trustedjava-support — Trusted Java General Support

Re: [Trustedjava-support] Loading jTSSWrapper into an IDE ?

[Thomas W. <tho...@ia...>]

Hello,

> I am currently working on a project where I would like to build a 
> *simple* custom Java application and be able to use jTPM tools to ensure 
> that certain features/attributes/aspects etc of that custom application 
> are "Trustworthy" .

The jTpmTools are designed as a set of command line tools not as a 
library to be used as part of an application.
If you develop a TC application I'd suggest to use the jTssWrapper on 
its own.

> What do I need to setup/do in order to be able to "interface/bridge" a 
> Java application with jTPMTools?

1) You need a TrouSerS TSS that is correctly set up.
2) The libtspiwrapper.so shared library. This lib contains the JNI glue 
code to interface the TSPI API of TrouSerS. This file has to be placed 
in your library path.
3) iaik_jtss_wrapper.jar and internal_jtss_wrapper.jar have to be linked 
to your Java project in NetBeans (however this is done there).

> (i.e) Will I have to load jTSSWrapper's source code into NetBeans so 
> that my Java application and jTPMTools can work together?

As I said previously, the jTpmTools are intended to be used as command 
line utilities. If you want to use the as a "library" you have to do 
steps 1 to 3 from above and additionally add iaik_jtpmtools.jar to your 
NetBeans dependencies.


Regards,
Thomas Winkler

[Trustedjava-support] Loading jTSSWrapper into an IDE ?

[Nektarios I. <ine...@gm...>]

Hello everyone,

Apologies if this is a duplicate message.

I have been working on a project where I would like to build a *simple*
custom Java application that works with jTPMTools in order to ensure that
certain aspects/features/variables are "Trustworthy".

The purpose and focus of the application is on jTPMTools and on how they can
be used in a "real" application.

I am planning to use Netbeans to build this application.


My initial question are as follows:

1. Will I need to load any jTPMTools source code (jTSSWrapper I am
guessing?) in my IDE (Netbeans) so that my application and jTPMTools are
able to "communicate" and work together?

2. If yes, how do I do that? ---> That is, which directories and/or jar
files do I have to include in the project?

3. Has anyone loaded jTSSWrapper on an IDE before?


Waiting for your help.


Best Regards,

Nektarios Ioannides

[Trustedjava-support] Problems with "make" jTSSWrapper 0.2.5 (Source only) version

[Nektarios I. <ine...@gm...>]

Hello everyone,

Apologies if this is a duplicate message.

I am having the following problem when I try to "make" jTSSWrapper
0.2.5(Source only version). I have setup all the necessary variables
in the
"makefile".

Here is the error message:

[root@localhost jTssWrapperSource_0.2.5]# make
- - - - - - - - - - - - - - - - - - - - -
 IAIK/OpenTC jTSS - Java TSS 1.1b Wrapper
 ver. 0.2.5
 'Source only' distribution
- - - - - - - - - - - - - - - - - - - - -

make[1]: Entering directory
`/home/inectarios/Trusted_Computing/jTssWrapperSource_0.2.5'

checking requirements and paths for native lib... ok.

checking requirements and paths... ok.

generating SWIG interface files from TSS headers...
preprocessing output/interfaces/tss_structs.i.tmp >
output/interfaces/tss_structs.i.tmp2
preprocessing /usr/local/include/tss/tspi.h > output/interfaces/tspi.i
ok.

calling SWIG to generate minimal C wrapper...
output/interfaces/tss_structs.i:9: Error: No methodmodifiers attribute
defined in javadestruct typemap for TSS_VERSION.
output/interfaces/tss_structs.i:17: Error: No methodmodifiers attribute
defined in javadestruct typemap for TSS_PCR_EVENT.
output/interfaces/tss_structs.i:29: Error: No methodmodifiers attribute
defined in javadestruct typemap for TSS_EVENT_CERT.
output/interfaces/tss_structs.i:42: Error: No methodmodifiers attribute
defined in javadestruct typemap for TSS_UUID.
output/interfaces/tss_structs.i:52: Error: No methodmodifiers attribute
defined in javadestruct typemap for TSS_KM_KEYINFO.
output/interfaces/tss_structs.i:73: Error: No methodmodifiers attribute
defined in javadestruct typemap for TSS_VALIDATION.
output/interfaces/tss_structs.i:95: Error: No methodmodifiers attribute
defined in javadestruct typemap for TCPA_NONCE.
make[1]: *** [swig] Error 7
make[1]: Leaving directory
`/home/inectarios/Trusted_Computing/jTssWrapperSource_0.2.5'
make: *** [default] Error 2


Any ideas?


Best Regards,

Nektarios Ioannides

[Trustedjava-support] Loading jTSSWrapper into an IDE ?

[Nektarios I. <ine...@gm...>]

Hello everyone,

I am currently working on a project where I would like to build a *simple*
custom Java application and be able to use jTPM tools to ensure that certain
features/attributes/aspects etc of that custom application are "Trustworthy"
.

The focus of the project is to demonstrate whether and how jTPM tools can be
used to perform such tasks on a "real" application.

I am planning to use NetBeans to build this application.

Now, my initial questions are:

What do I need to setup/do in order to be able to "interface/bridge" a Java
application with jTPMTools?

(i.e) Will I have to load jTSSWrapper's source code into NetBeans so that my
Java application and jTPMTools can work together? --> If yes, how do I do
that? (Do I have to create a "New Project" in Netbeans or is there an
existing project that I can just load?) --> Which folders and/or jar files
do I need to include to the project?

Waiting for your help.

Best Regards,

Nektarios Ioannides

[Trustedjava-support] Error during "make" for Java TSS 1.1.b Wrapper v0.2.5

[Nektarios I. <ine...@gm...>]

Hello everyone,

I am getting the following when I try to "make" the 'Source only' version of
jTssWrapper 0.2.5

I have followed the online instructions and setup all the necessary paths
prior to building. I can't think of anything else that might be wrong.

Here is the output on my terminal:

[root@localhost jTssWrapperSource_0.2.5]# make
- - - - - - - - - - - - - - - - - - - - -
 IAIK/OpenTC jTSS - Java TSS 1.1b Wrapper
 ver. 0.2.5
 'Source only' distribution
- - - - - - - - - - - - - - - - - - - - -

make[1]: Entering directory
`/home/inectarios/Trusted_Computing/jTssWrapperSource_0.2.5'

checking requirements and paths for native lib... ok.

checking requirements and paths... ok.

generating SWIG interface files from TSS headers...
preprocessing output/interfaces/tss_structs.i.tmp >
output/interfaces/tss_structs.i.tmp2
preprocessing /usr/local/include/tss/tspi.h > output/interfaces/tspi.i
ok.

calling SWIG to generate minimal C wrapper...
output/interfaces/tss_structs.i:9: Error: No methodmodifiers attribute
defined in javadestruct typemap for TSS_VERSION.
output/interfaces/tss_structs.i:17: Error: No methodmodifiers attribute
defined in javadestruct typemap for TSS_PCR_EVENT.
output/interfaces/tss_structs.i:29: Error: No methodmodifiers attribute
defined in javadestruct typemap for TSS_EVENT_CERT.
output/interfaces/tss_structs.i:42: Error: No methodmodifiers attribute
defined in javadestruct typemap for TSS_UUID.
output/interfaces/tss_structs.i:52: Error: No methodmodifiers attribute
defined in javadestruct typemap for TSS_KM_KEYINFO.
output/interfaces/tss_structs.i:73: Error: No methodmodifiers attribute
defined in javadestruct typemap for TSS_VALIDATION.
output/interfaces/tss_structs.i:95: Error: No methodmodifiers attribute
defined in javadestruct typemap for TCPA_NONCE.
make[1]: *** [swig] Error 7
make[1]: Leaving directory
`/home/inectarios/Trusted_Computing/jTssWrapperSource_0.2.5'
make: *** [default] Error 2

Any ideas?


Thank you.

Re: [Trustedjava-support] Decryption error

[Thomas W. <tho...@ia...>]

Hello,

>       testStringEncoding(iaik.tss.test.junit.TestBlobData)junit.framework.AssertionFailedError:
>       UTF-16 encoding error.

That is strange. What platform are you using for your tests?
Which Java runtime?

> I have played with jTpm and all works fine. The only problem is when I 
> try to bind or seal data. I think that I carry it out properly(first 
> create a new TPM key, take ownership using this key and try to seal or 
> bind data). Unfortunately I got following error:

What do you mean by "create a new TPM key, take ownership using this 
key"? You do not have to supply a key to the TakeOwnership command.

> [root@localhost jTpmTools_0.1]# ./jtt.sh seal -i version.txt -o test2 -u 
> 1.2.3.4.5.ef444a41e03b -k key -p 15 -e ASCII

First of all: It seems like you are not running the latest jTpmTools 
version (your directory name says jTpmTools_0.1 while 0.2 is the latest 
version). I would recomment to update the jTpmTools to 0.2 since this 
version has been adapted to work with TrouSerS 0.2.9 and jTSS 0.2.5.

> What can cause this error? Is it something with jTpm, jTss, trousers or 
> configuration problem.

That is difficult to say. I'd recommend to updated the jTpmTools to 0.2 
and additionally you should check if you are using a JRE from SUN or 
some other vendor.
I just did another test-run on Emu 0.5, TrouSerS 0.2.9, jTSS 0.2.5 and 
jTpmTools 0.2: all tests succeeded and I was able to do sealing and 
unsealing without getting errors.

Regards,
Thomas Winkler

[Trustedjava-support] Decryption error

[Krzysztof K. <kko...@gm...>]

Dear all,

I have manage to run tmp emulator 0.5, jtss wrapper 0.2.5 and trousers 0.2.9.
I run jtss test(make run_tests) and only one test failed, namely:

   1.

   testStringEncoding(iaik.tss.test.junit.TestBlobData)junit.framework.AssertionFailedError:
   UTF-16 encoding error.

I have played with jTpm and all works fine. The only problem is when I try
to bind or seal data. I think that I carry it out properly(first create a
new TPM key, take ownership using this key and try to seal or bind data).
Unfortunately I got following error:


 [root@localhost jTpmTools_0.1]# ./jtt.sh seal -i version.txt -o test2 -u
1.2.3.4.5.ef444a41e03b -k key -p 15 -e ASCII


 17:02:18:832 [INFO] Seal::execute (205): sealing to pcr: 15

TSPI call error:

error code: 0x21

error message: TPM layer: Decryption error

at iaik.tss.impl.jni.TcBaseObject.handleRetCode(TcBaseObject.java:98)

at iaik.tss.impl.jni.TcContext.loadKeyByUuid(TcContext.java:343)

at iaik.tss.impl.jni.TcContext.loadKeyByUuidFromSystem(TcContext.java:357)

at iaik.tc.apps.jtt.data.Seal.execute(Seal.java:220)

at iaik.tc.utils.cmdline.SubCommand.run(SubCommand.java:80)

at iaik.tc.utils.cmdline.SubCommandParser.parse(SubCommandParser.java:52)

at iaik.tc.apps.jtt.common.JTpmTools.main(JTpmTools.java:67)


 What can cause this error? Is it something with jTpm, jTss, trousers or
configuration problem.


With best,

Kris

[Trustedjava-support] error code Ox3101 while starting junit test for jtss

[Krzysztof K. <kko...@gm...>]

Hi,

I have similar problem as Nektarios has/had (see previouse thread). I have
installed tpm_emulator-0.5 and lunched trousers-0.2.9. Now I am trying to
start jUnit tests for jTssWrapperPBuilt_0.2.5. Unfortunatelly I got error:
"error code:    0x3103
 error message: TSS layer: Core service connection failer".

I have connected with command ""telnet localhost 30003" and connection is
successfully established.

What can be a reason of it?

With best,

Kris

[Trustedjava-support] TSPI call error: error code 0x3103 (continued...)

[Nektarios I. <ine...@gm...>]

Hello,

Flushing iptables and ip6tables changed nothing.

This is what I get when I try port 30003 (after flushing):

[root@localhost jTssWrapperPBuilt_0.2.5]# telnet 127.0.0.1 30003
Trying 127.0.0.1...
telnet: connect to address 127.0.0.1: Connection refused
telnet: Unable to connect to remote host: Connection refused

[root@localhost jTssWrapperPBuilt_0.2.5]# telnet localhost 30003
Trying ::1...
telnet: connect to address ::1: Connection refused
telnet: Unable to connect to remote host: Connection refused

Awkwardly when i try

[root@localhost jTssWrapperPBuilt_0.2.5]# telnet 127.0.0.1
Trying 127.0.0.1...
Connected to BeBox.config (127.0.0.1).
Fedora Core release 6 (Zod)
Kernel 2.6.19-1.2895.fc6debug on an i686
login:


Any ideas what might be causing the error on port 30003? Is it possible that
my router might be causing this?


Nektarios

Re: [Trustedjava-support] TSPI call error : error code 0x3103 Part II

[Dipl.-Ing., T. W. <tho...@tu...>]

Hi,

> I tried to manually add port "3003" through "system-config-securitylevel"
> command (and also added Telnet and FTP to the "Trusted services")  but
> nothing changes. I even tried turning the firewall completely off and
> disabling both iptables and ip6tables but I still get the same error.

The port actually is 30003 (might be that I missed a zero in the last  
mail). I just tried - when I "telnet localhost 30003" the connection  
is successfully established.
Maybe you could try flushing all iptable rules (iptables -F) and then  
see if it works. From your iptables configuration you added to the  
mail I would think that the 30003 port is blocked.

Hope this helps,
Thomas

[Trustedjava-support] TSPI call error : error code 0x3103 Part II

[Nektarios I. <ine...@gm...>]

(continued....)

I get the same erro code 0x3103 when I try to run most of JTPM Tools
commands, that is why I am guessing that there must be something wrong with
my linux configuration.

Thomas suggested that I check if my system is accepting connections on port
3003.

So I tried "telnet localhost 3003" to check that and I get the following:

Trying ::1...
telnet: connect to address ::1: Connection refused
telnet: Unable to connect to remote host: Connection refused

I have tried to google it and I found a couple of relevant articles,
http://www.cyberciti.biz/faq/ftp-connection-refused-error-solution-to-problem/
and http://www.cyberciti.biz/faq/iptables-open-ftp-port-21/ but I have not
been successful in finding a solution.


Apparently from what I've found out, "::1" is the IP v6 of localhost but
telnet seems that it does not support it, since when I try "telnet 127.0.0.1"
I get the following:

Connected to <my ISP's name> ( 127.0.0.1) and the terminal prompts me to
enter my login details.

However when I try "telnet 127.0.0.1 3003" I get this:

Trying 127.0.0.1...
telnet: connect to address 127.0.0.1: Connection refused
telnet: Unable to connect to remote host: Connection refused



 - Show quoted text -
Typing "iptables -L -n" gives me:

Chain INPUT (policy ACCEPT)
target     prot opt source               destination
RH-Firewall-1-INPUT  all  --  0.0.0.0/0            0.0.0.0/0

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination
RH-Firewall-1-INPUT  all  --  0.0.0.0/0            0.0.0.0/0

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination

Chain RH-Firewall-1-INPUT (2 references)
target     prot opt source               destination
ACCEPT     all  --  0.0.0.0/0            0.0.0.0/0
ACCEPT     icmp --  0.0.0.0/0            0.0.0.0/0           icmp type 255
ACCEPT     esp  --  0.0.0.0/0            0.0.0.0/0
ACCEPT     ah   --  0.0.0.0/0            0.0.0.0/0
ACCEPT     udp  --  0.0.0.0/0            224.0.0.251         udp dpt:5353
ACCEPT     udp  --  0.0.0.0/0            0.0.0.0/0           udp dpt:631
ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0           tcp dpt:631
ACCEPT     all  --  0.0.0.0/0            0.0.0.0/0           state
RELATED,ESTABLISHED
ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0           state NEW tcp
dpt:21
ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0           state NEW tcp
dpt:25
ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0           state NEW tcp
dpt:22
ACCEPT     udp  --  0.0.0.0/0            0.0.0.0/0           state NEW udp
dpt:137
ACCEPT     udp  --  0.0.0.0/0            0.0.0.0/0           state NEW udp
dpt:138
ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0           state NEW tcp
dpt:139
ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0           state NEW tcp
dpt:445
ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0           state NEW tcp
dpt:443
ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0           state NEW tcp
dpt:23
REJECT     all  --  0.0.0.0/0            0.0.0.0/0           reject-with
icmp-host-prohibited

Typing "ip6tables -L -n" gives this:

Chain INPUT (policy ACCEPT)
target     prot opt source               destination
RH-Firewall-1-INPUT  all      ::/0                 ::/0

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination
RH-Firewall-1-INPUT  all      ::/0                 ::/0

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination

Chain RH-Firewall-1-INPUT (2 references)
target     prot opt source               destination
ACCEPT     all      ::/0                 ::/0
ACCEPT     icmpv6    ::/0                 ::/0
ACCEPT     esp      ::/0                 ::/0
ACCEPT     ah       ::/0                 ::/0
ACCEPT     udp      ::/0                 ff02::fb/128       udp dpt:5353
ACCEPT     udp      ::/0                 ::/0               udp dpt:631
ACCEPT     tcp      ::/0                 ::/0               tcp dpt:631
ACCEPT     tcp      ::/0                 ::/0               tcp dpt:21
ACCEPT     tcp      ::/0                 ::/0               tcp spt:21
ACCEPT     tcp      ::/0                 ::/0               tcp dpt:25
ACCEPT     tcp      ::/0                 ::/0               tcp spt:25
ACCEPT     tcp      ::/0                 ::/0               tcp dpt:22
ACCEPT     tcp      ::/0                 ::/0               tcp spt:22
ACCEPT     udp      ::/0                 ::/0               udp dpt:137
ACCEPT     udp      ::/0                 ::/0               udp spt:137
ACCEPT     udp      ::/0                 ::/0               udp dpt:138
ACCEPT     udp      ::/0                 ::/0               udp spt:138
ACCEPT     tcp      ::/0                 ::/0               tcp dpt:139
ACCEPT     tcp      ::/0                 ::/0               tcp spt:139
ACCEPT     tcp      ::/0                 ::/0               tcp dpt:445
ACCEPT     tcp      ::/0                 ::/0               tcp spt:445
ACCEPT     tcp      ::/0                 ::/0               tcp dpt:443
ACCEPT     tcp      ::/0                 ::/0               tcp spt:443
ACCEPT     tcp      ::/0                 ::/0               tcp dpt:23
ACCEPT     tcp      ::/0                 ::/0               tcp spt:23
REJECT     all      ::/0                 ::/0               reject-with
icmp6-port-unreachable


I tried to manually add port "3003" through "system-config-securitylevel"
command (and also added Telnet and FTP to the "Trusted services")  but
nothing changes. I even tried turning the firewall completely off and
disabling both iptables and ip6tables but I still get the same error.


Thank you for your time,

Nektarios

[Trustedjava-support] TSPI call error: error code 0x3103 - Part I

[Nektarios I. <ine...@gm...>]

Hello everyone,

 I've been having problems with running the JUnit tests for TSS Wrapper
0.2.5 and I am really running out of ideas here. (I am quite positive that
there must be something wrong with my linux network/port settings but since
I am really new to linux I am short in ideas of what I might be doing
wrong.)

Anyone else seen the problem I describe below before? I am using Fedora Core
6 and I have SELinux turned off while iptables (version 1.3.5) and ip6tables
(also version 1.3.5) are both running.

-----------------------------------------------------------------------------------------


When I run "make run_tests" I get the following: - Show quoted text -


LD_LIBRARY_PATH=output/lib
CLASSPATH=output/jars/internal_jtss_wrapper.jar:output/jars/iaik_jtss_wrapper.jar:output/jars/iaik_jtss_wrapper_test.jar:/home/inectarios/Environment_Installations/java/junit4.1/junit-
4.1.jar \
                java iaik.tss.test.junit.TestMain
.TSPI call error:
  error code:    0x3103
  error message: TSS layer: Core service connection failed
        at iaik.tss.impl.jni.TcBaseObject.handleRetCode(TcBaseObject.java
:102)
        at iaik.tss.impl.jni.TcContext.connectAlternative (TcContext.java
:160)
        at iaik.tss.impl.jni.TcContext.connect (TcContext.java:114)
        at iaik.tss.test.junit.TestTakeOwnership.testTakeOwnership(
TestTakeOwnership.java:51)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at sun.reflect.NativeMethodAccessorImpl.invoke (
NativeMethodAccessorImpl.java:39)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(
DelegatingMethodAccessorImpl.java :25)
        at java.lang.reflect.Method.invoke (Method.java:597)
        at junit.framework.TestCase.runTest(TestCase.java:164)
        at junit.framework.TestCase.runBare(TestCase.java:130)
        at junit.framework.TestResult$1.protect ( TestResult.java:110)
        at junit.framework.TestResult.runProtected (TestResult.java:128)
        at junit.framework.TestResult.run(TestResult.java:113)
        at junit.framework.TestCase.run(TestCase.java:120)
        at junit.framework.TestSuite.runTest(TestSuite.java :228)
        at junit.framework.TestSuite.run(TestSuite.java:223)
        at junit.framework.TestSuite.runTest(TestSuite.java:228)
        at junit.framework.TestSuite.run(TestSuite.java:223)
        at junit.textui.TestRunner.doRun(TestRunner.java :115)
        at junit.textui.TestRunner.doRun(TestRunner.java :108)
        at junit.textui.TestRunner.run(TestRunner.java:76)
        at iaik.tss.test.junit.TestMain.allTests(TestMain.java:64)
        at iaik.tss.test.junit.TestMain.main (TestMain.java:91)
F.F.F...F.F.F.F.TSPI call error:
  error code:    0x3103
  error message: TSS layer: Core service connection failed

..
..(several lines
..
FAILURES!!!
Tests run: 54,  Failures: 17,  Errors: 33

Re: [Trustedjava-support] [ Trusted Java Support - Problem with running tests]

[Thomas W. <tho...@ia...>]

Hi,

> .Native code library (tspiwrapper) failed to load.
> 
> The current library path is: /usr/lib/gcj-4.1.1:output/lib
> 
> Detailed error message: libtspiwrapper: output/lib/libtspiwrapper.so: 
> cannot restore segment prot after reloc: Permission denied
> make: *** [run_tests] Error 1

Are you using SELinux? This might be enabled by default on some FC 
distributions. The same error message has been discussed in the 
following thread on the TrouSerS mailinglist:

http://sourceforge.net/mailarchive/forum.php?thread_id=30770486&forum_id=43256

>  tpm_emulator 0.5, Trousers 0.2.9, jTssWrapperPBuilt 0.2.4 and JUnit 4.1

Note that jTSS Wrapper 0.2.4 was only tested with TrouSerS 0.2.8. There 
are some known incompatibilities. And undated jTSS will be released 
within the next few days.

> Also, I would like to ask if there are any forums or a community that is 
> involved with Trusted Computing and Trusted Java specifically, which I 
> could join?

The TrouSerS and jTSS mailinglist probably are a good point to start.

Bye,
Thomas Winkler

Re: [Trustedjava-support] jTSS and Pgp

[Thomas W. <tho...@ia...>]

Hi,

> I have seen the test cases but i need to define the TcIRsaKey as java.security keys.

The test case I pointed out shows you how to transform a public TPM key 
into a java.security.PublicKey.
If you want to get access to the private part of a TPM key then there is 
not much chance: They only leave the TPM in an encrypted form (using the 
parent key). So there is no way to use them outside the TPM.

Regards,
Thomas Winkler

Re: [Trustedjava-support] jTSS and Pgp

[Burak O. <bur...@ya...>]

Hi,=0A=0AI have seen the test cases but i need to define the TcIRsaKey as j=
ava.security keys.=0A=0AThanks=0A =0A-- burak()=0A(ps: bf)=0AMETU CENG '06=
=0A=0A----- Original Message ----=0AFrom: Thomas Winkler <thomas.winkler@ia=
ik.tugraz.at>=0ATo: Burak OGUZ <bur...@ya...>=0ACc: trustedjava-sup=
po...@li...=0ASent: Wednesday, February 7, 2007 1:47:30 PM=
=0ASubject: Re: [Trustedjava-support] jTSS and Pgp=0A=0AHi,=0A=0A> There ar=
e good APIs for Java PGP but all of these APIs=0A> use the key structure of=
 the java.security. Therefore=0A> I should change the TcIRsaKey to java.sec=
urity=0A> objects. Are there any resources or samples about this=0A> subjec=
t? =0A=0AHave a look at the jUnit tests included with jTSS. What you need i=
s =0Ademonstrated as part of the TestIdentityCreation and - maybe easier to=
 =0Afind - in TestKeys in the method testVerifySigningKey. There a TPM key =
=0A(TcIRsaKey) is converted into a Java (RSA)PublicKey.=0A=0Ahth,=0AThomas=
=0A=0A=0A=0A=0A=0A=0A =0A__________________________________________________=
__________________________________=0AWant to start your own business?=0ALea=
rn how on Yahoo! Small Business.=0Ahttp://smallbusiness.yahoo.com/r-index

Re: [Trustedjava-support] jTSS and Pgp

[Thomas W. <tho...@ia...>]

Hi,

> There are good APIs for Java PGP but all of these APIs
> use the key structure of the java.security. Therefore
> I should change the TcIRsaKey to java.security
> objects. Are there any resources or samples about this
> subject? 

Have a look at the jUnit tests included with jTSS. What you need is 
demonstrated as part of the TestIdentityCreation and - maybe easier to 
find - in TestKeys in the method testVerifySigningKey. There a TPM key 
(TcIRsaKey) is converted into a Java (RSA)PublicKey.

hth,
Thomas

[Trustedjava-support] jTSS and Pgp

[Burak O. <bur...@ya...>]

Hi all,

There are good APIs for Java PGP but all of these APIs
use the key structure of the java.security. Therefore
I should change the TcIRsaKey to java.security
objects. Are there any resources or samples about this
subject? 

Thanks in advance..

-- burak()
(ps: bf)
METU CENG '06


 
____________________________________________________________________________________
Yahoo! Music Unlimited
Access over 1 million songs.
http://music.yahoo.com/unlimited

Re: [Trustedjava-support] [ Trusted Java Support - Problem with running tests]

[Thomas W. <tho...@ia...>]

Hello,

> 
> After installing jTSS Wrapper I tried to run the ready-tests through "make
> run_tests" but I get the following
> 
> 
> 
> 
> P.S


^^^^^^^^^^^^^^

At the end of your mail some information seems to be missing. I need the 
full error message to be able to help you.

Bye,
Thomas

[Trustedjava-support] Trusted Java Support - Problem with running tests

[Nektarios I. <ine...@gm...>]

Hello,

My name is Nektarios Ioannides. I am  a student at the University of
Birmingham, UK and I am currently working on a project regarding TPM
technologies and their possible applications. I have been looking into the
Trusted Java project and I would be interested in learning more about it and
if possible contribute to the project myself.

I have been trying to setup/run jTSS Wrapper on Fedora Cora 6 using the
tpm_emulator-0.5. I have followed the online documentation and relevant
README files to setup TROUSERS, JTSS Wrapper and the TPM emulator, but I am
not sure whether I need to install anything else.

I believe I am on the right track since when i execute "tcsd -f" I get the
following on my shell:

"TCSD trousers 0.2.9: TCSD up and running."

I can also see the TPM emulator daemon running when I use "lsmod". It is
denoted as,

"tpmd_dev"


After installing jTSS Wrapper I tried to run the ready-tests through "make
run_tests" but I get the following




P.S

[Trustedjava-support] ANN: IAIK XKMS 0.1

[Martin P. <Mar...@ia...>]

IAIK Trusted Computing labs release an implementation of the
XML Key Management Specification (XKMS)(http://www.w3.org/TR/xkms2/)

As suggested by the TCG in their "Reference Architecture for
Interoperability" document:
"XKMS provides the most attractive solution for credential
 management for existing CAs in the PKI industry."

This release does not (yet) contain the Trusted Computing specific
classes. It is a generic build, intended to stimulate public
interoperability testing with other XKMS implementations.
This release is an alpha build, use with caution.

Enjoy,

Martin Pirker
IAIK, Graz University of Technology

[Trustedjava-support] Re : Bind large data

[Martin P. <Mar...@ia...>]

Hi...

marbouh med wrote:
> I managed to bind large data by chaining data.
> But still don't understand why it dosn't work with unbind command.

Just yesterday we released a collection of TPM tools in Java.

Please download from the Trusted Java sourceforge page the jTPM Tools 0.1
package. Inside, in the lib directory, is an iaik_jtpmtools_src.jar file
which contains the source to the functions.

iaik.tc.apps.jtt.data.Bind and Unbind is an example on how to bind
and unbind a file. Please look there how it is done - hope this helps
in understanding.

Regards,
Martin Pirker

[Trustedjava-support] Re : Bind large data

[marbouh m. <med...@ya...>]

Hello,=0A=0AThank you Thomas for relpying. I managed to bind large data by =
chaining data. But still don't understand why it dosn't work with unbind co=
mmand.=0A=0AThis is a what I'm doing for each block:=0A=0Abyte[ ] toUnBind_=
 =3D new byte[...];=0ATcBlobData decDatablob_ =3D TcTssStructFactory.newBlo=
bData().initByteArray(toUnBind_);=0AencData.setAttribData(TcTssDefines.TSS_=
TSPATTRIB_ENCDATA_BLOB,TcTssDefines. TSS_TSPATTRIB_ENCDATABLOB_BLOB, decDat=
ablob_);=0ATcBlobData bdata =3D decData.unbind(adminkey[1]);=0A=0AThen I go=
t the  message :=0A=0ATSPI call error:=0A  error code:    0x3=0A  error mes=
sage: TPM layer: Bad Parameter=0A    at iaik.tss.impl.jni.TcBaseObject.hand=
leRetCode(TcBaseObject.java:98)=0A    at iaik.tss.impl.jni.TcEncData.unbind=
(TcEncData.java:97)=0A    at com.francetelecom.drm.tpm.TPMManager.bindData(=
TPMManager.java:550)=0A=0Awhen calling "unbind" method.=0ADo you think I mu=
st do something to the blob data decDatablob before giving it to unbind met=
hod.=0A=0AThank you in advance.=0A=0AMom=0A=0A=0A----- Message d'origine --=
--=0ADe : Thomas Winkler <tho...@ia...>=0A=C0 : marbouh me=
d <med...@ya...>=0ACc : tru...@li...=
=0AEnvoy=E9 le : Lundi, 9 Octobre 2006, 7h24mn 12s=0AObjet : Re: [Trustedja=
va-support] Bind large data=0A=0AHello,=0A=0A > I have a problem when tryin=
g to bind data that is larger than my RSA=0A > public key modulus. TSS Spec=
 precise that I=0A must block then chain the=0A > data. Can you tell me wha=
t does this mean and is there any function that=0A > do this.=0A=0AYou are,=
 more or less, answering your question yourself.=0AUsing the TSS you can no=
t bind data larger than the RSA public key (that =0Aactually is not specifi=
c to the TSS but is a general property). What you =0A  have to do is to spl=
it you input data into block equal to the RSA =0Apublic key length. Then en=
crypt (bind) these blocks one after the other. =0AOn decryption (unbind) si=
mply reverse the process.=0A=0ARegards,=0AThomas Winkler=0A=0A=0A=0A=0A=0A=
=0A=0A=0A=09=0A=0A=09=0A=09=09=0A__________________________________________=
_________________________________ =0AD=E9couvrez une nouvelle fa=E7on d'obt=
enir des r=E9ponses =E0 toutes vos questions ! =0ADemandez =E0 ceux qui sav=
ent sur Yahoo! Questions/R=E9ponses=0Ahttp://fr.answers.yahoo.com

[Trustedjava-support] IAIK/OpenTC Java TPM Tools 0.1 released

[Thomas W. <tho...@ia...>]

Dear Mailing-List,

The trusted computing team of IAIK hereby announces the immediate 
availability of the IAIK/OpenTC Java TPM Tools 0.1.

The jTPM Tools provide a set of command line utilities to interact with
the system's TPM. The tools are based on the IAIK/OpenTC jTSS Wrapper 
and the IAIK/OpenTC TCcert library.
The most important features, distinguishing the jTPM Tools from other 
TPM utilities, are the ability to create Attestation Identity Keys 
(AIKs) and AIK certificates as well as the ability to extract the 
Endorsement Key (EK) certificates  from Infineon 1.1b and 1.2 TPMs.

The jTPM Tools currently cover the following functions:

- Creation of Attestation Identity Keys (AIKs).
- Extract Endorsement Key (EK) certificates from Infineon TPMs.
- Take and clear TPM ownership.
- Create TPM keys and register them in TSS persistent storage.
- Bind and unbind data using TPM keys.
- Seal and unseal data to the TPM (specifying one or more PCRs).
- Reading and extending Platform Configuration Registers (PCRs).
- Dumping the event log and list keys registered in persistent storage.

This release has been tested with jTSS 0.2.4 (TrouSerS 0.2.8) and
TCcert 0.2.1a on the following TPMs: TPM Emulator 0.4 (and newer CVS
versions) and Infineon 1.1b TPM (SLD 9630 TT 1.1).
Additional tests have been done with a modified TrouSerS 0.2.8 (with
IFX 1.2 DUAL patch) on Infineon 1.2 TPMs (SLB 9635 TT 1.2).

Documentation and source code are available at the Sourceforge website 
at: http://trustedjava.sourceforge.net
Comments, questions and feature requests are always welcome.

Regards,
Thomas Winkler
IAIK, TU Graz

Re: [Trustedjava-support] Bind large data

[Thomas W. <tho...@ia...>]

Hello,

 > I have a problem when trying to bind data that is larger than my RSA
 > public key modulus. TSS Spec precise that I must block then chain the
 > data. Can you tell me what does this mean and is there any function that
 > do this.

You are, more or less, answering your question yourself.
Using the TSS you can not bind data larger than the RSA public key (that 
actually is not specific to the TSS but is a general property). What you 
  have to do is to split you input data into block equal to the RSA 
public key length. Then encrypt (bind) these blocks one after the other. 
On decryption (unbind) simply reverse the process.

Regards,
Thomas Winkler

[Trustedjava-support] Bind large data

[marbouh m. <med...@ya...>]

Hi,=0AI am developping a small project with jTSS and TPM.=0A=0AI have a pro=
blem when trying to bind data that is larger than my RSA public key modulus=
. TSS Spec precise that I must block then chain the data. Can you tell me w=
hat does this mean and is there any function that do this.=0A=0AThanks in a=
dvance.=0A=0AMom=0A=0A=0A=0A=0A=09=0A=0A=09=0A=09=09=0A____________________=
_______________________________________________________ =0AD=E9couvrez un n=
ouveau moyen de poser toutes vos questions quel que soit le sujet ! =0AYaho=
o! Questions/R=E9ponses pour partager vos connaissances, vos opinions et vo=
s exp=E9riences. =0Ahttp://fr.answers.yahoo.com =0A