trustedjava-support

[Trustedjava-support] Decryption error

[Krzysztof K. <kko...@gm...>]

Dear all,

I have manage to run tmp emulator 0.5, jtss wrapper 0.2.5 and trousers 0.2.9.
I run jtss test(make run_tests) and only one test failed, namely:

   1.

   testStringEncoding(iaik.tss.test.junit.TestBlobData)junit.framework.AssertionFailedError:
   UTF-16 encoding error.

I have played with jTpm and all works fine. The only problem is when I try
to bind or seal data. I think that I carry it out properly(first create a
new TPM key, take ownership using this key and try to seal or bind data).
Unfortunately I got following error:


 [root@localhost jTpmTools_0.1]# ./jtt.sh seal -i version.txt -o test2 -u
1.2.3.4.5.ef444a41e03b -k key -p 15 -e ASCII


 17:02:18:832 [INFO] Seal::execute (205): sealing to pcr: 15

TSPI call error:

error code: 0x21

error message: TPM layer: Decryption error

at iaik.tss.impl.jni.TcBaseObject.handleRetCode(TcBaseObject.java:98)

at iaik.tss.impl.jni.TcContext.loadKeyByUuid(TcContext.java:343)

at iaik.tss.impl.jni.TcContext.loadKeyByUuidFromSystem(TcContext.java:357)

at iaik.tc.apps.jtt.data.Seal.execute(Seal.java:220)

at iaik.tc.utils.cmdline.SubCommand.run(SubCommand.java:80)

at iaik.tc.utils.cmdline.SubCommandParser.parse(SubCommandParser.java:52)

at iaik.tc.apps.jtt.common.JTpmTools.main(JTpmTools.java:67)


 What can cause this error? Is it something with jTpm, jTss, trousers or
configuration problem.


With best,

Kris

Re: [Trustedjava-support] Decryption error

[Thomas W. <tho...@ia...>]

Hello,

>       testStringEncoding(iaik.tss.test.junit.TestBlobData)junit.framework.AssertionFailedError:
>       UTF-16 encoding error.

That is strange. What platform are you using for your tests?
Which Java runtime?

> I have played with jTpm and all works fine. The only problem is when I 
> try to bind or seal data. I think that I carry it out properly(first 
> create a new TPM key, take ownership using this key and try to seal or 
> bind data). Unfortunately I got following error:

What do you mean by "create a new TPM key, take ownership using this 
key"? You do not have to supply a key to the TakeOwnership command.

> [root@localhost jTpmTools_0.1]# ./jtt.sh seal -i version.txt -o test2 -u 
> 1.2.3.4.5.ef444a41e03b -k key -p 15 -e ASCII

First of all: It seems like you are not running the latest jTpmTools 
version (your directory name says jTpmTools_0.1 while 0.2 is the latest 
version). I would recomment to update the jTpmTools to 0.2 since this 
version has been adapted to work with TrouSerS 0.2.9 and jTSS 0.2.5.

> What can cause this error? Is it something with jTpm, jTss, trousers or 
> configuration problem.

That is difficult to say. I'd recommend to updated the jTpmTools to 0.2 
and additionally you should check if you are using a JRE from SUN or 
some other vendor.
I just did another test-run on Emu 0.5, TrouSerS 0.2.9, jTSS 0.2.5 and 
jTpmTools 0.2: all tests succeeded and I was able to do sealing and 
unsealing without getting errors.

Regards,
Thomas Winkler