1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
|
/*
* Licensed Materials - Property of IBM
*
* trousers - An open source TCG Software Stack
*
* (C) Copyright International Business Machines Corp. 2004-2007
*
*/
#include <stdlib.h>
#include <stdio.h>
#include <string.h>
#include "trousers/tss.h"
#include "trousers/trousers.h"
#include "trousers_types.h"
#include "spi_utils.h"
#include "capabilities.h"
#include "tsplog.h"
#include "obj.h"
/* encrypt some data with the RSA public key of 'key', using the padding appropriate for the key */
TSS_RESULT
__tspi_rsa_encrypt(TSS_HKEY key,
UINT32 inDataLen,
BYTE* inData,
UINT32* outDataLen,
BYTE* outData)
{
BYTE *blob;
UINT32 blobLen;
UINT64 offset;
TSS_RESULT result;
TSS_HCONTEXT tspContext;
TPM_PUBKEY pubKey;
if (!inData || !outDataLen || !outData)
return TSPERR(TSS_E_INTERNAL_ERROR);
if ((result = obj_rsakey_get_tsp_context(key, &tspContext)))
return result;
if ((result = obj_rsakey_get_pub_blob(key, &blobLen, &blob)))
return result;
offset = 0;
if ((result = Trspi_UnloadBlob_PUBKEY(&offset, blob, &pubKey))) {
free_tspi(tspContext, blob);
return result;
}
free_tspi(tspContext, blob);
if (pubKey.pubKey.keyLength < inDataLen) {
result = TSPERR(TSS_E_ENC_INVALID_LENGTH);
goto done;
}
if (pubKey.algorithmParms.encScheme == TPM_ES_RSAESPKCSv15 ||
pubKey.algorithmParms.encScheme == TSS_ES_RSAESPKCSV15) {
if ((result = Trspi_RSA_PKCS15_Encrypt(inData, inDataLen, outData, outDataLen,
pubKey.pubKey.key, pubKey.pubKey.keyLength)))
goto done;
} else {
if ((result = Trspi_TPM_RSA_OAEP_Encrypt(inData, inDataLen, outData, outDataLen,
pubKey.pubKey.key,
pubKey.pubKey.keyLength)))
goto done;
}
done:
free(pubKey.pubKey.key);
free(pubKey.algorithmParms.parms);
return result;
}
TSS_RESULT
__tspi_rsa_verify(TSS_HKEY key,
UINT32 type,
UINT32 hashLen,
BYTE* hash,
UINT32 sigLen,
BYTE* sig)
{
BYTE *blob;
UINT32 blobLen;
UINT64 offset;
TSS_RESULT result;
TSS_HCONTEXT tspContext;
TPM_PUBKEY pubKey;
if (!hash || !sig)
return TSPERR(TSS_E_INTERNAL_ERROR);
if ((result = obj_rsakey_get_tsp_context(key, &tspContext)))
return result;
if ((result = obj_rsakey_get_pub_blob(key, &blobLen, &blob)))
return result;
offset = 0;
if ((result = Trspi_UnloadBlob_PUBKEY(&offset, blob, &pubKey))) {
free_tspi(tspContext, blob);
return result;
}
free_tspi(tspContext, blob);
result = Trspi_Verify(type, hash, hashLen, pubKey.pubKey.key, pubKey.pubKey.keyLength,
sig, sigLen);
free(pubKey.pubKey.key);
free(pubKey.algorithmParms.parms);
return result;
}
|
