Hello, after some further debugging, making use of a debug build of the
library and GDB I've found that my failure is occurring when data unseal
calls authsess_xsap_verify(xsap, &digest).
which supposedly checks whether or not the session is authorised, but Im
not actually sure what that means in this context, Im using the correct
keys, so Im not sure what to do about not being in an "authorised session"
Thanks,
Sam Jenkins

On Tue, 4 Feb 2020 at 14:17, Kenneth Goldman <[email protected]> wrote:

> Unfortunately, I know the TPM well (I wrote the simulator and
> was the spec editor), but I don't know trousers.
>
> I think trousers has a verbose mode.  Does its trace show anything?
>
> If no one on the mailing list can help, I think you're have
> to run the TSS in a debugger.
>
> > From: Sam Jenkins <[email protected]>
> > To: Ken Goldman <[email protected]>
> > Cc: [email protected]
> > Date: 02/04/2020 04:20 AM
> > Subject: [EXTERNAL] Re: [TrouSerS-users] Unable to unseal data
> >
> > The return code is 1, i.e. not successful, but  when I ran the
> > emulator in debug mode to try and get more information, its saying
> > unseal ran successfully, so honestly Im not sure where the failure
> > is occurring.
> > If you have any suggestions they'd be much appreciated.
> > Thanks
> >
> > On Mon, 3 Feb 2020 at 13:54, Ken Goldman <[email protected]> wrote:
> > Does the emulator show the unseal failing?  I.e., is the TPM return code
> > not success?  If so, I can help.  If not, you need a trousers expert.
> >
> > On 2/1/2020 12:57 PM, Sam Jenkins via TrouSerS-users wrote:
> > > After some further debugging, without much to show for it, I've found
> > > that I had an issue where the tpm emulator was complaining about
> > > Tspi_LoadKeyByUUID, which appears to have been due to the key
> requiring
> > > authorisation, as such, GetKeyByUUID and LoadKey has to be used
> instead,
> > > while this has silenced the only error the tpm emulators is giving me,
> > > it still leads to tspi_data_unseal producing the return code 1. Making
> > > the matter more confusing is that, despite the key apparently not
> > > loading properly, tspi_data_seal was and is still working fine. Any
> > > support here would be greatly appreciated.
> >
> >
> >
> >
> > _______________________________________________
> > TrouSerS-users mailing list
> > [email protected]
> > https://lists.sourceforge.net/lists/listinfo/trousers-users
> >
> >
> > --
> > hello
>


-- 
hello
_______________________________________________
TrouSerS-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/trousers-users

Reply via email to