Hi users,

Using trousers-tpm-tools on Ubuntu, specifically tpm_getpubek, the
properties of my PubEK are weird.  I've seen this on two machines with
different TPM vendors.

This looks correct, straight from the driver:
root@ubuntu:~# cat /sys/class/misc/tpm0/device/pubek
Algorithm: 00 00 00 01
Encscheme: 00 03
Sigscheme: 00 01
Parameters: 00 00 08 00 00 00 00 02 00 00 00 00
Modulus length: 256
Modulus:
[censored]

This is not correct, notice the UNKNOWNS:
root@ubuntu:~# tpm_getpubek
Public Endorsement Key:
  Version:   01010000
  Usage:     0x0002 (Unknown)
  Flags:     0x00000000 (!VOLATILE, !MIGRATABLE, !REDIRECTION)
  AuthUsage: 0x00 (Never)
  Algorithm:         0x00000020 (Unknown)
  Encryption Scheme: 0x00000012 (Unknown)
  Signature Scheme:  0x00000010 (Unknown)
  Public Key:
[censored, agrees with previous command]

I wrote my own utility using the Tspi interface directly, to rule out
tpm-tools weirdness, but I get results that agree with the tpm_getpubek,
bogus values for the key properties.

The only way I can think to get good properties is to bypass most of the
stack and send the TPM_OwnerReadPubek command straight to TCSD.

Any other ideas or thoughts on why these values are wrong?

Thanks,
-Tadd
------------------------------------------------------------------------------
Site24x7 APM Insight: Get Deep Visibility into Application Performance
APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
Monitor end-to-end web transactions and take corrective actions now
Troubleshoot faster and improve end-user experience. Signup Now!
http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140
_______________________________________________
TrouSerS-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/trousers-users

Reply via email to