Thread: [Tpm4java-users] Problem using GenerateAIKrequest
Brought to you by:
tews
From: R. L. <and...@te...> - 2007-04-22 23:38:59
|
Hello, i receive an error using the example class GenerateAikrequest. I'm using linux with tpm-emulator-0.5 this is the error message that i receive: Expected: A0 CD BE 29 EC B3 3B B1 51 CB C1 1F 93 0B AB F3 21 26 9C 7C TPM send: 3B 03 84 5A 67 A4 A3 1B 61 85 7E E4 F9 02 66 93 31 04 F9 7D java.lang.RuntimeException: de.datenzone.tpm4java.TSSException: reply authentication failed at de.datenzone.tpm4java.TssHighLevelImpl.generateAIK(TssHighLevelImpl.java:130) at de.datenzone.tpm4java.examples.GenerateAikRequest.main(GenerateAikRequest.java:95) Caused by: de.datenzone.tpm4java.TSSException: reply authentication failed at de.datenzone.tpm4java.TSSCoreService.verifyReplyHmac(TSSCoreService.java:2127) at de.datenzone.tpm4java.TSSCoreService.authGetAndVerify(TSSCoreService.java:2178) at de.datenzone.tpm4java.TSSCoreService.authGetAndVerify(TSSCoreService.java:2184) at de.datenzone.tpm4java.TSSCoreService.TPM_LoadKey(TSSCoreService.java:685) at de.datenzone.tpm4java.TssHighLevelImpl.generateAIK(TssHighLevelImpl.java:126) ... 1 more |
From: <des...@ho...> - 2007-04-23 00:38:44
|
Hello, i solved the problem by desactivating the checkReply option (lowLevel.setCheckReply(false)) but i don't know how important is that the checkReply option is enabled. I'm trying to do a remote platform attestation. ----- Original Message ----- From: "Andrés Rosado Laitinen" <and...@te...> To: <tpm...@li...> Sent: Sunday, April 22, 2007 9:34 AM Subject: [Tpm4java-users] Problem using GenerateAIKrequest > Hello, i receive an error using the example class GenerateAikrequest. > I'm using linux with tpm-emulator-0.5 this is the error message that i > receive: > > Expected: A0 CD BE 29 EC B3 3B B1 51 CB C1 1F 93 0B AB F3 > 21 26 9C 7C > TPM send: 3B 03 84 5A 67 A4 A3 1B 61 85 7E E4 F9 02 66 93 > 31 04 F9 7D > java.lang.RuntimeException: de.datenzone.tpm4java.TSSException: reply > authentication failed > at > de.datenzone.tpm4java.TssHighLevelImpl.generateAIK(TssHighLevelImpl.java:130) > at > de.datenzone.tpm4java.examples.GenerateAikRequest.main(GenerateAikRequest.java:95) > Caused by: de.datenzone.tpm4java.TSSException: reply authentication > failed > at > de.datenzone.tpm4java.TSSCoreService.verifyReplyHmac(TSSCoreService.java:2127) > at > de.datenzone.tpm4java.TSSCoreService.authGetAndVerify(TSSCoreService.java:2178) > at > de.datenzone.tpm4java.TSSCoreService.authGetAndVerify(TSSCoreService.java:2184) > at > de.datenzone.tpm4java.TSSCoreService.TPM_LoadKey(TSSCoreService.java:685) > at > de.datenzone.tpm4java.TssHighLevelImpl.generateAIK(TssHighLevelImpl.java:126) > ... 1 more > > > > ------------------------------------------------------------------------- > This SF.net email is sponsored by DB2 Express > Download DB2 Express C - the FREE version of DB2 express and take > control of your XML. No limits. Just data. Click to get it now. > http://sourceforge.net/powerbar/db2/ > _______________________________________________ > Tpm4java-users mailing list > Tpm...@li... > https://lists.sourceforge.net/lists/listinfo/tpm4java-users > |
From: Martin H. <li...@ma...> - 2007-05-01 17:33:56
|
Hello Andrés, all checkReply does is verifying if the hmac of the tpm reply is correct. This is done to prevent a replay attack or modifications by a man-in-the-middle between the program and the tpm. Practically there is no problem if you turn this option off. Other tpm libraries even omit the verification by default. HTH, Martin Andrés Rosado Laitinen schrieb: > Hello, i solved the problem by desactivating the checkReply option > (lowLevel.setCheckReply(false)) but i don't know how important is that the > checkReply option is enabled. I'm trying to do a remote platform > attestation. > > ----- Original Message ----- > From: "Andrés Rosado Laitinen" <and...@te...> > To: <tpm...@li...> > Sent: Sunday, April 22, 2007 9:34 AM > Subject: [Tpm4java-users] Problem using GenerateAIKrequest > > > >> Hello, i receive an error using the example class GenerateAikrequest. >> I'm using linux with tpm-emulator-0.5 this is the error message that i >> receive: >> >> Expected: A0 CD BE 29 EC B3 3B B1 51 CB C1 1F 93 0B AB F3 >> 21 26 9C 7C >> TPM send: 3B 03 84 5A 67 A4 A3 1B 61 85 7E E4 F9 02 66 93 >> 31 04 F9 7D >> java.lang.RuntimeException: de.datenzone.tpm4java.TSSException: reply >> authentication failed >> at >> de.datenzone.tpm4java.TssHighLevelImpl.generateAIK(TssHighLevelImpl.java:130) >> at >> de.datenzone.tpm4java.examples.GenerateAikRequest.main(GenerateAikRequest.java:95) >> Caused by: de.datenzone.tpm4java.TSSException: reply authentication >> failed >> at >> de.datenzone.tpm4java.TSSCoreService.verifyReplyHmac(TSSCoreService.java:2127) >> at >> de.datenzone.tpm4java.TSSCoreService.authGetAndVerify(TSSCoreService.java:2178) >> at >> de.datenzone.tpm4java.TSSCoreService.authGetAndVerify(TSSCoreService.java:2184) >> at >> de.datenzone.tpm4java.TSSCoreService.TPM_LoadKey(TSSCoreService.java:685) >> at >> de.datenzone.tpm4java.TssHighLevelImpl.generateAIK(TssHighLevelImpl.java:126) >> ... 1 more >> >> >> >> ------------------------------------------------------------------------- >> This SF.net email is sponsored by DB2 Express >> Download DB2 Express C - the FREE version of DB2 express and take >> control of your XML. No limits. Just data. Click to get it now. >> http://sourceforge.net/powerbar/db2/ >> _______________________________________________ >> Tpm4java-users mailing list >> Tpm...@li... >> https://lists.sourceforge.net/lists/listinfo/tpm4java-users >> >> > > > ------------------------------------------------------------------------- > This SF.net email is sponsored by DB2 Express > Download DB2 Express C - the FREE version of DB2 express and take > control of your XML. No limits. Just data. Click to get it now. > http://sourceforge.net/powerbar/db2/ > _______________________________________________ > Tpm4java-users mailing list > Tpm...@li... > https://lists.sourceforge.net/lists/listinfo/tpm4java-users > -- Martin Hermanowski http://martin.hermanowski.name https://www.xing.com/profile/Martin_Hermanowski/ |
From: <and...@te...> - 2007-06-05 17:29:56
|
Hello, i've got a problem using the funtion "activateAik", it bring me = =3D an error. I'm trying to realize a remote platform attestation. I guess = =3D that i can decrypt the ca response without using the TPM but i'm not =3D sure. The error trace is this: ->TPM: (36) 00 C1 00 00 00 24 00 00 00 0B 00 01 01 00 00 42 89 EC 9C A5 2A 26 1D F4 29 30 A8 D3 D8 F7 94 88 06 46 00 9F TPM->: (16384) 00 C4 00 00 00 36 00 00 00 00 00 00 00 4F EC 5A 66 7A 09 6F 46 67 FA A0 D0 C6 1B CB 12 1D 76 EF 23 87 DA 9F F5 A9 05 AC 59 66 DC BB A2 3F 0E F8 AC 69 44 A7 2B E8 ->TPM: (10) 00 C1 00 00 00 0A 00 00 00 0A TPM->: (16384) 00 C4 00 00 00 22 00 00 00 00 00 00 00 50 D1 10 99 F9 BD AA F2 CB 67 84 7F E9 1E 70 DF 88 6E A0 5B 67 ->TPM: (364) 00 C3 00 00 01 6C 00 00 00 7A 01 00 00 42 00 00 01 00 A7 D7 20 C8 D5 06 E3 22 2E 18 DD D8 B4 31 C9 7B DC 5C 1B 0D B1 6B B8 90 04 A0 C8 64 E2 72 4E 04 4D B7 30 02 AA E6 AA D3 D4 E5 B2 B8 91 F1 77 AD 5C 63 03 8D A2 80 C4 4B 3E FD 31 A1 F4 ED DC 30 75 C6 FA 71 34 27 72 F0 B8 F3 1C 93 06 F1 F0 4F 08 53 02 21 0D 81 E1 FB C3 39 0C 8B E8 C4 61 8A C2 4F F5 E5 AF 1D F9 4E E7 4E 1C 1D 8D 33 9C D9 24 9C D8 66 42 06 95 CB FF A0 13 08 C0 33 E6 A4 0A E5 4D 0B F7 92 D8 3D 31 2D 5E B8 B0 62 D4 99 D2 CB AE 8B 19 EC EC 89 59 A2 E4 64 D1 CE 8D 82 A5 6E C6 9A 37 57 8A 01 01 03 50 A7 89 53 CB 35 02 6E 2E 81 30 31 7D 99 A3 54 04 88 09 78 63 47 52 9D F2 45 EC AF 5E 4B 34 E2 FF B4 D7 27 20 E7 60 4C 02 EB 51 52 E3 95 4A 59 B7 7C E8 C3 17 D8 B4 05 C4 16 A0 5C 82 92 4B 5C 03 31 82 11 CF 11 5B C3 A1 41 D4 00 1F 26 2D 17 A3 96 F9 C3 23 07 00 00 00 4F 89 EC 9C A5 2A 26 1D F4 29 30 A8 D3 D8 F7 94 88 06 46 00 9F 00 0B D8 D3 92 87 84 46 B5 56 07 D8 A4 49 E2 37 6E A7 6F F5 0C 00 00 00 50 98 3C 56 E9 63 CC ED D2 30 16 CE 40 9D F9 27 18 DC 0D CF 1F 00 CB 65 5B 9F A6 1C F2 38 2D 12 E2 24 C7 22 F3 00 6F D7 CA C4 TPM->: (16384) 00 C4 00 00 00 0A 00 00 00 21 java.lang.RuntimeException: de.datenzone.tpm4java.TPMException: Bad =3D return code 33 The decryption process did not complete. at =3D de.datenzone.tpm4java.TssHighLevelImpl.activateAik(TssHighLevelImpl.j ava:393) at =3D de.datenzone.tpm4java.examples.ActivateAik.main(ActivateAik.java:47) Caused by: de.datenzone.tpm4java.TPMException: Bad return code 33 The = =3D decryption process did not complete. at =3D de.datenzone.tpm4java.TSSCoreService.SendCommand(TSSCoreService.java: 2212) at =3D de.datenzone.tpm4java.TSSCoreService.SendCommand(TSSCoreService.java: 2198) at =3D de.datenzone.tpm4java.TSSCoreService.TPM_ActivateIdentity(TSSCoreServ ice.java:1352) at =3D de.datenzone.tpm4java.TssHighLevelImpl.activateAik(TssHighLevelImpl.j ava:386) ... 1 more Hope thas someone can help me...thanks in advance. |