mirror of
git://git.gnupg.org/gnupg.git
synced 2025-01-27 15:47:05 +01:00
144cceec7c
* agent/tpm2.c: New. * agent/Makefile.am (gpg_agent_SOURCES): Add new file. (gpg_agent_LDFLAGS): Add DL_LIBS. * agent/tpm2.h: New. -- This commit adds code to handle the three specific functions needed to make the agent TPM aware, namely the ability to load a key from shadow information, the ability to sign a digest with that key, the ability to decrypt with the key and the ability to import a key to the TPM. The TPM2 is a bit of an esoteric beast, so all TPM specific callouts are confined inside this code. Additionaly, it requires the tss2 library to function, so the code is designed such that if the library isn't present then all TPM functions simply fail. This allows the code to be compiled with TPM support, but not require that the support library be present on the system. Signed-off-by: James Bottomley <James.Bottomley@HansenPartnership.com> - Added ChangeLog entries. - Added DL_LIBS. - Removed one -Wdeclaration-after-statement case. Signed-off-by: Werner Koch <wk@gnupg.org>
23 lines
865 B
C
23 lines
865 B
C
#ifndef _TPM2_H
|
|
#define _TPM2_H
|
|
|
|
#include <tss2/tss.h>
|
|
|
|
#define TSS2_LIB "libtss.so.0"
|
|
#define TPM2_PARENT 0x81000001
|
|
|
|
int tpm2_start(TSS_CONTEXT **tssc);
|
|
void tpm2_end(TSS_CONTEXT *tssc);
|
|
void tpm2_flush_handle(TSS_CONTEXT *tssc, TPM_HANDLE h);
|
|
int tpm2_load_key(TSS_CONTEXT *tssc, const unsigned char *shadow_info,
|
|
TPM_HANDLE *key);
|
|
int tpm2_sign(ctrl_t ctrl, TSS_CONTEXT *tssc, TPM_HANDLE key,
|
|
const unsigned char *digest, size_t digestlen,
|
|
unsigned char **r_sig, size_t *r_siglen);
|
|
int tpm2_import_key(ctrl_t ctrl, TSS_CONTEXT *tssc, char *pub, int *pub_len,
|
|
char *priv, int *priv_len, gcry_sexp_t s_skey);
|
|
int tpm2_decrypt(ctrl_t ctrl, TSS_CONTEXT *tssc, TPM_HANDLE key,
|
|
const char *ciphertext, int ciphertext_len,
|
|
char **decrypt, size_t *decrypt_len);
|
|
#endif
|