ISO/IEC INTERNATIONAL STANDARD 11889-4 Secondedition 2015-12-15 Information technology Trusted Platform Module Library - Part 4: Supporting Routines Technologies de I'information - Bibliotheque de module de plate-forme de confiance - Partie 4: Routines de support Reference number IS0/IEC 11889-4:2015(E) IEC International Organization for Standardization icial Academy of Standardization5944055 @IS0/IEC2015 ted without license from IHS IS0/IEC 11889-4:2015(E) COPYRIGHTPROTECTEDDOCUMENT ISO/IEC2015,PublishedinSwitzerland All rights reserved. Unless otherwise specified, no part of this publication may be reproduced or utilized otherwise in any form or by any means, electronic or mechanical, including photocopying, or posting on the internet or an intranet, without prior written permission. Permission can be requested from either ISO at the address below or ISO's member body in the country of the requester. ISOcopyrightoffice Ch. de Blandonnet 8 . CP 401 CH-1214 Vernier, Geneva, Switzerland Tel. +41 22 749 01 11 Fax +41 22 749 09 47 [email protected] www.iso.org Intenationaibr PrganizationforStandardization icensee-Guangdong Provinicial Acad ISSta/JFdzan0 J.4as:All rights reserved Not for Resale, 2016/3/4 03:24:22 etworking permitted without license from IHS ISO/IEC 11889-4:2015(E) CONTENTS Foreword. xvii Introduction. xvili Scope... 2 Normative references 2 3 Terms and definitions .. 2 4 Symbols and abbreviated terms ..... 2 5 2 5.1 Introduction ...... 2 5.2 Configuration Parser. 2 5.3 Structure Parser.. 5.3.1 Introduction... 3 5.3.2 Unmarshaling Code Prototype.. C) 5.3.3 Marshaling Code Function Prototypes . 5.4 Command Parser. 6 5.5 Portability.. 6 6 Header Files. 6.1 Introduction. 6.2 BaseTypes.h 6.3 bits.h... 6.4 bool.h... 9 6.5 Capabilities.h 9 6.6 TPMB.h 6.7 TpmError.h. 6.8 Global.h . .10 6.8.1 Description. 6.8.2 Includes. .11 6.8.3 Defines and Types. 6.8.4 Loaded Object Structures. 6.8.5 AUTH_DUP Types 6.8.6 Active Session Context .. 14 6.8.7 PCR. .16 6.8.8 Startup 6.8.9 NV. 6.8.10 COMMIT_INDEX_MASK 6.8.11 RAM Global Values... .19 6.8.12 Persistent Global Values... .21 6.8.13 Global Macro Definitions...... ...26 6.9 Private data. ..26 6.10 Tpm.h ... ...31 6.11 swap.h... ..31 6.12 InternalRoutines.h ..32 6.13 TpmBuildSwitches.h .33 6.14 VendorString.h ..34 Main ..36 7.1 CommandDispatcher() ..36 7.2 ExecCommand.c. ..36 7.2.1 Introduction. ..36 7.2.2 Includes. ..36 7.2.3 ExecuteCommand() ...36 Internatinal Organization @std@AEC 2015 - All rights reserved ili Besale No reproduction or networking permitted withoutlicense from IHS ISO/IEC 11889-4:2015(E) 7.3 ParseHandleBuffer(). ..42 7.4 SessionProcess.c ... .43 7.4.1 Introduction.. .43 7.4.2 Includes and Data Definitions.. .43 7.4.3 Authorization Support Functions ..43 7.4.4 Session Parsing Functions.... 7.4.5 Response Session Processing ....68 8 Command Support Functions .... 8.1 Introduction ...... 8.2 Attestation Command Support (Attest_spt.c) . 8.2.1 Includes..... 8.2.2 Functions. 8.3 Context Management Command Support (Context_spt.c) 8.3.1 Includes. 8.3.2 Functions 8.4 Policy Command Support (Policy_spt.c) 8.4.1 Includes.. ..83 8.4.2 Functions ....83 8.5 NV Command Support (NV_spt.c). ..85 8.5.1 Includes. ..85 8.5.2 Functions 8.6 Object Command Support (Object_spt.c).. ..88 8.6.1 Includes... ...88 8.6.2 Local Functions ....88 8.6.3 Public Functions .. ....93 9 Subsystem 113 9.1 CommandAudit.c 113 9.1.1 Introduction.. .113 9.1.2 Includes..... .113 9.1.3 Functions .113 9.2 DA.c. 117 9.2.1 Introduction .117 9.2.2 IncludesandDataDefinitions .117 9.2.3 Functions .117 9.3 Hierarchy.c.. .120 9.3.1 Introduction .... .120 9.3.2 Includes.... 9.3.3 Functions ..120 9.4 NV.c. .124 9.4.1 Introduction .... ..124 9.4.2 Includes, Defines and Data Definitions .. .124 9.4.3 Nv Utility Functions ... .124 9.4.4 NV Index and Persistent Object Access Functions .. .126 9.4.5 RAM-based NV Index Data Access Functions..... 130 9.4.6 Utility Functions .... .132 9.4.7 Nv Access Functions 140 9.5 In