Re: [Trustedjava-support] key with pcr problem now

[Ronald T. <ron...@ia...>]

Hi Stella,

Stella Brooks wrote:
> All tpm commands (including pcr related ones) can be used under vista 
> too, but I just kept getting 3 Failures:
> "CreateKeyWithPcr" and "SealAndUnsealWithPcrBoundKey" failed because 
> "PCR information could not be interpreted".
> "Quote2" failed because "Data must start with zero".

> Could you help me around? All command info are below.

A while ago I wrote:
>> In addition we are aware of a problem with Atmel TPM 1.2 on some Lenovo
>> machines regarding PCR accesses. Actually, we are waiting for delivery
>> of a notebook with such a configuration that will allow us to analyse
>> this issue..

Finally we were able to analyse this issue:
There is no problem with our software stack, but apparently the Atmel 
TPMs behave a little bit different in terms of error codes.

The first 2 errors are actually just one. It shows up wenn trying to use 
a key which is bound to on or more PCR values. When the PCR values are 
correct everything is ok and the testcase succeeds. When the values are 
wrong the testcase expects TPM_E_WRONGPCRVAL to be returned by the TPM. 
The Atmel TPM returns TPM_E_INVALID_PCR_INFO.

The Quote2 testcase also returnes an error when trying to validate the 
signature returned by the TPM. The same error appears using TrouSerS as 
TSS. Therefore and because of some detailed investigation we consider 
this as a bug in Atmel TPMv1.2 chips.

The next release of jTSS and jTSS Wrapper will have workarounds so that 
the test suites complete without failure reports also on Atmel TPMs.

Regards,
Ronald


-- 
Dipl.-Ing. Ronald Tögl          phone +43 316/873-5502
Trusted Computing Labs          fax   +43 316/873-5520
IAIK                            ron...@ia...
Graz University of Technology   http://www.iaik.tugraz.at