trustedjava-support

[Trustedjava-support] Byte order for UUIDs

[Christoph E. <jt...@eu...>]

Hy,

should the Uuid of a key change when it is loaded into the TPM?
---
log.fine("Loading key with uuid " + uuid.toStringNoPrefix());
key = context.loadKeyByUuidFromSystem(uuid);
log.fine("Success. UUID is "+key.getAttribUuid().toStringNoPrefix());
-
FINE: load key with UUID: ca4a43de-0782-47c4-853c-801cdae8bd30
FINE: Success. UUID is    de434aca-8207-c447-853c-801cdae8bd30
---

When I'm calling getRegisteredKeysByUuid, I get the first one as a 
result, so this key does exists, the other one not. But the IDs are 
looking like there is a problem with the byte order... So is this a bug 
or a feature?

Regards,
  Christoph Eunicke

Re: [Trustedjava-support] Byte order for UUIDs

[Thomas W. <tc...@to...>]

Hi

> ---
> log.fine("Loading key with uuid " + uuid.toStringNoPrefix());
> key = context.loadKeyByUuidFromSystem(uuid);
> log.fine("Success. UUID is "+key.getAttribUuid().toStringNoPrefix());
> -
> FINE: load key with UUID: ca4a43de-0782-47c4-853c-801cdae8bd30
> FINE: Success. UUID is    de434aca-8207-c447-853c-801cdae8bd30
> ---
>
> When I'm calling getRegisteredKeysByUuid, I get the first one as a
> result, so this key does exists, the other one not. But the IDs are
> looking like there is a problem with the byte order... So is this a bug
> or a feature?

Looks like a bug to me... I have not jTSS source at hands at the moment.
But I guess Ronald will probably hunt that one down once he is back in office.

Bye,
-- 
Thomas Winkler
tc...@to...

Re: [Trustedjava-support] Byte order for UUIDs

[Ronald T. <ron...@ia...>]

Hi,


>> When I'm calling getRegisteredKeysByUuid, I get the first one as a
>> result, so this key does exists, the other one not. But the IDs are
>> looking like there is a problem with the byte order... So is this a bug
>> or a feature?
Thomas Winkler wrote:
> Looks like a bug to me... I have not jTSS source at hands at the moment.
> But I guess Ronald will probably hunt that one down once he is back in office.
Indeed.

Again, which versions are you using?
I actually believe to have fixed the UUID bugs in the last release..

Ronald

-- 
Dipl.-Ing. Ronald Tögl          phone +43 316/873-5502
Trusted Computing Labs          fax   +43 316/873-5520
IAIK                            ron...@ia...
Graz University of Technology   http://www.iaik.tugraz.at

Re: [Trustedjava-support] Byte order for UUIDs

[Christoph E. <jt...@eu...>]

Hy,

Ronald Tögl wrote:
>>> When I'm calling getRegisteredKeysByUuid, I get the first one as a
>>> result, so this key does exists, the other one not. But the IDs are
>>> looking like there is a problem with the byte order... So is this a bug
>>> or a feature?
> Thomas Winkler wrote:
>> Looks like a bug to me... I have not jTSS source at hands at the moment.
>> But I guess Ronald will probably hunt that one down once he is back in 
>> office.
> Indeed.
> 
> Again, which versions are you using?
> I actually believe to have fixed the UUID bugs in the last release..

Sorry for the late response, I've been quite busy last week..

I'm using JTSS-Wrapper 0.3, TrouSerS v0.2.9.1 on a 1.1 chip. Thanks, I 
will try the new release, just found your uuid-entry in the changelog..

Re: [Trustedjava-support] Byte order for UUIDs

[Christoph E. <jt...@eu...>]

Christoph Eunicke wrote:
> I'm using JTSS-Wrapper 0.3, TrouSerS v0.2.9.1 on a 1.1 chip.  
 > I will try the new release..

I've downloaded the "jTSS Wrapper v0.3.1 (pbuilt)". Following the 
instructions, I've used the iaik_jtss_tsp.jar from jTSS 0.3 to build this.

My project now includes the wrapper-jars in version 0.3.1, and the 
tcs/tsp.jar from jTss 0.3. Is this correct? Because the following code 
now results in an exception:

-------------------------------------------------------------
TcTssUuid srkUuid = TcUuidFactory.getInstance().getUuidSRK();
System.err.println(srkUuid.toString());
srk = context.loadKeyByUuidFromSystem(srkUuid);
-------------------------------------------------------------
UUID: 00000000-0000-0000-0000-000000000001
Exception in thread "main" java.lang.IndexOutOfBoundsException: 
incorrect array size
	at iaik.tc.tss.impl.jni.tsp.TspiWrapperJNI.TSS_UUID_rgbNode_set(Native 
Method)
	at iaik.tc.tss.impl.jni.tsp.TSS_UUID.setRgbNode(TSS_UUID.java:78)
	at 
iaik.tc.tss.impl.jni.tsp.TcSwigTypeConverter.toSwigUuid(TcSwigTypeConverter.java:49)
	at iaik.tc.tss.impl.jni.tsp.TcContext.loadKeyByUuid(TcContext.java:357)
	at 
iaik.tc.tss.impl.jni.tsp.TcContext.loadKeyByUuidFromSystem(TcContext.java:396)
	at org.eunicke.openid.lib.TssFascade.loadSRK(TssFascade.java:108)
-------------------------------------------------------------

Re: [Trustedjava-support] Byte order for UUIDs

[Ronald T. <ron...@ia...>]

Hi Christoph,

I am sorry for the late answer - and I still did not have the time to 
look into this. :-(

As a quick work-around try to instantiate your SRK key object this way.
srk_ = context_.createRsaKeyObject(TcTssConstants.TSS_KEY_TSP_SRK);

Also make sure that the SRK is actually stored in the persistent storage 
of the TrouSerS you use. This is typically performed upon taking ownership.

Ronald



> My project now includes the wrapper-jars in version 0.3.1, and the 
> tcs/tsp.jar from jTss 0.3. Is this correct? Because the following code 
> now results in an exception:
> 
> -------------------------------------------------------------
> TcTssUuid srkUuid = TcUuidFactory.getInstance().getUuidSRK();
> System.err.println(srkUuid.toString());
> srk = context.loadKeyByUuidFromSystem(srkUuid);
> -------------------------------------------------------------
> UUID: 00000000-0000-0000-0000-000000000001
> Exception in thread "main" java.lang.IndexOutOfBoundsException: 
> incorrect array size
> 	at iaik.tc.tss.impl.jni.tsp.TspiWrapperJNI.TSS_UUID_rgbNode_set(Native 
> Method)
> 	at iaik.tc.tss.impl.jni.tsp.TSS_UUID.setRgbNode(TSS_UUID.java:78)
> 	at 
> iaik.tc.tss.impl.jni.tsp.TcSwigTypeConverter.toSwigUuid(TcSwigTypeConverter.java:49)
> 	at iaik.tc.tss.impl.jni.tsp.TcContext.loadKeyByUuid(TcContext.java:357)
> 	at 
> iaik.tc.tss.impl.jni.tsp.TcContext.loadKeyByUuidFromSystem(TcContext.java:396)
> 	at org.eunicke.openid.lib.TssFascade.loadSRK(TssFascade.java:108)


-- 
Dipl.-Ing. Ronald Tögl          phone +43 316/873-5502
Trusted Computing Labs          fax   +43 316/873-5520
IAIK                            ron...@ia...
Graz University of Technology   http://www.iaik.tugraz.at