ifapi_policy_execute.h

/* SPDX-License-Identifier: BSD-2-Clause */
/*******************************************************************************
 * Copyright 2018-2019, Fraunhofer SIT sponsored by Infineon Technologies AG
 * All rights reserved.
 *******************************************************************************/
#ifndef FAPI_POLICY_EXECUTE_H
#define FAPI_POLICY_EXECUTE_H
 
#include <stdbool.h> // for bool
#include <stddef.h>  // for size_t
#include <stdint.h>  // for uint8_t
 
#include "fapi_int.h"           // for IFAPI_POLICY_EXEC_CTX
#include "fapi_types.h"         // for NODE_OBJECT_T
#include "ifapi_keystore.h"     // for IFAPI_OBJECT
#include "ifapi_policy_types.h" // for TPMS_POLICY, TPMS_POLICYAUTHORIZATION
#include "tss2_common.h"        // for TSS2_RC
#include "tss2_esys.h"          // for ESYS_TR, ESYS_CONTEXT
#include "tss2_policy.h"        // for TSS2_POLICY_EXEC_CALLBACKS
#include "tss2_tpm2_types.h"    // for TPMI_ALG_HASH, TPM2B_DIGEST, TPM2B_NAME
 
TSS2_RC
ifapi_extend_authorization(TPMS_POLICY *policy, TPMS_POLICYAUTHORIZATION *authorization);
 
typedef TSS2_RC (*Policy_Compare_Object)(TPMS_POLICY *policy,
                                         void        *object1,
                                         void        *object2,
                                         bool        *found);

struct POLICY_LIST {
    const char         *path;   
    TPMS_POLICY         policy; 
    struct POLICY_LIST *next;   
};

struct policy_object_node {
    const char                *path;   
    TPMS_POLICY                policy; 
    struct policy_object_node *next;   
};

enum IFAPI_STATE_POLICY_EXCECUTE {
    POLICY_EXECUTE_INIT = 0,
    POLICY_EXECUTE_FINISH,
    POLICY_EXECUTE_CALLBACK,
    POLICY_LOAD_KEY,
    POLICY_LOAD_KEYEDHASH,
    POLICY_FLUSH_KEY,
    POLICY_VERIFY,
    POLICY_AUTH_CALLBACK,
    POLICY_AUTH_SENT,
    POLICY_EXEC_ESYS
};
 
typedef struct IFAPI_POLICY_CALLBACK_CTX IFAPI_POLICY_CALLBACK_CTX;

struct IFAPI_POLICY_EXEC_CTX {
    enum IFAPI_STATE_POLICY_EXCECUTE state;
    TPML_DIGEST            digest_list; 
    IFAPI_POLICY_EXEC_CTX *next;        
    IFAPI_POLICY_EXEC_CTX *prev;        
    ESYS_TR                session;     
    TPMS_POLICY           *policy;
    ESYS_TR                policySessionSav; 
    ESYS_TR               *enc_session;      
 
    ESYS_TR             object_handle;
    ESYS_TR             nv_index;
    ESYS_TR             auth_handle;
    IFAPI_OBJECT        auth_objectNV; 
    IFAPI_OBJECT       *auth_object;   
    ESYS_TR             auth_session;
    TPMI_ALG_HASH       hash_alg;
    void               *app_data;        
    NODE_OBJECT_T      *policy_elements; 
    TPM2B_DIGEST       *nonceTPM;
    uint8_t            *buffer;
    size_t              buffer_size;
    TPM2B_NAME          name;
    char               *pem_key; 
    struct POLICY_LIST *policy_list;
    bool                       flush_handle; 
    TSS2_POLICY_EXEC_CALLBACKS callbacks;
};
 
TSS2_RC
ifapi_policyeval_execute_prepare(IFAPI_POLICY_EXEC_CTX *pol_ctx,
                                 TPMI_ALG_HASH          hash_alg,
                                 TPMS_POLICY           *policy);
 
TSS2_RC
ifapi_policyeval_execute(ESYS_CONTEXT          *esys_ctx,
                         IFAPI_POLICY_EXEC_CTX *current_policy,
                         bool                   do_flush);
 
#endif /* FAPI_POLICY_EXECUTE_H */