libcros 0.3.0

#![allow(non_snake_case)]

use crate::{
  tlcl::{tpm12::constants::*, tpm_exchange, unmarshal::unmarshal_response_code},
  LOG_DBG,
};

#[rustfmt::skip]
const NV_DEFINESPACE_TEMPLATE: [u8; 101] = [
  /* 0-1   */ 0x00, 0xc1,             /* tag: TPM_TAG_RQU_COMMAND */
  /* 2-5   */ 0x00, 0x00, 0x00, 0x65, /* paramSize: 101 bytes */
  /* 6-9   */ 0x00, 0x00, 0x00, 0xcc, /* ordinal: TPM_ORD_NV_DefineSpace */
  
  /* (fun fact: TPM_NV_DATA_PUBLIC starts here) */
  /* 10-11 */ 0x00, 0x18,             /* tag: TPM_TAG_NV_DATA_PUBLIC */
  /* 12-15 */ 0x00, 0x00, 0x00, 0x00, /* nvIndex */

  /* pcrInfoRead: TPM_PCR_INFO_SHORT */
  /* 16-17 */ 0x00, 0x03,             /* pcrSelection.sizeOfSelect: 3 */
  /* 18-20 */ 0x00, 0x00, 0x00,       /* pcrSelection.pcrSelect (3 bytes) */
  /* 21    */ 0x1f,                   /* localityAtRelease (1 byte) */
  /* 22-41 */ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 
              0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, /* digestAtRelease (20 bytes) */
              
  /* pcrInfoWrite: TPM_PCR_INFO_SHORT */
  /* 42-43 */ 0x00, 0x03,             /* pcrSelection.sizeOfSelect: 3 */
  /* 44-46 */ 0x00, 0x00, 0x00,       /* pcrSelection.pcrSelect (3 bytes) */
  /* 47    */ 0x1f,                   /* localityAtRelease (1 byte) */
  /* 48-67 */ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 
              0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, /* digestAtRelease (20 bytes) */
  
  /* 68-69 */ 0x00, 0x17,             /* permission.tag: TPM_TAG_NV_ATTRIBUTES */
  /* 70-73 */ 0x00, 0x00, 0x00, 0x00, /* permission.attributes (UINT32) */
  /* 74    */ 0x00,                   /* bReadSTClear (TSS_BOOL) */
  /* 75    */ 0x00,                   /* bWriteSTClear (TSS_BOOL) */
  /* 76    */ 0x00,                   /* bWriteDefine (TSS_BOOL) */
  /* 77-80 */ 0x00, 0x00, 0x00, 0x00, /* dataSize (UINT32) */
  
  /* 81-100 */                        /* Padding? Not sure.. */
  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 
  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
];

#[rustfmt::skip]
const GET_SPACE_INFO_CMD: [u8; 22] = [
  /* 0-1   */ 0x00, 0xc1,             /* tag: TPM_TAG_RQU_COMMAND */
  /* 2-5   */ 0x00, 0x00, 0x00, 0x16, /* paramSize: 22 */
  /* 6-9   */ 0x00, 0x00, 0x00, 0x65, /* ordinal: TPM_ORD_GetCapability */
  /* 10-13 */ 0x00, 0x00, 0x00, 0x11, /* capArea: TPM_CAP_NV_INDEX */
  /* 14-17 */ 0x00, 0x00, 0x00, 0x04, /* subCapSize: 4 */
  /* 18-21 */ 0x00, 0x00, 0x00, 0x00, /* subCap: nvIndex (patched) */
];

const MAIN_OFFSET_INDEX: usize = 12;
const MAIN_OFFSET_PERM: usize = 70;
const MAIN_OFFSET_SIZE: usize = 77;

const SPACEINFO_OFFSET_INDEX: usize = 18;

fn patch_u32(buf: &mut [u8], offset: usize, val: u32) {
  buf[offset] = (val >> 24) as u8;
  buf[offset + 1] = (val >> 16) as u8;
  buf[offset + 2] = (val >> 8) as u8;
  buf[offset + 3] = (val & 0xFF) as u8;
}

pub fn TlclGetPermissions(index: u32) -> u32 {
  let mut cmd_buf: [u8; 512] = [0; 512];
  let mut resp_buf: [u8; 4096] = [0; 4096];

  cmd_buf[..22].copy_from_slice(&GET_SPACE_INFO_CMD);
  patch_u32(&mut cmd_buf, SPACEINFO_OFFSET_INDEX, index);

  match tpm_exchange(&mut cmd_buf, &mut resp_buf) {
    Ok(_) => {
      let rc = unmarshal_response_code(&resp_buf);
      if rc != TPM_SUCCESS {
        LOG_DBG!("rc=0x{:x}", rc);
        return 0xFFFFFFFF;
      }

      let mut off = 14usize;
      off += 2; /* skip tag */
      off += 4; /* skip nvIndex */

      /* decode pcrInfoRead (variable sizeOfSelect) */
      let sos_r = u16::from_be_bytes([resp_buf[off], resp_buf[off + 1]]) as usize;
      off += 2 + sos_r + 1 + 20;

      /* decode pcrInfoWrite */
      let sos_w = u16::from_be_bytes([resp_buf[off], resp_buf[off + 1]]) as usize;
      off += 2 + sos_w + 1 + 20;

      /* skip TPM_NV_ATTRIBUTES tag (2) */
      off += 2;

      /* read attributes */
      u32::from_be_bytes([
        resp_buf[off],
        resp_buf[off + 1],
        resp_buf[off + 2],
        resp_buf[off + 3],
      ])
    }
    Err(e) => {
      LOG_DBG!("tpm_exchange failed: {}", e);
      0xFFFFFFFF
    }
  }
}

pub fn TlclDefineSpace(index: u32, perm: u32, size: u32) -> u32 {
  TlclDefineSpaceEx(None, 0, index, perm, size, (), 0)
}

pub fn TlclDefineSpaceEx(
  _owner_auth: Option<&[u8]>, /* owner auth not implemented yet */
  _owner_auth_size: u32,
  index: u32,
  perm: u32,
  size: u32,
  _auth_policy: (),
  _auth_policy_size: u32,
) -> u32 {
  let mut cmd_buf: [u8; 512] = [0; 512];
  let mut resp_buf: [u8; 4096] = [0; 4096];

  cmd_buf[..101].copy_from_slice(&NV_DEFINESPACE_TEMPLATE);
  patch_u32(&mut cmd_buf, MAIN_OFFSET_INDEX, index);
  patch_u32(&mut cmd_buf, MAIN_OFFSET_PERM, perm);
  patch_u32(&mut cmd_buf, MAIN_OFFSET_SIZE, size);

  LOG_DBG!("index=0x{:x}, perm=0x{:x}, size={}", index, perm, size);

  match tpm_exchange(&mut cmd_buf, &mut resp_buf) {
    Ok(_) => {
      let rc = unmarshal_response_code(&resp_buf);
      LOG_DBG!("rc=0x{:x}", rc);
      rc
    }
    Err(e) => {
      LOG_DBG!("tpm_exchange failed: {}", e);
      0xFFFFFFFF
    }
  }
}


pub fn TlclUndefineSpace(index: u32) -> u32 {
  TlclUndefineSpaceEx(None, 0, index)
}

pub fn TlclUndefineSpaceEx(owner_auth: Option<&[u8]>, owner_auth_size: u32, index: u32) -> u32 {
  let perm = TlclGetPermissions(index);
  if perm == 0xFFFFFFFF {
    LOG_DBG!(
      "space 0x{:x} does not exist or query failed",
      index
    );
    return 0xFFFFFFFF;
  }
  TlclDefineSpaceEx(owner_auth, owner_auth_size, index, perm, 0, (), 0)
}