1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
|
/* IBM_PROLOG_BEGIN_TAG */
/* This is an automatically generated prolog. */
/* */
/* $Source: src/usr/secureboot/trusted/base/tpmLogMgr.H $ */
/* */
/* OpenPOWER HostBoot Project */
/* */
/* Contributors Listed Below - COPYRIGHT 2015,2016 */
/* [+] International Business Machines Corp. */
/* */
/* */
/* Licensed under the Apache License, Version 2.0 (the "License"); */
/* you may not use this file except in compliance with the License. */
/* You may obtain a copy of the License at */
/* */
/* http://www.apache.org/licenses/LICENSE-2.0 */
/* */
/* Unless required by applicable law or agreed to in writing, software */
/* distributed under the License is distributed on an "AS IS" BASIS, */
/* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or */
/* implied. See the License for the specific language governing */
/* permissions and limitations under the License. */
/* */
/* IBM_PROLOG_END_TAG */
/**
* @file tpmLogMgr.H
*
* @brief Trustedboot TPM Event Log Manager
*
*/
/////////////////////////////////////////////////////////////////
// NOTE: This file is exportable as TSS-Lite for skiboot/PHYP //
/////////////////////////////////////////////////////////////////
#ifndef __TPMLOGMGR_H
#define __TPMLOGMGR_H
// -----------------------------------------------
// Includes
// -----------------------------------------------
#ifdef __HOSTBOOT_MODULE
#include <sys/sync.h>
#include "../trustedboot.H"
#include "../trustedTypes.H"
#else
#include "trustedboot.H"
#include "trustedTypes.H"
#endif
#ifdef __cplusplus
namespace TRUSTEDBOOT
{
#endif
/// Event log header algorithms
struct _TCG_EfiSpecIdEventAlgorithmSize
{
uint16_t algorithmId;
uint16_t digestSize;
} PACKED;
typedef struct _TCG_EfiSpecIdEventAlgorithmSize
TCG_EfiSpecIdEventAlgorithmSize;
/// Event log header event data
struct _TCG_EfiSpecIdEventStruct
{
char signature[16];
uint32_t platformClass;
uint8_t specVersionMinor;
uint8_t specVersionMajor;
uint8_t specErrata;
uint8_t uintnSize;
uint32_t numberOfAlgorithms;
TCG_EfiSpecIdEventAlgorithmSize digestSizes[HASH_COUNT];
uint8_t vendorInfoSize;
char vendorInfo[0];
} PACKED;
typedef struct _TCG_EfiSpecIdEventStruct TCG_EfiSpecIdEventStruct;
uint32_t TCG_EfiSpecIdEventStruct_size(TCG_EfiSpecIdEventStruct* val);
enum {
TPMLOG_BUFFER_SIZE = 1024, ///< Size of event log buffer in bytes
};
struct _TpmLogMgr
{
uint32_t logSize; ///< Current byte size of log
uint8_t eventLog[TPMLOG_BUFFER_SIZE]; ///< EventLog Buffer
uint8_t* newEventPtr; ///< Pointer to location to add new event
mutex_t logMutex; ///< Log mutex
};
typedef struct _TpmLogMgr TpmLogMgr;
/**
* @brief Initialize the log manager
* @param[in/out] io_logMgr Return a pointer to the log manager
* @return errlHndl_t NULL if successful, otherwise a pointer to the
* error log.
*/
errlHndl_t TpmLogMgr_initialize(TpmLogMgr * io_logMgr);
/**
* @brief Add a new event to the log
* @param[in] val TpmLogMgr structure
* @param[in] logEvent Event log entry to add
* @return errlHndl_t NULL if successful, otherwise a pointer to the
* error log.
*/
errlHndl_t TpmLogMgr_addEvent(TpmLogMgr* val, TCG_PCR_EVENT2* logEvent);
/**
* @brief Get current log size in bytes
* @param[in] val TpmLogMgr structure
* @return uint32_t Byte size of log
*/
uint32_t TpmLogMgr_getLogSize(TpmLogMgr* val);
/**
* @brief Get pointer to first event in eventLog past the header event
* @param[in] val TpmLogMgr structure
* @return uint8_t First event handle
* @retval NULL On empty log
* @retval !NULL First event handle
*/
const uint8_t* TpmLogMgr_getFirstEvent(TpmLogMgr* val);
/**
* @brief Get pointer to next event in log and unmarshal log contents
* into i_eventLog
*
* @param[in] i_handle Current event to unmarshal
* @param[in] i_eventLog EVENT2 structure to populate
* @param[in] o_err Indicates if an error occurred during
* LogUnmarshal.
*
* @return uint8_t* Pointer to the next event after i_handle
* @retval NULL When val contains last entry in log
* @retval !NULL When addition log entries available
*/
const uint8_t* TpmLogMgr_getNextEvent(TpmLogMgr* val,
const uint8_t* i_handle,
TCG_PCR_EVENT2* i_eventLog,
bool* o_err);
/**
* @brief Get a TCG_PCR_EVENT2 populated with required data
*
* @param[in] i_pcr PCR to write to
* @param[in] i_algId Algorithm to use
* @param[in] i_digest Digest value to write to PCR
* @param[in] i_digestSize Byte size of i_digest array
* @param[in] i_logMsg Null terminated Log message
*
* @return TCG_PCR_EVENT2 PCR event log
*/
TCG_PCR_EVENT2 TpmLogMgr_genLogEventPcrExtend(TPM_Pcr i_pcr,
TPM_Alg_Id i_algId,
const uint8_t* i_digest,
size_t i_digestSize,
const char* i_logMsg);
/**
* @brief Dump contents of log to a trace
* @param[in] val TpmLogMgr structure
*/
void TpmLogMgr_dumpLog(TpmLogMgr* val);
#ifdef __cplusplus
} // end TRUSTEDBOOT namespace
#endif
#endif
|
