10:11:18 -0700
  • c4f38a578b Better error messages for parseCert() #39 Tom D'Netto 2019-06-12 10:10:10 -0700
  • c08ba3f7f7 Merge remote-tracking branch 'upstream/master' into fixcerts Tom D'Netto 2019-06-12 10:07:35 -0700
  • 8ac2846c80
    Attempt fix for EKCert parsing errors when falling back to NVRAM (#38) Tom D 2019-06-11 10:52:49 -0700
  • 613d547fd4 Address feedback #38 Tom D'Netto 2019-06-11 10:38:15 -0700
  • 3f3376aa21 Handle TCG certificate wrapper Tom D'Netto 2019-06-11 09:55:46 -0700
  • c41fb54595 Fix parsing errors for EKCert when falling back to NVRAM Tom D'Netto 2019-06-11 09:45:38 -0700
  • 2aceca50d2 Remove cert blacklist now that certtransparency parsing is laxer by default. #37 Tom D'Netto 2019-06-10 16:53:02 -0700
  • 7f17046a60
    Fix broken build on windows. (#36) Tom D 2019-06-06 13:15:55 -0700
  • 37ad9139b4 Fix broken build on windows. #36 Tom D'Netto 2019-06-06 13:14:47 -0700
  • b5ce2d2982 Merge branch 'master' of https://github.com/google/go-attestation into ekcert Tom D'Netto 2019-06-06 13:14:04 -0700
  • 3dc8a7d841
    Attempt to read the EK from NVRAM if the system cert store cannot provide it. (#35) Tom D 2019-06-06 13:11:40 -0700
  • 107151b12c Attempt to read the EK from NVRAM if the system cert store cannot provide it. #35 Tom D'Netto 2019-06-06 13:06:30 -0700
  • a801f7333b
    Import verifier library into go-attestation. (#13) Tom D 2019-06-06 10:43:36 -0700
  • b7183662b3 Rename proto package to go_attestation #13 Tom D'Netto 2019-06-06 09:49:48 -0700
  • eec102534b Upstream the verifier sub-library. Tom D'Netto 2019-06-05 13:46:07 -0700
  • c36255535e Merge remote-tracking branch 'upstream/master' Tom D'Netto 2019-05-30 11:27:29 -0700
  • 1611c5ab72
    Fix quote generation on windows TPM 1.2 devices (#34) Tom D 2019-05-20 12:34:17 -0700
  • 7fd1f64ca5 Fix quote generation on windows TPM 1.2 devices #34 Tom D'Netto 2019-05-20 12:33:48 -0700
  • 5b7e00554a
    Implement new credential activation scheme for windows (#33) Tom D 2019-05-16 15:51:01 -0700
  • b246273fd6 Implement new credential activation scheme for windows #33 Tom D'Netto 2019-05-16 15:43:50 -0700
  • 2919edba99 Merge remote-tracking branch 'upstream/master' into 12activation Tom D'Netto 2019-05-16 15:29:05 -0700
  • 70c839779d
    Moar error codes (#32) Tom D 2019-05-15 12:57:08 -0700
  • d596a09448 Merge remote-tracking branch 'upstream/master' into errorcodes #32 Tom D'Netto 2019-05-15 12:56:19 -0700
  • a24fd5dc1e Moar error codes Tom D'Netto 2019-05-15 12:55:51 -0700
  • dbbcfcc4b8
    Fix conversion to more specific windows error messages. (#31) Tom D 2019-05-15 12:27:19 -0700
  • 7f46518bea Fix conversion to more specific windows error messages. #31 Tom D'Netto 2019-05-15 12:26:42 -0700
  • d847cb7fd8 Merge remote-tracking branch 'upstream/master' into errorcodes Tom D'Netto 2019-05-15 12:23:52 -0700
  • 20b39443ef
    Fix ActivateCredential for TPM 1.2 on windows (#30) Tom D 2019-05-15 10:36:54 -0700
  • 20eb71abdd Fix ActivateCredential for TPM 1.2 on windows #30 Tom D'Netto 2019-05-15 10:04:58 -0700
  • 7b5f790215
    Fix broken DLL MustFindProc. (#29) Tom D 2019-05-14 14:44:33 -0700
  • 5ec347279a Remove queryTPMState(), the dependent library is only exposed via WMI #29 Tom D'Netto 2019-05-14 14:42:48 -0700
  • 3ecf477005 Merge branch 'master' of https://github.com/google/go-attestation into errorcodes Tom D'Netto 2019-05-14 14:40:43 -0700
  • 55ce06b8f2
    Decode windows TPM/PCP errors to more specific descriptions. (#28) Tom D 2019-05-14 11:42:44 -0700
  • f44b7cf6b8 Decode windows TPM/PCP errors to more specific descriptions. #28 Tom D'Netto 2019-05-14 10:56:51 -0700
  • ac78180218
    Implement key deletion on Windows (#27) Tom D 2019-05-13 14:41:55 -0700
  • 2ff4e84fcb
    Check the state of the TPM before opening it on windows (#26) Tom D 2019-05-13 14:13:16 -0700
  • 565b1876a7 Dont forget 2nd parameter in call to NCryptDeleteKey #27 Tom D'Netto 2019-05-13 14:10:43 -0700
  • 8f44ef953a Implement key deletion on Windows Tom D'Netto 2019-05-13 14:09:12 -0700
  • d5cd86e6ab Check the state of the TPM before opening it on windows #26 Tom D'Netto 2019-05-13 12:45:50 -0700
  • b13a56b4aa Merge remote-tracking branch 'upstream/master' into win12 Tom D'Netto 2019-05-13 11:22:27 -0700
  • 2da0098d9d
    Switch over to trying the PCP provider for TPM 1.2, to mitigate missing ownerauth. (#25) Tom D 2019-05-03 13:27:48 -0700
  • f44dc1bf9b Switch all TPM 1.2 methods that rely on ownerAuth to use the PCP API. #25 Tom D'Netto 2019-05-03 12:29:44 -0700
  • adf689dc7d Implement decoding for TPM 1.2 PCP AIK properties Tom D'Netto 2019-05-03 12:18:24 -0700
  • 8e4a5ce762
    Ignore slightly malformed EKs so attestation can continue. (#24) Tom D 2019-05-02 13:43:50 -0700
  • 8f9f3e5c54 Ignore slightly malformed EKs so attestation can continue. #24 Tom D'Netto 2019-05-02 13:37:39 -0700
  • b6bb3dba4c
    Update go-tpm version (#23) Tom D 2019-04-30 12:41:38 -0700
  • 28b42ade22 Update go-tpm #23 Tom D'Netto 2019-04-30 12:40:58 -0700
  • 0edb0d93df Merge remote-tracking branch 'upstream/master' into mintaik Tom D'Netto 2019-04-30 12:39:50 -0700
  • 4ee1aa81b1
    Add more logging to MintAIK() (#22) Tom D 2019-04-30 08:47:44 -0700