tspi_daa_issueinit(3) - Linux man page

TCG Software Stack Developer's Reference

Name

Tspi_DAA_IssueInit - initialize the Issuer for a join operation

Synopsis

#include <tss/tss_typedef.h>
#include <tss/tss_structs.h>
#include <tss/tspi.h>

TSPICALL Tspi_DAA_IssueInit(
    TSS_HDAA                      hDAA,
    TSS_HKEY                      issuerAuthPK,
    TSS_HKEY                      issuerKeyPair,
    TSS_DAA_IDENTITY_PROOF        identityProof,
    UINT32                        capitalUprimeLength,
    BYTE*                         capitalUprime,
    UINT32                        daaCounter,
    UINT32*                       nonceIssuerLength,
    BYTE**                        nonceIssuer,
    UINT32*                       authenticationChallengeLength,
    BYTE**                        authenticationChallenge,
    TSS_DAA_JOIN_ISSUER_SESSION*  joinSession
);

Description

Tspi_DAA_IssueInit is a function that is part of the DAA Issuer component. It's the first function out of 2 in order to issue a DAA Credential for a TCG Platform. It assumes that the endorsement key and its associated credentials are from a genuine and valid TPM. (Verification of the credentials is a process defined by the TCG Infrastructure WG.)

Parameters

hDAA

The hDAA parameter is used to specify the handle of the DAA object.

issuerAuthPK

The issuerAuthPKh parameter is the root authentication (public) key of DAA Issuer.

issuerKeyPair

The issuerKeyPair parameter is the handle of the main DAA Issuer key pair (private and public portion).

identityProof

The identityProof parameter is the structure containing endorsement, platform and conformance credential of the TPM requesting the DAA Credential.

capitalUprimeLength

The capitalUprimeLength parameter is the length of capitalUprime which is .

capitalUprime

The capitalUprime parameter is U'.

daaCounter

The daaCounter parameter is the DAA counter.

nonceIssuerLength

The nonceIssuerLength parameter is the length of nonceIssuer (20 bytes).

nonceIssuer

The nonceIssuer parameter is the nonce of the DAA Issuer.

authenticationChallengeLength

The authenticationChallengeLength parameter is the length of authenticationChallenge (256 bytes - DAA_SIZE_NE1).

authenticationChallenge

The authenticationChallenge parameter is the second nonce of the DAA Issuer that is encrypted by the endorsement public key. It is used as a challenge to authenticate the TPM.

joinSession

The joinSession parameter is the structure containing the DAA Join session information.

Return Codes

Tspi_DAA_IssueInit returns TSS_SUCCESS on success, otherwise one of the following values is returned:

TSS_E_INVALID_HANDLE: Either the DAA is not valid.
TSS_E_BAD_PARAMETER
TSS_E_INTERNAL_ERROR: An internal SW error has been detected.

Conforming To

Tspi_DAA_IssueInit conforms to the Trusted Computing Group Software Specification version 1.2