policyutil

package

Go to main page

Versions in this module

v1

v1.6.2

Apr 10, 2024

v1.6.1

Apr 9, 2024

v1.6.0

Apr 9, 2024

Changes in this version

type PolicyBuilderBranch

+ func (b *PolicyBuilderBranch) PolicyOR(pHashList ...tpm2.Digest) (tpm2.Digest, error)

v1.5.0

Apr 9, 2024

Changes in this version

+ type NVAuthorizedPolicy struct

+ Name tpm2.Name

+ Policy *Policy

+ type NamedHandle interface

+ Handle func() tpm2.Handle

type Policy

+ func (p *Policy) String() string

+ func (p *Policy) Stringer(alg tpm2.HashAlgorithmId, authorizedPolicies PolicyAuthorizedPolicies) fmt.Stringer

+ type PolicyAuthorizedPolicies interface

+ AuthorizedPolicies func(keySign tpm2.Name, policyRef tpm2.Nonce) ([]*Policy, error)

+ func NewPolicyAuthorizedPolicies(policies []*Policy, nvPolicies []NVAuthorizedPolicy) PolicyAuthorizedPolicies

+ type PolicyAuthorizedPoliciesData struct

+ AuthorizedPolicies []*Policy

type PolicyBuilder

+ func (b *PolicyBuilder) Digest() (tpm2.Digest, error)

type PolicyResourcesData

+ NVAuthorizedPolicies []NVAuthorizedPolicy

type PolicySessionUsage

+ func (u *PolicySessionUsage) WithAuthIndex(index uint8) *PolicySessionUsage

+ func (u *PolicySessionUsage) WithoutAuthValue() *PolicySessionUsage

+ func (u PolicySessionUsage) AllowAuthValue() bool

+ func (u PolicySessionUsage) AuthHandle() NamedHandle

+ func (u PolicySessionUsage) CommandCode() tpm2.CommandCode

+ func (u PolicySessionUsage) CpHash(alg tpm2.HashAlgorithmId) (tpm2.Digest, error)

+ func (u PolicySessionUsage) NameHash(alg tpm2.HashAlgorithmId) (tpm2.Digest, error)

type TPMHelper

+ GetPermanentHandleAuthPolicy func(handle tpm2.Handle) (tpm2.TaggedHash, error)

v1.4.0

Apr 4, 2024

Changes in this version

+ type ExternalSensitiveResources interface

+ ExternalSensitive func(name tpm2.Name) (*tpm2.Sensitive, error)

+ type NewPolicySessionFn func(*tpm2.TPMContext, tpm2.SessionContext, ...tpm2.SessionContext) PolicySession

+ type NewTPMHelperFn func(*tpm2.TPMContext, ...tpm2.SessionContext) TPMHelper

type Policy

+ func (p *Policy) AddDigest(alg tpm2.HashAlgorithmId) (tpm2.Digest, error)

type PolicyBuilder

+ func NewPolicyBuilderOR(alg tpm2.HashAlgorithmId, policies ...*Policy) *PolicyBuilder

+ func (b *PolicyBuilder) Build(alg tpm2.HashAlgorithmId) (tpm2.Digest, *Policy, error)

type PolicyExecuteResult

+ func (r *PolicyExecuteResult) CommandCode() (code tpm2.CommandCode, set bool)

+ func (r *PolicyExecuteResult) CpHash() (cpHashA tpm2.Digest, set bool)

+ func (r *PolicyExecuteResult) NameHash() (nameHash tpm2.Digest, set bool)

+ func (r *PolicyExecuteResult) NvWritten() (nvWrittenSet bool, set bool)

type PolicyResources

+ ContextLoad func(context *tpm2.Context, policy *Policy) ResourceContext

+ ContextSave func(resource tpm2.ResourceContext) *tpm2.Context

+ ExternalSensitive func(name tpm2.Name) (*tpm2.Sensitive, error)

+ type PolicySession interface

+ Context func() SessionContext

+ HashAlg func() tpm2.HashAlgorithmId

+ Name func() tpm2.Name

+ PolicyAuthValue func() error

+ PolicyAuthorize func(approvedPolicy tpm2.Digest, policyRef tpm2.Nonce, keySign tpm2.Name, ...) error

+ PolicyCommandCode func(code tpm2.CommandCode) error

+ PolicyCounterTimer func(operandB tpm2.Operand, offset uint16, operation tpm2.ArithmeticOp) error

+ PolicyCpHash func(cpHashA tpm2.Digest) error

+ PolicyDuplicationSelect func(objectName, newParentName tpm2.Name, includeObject bool) error

+ PolicyGetDigest func() (tpm2.Digest, error)

+ PolicyNV func(auth, index tpm2.ResourceContext, operandB tpm2.Operand, offset uint16, ...) error

+ PolicyNameHash func(nameHash tpm2.Digest) error

+ PolicyNvWritten func(writtenSet bool) error

+ PolicyOR func(pHashList tpm2.DigestList) error

+ PolicyPCR func(pcrDigest tpm2.Digest, pcrs tpm2.PCRSelectionList) error

+ PolicyPassword func() error

+ PolicySecret func(authObject tpm2.ResourceContext, cpHashA tpm2.Digest, policyRef tpm2.Nonce, ...) (tpm2.Timeout, *tpm2.TkAuth, error)

+ PolicySigned func(authKey tpm2.ResourceContext, includeNonceTPM bool, cpHashA tpm2.Digest, ...) (tpm2.Timeout, *tpm2.TkAuth, error)

+ PolicyTicket func(timeout tpm2.Timeout, cpHashA tpm2.Digest, policyRef tpm2.Nonce, ...) error

+ func NewTPMPolicySession(tpm *tpm2.TPMContext, policySession tpm2.SessionContext, ...) PolicySession

+ type PolicySignedParams struct

+ CpHash tpm2.Digest

+ Expiration int32

+ NonceTPM tpm2.Nonce

type ResourceContext

+ Policy func() *Policy

+ type SessionContext interface

+ Flush func()

+ Save func() (restore func() error, err error)

+ Session func() tpm2.SessionContext

+ type TPMHelper interface

+ LoadExternal func(inPrivate *tpm2.Sensitive, inPublic *tpm2.Public, hierarchy tpm2.Handle) (ResourceContext, error)

+ NVRead func(auth, index tpm2.ResourceContext, size, offset uint16, ...) (tpm2.MaxNVBuffer, error)

+ NVReadPublic func(handle tpm2.HandleContext) (*tpm2.NVPublic, error)

+ PCRRead func(pcrs tpm2.PCRSelectionList) (tpm2.PCRValues, error)

+ ReadClock func() (*tpm2.TimeInfo, error)

+ ReadPublic func(handle tpm2.HandleContext) (*tpm2.Public, error)

+ StartAuthSession func(sessionType tpm2.SessionType, alg tpm2.HashAlgorithmId) (SessionContext, PolicySession, error)

+ VerifySignature func(key tpm2.ResourceContext, digest tpm2.Digest, signature *tpm2.Signature) (*tpm2.TkVerified, error)

+ func NewTPMHelper(tpm *tpm2.TPMContext, params *TPMHelperParams, sessions ...tpm2.SessionContext) TPMHelper

+ type TPMHelperParams struct

+ NewPolicySessionFn NewPolicySessionFn

+ type TPMPolicyResourcesParams struct

+ Authorizer Authorizer

+ ExternalSensitiveResources ExternalSensitiveResources

+ NewPolicySessionFn NewPolicySessionFn

+ NewTPMHelperFn NewTPMHelperFn

+ SignedAuthorizer SignedAuthorizer

v1.3.0

Jan 4, 2024

v1.2.0

Dec 14, 2023

v1.1.0

Nov 18, 2023

Changes in this version

+ var ErrMissingDigest = errors.New("missing digest for session algorithm")

+ func ComputeCpHash(alg tpm2.HashAlgorithmId, command tpm2.CommandCode, handles []Named, ...) (tpm2.Digest, error)

+ func ComputeNameHash(alg tpm2.HashAlgorithmId, handles ...Named) (tpm2.Digest, error)

+ func ComputePCRDigest(alg tpm2.HashAlgorithmId, pcrs tpm2.PCRSelectionList, values tpm2.PCRValues) (tpm2.Digest, error)

+ func ComputePCRDigestFromAllValues(alg tpm2.HashAlgorithmId, values tpm2.PCRValues) (tpm2.PCRSelectionList, tpm2.Digest, error)

+ func ComputePolicyAuthorizationTBSDigest(alg crypto.Hash, message []byte, policyRef tpm2.Nonce) []byte

+ func SignPolicySignedAuthorization(rand io.Reader, signer crypto.Signer, nonceTPM tpm2.Nonce, cpHashA tpm2.Digest, ...) (*tpm2.Signature, error)

+ type Authorizer interface

+ Authorize func(resource tpm2.ResourceContext) error

+ type CpHash interface

+ Digest func(alg tpm2.HashAlgorithmId) (tpm2.Digest, error)

+ func CommandParameterDigest(alg tpm2.HashAlgorithmId, digest tpm2.Digest) CpHash

+ func CommandParameterDigests(digests ...tpm2.TaggedHash) CpHash

+ func CommandParameters(command tpm2.CommandCode, handles []Named, params ...interface{}) CpHash

+ type LoadPolicyParams struct

+ IgnoreAuthorizations []PolicyAuthorizationID

+ IgnoreNV []Named

+ Tickets []*PolicyTicket

+ type Named interface

+ Name func() tpm2.Name

+ type PersistentResource struct

+ Handle tpm2.Handle

+ Name tpm2.Name

+ Policy *Policy

+ type Policy struct

+ func (p *Policy) Authorize(rand io.Reader, authKey *tpm2.Public, policyRef tpm2.Nonce, ...) error

+ func (p *Policy) Branches() ([]string, error)

+ func (p *Policy) Compute(alg tpm2.HashAlgorithmId) (tpm2.Digest, error)

+ func (p *Policy) Details(alg tpm2.HashAlgorithmId, path string) (map[string]PolicyBranchDetails, error)

+ func (p *Policy) Digest(alg tpm2.HashAlgorithmId) (tpm2.Digest, error)

+ func (p *Policy) Execute(tpm TPMConnection, session tpm2.SessionContext, resources PolicyResources, ...) (result *PolicyExecuteResult, err error)

+ func (p *Policy) Unmarshal(r io.Reader) error

+ func (p *Policy) Validate(alg tpm2.HashAlgorithmId) (tpm2.Digest, error)

+ func (p Policy) Marshal(w io.Writer) error

+ type PolicyAuthorization struct

+ AuthKey *tpm2.Public

+ PolicyRef tpm2.Nonce

+ Signature *tpm2.Signature

+ func SignPolicyAuthorization(rand io.Reader, message []byte, authKey *tpm2.Public, policyRef tpm2.Nonce, ...) (*PolicyAuthorization, error)

+ func (a *PolicyAuthorization) Verify(message []byte) (ok bool, err error)

+ type PolicyAuthorizationDetails struct

+ AuthName tpm2.Name

+ PolicyRef tpm2.Nonce

+ type PolicyAuthorizationError struct

+ AuthName tpm2.Name

+ PolicyRef tpm2.Nonce

+ func (e *PolicyAuthorizationError) Error() string

+ func (e *PolicyAuthorizationError) Unwrap() error

+ type PolicyAuthorizationID = PolicyAuthorizationDetails

+ type PolicyBranchDetails struct

+ AuthValueNeeded bool

+ Authorize []PolicyAuthorizationDetails

+ CounterTimer []PolicyCounterTimerDetails

+ NV []PolicyNVDetails

+ PCR []PolicyPCRDetails

+ Secret []PolicyAuthorizationDetails

+ Signed []PolicyAuthorizationDetails

+ func (r *PolicyBranchDetails) CommandCode() (code tpm2.CommandCode, set bool)

+ func (r *PolicyBranchDetails) CpHash() (cpHashA tpm2.Digest, set bool)

+ func (r *PolicyBranchDetails) IsValid() bool

+ func (r *PolicyBranchDetails) NameHash() (nameHash tpm2.Digest, set bool)

+ func (r *PolicyBranchDetails) NvWritten() (nvWrittenSet bool, set bool)

+ type PolicyBuilder struct

+ func NewPolicyBuilder() *PolicyBuilder

+ func (b *PolicyBuilder) Policy() (*Policy, error)

+ func (b *PolicyBuilder) RootBranch() *PolicyBuilderBranch

+ type PolicyBuilderBranch struct

+ func (b *PolicyBuilderBranch) AddBranchNode() *PolicyBuilderBranchNode

+ func (b *PolicyBuilderBranch) PolicyAuthValue() error

+ func (b *PolicyBuilderBranch) PolicyAuthorize(policyRef tpm2.Nonce, keySign *tpm2.Public) error

+ func (b *PolicyBuilderBranch) PolicyCommandCode(code tpm2.CommandCode) error

+ func (b *PolicyBuilderBranch) PolicyCounterTimer(operandB tpm2.Operand, offset uint16, operation tpm2.ArithmeticOp) error

+ func (b *PolicyBuilderBranch) PolicyCpHash(code tpm2.CommandCode, handles []Named, params ...interface{}) error

+ func (b *PolicyBuilderBranch) PolicyDuplicationSelect(object, newParent Named, includeObject bool) error

+ func (b *PolicyBuilderBranch) PolicyNV(nvIndex *tpm2.NVPublic, operandB tpm2.Operand, offset uint16, ...) error

+ func (b *PolicyBuilderBranch) PolicyNameHash(handles ...Named) error

+ func (b *PolicyBuilderBranch) PolicyNvWritten(writtenSet bool) error

+ func (b *PolicyBuilderBranch) PolicyPCR(values tpm2.PCRValues) error

+ func (b *PolicyBuilderBranch) PolicyPassword() error

+ func (b *PolicyBuilderBranch) PolicySecret(authObject Named, policyRef tpm2.Nonce) error

+ func (b *PolicyBuilderBranch) PolicySigned(authKey *tpm2.Public, policyRef tpm2.Nonce) error

+ type PolicyBuilderBranchNode struct

+ func (n *PolicyBuilderBranchNode) AddBranch(name string) *PolicyBuilderBranch

+ type PolicyCounterTimerDetails struct

+ Offset uint16

+ OperandB tpm2.Operand

+ Operation tpm2.ArithmeticOp

+ type PolicyError struct

+ Path string

+ func (e *PolicyError) Error() string

+ func (e *PolicyError) Unwrap() error

+ type PolicyExecuteParams struct

+ IgnoreAuthorizations []PolicyAuthorizationID

+ IgnoreNV []Named

+ Path string

+ Tickets []*PolicyTicket

+ Usage *PolicySessionUsage

+ type PolicyExecuteResult struct

+ AuthValueNeeded bool

+ InvalidTickets []*PolicyTicket

+ NewTickets []*PolicyTicket

+ Path string

+ type PolicyNVDetails struct

+ Auth tpm2.Handle

+ Index tpm2.Handle

+ Name tpm2.Name

+ Offset uint16

+ OperandB tpm2.Operand

+ Operation tpm2.ArithmeticOp

+ type PolicyNVError struct

+ Index tpm2.Handle

+ Name tpm2.Name

+ func (e *PolicyNVError) Error() string

+ func (e *PolicyNVError) Unwrap() error

+ type PolicyPCRDetails struct

+ PCRDigest tpm2.Digest

+ PCRs tpm2.PCRSelectionList

+ type PolicyResources interface

+ Authorize func(resource tpm2.ResourceContext) error

+ AuthorizedPolicies func(keySign tpm2.Name, policyRef tpm2.Nonce) ([]*Policy, error)

+ LoadedResource func(name tpm2.Name, policyParams *LoadPolicyParams) (resource ResourceContext, policy *Policy, newTickets []*PolicyTicket, ...)

+ Policy func(name tpm2.Name) (*Policy, error)

+ SignedAuthorization func(sessionNonce tpm2.Nonce, authKey tpm2.Name, policyRef tpm2.Nonce) (*PolicySignedAuthorization, error)

+ func NewTPMPolicyResources(tpm *tpm2.TPMContext, data *PolicyResourcesData, authorizer Authorizer, ...) PolicyResources

+ type PolicyResourcesData struct

+ AuthorizedPolicies []*Policy

+ Persistent []PersistentResource

+ Transient []TransientResource

+ type PolicySessionUsage struct

+ func NewPolicySessionUsage(command tpm2.CommandCode, handles []Named, params ...interface{}) *PolicySessionUsage

+ func (u *PolicySessionUsage) NoAuthValue() *PolicySessionUsage

+ func (u *PolicySessionUsage) WithNVHandle(handle tpm2.Handle) *PolicySessionUsage

+ type PolicySignedAuthorization struct

+ Authorization *PolicyAuthorization

+ CpHash tpm2.Digest

+ Expiration int32

+ NonceTPM tpm2.Nonce

+ func NewPolicySignedAuthorization(sessionAlg tpm2.HashAlgorithmId, nonceTPM tpm2.Nonce, cpHashA CpHash, ...) (*PolicySignedAuthorization, error)

+ func (a *PolicySignedAuthorization) Sign(rand io.Reader, authKey *tpm2.Public, policyRef tpm2.Nonce, ...) error

+ func (a *PolicySignedAuthorization) Verify() (ok bool, err error)

+ type PolicyTicket struct

+ AuthName tpm2.Name

+ CpHash tpm2.Digest

+ PolicyRef tpm2.Nonce

+ Ticket *tpm2.TkAuth

+ Timeout tpm2.Timeout

+ type ResourceAuthorizeError struct

+ Name tpm2.Name

+ func (e *ResourceAuthorizeError) Error() string

+ func (e *ResourceAuthorizeError) Unwrap() error

+ type ResourceContext interface

+ Flush func() error

+ Resource func() tpm2.ResourceContext

+ type ResourceLoadError struct

+ Name tpm2.Name

+ func (e *ResourceLoadError) Error() string

+ func (e *ResourceLoadError) Unwrap() error

+ type SignedAuthorizer interface

+ SignedAuthorization func(sessionNonce tpm2.Nonce, authKey tpm2.Name, policyRef tpm2.Nonce) (*PolicySignedAuthorization, error)

+ type TPMConnection interface

+ ContextLoad func(context *tpm2.Context) (tpm2.HandleContext, error)

+ ContextSave func(handle tpm2.HandleContext) (*tpm2.Context, error)

+ FlushContext func(handle tpm2.HandleContext) error

+ LoadExternal func(inPrivate *tpm2.Sensitive, inPublic *tpm2.Public, hierarchy tpm2.Handle) (tpm2.ResourceContext, error)

+ NVRead func(auth, index tpm2.ResourceContext, size, offset uint16, ...) (tpm2.MaxNVBuffer, error)

+ NVReadPublic func(handle tpm2.HandleContext) (*tpm2.NVPublic, tpm2.Name, error)

+ PCRRead func(pcrs tpm2.PCRSelectionList) (tpm2.PCRValues, error)

+ PolicyAuthValue func(policySession tpm2.SessionContext) error

+ PolicyAuthorize func(policySession tpm2.SessionContext, approvedPolicy tpm2.Digest, ...) error

+ PolicyCommandCode func(policySession tpm2.SessionContext, code tpm2.CommandCode) error

+ PolicyCounterTimer func(policySession tpm2.SessionContext, operandB tpm2.Operand, offset uint16, ...) error

+ PolicyCpHash func(policySession tpm2.SessionContext, cpHashA tpm2.Digest) error

+ PolicyDuplicationSelect func(policySession tpm2.SessionContext, objectName, newParentName tpm2.Name, ...) error

+ PolicyGetDigest func(policySession tpm2.SessionContext) (tpm2.Digest, error)

+ PolicyNV func(auth, index tpm2.ResourceContext, policySession tpm2.SessionContext, ...) error

+ PolicyNameHash func(policySession tpm2.SessionContext, nameHash tpm2.Digest) error

+ PolicyNvWritten func(policySession tpm2.SessionContext, writtenSet bool) error

+ PolicyOR func(policySession tpm2.SessionContext, pHashList tpm2.DigestList) error

+ PolicyPCR func(policySession tpm2.SessionContext, pcrDigest tpm2.Digest, ...) error

+ PolicyPassword func(policySession tpm2.SessionContext) error

+ PolicySecret func(authObject tpm2.ResourceContext, policySession tpm2.SessionContext, ...) (tpm2.Timeout, *tpm2.TkAuth, error)

+ PolicySigned func(authKey tpm2.ResourceContext, policySession tpm2.SessionContext, ...) (tpm2.Timeout, *tpm2.TkAuth, error)

+ PolicyTicket func(policySession tpm2.SessionContext, timeout tpm2.Timeout, cpHashA tpm2.Digest, ...) error

+ ReadClock func() (*tpm2.TimeInfo, error)

+ ReadPublic func(handle tpm2.HandleContext) (*tpm2.Public, tpm2.Name, tpm2.Name, error)

+ StartAuthSession func(sessionType tpm2.SessionType, alg tpm2.HashAlgorithmId) (tpm2.SessionContext, error)

+ VerifySignature func(key tpm2.ResourceContext, digest tpm2.Digest, signature *tpm2.Signature) (*tpm2.TkVerified, error)

+ func NewTPMConnection(tpm *tpm2.TPMContext, sessions ...tpm2.SessionContext) TPMConnection

+ type TransientResource struct

+ ParentName tpm2.Name

+ Policy *Policy

+ Private tpm2.Private

+ Public *tpm2.Public

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL