go-attestation/attest
Matthew Garrett fe22f29ec8 Handle StartupLocality events
Systems with TXT enabled may issue the TPM2_Startup() command from a
locality other than 0. In this case, the initial value of PCR0 will
represent the locality that the call was made from. This is exposed to
higher layers by an EV_NO_ACTION event that has data containing the
NULL-terminated string "StartupLocality" followed by a single byte
representing the state of the locality. As this event is EV_NO_ACTION,
it does not represent an extension in itself.

So:

1) Ignore events that are EV_NO_ACTION when replaying the log, except:
2) For PCR0, if an event is EV_NO_ACTION and contains the string
"StartupLocality", use the final byte of the event data as the initial
value of PCR0 for the replay.
2020-06-11 13:18:05 -07:00
..
attest-tool Implement self-test mode into attest-tool. (#137) 2019-11-08 09:52:59 -08:00
internal Begin implementing extraction of windows info from the event log (#167) 2020-06-01 17:35:23 -07:00
testdata Implement workaround for secureboot authority events from shim (#158) 2020-05-01 14:20:54 -07:00
activation_test.go Rename AIK to AK everywhere 2019-10-09 08:56:19 +11:00
activation.go attest: update go-tpm and switch hash method 2019-10-18 10:39:55 -04:00
attest_fuzz.go Enable ParseAKPublic & ParseEKCertificate for fuzzing. (#141) 2019-12-04 15:04:06 -08:00
attest_simulated_tpm20_test.go Split linuxTPM -> {trousersTPM,wrappedTPM20}, implement CommandChannel 2020-05-05 16:56:57 -07:00
attest_test.go Split linuxTPM -> {trousersTPM,wrappedTPM20}, implement CommandChannel 2020-05-05 16:56:57 -07:00
attest_tpm12_test.go Split linuxTPM -> {trousersTPM,wrappedTPM20}, implement CommandChannel 2020-05-05 16:56:57 -07:00
attest.go Split linuxTPM -> {trousersTPM,wrappedTPM20}, implement CommandChannel 2020-05-05 16:56:57 -07:00
challenge_test.go Rename AIK to AK everywhere 2019-10-09 08:56:19 +11:00
challenge.go Rename AIK to AK everywhere 2019-10-09 08:56:19 +11:00
eventlog_fuzz.go Fix linter errors, go fmt (#130) 2019-10-10 14:29:46 -07:00
eventlog_test.go Add workaround in validation for missing exit boot services event log messages (#153) 2020-04-16 10:20:55 -07:00
eventlog_workarounds.go Fix broken build from intersection of two PRs (#155) 2020-04-16 11:42:48 -07:00
eventlog.go Handle StartupLocality events 2020-06-11 13:18:05 -07:00
example_test.go Fix linter errors, go fmt (#130) 2019-10-10 14:29:46 -07:00
key_linux.go Split linuxTPM -> {trousersTPM,wrappedTPM20}, implement CommandChannel 2020-05-05 16:56:57 -07:00
key_windows.go Split linuxTPM -> {trousersTPM,wrappedTPM20}, implement CommandChannel 2020-05-05 16:56:57 -07:00
pcp_windows.go Rename AIK to AK everywhere 2019-10-09 08:56:19 +11:00
secureboot_test.go Begin implementing extraction of windows info from the event log (#167) 2020-06-01 17:35:23 -07:00
secureboot.go Begin implementing extraction of windows info from the event log (#167) 2020-06-01 17:35:23 -07:00
storage.go Refactor part 1: Refactor logic for keys into structs for each TPM/platform invariant. (#53) 2019-07-19 13:05:18 -07:00
tpm_linux.go Split linuxTPM -> {trousersTPM,wrappedTPM20}, implement CommandChannel 2020-05-05 16:56:57 -07:00
tpm_other.go Refactor *platformTPM -> tpmBase interface (#160) 2020-05-05 14:56:40 -07:00
tpm_test.go attest: re-work EK API (#79) 2019-08-21 10:26:55 -07:00
tpm_windows.go Split linuxTPM -> {trousersTPM,wrappedTPM20}, implement CommandChannel 2020-05-05 16:56:57 -07:00
tpm.go Refactor *platformTPM -> tpmBase interface (#160) 2020-05-05 14:56:40 -07:00
vendors.go Update vendors list (#57) 2019-08-06 16:47:13 -07:00
win_events_test.go Remove constraint that all reported bitlocker unlocks use the same method. (#170) 2020-06-10 17:10:15 -07:00
win_events.go Remove constraint that all reported bitlocker unlocks use the same method. (#170) 2020-06-10 17:10:15 -07:00
wrapped_tpm20.go Fix oss-fuzz, update to latest go-tpm (#165) 2020-05-07 15:25:53 -07:00