I can't speak to the testsuite code, but:

> - what does it mean exactly to load a key ?

Keys created by the TPM are returned to the user as a "key blob", which 
contains the public key, the encrypted private key, and some information about 
the key. In order for the key to be used, it must be loaded: the user provides 
the blob to the TPM, and the TPM decrypts the private key and holds it in its 
internal memory for use.

In the TSS, loading a key can sometimes be used simply to get a TSS-level key 
handle, when the key (such as the SRK) is already stored within the TPM.

(I'm glossing over some of the finer details; does that answer your question, 
or do you need more?)

> - my Pcr are all set to null (0) at the moment, are there not supposed to be 
> set to a particular value at the boot ? How 
> can we know which Pcr correspond to what ?Because  I thought that the TPM was 
> setting all values of the PCR at the boot > and  that each corresponds to the 
> "image" of a particular application... (I'm working with an emulator)

The *TPM* does not ever set PCR values. PCR values are set from the outside, 
using the TPM's TPM_Extend command. The boot values you're thinking of are put 
in by the Root of Trust for Measurement, usually the BIOS, and by other 
higher-level programs. (For example, the tGRUB boot loader hashes the kernel 
and kernel options being loaded and extends the results into various PCRs.) 

The TCG's PC Client documentation has the low-level PCR correspondences (I'm 
looking at the PC Client Implementation for BIOS document); higher-level PCR 
associations can (usually) be found in the documentation of your TPM-aware 
software.


                  Ariel Segall

------------------------------------------------------------------------------
ThinkGeek and WIRED's GeekDad team up for the Ultimate 
GeekDad Father's Day Giveaway. ONE MASSIVE PRIZE to the 
lucky parental unit.  See the prize list and enter to win: 
http://p.sf.net/sfu/thinkgeek-promo
_______________________________________________
TrouSerS-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/trousers-users

Reply via email to