tspi_daa_verifysignature(3) [debian man page]
Tspi_DAA_VerifySignature(3) Library Functions Manual Tspi_DAA_VerifySignature(3) TCG Software Stack Developer's Reference NAME
Tspi_DAA_VerifySignature - creates a challenge for the TCG platform SYNOPSIS
#include <tss/tss_typedef.h> #include <tss/tss_structs.h> #include <tss/tspi.h> TSPICALL Tspi_DAA_VerifySignature( TSS_HDAA hDAA, TSS_DAA_SIGNATURE daaSignature, TSS_HKEY hPubKeyIssuer, TSS_DAA_SIGN_DATA signData, UINT32 attributesLength, BYTE** attributes, UINT32 nonceVerifierLength, BYTE* nonceVerifier, UINT32 baseNameLength, BYTE* baseName, TSS_BOOL* isCorrect ); DESCRIPTION
Tspi_DAA_VerifySignature is part of the DAA Verifier component. It's the last function out of 2 in order to verify a DAA Credential of a TCG platform. It verifies the DAA Credential and detects public rogue TPMs. This is an optional function and does not require a TPM or a TCS. PARAMETERS
hDAA The hDAA parameter is used to specify the handle of the DAA object. daaSignature The daaSignature parameter is the DAA signature contains proof of ownership of the DAA Credential, as well as a signature on either an AIK or a message. hPubKeyIssuer The hPubKeyIssuer parameter is the handle of the DAA public key of the DAA Issuer of the credential. signData The signData parameter defines what data is signed (AIK or message). attributesLength The attributesLength parameter is the Length of attributes array that is determined by the DAA Issuer public key (lh+li). The length of a single attribute is lf/8. attributes The attributes parameter is the array of attributes which the DAA Credential owner reveals. nonceVerifierLength The nonceVerifierLength parameter is the length of nonceVerifier (20 bytes). nonceVerifier The nonceVerifier parameter is the nonce that was computed in the previous function (Tspi_VerifyInit). baseNameLength The baseNameLength parameter the length of the baseName. baseName The baseName parameter is the base name that was chosen for the DAA Signature. isCorrect The isCorrect parameter denotes if the verification of the DAA Signature was successful. RETURN CODES
Tspi_DAA_VerifySignature returns TSS_SUCCESS on success, otherwise one of the following values is returned: TSS_E_BAD_PARAMETER TSS_E_INTERNAL_ERROR An internal SW error has been detected. CONFORMING TO Tspi_DAA_VerifySignature conforms to the Trusted Computing Group Software Specification version 1.2 SEE ALSO
Tspi_DAA_IssuerKeyVerification(3) TSS 1.2 2006-09-04 Tspi_DAA_VerifySignature(3)
Check Out this Related Man Page
Tspi_DAA_IssueCredential(3) Library Functions Manual Tspi_DAA_IssueCredential(3) TCG Software Stack Developer's Reference NAME
Tspi_DAA_IssueCredential - issue a DAA credential for a TCG platform SYNOPSIS
#include <tss/tss_typedef.h> #include <tss/tss_structs.h> #include <tss/tspi.h> TSPICALL Tspi_DAA_IssueCredential( TSS_HDAA hDAA, UINT32 attributesIssuerLength, BYTE** attributesIssuer, TSS_DAA_CREDENTIAL_REQUEST credentialRequest, TSS_DAA_JOIN_ISSUER_SESSION joinSession, TSS_DAA_CRED_ISSUER* credIssuer ); DESCRIPTION
Tspi_DAA_IssueCredential is part of the DAA Issuer component. It's the last function out of 2 in order to issue a DAA Credential for a TCG Platform. It detects rogue TPM according to published rogue TPM DAA keys. This is an optional function and does not require a TPM or a TCS. PARAMETERS
hDAA The hDAA parameter is used to specify the handle of the DAA object. attributesIssuerLength The attributesIssuerLength parameter is the length of the attributesIssuer array, which is determined by the DAA Issuer public key (li). The length of a single attribute is if/8. attributesIssuer The attributesIssuer parameter is the array of attributes to be encoded into the DAA Credential visible to the DAA Issuer . credentialRequest The credentialRequest parameter is the credential request of the Platform, it contains the blinded DAA public key of the platform on which the DAA Issuer will issue the credential the blinded attributes chosen by the Platform. joinSession The joinSession parameter is the structure containing the DAA Join session information. credIssuer The credIssuer parameter is the structure containing the DAA Credential issued by the DAA Issuer, the proof of correctness of the creden- tial and the attributes chosen by the DAA Issuer. RETURN CODES
Tspi_DAA_IssueCredential returns TSS_SUCCESS on success, otherwise one of the following values is returned: TSS_E_BAD_PARAMETER TSS_E_INTERNAL_ERROR An internal SW error has been detected. TSS_E_DAA_AUTHENTICATION_ERROR The authentication proof of the TPM is incorrect. TSS_E_DAA_PSEUDONYM_ERROR The TPM is rogue. TSS_E_DAA_CREDENTIAL_REQUEST_PROOF_ERROR The proof of the credential request is incorrect. CONFORMING TO
Tspi_DAA_IssueCredential conforms to the Trusted Computing Group Software Specification version 1.2 SEE ALSO
Tspi_DAA_IssuerKeyVerification(3) TSS 1.2 2006-09-04 Tspi_DAA_IssueCredential(3)