1 /* SPDX-License-Identifier: BSD-2-Clause */
2 #ifdef HAVE_CONFIG_H
3 #include <config.h>
4 #endif
5
6 #include <stdlib.h>
7
8 #include "tss2_esys.h"
9
10 #include "esys_iutil.h"
11 #define LOGMODULE test
12 #include "util/log.h"
13 #include "util/aux_util.h"
14
15 /** This tests the ability to create an ESYS_TR object via Esys_TR_FromTPMPublic
16 * given a TPM2_HANDLE representing a session handle.
17 *
18 * Tested ESAPI commands:
19 * - Esys_StartAuthSession() (M)
20 * - Esys_GetCapability() (M)
21 * - Esys_FlushContext() (M)
22 *
23 * @param[in,out] ectx The ESYS_CONTEXT.
24 * @retval EXIT_FAILURE
25 * @retval EXIT_SUCCESS
26 */
27
28 int
test_esys_tr_fromTpmPublic_session(ESYS_CONTEXT * ectx)29 test_esys_tr_fromTpmPublic_session(ESYS_CONTEXT * ectx)
30 {
31 int rc = EXIT_FAILURE;
32
33 ESYS_TR session = ESYS_TR_NONE;
34 TPMT_SYM_DEF symmetric = {
35 .algorithm = TPM2_ALG_XOR,
36 .keyBits = { .exclusiveOr = TPM2_ALG_SHA1 }
37 };
38
39 TPMS_CAPABILITY_DATA *cap_data = NULL;
40
41 TSS2_RC r = Esys_StartAuthSession(ectx, ESYS_TR_NONE, ESYS_TR_NONE,
42 ESYS_TR_NONE, ESYS_TR_NONE, ESYS_TR_NONE,
43 NULL,
44 TPM2_SE_HMAC, &symmetric, TPM2_ALG_SHA1,
45 &session);
46 goto_if_error(r, "Error: During initialization of session", out);
47
48 TPMI_YES_NO more_data;
49 r = Esys_GetCapability(ectx, ESYS_TR_NONE, ESYS_TR_NONE, ESYS_TR_NONE,
50 TPM2_CAP_HANDLES,
51 TPM2_LOADED_SESSION_FIRST,
52 TPM2_MAX_CAP_HANDLES,
53 &more_data,
54 &cap_data);
55 goto_if_error(r, "Error: getting capability for loaded sessions", out);
56
57 if (cap_data->data.handles.count != 1) {
58 LOG_ERROR("Expected 1 loaded session handle, got: %"PRIu32,
59 cap_data->data.handles.count);
60 goto out;
61 }
62
63 TPM2_HANDLE tpm2_handle = cap_data->data.handles.handle[0];
64
65 ESYS_TR new_handle = ESYS_TR_NONE;
66 r = Esys_TR_FromTPMPublic(
67 ectx,
68 tpm2_handle,
69 ESYS_TR_NONE,
70 ESYS_TR_NONE,
71 ESYS_TR_NONE,
72 &new_handle);
73 goto_if_error(r, "Error: converting TPM2_HANDLE to ESYS_TR object", out);
74
75 r = Esys_TRSess_SetAttributes(ectx, new_handle,
76 TPMA_SESSION_DECRYPT|TPMA_SESSION_ENCRYPT,
77 0xFF);
78 if (r != TSS2_ESYS_RC_BAD_TR) {
79 LOG_ERROR("Error: Expected GetCapability call to fail with "
80 "TSS2_ESYS_RC_BAD_TR, got: "TPM2_ERROR_FORMAT,
81 TPM2_ERROR_TEXT(r));
82 goto out;
83 }
84
85 free(cap_data);
86 cap_data = NULL;
87
88 r = Esys_GetCapability(ectx, new_handle, ESYS_TR_NONE, ESYS_TR_NONE,
89 TPM2_CAP_HANDLES,
90 TPM2_LOADED_SESSION_FIRST,
91 TPM2_MAX_CAP_HANDLES,
92 &more_data,
93 &cap_data);
94 if (r != TSS2_ESYS_RC_BAD_TR) {
95 LOG_ERROR("Error: Expected GetCapability call to fail with "
96 "TSS2_ESYS_RC_BAD_TR, got: "TPM2_ERROR_FORMAT,
97 TPM2_ERROR_TEXT(r));
98 goto out;
99 }
100
101 /* ensure you can flush the frompublic session handle */
102 session = new_handle;
103
104 rc = EXIT_SUCCESS;
105 out:
106 free(cap_data);
107
108 if (session != ESYS_TR_NONE) {
109 r = Esys_FlushContext(ectx, session);
110 if (r != TSS2_RC_SUCCESS) {
111 LOG_ERROR("Error: FlushContext " TPM2_ERROR_FORMAT, TPM2_ERROR_TEXT(r));
112 rc = EXIT_FAILURE;
113 }
114 }
115
116 return rc;
117 }
118
119 int
test_invoke_esapi(ESYS_CONTEXT * esys_context)120 test_invoke_esapi(ESYS_CONTEXT * esys_context) {
121 return test_esys_tr_fromTpmPublic_session(esys_context);
122 }
123