1 // This file was extracted from the TCG Published
2 // Trusted Platform Module Library
3 // Part 3: Commands
4 // Family "2.0"
5 // Level 00 Revision 01.16
6 // October 30, 2014
7
8 #include "InternalRoutines.h"
9 #include "RSA_Encrypt_fp.h"
10 #ifdef TPM_ALG_RSA
11 //
12 //
13 // Error Returns Meaning
14 //
15 // TPM_RC_ATTRIBUTES decrypt attribute is not SET in key referenced by keyHandle
16 // TPM_RC_KEY keyHandle does not reference an RSA key
17 // TPM_RC_SCHEME incorrect input scheme, or the chosen scheme is not a valid RSA
18 // decrypt scheme
19 // TPM_RC_VALUE the numeric value of message is greater than the public modulus of
20 // the key referenced by keyHandle, or label is not a null-terminated
21 // string
22 //
23 TPM_RC
TPM2_RSA_Encrypt(RSA_Encrypt_In * in,RSA_Encrypt_Out * out)24 TPM2_RSA_Encrypt(
25 RSA_Encrypt_In *in, // IN: input parameter list
26 RSA_Encrypt_Out *out // OUT: output parameter list
27 )
28 {
29 TPM_RC result;
30 OBJECT *rsaKey;
31 TPMT_RSA_DECRYPT *scheme;
32 char *label = NULL;
33
34 // Input Validation
35
36 rsaKey = ObjectGet(in->keyHandle);
37
38 // selected key must be an RSA key
39 if(rsaKey->publicArea.type != TPM_ALG_RSA)
40 return TPM_RC_KEY + RC_RSA_Encrypt_keyHandle;
41
42 // selected key must have the decryption attribute
43 if(rsaKey->publicArea.objectAttributes.decrypt != SET)
44 return TPM_RC_ATTRIBUTES + RC_RSA_Encrypt_keyHandle;
45
46 // Is there a label?
47 if(in->label.t.size > 0)
48 {
49 // label is present, so make sure that is it NULL-terminated
50 if(in->label.t.buffer[in->label.t.size - 1] != 0)
51 return TPM_RC_VALUE + RC_RSA_Encrypt_label;
52 label = (char *)in->label.t.buffer;
53 }
54
55 // Command Output
56
57 // Select a scheme for encryption
58 scheme = CryptSelectRSAScheme(in->keyHandle, &in->inScheme);
59 if(scheme == NULL)
60 return TPM_RC_SCHEME + RC_RSA_Encrypt_inScheme;
61
62 // Encryption. TPM_RC_VALUE, or TPM_RC_SCHEME errors my be returned buy
63 // CryptEncyptRSA. Note: It can also return TPM_RC_ATTRIBUTES if the key does
64 // not have the decrypt attribute but that was checked above.
65 out->outData.t.size = sizeof(out->outData.t.buffer);
66 result = CryptEncryptRSA(&out->outData.t.size, out->outData.t.buffer, rsaKey,
67 scheme, in->message.t.size, in->message.t.buffer,
68 label);
69 return result;
70 }
71 #endif
72