trustedjava-support — Trusted Java General Support

Re: [Trustedjava-support] Printing key blob of AIK, TPM Emulator and external key pair

[Thomas W. <tho...@ia...>]

Hello,

> My first question is: why doesn't it work on the software TPM Emulator?

There are several reasons for that:

- Version 0.3 of TPM Emulator now implements the TPM_MakeIdentity 
command  but expects TPM_KEY12 idKeyParams instead of TPM_KEY 
idKeyParams (see tpm/tpm_identity.c, line 163). At the same time, the 
execute_TPM_MakeIdentity function in tpm_cmd_handler.c assumes that the 
idKeyParams are of type TPM_KEY. To sum up, TPM Emulator seems to be 
inconsistent regarding what data it expects to receive from upper layers 
(1.1 vs 1.2 structures). In addition to that, the TrouSerS TSS is 
currently only 1.1 compatible and therefore will not send TPM_KEY12 structs.

- To activate the identity, the TPM_ActivateIdentity in the emulator is 
required which currently is not implemented (see tpm/tpm_identity.c, 
line 339).

To sum up: Currently the TPM Emulator does not provide the required 
functionality to do a full AIK creation cycle.

> So my second question is: is this even possible?  That is to print out the blob of the AIK key pair.

As said above, the TPM Emulator is not complete regarding AIK creation. 
The error you see, most likely is related to that.

Aside from the TPM Emulator problems, printing the AIK is possible. With 
the provided toString() method however, all you will get is the 
keyHandle of the key. The actual key blobs of a key can be extracted 
using the getAttribData method.

> Third question: is it possible to load a TPM key created outside of TPM into the TPM?

It is possible to load an external key into the TPM.
For example, code please have a look at the TestKeys.testWrapKey() 
shipped with the jTSS Wrapper.

Regards,
Thomas Winkler
IAIK, TU Graz

[Trustedjava-support] Printing key blob of AIK, TPM Emulator and external key pair

[<Hon...@cs...>]

SGkgYWxsLA0KDQpGaXJzdCBvZiBhbGwganVzdCBsaWtlIHRoYW5rcyB0byB0aGUgZGV2ZWxvcGVy
cyBmb3IgdGhlIGxhdGVzdCByZWxlYXNlLg0KDQpJIGFtIGxvb2tpbmcgYXQgdGhlIFRlc3RJZGVu
dGl0eUNyZWF0aW9uLmphdmEgZmlsZSwgd2hpY2ggY3JlYXRlcyBhbiBBSUsuDQoNCk15IGZpcnN0
IHF1ZXN0aW9uIGlzOiB3aHkgZG9lc24ndCBpdCB3b3JrIG9uIHRoZSBzb2Z0d2FyZSBUUE0gRW11
bGF0b3I/ICBJcyBpdCBiZWNhdXNlIG9mIHRoZSBUY2xUUE0uY29sbGF0ZUlkZW50aXR5UmVxdWVz
dCgpIG1ldGhvZD8NCg0KV2hhdCBJIHRyaWVkIHRvIGRvIHdhcyB0byBjcmVhdGUgYW4gQUlLIGtl
eSBwYWlyLCBmb2xsb3dpbmcgdGhlIGZpcnN0IGZldyBzdGVwcyBvZiBUZXN0SWRlbnRpdHlDcmVh
dGlvbi5jbGllbnRDb2xsYXRlSWRlbnRpdHlSZXEoKS4NCg0KVGhlbiwgSSB0cmllZCB0byBwcmlu
dCBvdXQgdGhlIGJsb2Igb2YgdGhlIHB1YmxpYyBwYXJ0IHRoZSBuZXdseSBjcmVhdGVkIEFJSyBr
ZXkgcGFpci4NCg0KSSBnZXQgdGhlIGVycm9yOg0KDQpUU1MgbGF5ZXI6IFRoZSBhZGRyZXNzZWQg
a2V5IGlzIG5vdCBjdXJyZW50bHkgbG9hZGVkDQpUU1BJIGNhbGwgZXJyb3I6DQogIGVycm9yIGNv
ZGU6IDB4MzEwZQ0KICBlcnJvciBtZXNzYWdlOiBUU1MgbGF5ZXI6IFRoZSBhZGRyZXNzZWQga2V5
IGlzIG5vdCBjdXJyZW50bHkgbG9hZGVkDQoNClNvIG15IHNlY29uZCBxdWVzdGlvbiBpczogaXMg
dGhpcyBldmVuIHBvc3NpYmxlPyAgVGhhdCBpcyB0byBwcmludCBvdXQgdGhlIGJsb2Igb2YgdGhl
IEFJSyBrZXkgcGFpci4NCg0KSSd2ZSB0cmllZCB0byB1c2UgdGhlIGxvYWRLZXkoKSBtZXRob2Qs
IGJ1dCB0aGUgZXJyb3Igc3RpbGwgcGVyc2lzdHMuDQoNClRoaXJkIHF1ZXN0aW9uOiBpcyBpdCBw
b3NzaWJsZSB0byBsb2FkIGEgVFBNIGtleSBjcmVhdGVkIG91dHNpZGUgb2YgVFBNIGludG8gdGhl
IFRQTT8NCg0KVGhhbmtzLg0KDQpIb24gSHdhbmcuDQo=

[Trustedjava-support] IAIK/OpenTC Java TSS Wrapper 0.2 released

[Thomas W. <tho...@ia...>]

IAIK/OpenTC Java TSS Wrapper 0.2 released
2006/05/30

The trusted computing team of IAIK hereby announces the immediate 
availability of the IAIK/OpenTC Java TSS Wrapper 0.2.

The Java TSS Wrapper provides an object oriented Java API for 
interaction with the TCG Software Stack (TSS) for Java applications. 
Version 0.2 includes the following changes compared to version 0.1 (for 
more information please refer to the changelog provided in the package):

- separation of API interface and implementation:
One of the most important changes of this release is the separation of 
the Java TSS interface exposed to developers from the implementation 
specific parts that directly interact with the TSS. This allows the 
integration of other TSS bindings than JNI in later versions of the wrapper.

- tested on real hardware TPMs:
SLD 9630 TT 1.1 (Infineon TPM 1.1b) and SLB 9635 TT 1.2 (Infineon TPM 1.2)

- modified handling of binary data:
Binary data received from the TSS is now directly copied to Java. The 
TSS memory is then immediately freed using the TSS context.

- AIK creation cycle:
The JUnit test suite now also includes an AIK creation demonstration. 
The code shows how an AIK is created, how the data blobs are processed 
and finally the activation of the identity.

- extended JavaDoc documentation (now includes page number references to 
the TSS specification and lists of valid parameter flags)

- numerous bug-fixes and improvements:
Based on the tests with real hardware TPMs, numerous bug-fixes and 
improvements have been integrated into the code-base.

Documentation and source code are available at the Sourceforge website 
at: http://trustedjava.sourceforge.net
Comments, questions and feature requests are always welcome.

Regards,
Thomas Winkler on behalf of the IAIK Trusted Computing Team
IAIK, TU Graz

Re: [Trustedjava-support] Creating new TcPcrComposite object.

[Thomas W. <tho...@ia...>]

Hello,

> I like to know what is the appropriate values for the `initFlags` parameter when calling the createPcrCompositeObject() method of TcContext object.
> I noticed that the JavaDoc for these flags (`initFlags`) doesn't actually say what the valid values are; could be an improvement for the future?

Thank your for your mail.
For the PCR composite object of TSS 1.1, there actually are no init 
flags. Consequently, 0 has to be passed to the 
createPcrCompositeObject() method of TcContext. The initFlags parameter 
will be used in future versions of the jTSS since TSS 1.2 actually makes 
use of this parameter.
As for the JavaDoc: The next version of the jTSS Wrapper (scheduled to 
be released end of may or the beginning of june) will include a special 
note about the PCR composite initFalgs paramter. Moreover, the 
documentation will include references to the TSS specification and 
pointers to the valid TSS init values.

Regards,
Thomas Winkler
IAIK, TU Graz

[Trustedjava-support] Creating new TcPcrComposite object.

[<Hon...@cs...>]

Hi all,

I like to know what is the appropriate values for the `initFlags` =
parameter when calling the createPcrCompositeObject() method of =
TcContext object.

I noticed that the JavaDoc for these flags (`initFlags`) doesn't =
actually say what the valid values are; could be an improvement for the =
future?

Thanks.

Hon Hwang.