1 // This file was extracted from the TCG Published
2 // Trusted Platform Module Library
3 // Part 3: Commands
4 // Family "2.0"
5 // Level 00 Revision 01.16
6 // October 30, 2014
7
8 #include "InternalRoutines.h"
9 #include "Object_spt_fp.h"
10 #include "Create_fp.h"
11 //
12 //
13 // Error Returns Meaning
14 //
15 // TPM_RC_ASYMMETRIC non-duplicable storage key and its parent have different public
16 // parameters
17 // TPM_RC_ATTRIBUTES sensitiveDataOrigin is CLEAR when 'sensitive.data' is an Empty
18 // Buffer, or is SET when 'sensitive.data' is not empty; fixedTPM,
19 // fixedParent, or encryptedDuplication attributes are inconsistent
20 // between themselves or with those of the parent object; inconsistent
21 // restricted, decrypt and sign attributes; attempt to inject sensitive data
22 // for an asymmetric key; attempt to create a symmetric cipher key that
23 // is not a decryption key
24 // TPM_RC_HASH non-duplicable storage key and its parent have different name
25 // algorithm
26 // TPM_RC_KDF incorrect KDF specified for decrypting keyed hash object
27 // TPM_RC_KEY invalid key size values in an asymmetric key public area
28 // TPM_RC_KEY_SIZE key size in public area for symmetric key differs from the size in the
29 // sensitive creation area; may also be returned if the TPM does not
30 // allow the key size to be used for a Storage Key
31 // TPM_RC_RANGE the exponent value of an RSA key is not supported.
32 // TPM_RC_SCHEME inconsistent attributes decrypt, sign, restricted and key's scheme ID;
33 // or hash algorithm is inconsistent with the scheme ID for keyed hash
34 // object
35 // TPM_RC_SIZE size of public auth policy or sensitive auth value does not match
36 // digest size of the name algorithm sensitive data size for the keyed
37 // hash object is larger than is allowed for the scheme
38 // TPM_RC_SYMMETRIC a storage key with no symmetric algorithm specified; or non-storage
39 // key with symmetric algorithm different from TPM_ALG_NULL
40 // TPM_RC_TYPE unknown object type; non-duplicable storage key and its parent have
41 // different types; parentHandle does not reference a restricted
42 // decryption key in the storage hierarchy with both public and sensitive
43 // portion loaded
44 // TPM_RC_VALUE exponent is not prime or could not find a prime using the provided
45 // parameters for an RSA key; unsupported name algorithm for an ECC
46 // key
47 // TPM_RC_OBJECT_MEMORY there is no free slot for the object. This implementation does not
48 // return this error.
49 //
50 TPM_RC
TPM2_Create(Create_In * in,Create_Out * out)51 TPM2_Create(
52 Create_In *in, // IN: input parameter list
53 Create_Out *out // OUT: output parameter list
54 )
55 {
56 TPM_RC result = TPM_RC_SUCCESS;
57 TPMT_SENSITIVE sensitive;
58 TPM2B_NAME name;
59
60 // Input Validation
61
62 OBJECT *parentObject;
63
64 parentObject = ObjectGet(in->parentHandle);
65
66 // Does parent have the proper attributes?
67 if(!AreAttributesForParent(parentObject))
68 return TPM_RC_TYPE + RC_Create_parentHandle;
69
70 // The sensitiveDataOrigin attribute must be consistent with the setting of
71 // the size of the data object in inSensitive.
72 if( (in->inPublic.t.publicArea.objectAttributes.sensitiveDataOrigin == SET)
73 != (in->inSensitive.t.sensitive.data.t.size == 0))
74 // Mismatch between the object attributes and the parameter.
75 return TPM_RC_ATTRIBUTES + RC_Create_inSensitive;
76
77 // Check attributes in input public area. TPM_RC_ASYMMETRIC, TPM_RC_ATTRIBUTES,
78 // TPM_RC_HASH, TPM_RC_KDF, TPM_RC_SCHEME, TPM_RC_SIZE, TPM_RC_SYMMETRIC,
79 // or TPM_RC_TYPE error may be returned at this point.
80 result = PublicAttributesValidation(FALSE, in->parentHandle,
81 &in->inPublic.t.publicArea);
82 if(result != TPM_RC_SUCCESS)
83 return RcSafeAddToResult(result, RC_Create_inPublic);
84
85 // Validate the sensitive area values
86 if( MemoryRemoveTrailingZeros(&in->inSensitive.t.sensitive.userAuth)
87 > CryptGetHashDigestSize(in->inPublic.t.publicArea.nameAlg))
88 return TPM_RC_SIZE + RC_Create_inSensitive;
89
90 // Command Output
91
92 // Create object crypto data
93 result = CryptCreateObject(in->parentHandle, &in->inPublic.t.publicArea,
94 &in->inSensitive.t.sensitive, &sensitive);
95 if(result != TPM_RC_SUCCESS)
96 return result;
97
98 // Fill in creation data
99 FillInCreationData(in->parentHandle, in->inPublic.t.publicArea.nameAlg,
100 &in->creationPCR, &in->outsideInfo,
101 &out->creationData, &out->creationHash);
102
103 // Copy public area from input to output
104 out->outPublic.t.publicArea = in->inPublic.t.publicArea;
105
106 // Compute name from public area
107 ObjectComputeName(&(out->outPublic.t.publicArea), &name);
108
109 // Compute creation ticket
110 TicketComputeCreation(EntityGetHierarchy(in->parentHandle), &name,
111 &out->creationHash, &out->creationTicket);
112
113 // Prepare output private data from sensitive
114 SensitiveToPrivate(&sensitive, &name, in->parentHandle,
115 out->outPublic.t.publicArea.nameAlg,
116 &out->outPrivate);
117
118 return TPM_RC_SUCCESS;
119 }
120