-
Notifications
You must be signed in to change notification settings - Fork 58
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add tpm2 version 2 support #75
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Looks ok to me @leonjia0112 , I will see if Robbie / Nabil or Charlie have any reviews before merging.
How are you testing this code (outside of unit tests), did you check these against an emulator?
I think I am going to design a test suite in an emulator environment. |
e4691f7
to
2dc3768
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
CI not passing; will re-review once it does.
2dc3768
to
167cad6
Compare
CI passed. |
@@ -23,6 +23,7 @@ mod common; | |||
mod crypto; | |||
mod secure_mount; | |||
mod tpm; |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
You should remove the tpm mod as part of this.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Ultimately, this should be removed. But if this is removed, for now, the tpm functions in the main function will not work.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
You have modules tpm
and tpm2
. I don't understand why we wouldn't only have one or the other.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@leonjia0112 what are the dependencies from tpm.rs -> main?
I am not sure why you did not resolve them as part o this patch.
@leonjia0112 I think you may have neglected to upload a new revision of this PR? The things you have marked as removed/resolved are not removed/resolved in the latest version on here. |
167cad6
to
75c9e30
Compare
75c9e30
to
ded88af
Compare
I think with tpm 2.0 being the only version we support, you could rename tpm2 to tpm. will review other code shortly. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
void comment (my mistake).
We should wait for this keylime/keylime#188 to finish its course first, so we know the exact syntax to use for |
closing as we will now integrate directly with the ESAPI |
Implemented a new version of TPM2 in Rust.
This has a TPM2 object that has fields for each instance:
By using this object, we can certainly maintain an TPM object instance in the agent server instead of run tpm functions maintain the file data file. This implementation has merged with the main function. Looking for comment/feedback/suggestion. Thanks.
@jetwhiz @lukehinds @mbestavros @frozencemetery