o l>jBL@s UddlmZddlZddlmZddlmZmZddlm Z m Z ddl m Z ddl mZddlmZdd lmZdd lmZmZd d lmZd d lmZmZddlmZmZmZm Z mZm!Z!m"Z"dZ#e $dZ%eGdddeZ&eGdddeZ'eGdddeZ(eGdddZ)dZ*dZ+eGdddZ,eGdddZ-Gd d!d!e.Z/eGd"d#d#eZ0eGd$d%d%eZ1eGd&d'd'Z2eGd(d)d)Z3eGd*d+d+eZ4ej5ej6BZ7d,e8d-<e-e2BZ9e/e3BZ:eGd.d/d/Z;d0d1Z)r=rArBrDrE) rreadTPM_GENERATED_VALUE ValueErrorTPM_ST_ATTEST_CERTIFYunpackstructerrorr;)clsrAreadergenerated_valuetpmi_st_attestr=clock reset_count restart_count safe_valuesaferD attested_nameattested_qualified_nameer&r&r'parsesB        zTpmAttestationFormat.parseN)rAr<r1r@rr r!__doc__r? classmethodr]r&r&r&r'r@gs r@c@s>eZdZUdZded<ded<ded<ded<eddZd S) TpmsRsaParmszParse TPMS_RSA_PARMS struct See: https://www.trustedcomputinggroup.org/wp-content/uploads/TPM-Rev-2.0-Part-2-Structures-01.38.pdf section 12.2.3.5 rC symmetricschemekey_bitsexponentc Cs|d}|tjtjB@}|tjtjBk}|s|tkrtd|d}|tjtjB@}|tjk}|r@|ttjtj fvr@td|tjtjBk} | rV|tjtj fvrVtd|tjk} | rj|tj tj tfvrjtd|ru|tfvrutd|d} |d} | dkrd } |||| | S) NrF symmetric is expected to be NULLzlkey is an unrestricted signing key, scheme is expected to be TPM_ALG_RSAPSS, TPM_ALG_RSASSA, or TPM_ALG_NULLz[key is a restricted signing key, scheme is expected to be TPM_ALG_RSAPSS, or TPM_ALG_RSASSAzlkey is an unrestricted decryption key, scheme is expected to be TPM_ALG_RSAES, TPM_ALG_OAEP, or TPM_ALG_NULLzJkey is an restricted decryption key, scheme is expected to be TPM_ALG_NULLrGri) rN ATTRIBUTES RESTRICTEDDECRYPT TPM_ALG_NULLrL SIGN_ENCRYPTrr"r#r$r%) rQrR attributesrbrestricted_decryptionis_restricted_decryption_keyrcrestricted_signis_unrestricted_signing_keyis_restricted_signing_keyis_unrestricted_decryption_keyrdrer&r&r'r]s`          zTpmsRsaParms.parseNr^r&r&r&r'ras rac@seZdZedddZdS)Tpm2bPublicKeyRsarRrr1cCs|||dSNrFrJrN)rQrRr&r&r'r]szTpm2bPublicKeyRsa.parseN)rRrr1rs)rr r!r`r]r&r&r&r'rssrsc@s>eZdZdZdZdZdZdZdZdZ dZ d Z d Z dd dZ dS) TpmEccCurvezTPM_ECC_CURVE https://www.trustedcomputinggroup.org/wp-content/uploads/TPM-Rev-2.0-Part-2-Structures-01.38.pdf section 6.4 rrrr-r r1ec.EllipticCurvecCsv|tjkr td|tjkrtS|tjkrtS|tjkr$t S|tj kr-t S|tj kr6t Std|)Nz No such curvezcurve is not supported)rvNONErL NIST_P192r SECP192R1 NIST_P224 SECP224R1 NIST_P256 SECP256R1 NIST_P384 SECP384R1 NIST_P521 SECP521R1r8r&r&r'to_curve%s       zTpmEccCurve.to_curveN)r1r{)rr r!r_r|r}rrrrBN_P256BN_P638SM2_P256rr&r&r&r'rvsrvc@s eZdZdZeZdZdZdZdS) TpmiAlgKdfzTPMI_ALG_KDF https://www.trustedcomputinggroup.org/wp-content/uploads/TPM-Rev-2.0-Part-2-Structures-01.38.pdf section 9.28 rz!"N) rr r!r_rjNULLKDF1_SP800_56AKDF2KDF1_SP800_108r&r&r&r'r6s rc@s<eZdZUded<ded<ded<ded<edd d Zd S) TpmsEccParmsrCrbrcrvcurve_idrkdfrRrr1cCs^|d}|d}|tkrtd|tkrtdt|d}t|d}|||||S)NrFrfzscheme is expected to be NULL)rNrjrLrvr)rQrRrbrcr kdf_schemer&r&r'r]Js  zTpmsEccParms.parseN)rRrr1r)rr r!r?r`r]r&r&r&r'rCs rc@s0eZdZUdZded<ded<ed dd Zd S) TpmsEccPointzTPMS_ECC_POINT https://www.trustedcomputinggroup.org/wp-content/uploads/TPM-Rev-2.0-Part-2-Structures-01.38.pdf Section 11.2.5.2 r<rIyrRrr1cCs*||d}||d}|||Srtru)rQrRrIrr&r&r'r]cs zTpmsEccPoint.parseN)rRrr1rr^r&r&r&r'rYs rc@s@eZdZdZdZdZdZdZdZdZ dZ d Z d Z d Z d Zd ZdS)rgzObject attributes see section 8.3 https://www.trustedcomputinggroup.org/wp-content/uploads/TPM-Rev-2.0-Part-2-Structures-01.38.pdf rr-rrz@iiiiil sN)rr r!r_ FIXED_TPMST_CLEAR FIXED_PARENTSENSITIVE_DATA_ORIGINUSER_WITH_AUTHADMIN_WITH_POLICYNO_DAENCRYPTED_DUPLICATIONrhrirk SHALL_BE_ZEROr&r&r&r'rgksrgr _PublicKeyc@sleZdZUdZded<ded<ded<ded <d ed <d ed <ded<edddZdddZdddZdS)TpmPublicFormatathe public area structure is defined by [TPMv2-Part2] Section 12.2.4 (TPMT_PUBLIC) as: TPMI_ALG_PUBLIC - type TPMI_ALG_HASH - nameAlg or + to indicate TPM_ALG_NULL TPMA_OBJECT - objectAttributes TPM2B_DIGEST - authPolicy TPMU_PUBLIC_PARMS - type parameters TPMU_PUBLIC_ID - uniq See: https://www.trustedcomputinggroup.org/wp-content/uploads/TPM-Rev-2.0-Part-2-Structures-01.38.pdf r(sign_algr,name_algrCrlr< auth_policy _Parameters parameters_UniquerrAr1c Cst|}t|d}t|d}|d}|tj@dkr&td|d||d}|tjkr?t ||}t |}n|tj krOt |}t |}n td|dd|} t| dkrftd||||||||S) NrFrGrz(attributes is not formated correctly: 0xrIz sign alg z is not supportedz+there should not be any data left in buffer)rr(rNr,rgrrLrJr*rar]rsr+rrr7len) rQrArRrrrlrrrrestr&r&r'r]s(        zTpmPublicFormat.parsercCs|jtjkrtt|jj}ttt|j }t || t S|jtjkrCtt|j }tt|jt|jtt|jj t Std|j)Nzpublic_key not implemented for )rr(r*rrarrerrsrr RSAPublicNumbers public_keyr r+rr EllipticCurvePublicNumbersrIrrrrr7)r9remodulusrr&r&r'rs   zTpmPublicFormat.public_keycCs@td|j}tj|jtd}||j|| 7}|S)u Computing Entity Names see: https://www.trustedcomputinggroup.org/wp-content/uploads/TPM-Rev-2.0-Part-1-Architecture-01.38.pdf section 16 Names Name ≔ nameAlg || HnameAlg (handle→nvPublicArea) where nameAlg algorithm used to compute Name HnameAlg hash using the nameAlg parameter in the NV Index location associated with handle nvPublicArea contents of the TPMS_NV_PUBLIC associated with handle rFbackend) rOpackrr Hashr:r updaterAfinalize)r9outputdigestr&r&r'r=s   zTpmPublicFormat.nameN)rAr<r1r)r1r)r1r<) rr r!r_r?r`r]rr=r&r&r&r'rs   rcCsjt|t|jdkrtd|jtj}|std|jtj}dd|j D}d|vr3tddS)Nrz#Certificate should not have Subjectz.Certificate should have SubjectAlternativeNamecSsg|]}|tkqSr&)OID_AIK_CERTIFICATE).0rIr&r&r' sz&_validate_tpm_cert..TzExtended key usage MUST contain the "joint-iso-itu-t(2) internationalorganizations(23) 133 tcg-kp(8) tcg-kp-AIKCertificate(3)" OID.) rrsubjectr extensionsget_extension_for_classrSubjectAlternativeNameExtendedKeyUsagevalue)certsexthas_aikr&r&r'_validate_tpm_certsrc@seZdZdZeddZdS)TpmAttestationtpmc CsVd|vrtd|d}|d}|d}t|dt}t|t||}z t |d} Wnt yE} zt d| d} ~ ww|j dusMJ|j j| |j jkr^td zAt |} ||} |j} tj| td }|| |}| j|krtd | jj| krt d |||d ttj|WStytdw)N ecdaaKeyIdzECDAA not implementedalgx5ccertInforpubAreazunable to parse pubAreaz9attestation pubArea does not match attestedCredentialDatarz5attestation does not sign for authData and ClientDataz;TPMS_CERTIFY_INFO does not include a valid name for pubAreasigz$signature of certInfo does not match)r7rload_der_x509_certificater rrfor_algfrom_cryptography_keyrrr] Exceptionrcredential_datar r@ _HASH_ALGr rrrrArEr=verifyrrATT_CA_InvalidSignature)r9 statement auth_dataclient_data_hashrr cert_inforpub_keypub_arear\ratt_to_be_signedhash_algrrAr&r&r'rsV      zTpmAttestation.verifyN)rr r!FORMATrrr&r&r&r'rsr)> __future__rrO dataclassesrenumrrtypingrr cryptographyrcryptography.exceptionsr rcryptography.hazmat.backendsr cryptography.hazmat.primitivesr )cryptography.hazmat.primitives.asymmetricr r coserutilsrrbaserrrrrrrjObjectIdentifierrrr(r,r;rKrMr@rar<rsrvrrrrg RSAPublicKeyEllipticCurvePublicKeyrr?rrrrrr&r&r&r's^      $ QT! [