mirror of
git://git.gnupg.org/gnupg.git
synced 2025-01-27 15:47:05 +01:00
1a4a4a8f5f
* agent/divert-tpm2.c: New. * Makefile.am (gpg_agent_SOURCES): Add it. * agent/command.c (do_one_keyinfo): Fake serialno for TPM. (cmd_keytotpm): New. (register_commands): Register KEYTOTPM command. * agent/pkdecrypt.c (agent_pkdecrypt): Divert to TPM. * agent/pksign.c (agent_pksign_do): Divert to TPM. -- This code installs diversions for pksign and pkdecrypt to do the operations via the TPM if a TPM shadowed key is present. It also adds an extra assuan command KEYTOTPM which moves an existing private key to a TPM shadowed key. The way TPM shadowing works is that the public and private key parts are fed in to the TPM command TPM2_Import. The output of this command is a TPM specific public and private key data where the private key data is symmetrically encrypted using a TPM internal key. If this physical TPM is ever lost or cleared, that TPM internal key will likewise be lost and nothing will ever be able to read the private key. Once the import is done, the shadow information for the key is updated to be a three part list consisting of the parent key (hard coded to 81000001 which is the Microsoft preferred RSA incarnation of the storage seed) and the public and private TPM data blobs. Now when a TPM shadowed key is used, the data blobs must be loaded into the TPM with TPM2_Load before any operation can be performed. Signed-off-by: James Bottomley <James.Bottomley@HansenPartnership.com> - Added ChangeLog entries Signed-off-by: Werner Koch <wk@gnupg.org>
112 lines
2.9 KiB
Makefile
112 lines
2.9 KiB
Makefile
# Copyright (C) 2001, 2003, 2004, 2005 Free Software Foundation, Inc.
|
|
#
|
|
# This file is part of GnuPG.
|
|
#
|
|
# GnuPG is free software; you can redistribute it and/or modify
|
|
# it under the terms of the GNU General Public License as published by
|
|
# the Free Software Foundation; either version 3 of the License, or
|
|
# (at your option) any later version.
|
|
#
|
|
# GnuPG is distributed in the hope that it will be useful,
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
# GNU General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU General Public License
|
|
# along with this program; if not, see <https://www.gnu.org/licenses/>.
|
|
|
|
## Process this file with automake to produce Makefile.in
|
|
|
|
bin_PROGRAMS = gpg-agent
|
|
libexec_PROGRAMS = gpg-protect-tool
|
|
if !HAVE_W32CE_SYSTEM
|
|
# fixme: Do no use simple-pwquery for preset-passphrase.
|
|
libexec_PROGRAMS += gpg-preset-passphrase
|
|
endif
|
|
noinst_PROGRAMS = $(TESTS)
|
|
|
|
EXTRA_DIST = ChangeLog-2011 gpg-agent-w32info.rc all-tests.scm
|
|
|
|
|
|
AM_CPPFLAGS =
|
|
|
|
include $(top_srcdir)/am/cmacros.am
|
|
|
|
if HAVE_W32_SYSTEM
|
|
resource_objs += gpg-agent-w32info.o
|
|
endif
|
|
|
|
AM_CFLAGS = $(LIBGCRYPT_CFLAGS) $(GPG_ERROR_CFLAGS)
|
|
|
|
gpg_agent_SOURCES = \
|
|
gpg-agent.c agent.h \
|
|
command.c command-ssh.c \
|
|
call-pinentry.c \
|
|
cache.c \
|
|
trans.c \
|
|
findkey.c \
|
|
pksign.c \
|
|
pkdecrypt.c \
|
|
genkey.c \
|
|
protect.c \
|
|
trustlist.c \
|
|
divert-scd.c \
|
|
divert-tpm2.c \
|
|
tpm2.c \
|
|
cvt-openpgp.c cvt-openpgp.h \
|
|
call-scd.c \
|
|
learncard.c
|
|
|
|
common_libs = $(libcommon)
|
|
commonpth_libs = $(libcommonpth)
|
|
if HAVE_W32CE_SYSTEM
|
|
pwquery_libs =
|
|
else
|
|
pwquery_libs = ../common/libsimple-pwquery.a
|
|
endif
|
|
|
|
|
|
gpg_agent_CFLAGS = $(AM_CFLAGS) $(LIBASSUAN_CFLAGS) $(NPTH_CFLAGS) \
|
|
$(INCICONV)
|
|
gpg_agent_LDADD = $(commonpth_libs) \
|
|
$(LIBGCRYPT_LIBS) $(LIBASSUAN_LIBS) $(NPTH_LIBS) \
|
|
$(GPG_ERROR_LIBS) $(LIBINTL) $(NETLIBS) $(LIBICONV) \
|
|
$(resource_objs)
|
|
gpg_agent_LDFLAGS = $(DL_LIBS) $(extra_bin_ldflags)
|
|
gpg_agent_DEPENDENCIES = $(resource_objs)
|
|
|
|
gpg_protect_tool_SOURCES = \
|
|
protect-tool.c \
|
|
protect.c cvt-openpgp.c
|
|
|
|
gpg_protect_tool_CFLAGS = $(AM_CFLAGS) $(LIBASSUAN_CFLAGS) \
|
|
$(INCICONV)
|
|
gpg_protect_tool_LDADD = $(common_libs) $(LIBGCRYPT_LIBS) $(LIBASSUAN_LIBS) \
|
|
$(GPG_ERROR_LIBS) $(LIBINTL) $(NETLIBS) $(LIBICONV)
|
|
|
|
gpg_preset_passphrase_SOURCES = \
|
|
preset-passphrase.c
|
|
|
|
# Needs $(NETLIBS) for libsimple-pwquery.la.
|
|
gpg_preset_passphrase_LDADD = \
|
|
$(pwquery_libs) $(common_libs) $(LIBASSUAN_LIBS) \
|
|
$(LIBGCRYPT_LIBS) $(GPG_ERROR_LIBS) $(LIBINTL) $(NETLIBS) $(LIBICONV)
|
|
|
|
|
|
# Make sure that all libs are build before we use them. This is
|
|
# important for things like make -j2.
|
|
$(PROGRAMS): $(common_libs) $(commonpth_libs) $(pwquery_libs)
|
|
|
|
|
|
|
|
#
|
|
# Module tests
|
|
#
|
|
TESTS = t-protect
|
|
|
|
t_common_ldadd = $(common_libs) $(LIBGCRYPT_LIBS) $(GPG_ERROR_LIBS) \
|
|
$(LIBINTL) $(LIBICONV) $(NETLIBS)
|
|
|
|
t_protect_SOURCES = t-protect.c protect.c
|
|
t_protect_LDADD = $(t_common_ldadd)
|