Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

TPM section is missing TPMT_PUBLIC validation steps #929

Closed
herrjemand opened this issue Jun 1, 2018 · 5 comments
Closed

TPM section is missing TPMT_PUBLIC validation steps #929

herrjemand opened this issue Jun 1, 2018 · 5 comments

Comments

@herrjemand
Copy link
Contributor

Propose adding TPM attestation validation steps for pubArea(TPMT_PUBLIC struct) as follows:

Validate that pubArea is valid:

  • Verify that nameAlg is set to to according hashing algorithm in TPM_ALG_ID
  • Verify that type is set to to according signature algorithm in TPM_ALG_ID
  • Verify that unique is set to the newly generated public key
  • If type is set to RSA, verify that parameters.exponent is set to 2048 bits for
@herrjemand
Copy link
Contributor Author

cc @akshayku

@selfissued
Copy link
Contributor

@akshayku is the proposed text above correct?

@akshayku akshayku added this to the PropRec milestone Jun 20, 2018
@akshayku
Copy link
Contributor

I am verifying all the fields but this seems like a good clarification for TPM verification steps.

@nadalin
Copy link
Contributor

nadalin commented Jun 12, 2019

@akshayku Please update

@akshayku akshayku modified the milestones: L2-WD-02, L2-WD-03 Oct 30, 2019
@equalsJeffH
Copy link
Contributor

we closed the PR #966 -- see #966 (comment)

closing this issue.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

6 participants