Table Of Content

9 0 0 2 n a J 8 2 ] R C . s c [ 1 v EthembaTrustedHostEnvironmentMainlyBasedonAttestation 6 9 aframeworkanddemonstratorforTPMapplications 4 4 . 1 0 9 0 AndreasBrett : v [email protected] i X r AndreasLeicher a [email protected] December24,2008 Thisworkwassupportedby Dr.AndreasU.Schmidt(CREATE-NET) NicolaiKuntze(Fraunhofer-SIT) Contents 1 apps 7 1.1 ClearOwnership . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8 1.1.1 Description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8 1.1.2 PUBLICmain . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8 1.2 TakeOwnership . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9 1.2.1 Description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9 1.2.2 PUBLICmain . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9 1.3 ManageKnownHashesList . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10 1.3.1 Description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10 1.3.2 PUBLICmain . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10 1.4 PCAclient . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12 1.5 PCAserver . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14 1.6 RAclient . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15 1.7 RAserver . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17 2 jTPMtools 19 2.1 AikUtil . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20 2.2 Client . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21 2.3 PrivacyCa. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22 3 modules 23 3.1 client.CertDB . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24 3.1.1 Description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24 3.1.2 PUBLICgetCert . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24 3.1.3 PUBLICputCert . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24 3.1.4 PUBLICremoveCert . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24 3.1.5 PUBLICexportCert . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24 3.2 client.CertifyKey. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26 3.2.1 Description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26 3.2.2 CONSTRUCTORCertifyKey . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26 3.2.3 PUBLICrun . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26 3.3 client.CreateKey . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28 3.3.1 Description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28 3.3.2 CONSTRUCTORCreateKey . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28 3.3.3 PUBLICrun . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28 3.4 client.DataBinding . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29 3 4 Contents 3.4.1 Description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29 3.4.2 CONSTRUCTORDataBinding . . . . . . . . . . . . . . . . . . . . . . . . . . . 29 3.4.3 PUBLICrun . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29 3.5 client.DataUnbinding . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30 3.5.1 Description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30 3.5.2 CONSTRUCTORDataUnbinding . . . . . . . . . . . . . . . . . . . . . . . . . 30 3.5.3 PUBLICrun . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30 3.6 client.QuoteRetrieval . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31 3.6.1 Description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31 3.6.2 CONSTRUCTORQuoteRetrieval . . . . . . . . . . . . . . . . . . . . . . . . . 31 3.6.3 PUBLICrun . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31 3.7 client.TpmKeyDB . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32 3.7.1 Description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32 3.7.2 PUBLICgetUUID . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32 3.7.3 PUBLICputUUID . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32 3.7.4 PUBLICremoveUUID . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32 3.8 server.CertifyKeyValidaton . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34 3.8.1 Description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34 3.8.2 CONSTRUCTORCertifyKeyValidaton . . . . . . . . . . . . . . . . . . . . . . 34 3.8.4 PUBLICrun . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34 3.9 server.ExternalDataBinding . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36 3.9.1 Description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36 3.9.2 CONSTRUCTORExternalDataBinding . . . . . . . . . . . . . . . . . . . . . . 36 3.9.3 PUBLICrun . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36 3.10 server.KeyStorage . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37 3.10.1 Description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37 3.10.5 PUBLICgetPublicKeyFile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38 3.10.6 PUBLICgetPrivateKeyFile . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38 3.10.7 PUBLICgetPublicKey . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38 3.10.8 PUBLICgetPrivateKey . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38 3.10.9 PUBLICput . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39 3.10.10PUBLICputPublicKey . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39 3.10.11PUBLICputPrivateKey . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40 3.11 server.QuoteValidation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41 3.11.1 Description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41 3.11.2 CONSTRUCTORQuoteValidation. . . . . . . . . . . . . . . . . . . . . . . . . 41 3.11.5 PUBLICrun . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42 4 net 43 4.1 NetEntity . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44 4.1.1 Description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44 4.1.2 CONSTRUCTORNetEntity . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44 4.1.3 PUBLICinit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44 Contents 5 4.1.4 PUBLICclose . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44 4.1.5 PUBLICsendACK . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44 4.1.6 PUBLICsendNACK . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45 4.1.7 PUBLICsendCommand. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45 4.1.8 PUBLICsendObject . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45 4.1.9 PUBLICreceiveACK . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 46 4.1.10 PUBLICreceiveCommand . . . . . . . . . . . . . . . . . . . . . . . . . . . . 46 4.1.11 PUBLICreceiveObject . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 46 4.1.12 PUBLICgetRemoteIP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47 4.1.13 PUBLICgetRemoteHostname . . . . . . . . . . . . . . . . . . . . . . . . . . 47 4.2 NetCommand . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 48 4.2.1 Description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 48 5 types 49 5.1 MeasurementList . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50 5.1.1 Description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50 5.1.2 CONSTRUCTORMeasurementList . . . . . . . . . . . . . . . . . . . . . . . . 50 5.1.3 PUBLICgetMeasurementList . . . . . . . . . . . . . . . . . . . . . . . . . . 50 5.1.4 PUBLICgetMeasurementListForPCR . . . . . . . . . . . . . . . . . . . . . . 50 5.1.5 PUBLICloadFromFile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51 5.2 KnownHashesList . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52 5.2.1 Description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52 5.2.2 CONSTRUCTORKnownHashesList . . . . . . . . . . . . . . . . . . . . . . . . 52 5.2.3 PUBLICput . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52 5.2.4 PUBLICget . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52 5.2.5 PUBLICcontainsTag. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53 5.2.6 PUBLICcontainsSha1Hash . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53 5.2.7 PUBLICcontains . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53 5.2.8 PUBLICsaveToFile. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53 5.2.9 PUBLICloadFromFile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 54 6 utils 55 6.1 AES . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56 6.1.1 Description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56 6.1.2 CONSTRUCTORAES . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56 6.1.3 PUBLICencryptObject . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56 6.1.4 PUBLICencrypt . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56 6.1.5 PUBLICdecryptObject . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57 6.1.6 PUBLICdecrypt . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57 6.1.8 PUBLICgenerateKey . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 58 6.1.9 PUBLICgenerateKey . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 58 6.1.10 PUBLICgenerateIV . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 58 6.2 Helpers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59 6 Contents 6.2.1 Description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59 6.2.2 PUBLICbyteToHexString . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59 6.2.3 PUBLIChexStringToByteArray . . . . . . . . . . . . . . . . . . . . . . . . . . 59 6.2.4 PUBLICleadingZeroes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59 6.2.5 PUBLICsaveObjectToFile. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 60 6.2.6 PUBLICsaveBytesToFile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 60 6.2.7 PUBLICloadObjectFromFile . . . . . . . . . . . . . . . . . . . . . . . . . . . 60 6.2.8 PUBLICloadBytesFromFile . . . . . . . . . . . . . . . . . . . . . . . . . . . 60 6.2.9 PUBLICObject2Bytes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61 6.2.10 PUBLICBytes2Object . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61 6.3 SHA1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62 6.3.1 Description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62 6.3.2 PUBLICmain . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62 6.3.3 PUBLIChashByteToByte . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62 6.3.4 PUBLIChashHex . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62 6.3.5 PUBLIChash . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63 6.3.6 PUBLICrandomHash . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63 7 Demonstrators 65 7.1 demogood.sh . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65 7.2 demoevil.sh . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 66 8 Settings 67 References 69 1 apps DE.FRAUNHOFER.SIT.TC.ETHEMBA.APPS This package contains applications for TPM maintenance on the one hand and client- and server-applications that implement AIK-Certification and Remote-Attestation on the other hand. • TakeOwnershipandClearOwnershippermitTPMactivationcapabilities • ManageKnownHashesList helps managing hash lists, that define trusted applications usedinRemote-Attestationontheserver-side • PCAserverandPCAclientimplementAIK-Certification • RAserverandRAclientimplementRemote-Attestation 7 8 1 apps 1.1 ClearOwnership 1.1.1 Description ClearOwnership clears the ownership of the TPM. The code is mainly based on the original jTpmtools(seeReferences)application.ItcanbeusedintheprocessofresettingtheTPMtoits initialstate.Arebootmightberequiredforchangestotakeeffect.Thecurrentownerpassword issuppliedascommand-lineparameter. For convenience and tests, the switch /f provides a fixed mode, reading the globally set ownerpassword. Note:Inourtestscenario,routingtheTPM-Emulatorintoavirtualizedsub-system,wewere able to clear the ownership without supplying the correct owner password. It is still to be clarified,ifthisisanissuewiththeemulatedenvironmentortheimplementationinjTSS. 1.1.2 PUBLIC main Description Calledwhenusedincommand-line. Settings OwnerPwd Parameters STRING[]args [1]ownerpasswordorgloballysetownerpasswordwhen usedinfixedmode(’/f’). Output Ifnocommandlineparametersaregiven,ausageinformationisdisplayed. 1.2 TakeOwnership 9 1.2 TakeOwnership 1.2.1 Description TakeOwnership allows taking ownership of the TPM. The owner password is set, a new SRK is generated inside the TPM and the SRK password is set. The code is mainly based on the originaljTpmtools(seeReferences)application. TheownerandSRKpasswordsaresuppliedascommand-lineparameters.Forconvenience andtests,theswitch’/f’providesafixedmode,readingthegloballysetownerandSRKpass- words. 1.2.2 PUBLIC main Description Calledwhenusedincommand-line. Settings OwnerPwd,SRKPwd Parameters STRING[]args [1]ownerpasswordor’/f’forfixedmode [2]srkpassword Output Ifnocommandlineparametersaregiven,ausageinformationisdisplayed. 10 1 apps 1.3 ManageKnownHashesList 1.3.1 Description ManageKnownHashesList takes an IMA-formatted file as input and converts it to a Known- HashesList. Thisapplicationcanbeusedtocreateandmaintainadatabaseofknownhashes. Used in append-mode (command line parameter /a), the contents of the input will be ap- pendedtothedatabase. Usedinoverwrite-mode(commandlineparameter/o),thecontents oftheinputwilloverwriteanexistingdatabase.Ifnocommandlineparameterisgiven,aman- agementconsoleispresentedtotheuser,allowingforview,searchandremoveentriesofthe database. 1.3.2 PUBLIC main Description Calledwhenusedincommand-line. Settings RAServer_KnownHashesList Parameters STRING[]args [1] /a or /o to enable append- or overwrite-mode (op- tional) [2]filenameofIMA-Measurement-Filetobeusedwhen [1]isset Output Ifnocommandlineparametersaregiven,amanagementconsoleprovidingview,searchand removefunctionsispresentedtotheuser. Otherwisetheneworupdateddatabaseofknown hashesisstoredinRAServer_KnownHashesList. 1.3.3 PRIVATE append Description appendscontentsofgivenIMA-Measurement-Filetoexistingdatabase. Settings RAServer_KnownHashesList Parameters STRINGfile IMA-Measurement-File 1.3.4 PRIVATE overwrite Description overwritesexistingdatabasewithcontentsofgivenIMA-Measurement-File.

ebook img

Ethemba Trusted Host EnvironmentMainly Based on Attestation PDF

1.2 MB·English
by  Andreas Brett
#additional_collections #journals #arxiv
Save to my drive
Quick download
Download

Download Ethemba Trusted Host EnvironmentMainly Based on Attestation PDF Free - Full Version

by Andreas Brett| 1.2| English

Download Ethemba Trusted Host EnvironmentMainly Based on Attestation by Andreas Brett in PDF format completely FREE. No registration required, no payment needed. Get instant access to this valuable resource on PDFdrive.to!

Free Download PDF

About Ethemba Trusted Host EnvironmentMainly Based on Attestation

No description available for this book.

Detailed Information

Author:Andreas Brett
Language:English
File Size:1.2
Format:PDF
Price:FREE
Download Free PDF

Safe & Secure Download - No registration required

Why Choose PDFdrive for Your Free Ethemba Trusted Host EnvironmentMainly Based on Attestation Download?

  • 100% Free: No hidden fees or subscriptions required for one book every day.
  • No Registration: Immediate access is available without creating accounts for one book every day.
  • Safe and Secure: Clean downloads without malware or viruses
  • Multiple Formats: PDF, MOBI, Mpub,... optimized for all devices
  • Educational Resource: Supporting knowledge sharing and learning

Free Books Similar to Ethemba Trusted Host EnvironmentMainly Based on Attestation

Frequently Asked Questions

Is it really free to download Ethemba Trusted Host EnvironmentMainly Based on Attestation PDF?

Yes, on https://PDFdrive.to you can download Ethemba Trusted Host EnvironmentMainly Based on Attestation by Andreas Brett completely free. We don't require any payment, subscription, or registration to access this PDF file. For 3 books every day.

How can I read Ethemba Trusted Host EnvironmentMainly Based on Attestation on my mobile device?

After downloading Ethemba Trusted Host EnvironmentMainly Based on Attestation PDF, you can open it with any PDF reader app on your phone or tablet. We recommend using Adobe Acrobat Reader, Apple Books, or Google Play Books for the best reading experience.

Is this the full version of Ethemba Trusted Host EnvironmentMainly Based on Attestation?

Yes, this is the complete PDF version of Ethemba Trusted Host EnvironmentMainly Based on Attestation by Andreas Brett. You will be able to read the entire content as in the printed version without missing any pages.

Is it legal to download Ethemba Trusted Host EnvironmentMainly Based on Attestation PDF for free?

https://PDFdrive.to provides links to free educational resources available online. We do not store any files on our servers. Please be aware of copyright laws in your country before downloading.

The materials shared are intended for research, educational, and personal use in accordance with fair use principles.

We use cookies

We use cookies to ensure you get the best browsing experience on our website. By clicking "Accept Cookies", you agree that we can store cookies on your device in accordance with our Terms and Privacy.