Re: [Trustedjava-support] Load AIK problem

[Ahmed R. <ahm...@gm...>]

Dear Martin,

I have 2 questions.

1) Is there a way to report the integrity measurement log (IMA) into the TPM (emulator) in my case using the jTSS (or even trousers if not available through the jTSS) ?

2) I have executed the Quote, the remote attestation server should verify the quote.
Verifying the quote means that the server recomputes the measurement Log, however I cannot understand how the extend operation work ie.

file : version.txt

sha1sum  version.txt
dd3fe79ca0b0d80e1b33018054239ef4628b93d1  version.txt

./jtt.sh pcr_extend -f version.txt -p 1
PCR 1:  70 b9 e1 fa 6a 69 48 27 7a 46 32 c0 11 f8 d2 f6 ec b3 ab 56


./jtt.sh pcr_extend -f version.txt -p 2
PCR 2:  a1 5f 67 be ab fe 9d b6 ba cc 4e 45 0d 4f 13 07 e9 8f 98 fc

Why is the PCR hash values different than the pure hash of the file, even if the extend use the initial  PCR  values then PCR[1] & [2] should be equal as the initial is the same (ie the emulator has been resetted before executing these commands).

Thanks for further declaration.

Regards, Ahmed

> Date: Tue, 3 Mar 2009 10:24:15 +0100
> From: Mar...@ia...
> To: ahm...@gm...
> CC: tru...@li...
> Subject: Re: [Trustedjava-support] Load AIK problem
> 
> Hi...
> 
> Ahmed Ramadan wrote:
> > I am using JTss and JTPM-Tools to try the Quote and validation concept.
> 
> Look into the just released PrivacyCA 0.2 package, the PrivacyCA sources
> are in apki-0.2.tar.gz.
> 
> The module TspQuote implements the self-attestation function of the PCA server,
> the functions doQuote and verifyQuote showcase how to do a quote and
> verify the results afterwards.
> 
> 
> > TCLinux:/home/aramadan/Desktop/Java/jTpmTools_0.3c # ./jtt.sh version
> >   JTSS_TSP: 0.4 20081218 10:30:08
> >   JTSS_JNI: 0.3.1 20071128  9:44:59
> 
> You appear to be using a new jTSS with old version of jTSS wrapper/TrouSerS.
> We just released an experimental upgrade of jTSS Wrapper which should work
> better with TrouSerS 0.3.1cvs.
> 
> 
> HTH,
>   Martin
> 
> ------------------------------------------------------------------------------
> Open Source Business Conference (OSBC), March 24-25, 2009, San Francisco, CA
> -OSBC tackles the biggest issue in open source: Open Sourcing the Enterprise
> -Strategies to boost innovation and cut costs with open source participation
> -Receive a $600 discount off the registration fee with the source code: SFAD
> http://p.sf.net/sfu/XcvMzF8H
> _______________________________________________
> Trustedjava-support mailing list
> Tru...@li...
> https://lists.sourceforge.net/lists/listinfo/trustedjava-support

_________________________________________________________________
Windows Live™ Groups: Create an online spot for your favorite groups to meet.
http://windowslive.com/online/groups?ocid=TXT_TAGLM_WL_groups_032009