Initial import of libtcpa-1.1b, a library and example programs for

the TCPA chip described in IBM Global Security Analysis Lab's
article "Take Control of TCPA" in the August 2003 issue of Linux
Journal.

For this package to be useful, you need a computer with a TCPA
chip, and support for the chip in your kernel. An unofficial NetBSD
TCPA driver and instructions can be found here:

http://www.citi.umich.edu/u/rwash/projects/trusted/netbsd.html

I don't have a TCPA chip with which to verify the functionality of
this package.

Thanks to Soren Jacobsen for bringing me up to speed on modern
pkgsrc conventions, and to Rick Wash for his recent presentation
at my local ACM chapter on TCPA and "Trusted Computing".

9 files changed, 148 insertions, 0 deletions

diff --git a/security/libtcpa/DESCR b/security/libtcpa/DESCR
new file mode 100644
index 00000000000..9f0bbdcf9c8
--- /dev/null
+++ b/security/libtcpa/DESCR
@@ -0,0 +1,5 @@
+A library and example programs for the TCPA chip, as described in
+IBM Global Security Analysis Lab's article "Take Control of TCPA"
+in the August 2003 issue of Linux Journal.
+
+For this to be useful, you need a computer with a TCPA chip.
diff --git a/security/libtcpa/MESSAGE b/security/libtcpa/MESSAGE
new file mode 100644
index 00000000000..fce8ce05465
--- /dev/null
+++ b/security/libtcpa/MESSAGE
@@ -0,0 +1,10 @@
+===========================================================================
+$NetBSD: MESSAGE,v 1.1.1.1 2004/02/22 01:40:04 schmonz Exp $
+
+For this package to be useful, you need support for the TCPA chip
+in your kernel.  An unofficial NetBSD TCPA driver and instructions
+can be found here:
+
+http://www.citi.umich.edu/u/rwash/projects/trusted/netbsd.html
+
+===========================================================================
diff --git a/security/libtcpa/Makefile b/security/libtcpa/Makefile
new file mode 100644
index 00000000000..f541d8e168b
--- /dev/null
+++ b/security/libtcpa/Makefile
@@ -0,0 +1,37 @@
+# $NetBSD: Makefile,v 1.1.1.1 2004/02/22 01:40:04 schmonz Exp $
+#
+
+DISTNAME=		tpm-1.1b
+PKGNAME=		${DISTNAME:S/tpm/libtcpa/}
+CATEGORIES=		security
+MASTER_SITES=		http://www.research.ibm.com/gsal/tcpa/
+DISTFILES=		${DISTNAME}${EXTRACT_SUFX} tcpa_man_20031210.tgz
+
+MAINTAINER=		schmonz@NetBSD.org
+HOMEPAGE=		http://www.research.ibm.com/gsal/tcpa/
+COMMENT=		TCPA libraries and test programs from IBM
+
+PKG_INSTALLATION_TYPES=	overwrite pkgviews
+
+WRKSRC=			${WRKDIR}/TPM
+USE_BUILDLINK3=		yes
+
+SITES_tcpa_man_20031210.tgz= http://www.citi.umich.edu/u/rwash/projects/trusted/
+
+BUILD_DIRS=		${WRKSRC}/libtcpa ${WRKSRC}/examples
+INSTALLATION_DIRS=	bin lib man/man3 share/doc/${PKGBASE}
+
+do-install:
+	${INSTALL_DATA} ${WRKSRC}/libtcpa/libtcpa.a ${PREFIX}/lib
+	for f in tcpa_demo takeown createkey loadkey evictkey signfile	\
+		verifyfile sealfile unsealfile; do			\
+		${INSTALL_PROGRAM} ${WRKSRC}/examples/$${f} ${PREFIX}/bin; \
+	done
+	for f in ${WRKDIR}/tcpa_man/*.3; do			\
+		${INSTALL_MAN} $${f} ${PREFIX}/man/man3;	\
+	done
+	${INSTALL_DATA} ${WRKSRC}/libtcpa/License ${PREFIX}/share/doc/${PKGBASE}
+	${INSTALL_DATA} ${WRKSRC}/README ${PREFIX}/share/doc/${PKGBASE}
+
+.include "../../security/openssl/buildlink3.mk"
+.include "../../mk/bsd.pkg.mk"
diff --git a/security/libtcpa/PLIST b/security/libtcpa/PLIST
new file mode 100644
index 00000000000..a4c63d78aa6
--- /dev/null
+++ b/security/libtcpa/PLIST
@@ -0,0 +1,22 @@
+@comment $NetBSD: PLIST,v 1.1.1.1 2004/02/22 01:40:04 schmonz Exp $
+bin/createkey
+bin/evictkey
+bin/loadkey
+bin/sealfile
+bin/signfile
+bin/takeown
+bin/tcpa_demo
+bin/unsealfile
+bin/verifyfile
+lib/libtcpa.a
+man/man3/tpm_getcapability.3
+man/man3/tpm_loadkey.3
+man/man3/tpm_oiap.3
+man/man3/tpm_readpubek.3
+man/man3/tpm_seal.3
+man/man3/tpm_sign.3
+man/man3/tpm_takeownership.3
+man/man3/tpm_transmit.3
+share/doc/libtcpa/License
+share/doc/libtcpa/README
+@dirrm share/doc/libtcpa
diff --git a/security/libtcpa/buildlink3.mk b/security/libtcpa/buildlink3.mk
new file mode 100644
index 00000000000..029b337b912
--- /dev/null
+++ b/security/libtcpa/buildlink3.mk
@@ -0,0 +1,24 @@
+# $NetBSD: buildlink3.mk,v 1.1.1.1 2004/02/22 01:40:04 schmonz Exp $
+#
+# This Makefile fragment is included by packages that use libtcpa.
+#
+# This file was created automatically using createbuildlink-3.1.
+#
+
+BUILDLINK_DEPTH:=	${BUILDLINK_DEPTH}+
+LIBTCPA_BUILDLINK3_MK:=	${LIBTCPA_BUILDLINK3_MK}+
+
+.if !empty(BUILDLINK_DEPTH:M+)
+BUILDLINK_DEPENDS+=	libtcpa
+.endif
+
+.if !empty(LIBTCPA_BUILDLINK3_MK:M+)
+BUILDLINK_PACKAGES+=			libtcpa
+BUILDLINK_DEPENDS.libtcpa+=		libtcpa>=1.1b
+BUILDLINK_PKGSRCDIR.libtcpa?=		../../security/libtcpa
+
+.include "../../security/openssl/buildlink3.mk"
+
+.endif # LIBTCPA_BUILDLINK3_MK
+
+BUILDLINK_DEPTH:=     ${BUILDLINK_DEPTH:S/+$//}
diff --git a/security/libtcpa/distinfo b/security/libtcpa/distinfo
new file mode 100644
index 00000000000..4168281846a
--- /dev/null
+++ b/security/libtcpa/distinfo
@@ -0,0 +1,9 @@
+$NetBSD: distinfo,v 1.1.1.1 2004/02/22 01:40:04 schmonz Exp $
+
+SHA1 (tpm-1.1b.tar.gz) = be59de89ae7ab633e23d4a03c855e3063aaf4c20
+Size (tpm-1.1b.tar.gz) = 135646 bytes
+SHA1 (tcpa_man_20031210.tgz) = 87c496f9e7c74424b0af981033f6017d4a8b0bc3
+Size (tcpa_man_20031210.tgz) = 7794 bytes
+SHA1 (patch-aa) = c1cbea575358dfe7c5e9470587138553ed41bbca
+SHA1 (patch-ab) = 0d24d953fd792d463bf3d5afb918ded72859366a
+SHA1 (patch-ac) = fb539295c818de87694b775bb5d9344049625558
diff --git a/security/libtcpa/patches/patch-aa b/security/libtcpa/patches/patch-aa
new file mode 100644
index 00000000000..1777ef2597b
--- /dev/null
+++ b/security/libtcpa/patches/patch-aa
@@ -0,0 +1,12 @@
+$NetBSD: patch-aa,v 1.1.1.1 2004/02/22 01:40:04 schmonz Exp $
+
+--- examples/Makefile.orig	Mon May 19 15:35:20 2003
++++ examples/Makefile
+@@ -1,6 +1,4 @@
+-AR = ar
+-RM = rm
+-CC = gcc -I../libtcpa -DTPMLOG=NULL
++CC := ${CC} -I../libtcpa -DTPMLOG=NULL
+ LIBS = ../libtcpa/libtcpa.a -lcrypto
+ 
+ all: tcpa_demo takeown createkey loadkey evictkey signfile \
diff --git a/security/libtcpa/patches/patch-ab b/security/libtcpa/patches/patch-ab
new file mode 100644
index 00000000000..29f46981a38
--- /dev/null
+++ b/security/libtcpa/patches/patch-ab
@@ -0,0 +1,17 @@
+$NetBSD: patch-ab,v 1.1.1.1 2004/02/22 01:40:04 schmonz Exp $
+
+--- libtcpa/Makefile.orig	Sat Apr 19 22:02:42 2003
++++ libtcpa/Makefile
+@@ -1,10 +1,8 @@
+-AR = ar 
+-RM = rm 
+-CC = gcc -g -Wall -I. 
++CC := ${CC} -g -Wall -I.
+ OBJS = tcpa.o transmit.o owner.o oiaposap.o hmac.o buildbuff.o keys.o seal.o \
+        pcrs.o signature.o
+ 
+-libtcpa.a:$(OBJS) 
++all:$(OBJS) 
+ 	$(AR) rv libtcpa.a $(OBJS)
+ 
+ tcpa.o: tcpa.c tcpa.h
diff --git a/security/libtcpa/patches/patch-ac b/security/libtcpa/patches/patch-ac
new file mode 100644
index 00000000000..9b20b3192c9
--- /dev/null
+++ b/security/libtcpa/patches/patch-ac
@@ -0,0 +1,12 @@
+$NetBSD: patch-ac,v 1.1.1.1 2004/02/22 01:40:04 schmonz Exp $
+
+--- libtcpa/buildbuff.c.orig	Thu Jul 10 13:32:54 2003
++++ libtcpa/buildbuff.c
+@@ -8,6 +8,7 @@
+ #include <string.h>
+ #include <stdarg.h>
+ #include <netinet/in.h>
++#include <sys/types.h>
+ 
+ /****************************************************************************/
+ /*                                                                          */