HiTSS

#include <stdio.h>
#include <tss2/tss2_tctildr.h>
#include <tss2/tss2_sys.h>
#include <tss2/tss2_mu.h>

#define SAFE_FREE(p) do { \
    if ((p) != NULL) { \
        free(p); \
        (p) = NULL; \
    } \
} while (false)

// 初始化上下文
TSS2_SYS_CONTEXT* InitSysCtx()
{
    TSS2_TCTI_CONTEXT *tctiCtx = NULL;
    const char *nameConf = "hmsa";
    // nameConf参数字符串中不支持设定conf，conf必须为空
    // 正确用法
    // Tss2_TctiLdr_Initialize("hmsa", &tctiCtx);
    // Tss2_TctiLdr_Initialize("hmsa:", &tctiCtx);
    // 错误用法
    // Tss2_TctiLdr_Initialize("hmsa:/dev/tpm0", &tctiCtx);
    TSS2_RC rc = Tss2_TctiLdr_Initialize(nameConf, &tctiCtx);
    if (rc != TSS2_RC_SUCCESS) {
        return NULL;
    }
    size_t size = Tss2_Sys_GetContextSize(0);
    TSS2_SYS_CONTEXT *sysCtx = (TSS2_SYS_CONTEXT *)calloc(1, size);
    if (sysCtx == nullptr) {
        return NULL;
    }
    TSS2_ABI_VERSION ver = TSS2_ABI_VERSION_CURRENT;
    rc = Tss2_Sys_Initialize(sysCtx, size, tctiCtx, &ver);
    if (rc != TSS2_RC_SUCCESS) {
        Tss2_TctiLdr_Finalize(&tctiCtx);
        SAFE_FREE(sysCtx);
        return NULL;
    }
    return sysCtx;
}

// 释放上下文
void ReleaseSysCtx(TSS2_SYS_CONTEXT **sysCtx)
{
    TSS2_TCTI_CONTEXT *tctiCtx = NULL;
    TSS2_RC rc = Tss2_Sys_GetTctiContext(*sysCtx, &tctiCtx);
    if (rc != TSS2_RC_SUCCESS) {
        return;
    }
    if (tctiCtx != NULL) {
        Tss2_TctiLdr_Finalize(&tctiCtx);
    }
    Tss2_Sys_Finalize(*sysCtx);
    SAFE_FREE(*sysCtx);
}

// 通过Sys API获取随机数示例
void GetRandomExample()
{
    TSS2_SYS_CONTEXT *sysCtx = InitSysCtx();
    if (sysCtx == NULL) {
        return;
    }
    TPM2B_DIGEST random = {};
    TSS2_RC rc = Tss2_Sys_GetRandom(sysCtx, NULL, 32, &random, NULL); // 32: 随机数长度
    if (rc != TSS2_RC_SUCCESS) {
        printf("Failed to get random, error:%d.\n", rc);
    }
    ReleaseSysCtx(&sysCtx);
}

// 通过Sys API获取随机数示例
void GetRandomExample2()
{
    TSS2_SYS_CONTEXT *sysCtx = InitSysCtx();
    if (sysCtx == NULL) {
        return;
    }
    TPM2B_DIGEST random = {};
    do {
        if (Tss2_Sys_GetRandom_Prepare(sysCtx, 32) != TSS2_RC_SUCCESS) { // 32: 随机数长度
            break;
        }
        if (Tss2_Sys_Execute(sysCtx) != TSS2_RC_SUCCESS) {
            break;
        }
        if (Tss2_Sys_GetRandom_Complete(sysCtx, &random) != TSS2_RC_SUCCESS) {
            break;
        }
    } while(false);
    ReleaseSysCtx(&sysCtx);
}

// MU API使用示例
void Int32MarshalUnmarshalExample()
{
    INT32 data = 20;
    uint8_t buffer[sizeof(data)] = { 0 };
    size_t bufferSize = sizeof(data);
    // 序列化data
    TSS2_RC rc = Tss2_MU_INT32_Marshal(data, buffer, bufferSize, NULL);
    if (rc != TSS2_RC_SUCCESS) {
        printf("Failed to marshal data, error:%d.\n", rc);
    }
    INT32 dest = 0;
    // 反序列化data，然后打印
    rc = Tss2_MU_INT32_Unmarshal(buffer, bufferSize, NULL, &dest);
    if (rc != TSS2_RC_SUCCESS) {
        printf("Failed to unmarshal data, error:%d.\n", rc);
    }
    printf("The unmarshal result is %d.\n", dest);
}

// HiTSS新增宏定义
#define TPM2_ST_ATTEST_NV_DIGEST ((TPM2_ST) 0x801C)

// HiTSS新增nvDigest字段
typedef union TPMU_ATTEST TPMU_ATTEST;
union TPMU_ATTEST {
    TPMS_CERTIFY_INFO certify; /* TPM2_ST_ATTEST_CERTIFY */
    TPMS_CREATION_INFO creation; /* TPM2_ST_ATTEST_CREATION */
    TPMS_QUOTE_INFO quote; /* TPM2_ST_ATTEST_QUOTE */
    TPMS_COMMAND_AUDIT_INFO commandAudit; /* TPM2_ST_ATTEST_COMMAND_AUDIT */
    TPMS_SESSION_AUDIT_INFO sessionAudit; /* TPM2_ST_ATTEST_SESSION_AUDIT */
    TPMS_TIME_ATTEST_INFO time; /* TPM2_ST_ATTEST_TIME */
    TPMS_NV_CERTIFY_INFO nv; /* TPM2_ST_ATTEST_NV */
    TPMS_NV_DIGEST_CERTIFY_INFO nvDigest; /* TPM2_ST_ATTEST_NV_DIGEST */
};

// HiTSS新增类型
typedef TPM2_KEY_BITS TPMI_TDES_KEY_BITS;

// HiTSS新增tdes字段
typedef union TPMU_SYM_KEY_BITS TPMU_SYM_KEY_BITS;
union TPMU_SYM_KEY_BITS {
    TPMI_TDES_KEY_BITS tdes; /* TPM2_ALG_TDES */
    TPMI_AES_KEY_BITS aes; /* TPM2_ALG_AES */
    TPMI_SM4_KEY_BITS sm4; /* TPM2_ALG_SM4 */
    TPMI_CAMELLIA_KEY_BITS camellia; /* TPM2_ALG_CAMELLIA */
    TPM2_KEY_BITS sym;
    TPMI_ALG_HASH exclusiveOr; /* TPM2_ALG_XOR */
    TPMS_EMPTY null; /* TPM2_ALG_NULL */
};

// HiTSS新增tdes字段
typedef union TPMU_SYM_MODE TPMU_SYM_MODE;
union TPMU_SYM_MODE {
    TPMI_ALG_SYM_MODE tdes; /* TPM2_ALG_TDES */
    TPMI_ALG_SYM_MODE aes; /* TPM2_ALG_AES */
    TPMI_ALG_SYM_MODE sm4; /* TPM2_ALG_SM4 */
    TPMI_ALG_SYM_MODE camellia; /* TPM2_ALG_CAMELLIA */
    TPMI_ALG_SYM_MODE sym;
    TPMS_EMPTY exclusiveOr; /* TPM2_ALG_XOR */
    TPMS_EMPTY null; /* TPM2_ALG_NULL */
};

// TCG规范中缺失的定义
typedef UINT32 TPM2_AT;

// TCG规范中缺失的定义
#define TPM2_MAX_AC_CAPABILITIES (TPM2_MAX_CAP_BUFFER / sizeof(TPMS_AC_OUTPUT))

// 为方便用户使用，HiTSS新增TPM2B结构体
typedef struct {
    UINT16 size;
    BYTE buffer[];
} TPM2B;

// TCG规范中缺失的定义
typedef TPM2_HANDLE TPMI_RH_HIERARCHY_POLICY;

// TCG规范中错误定义了tag字段的类型，HiTSS进行了修正
typedef struct TPMS_AC_OUTPUT TPMS_AC_OUTPUT;
struct TPMS_AC_OUTPUT {
    TPM2_AT tag;
    UINT32 data;
};