tcg

Documentation

Index

• Constants
• Variables
• func MakeDefaultEKTemplate() *tpm2.Public
• func MakeDefaultSRKTemplate() *tpm2.Public

Constants

const (
	// Handle for RSA2048 EK certificate, see section 7.8 of "TCG TPM v2.0 Provisioning Guidance" Version 1.0, Revision 1.0, 15 March 2017.
	EKCertHandle tpm2.Handle = 0x01c00002

	// Default RSA2048 SRK handle, see section 7.8 of "TCG TPM v2.0 Provisioning Guidance" Version 1.0, Revision 1.0, 15 March 2017
	SRKHandle tpm2.Handle = 0x81000001

	// Default RSA2048 EK handle, see section 7.8 of "TCG TPM v2.0 Provisioning Guidance" Version 1.0, Revision 1.0, 15 March 2017
	EKHandle tpm2.Handle = 0x81010001

	SANDirectoryNameTag = 4 // Subject Alternative Name directoryName, see section 4.2.16 or RFC5280
)

Variables

var (
	// srkTemplate is the default RSA2048 SRK template, see section 7.5.1 of "TCG TPM v2.0 Provisioning Guidance", version 1.0, revision 1.0, 15 March 2017.
	SRKTemplate = MakeDefaultSRKTemplate()

	// Default RSA2048 EK template, see section B.3.3 of "TCG EK Credential Profile For TPM Family 2.0; Level 0", Version 2.1, Revision 13, 10 December 2018
	EKTemplate = MakeDefaultEKTemplate()

	OIDExtensionSubjectAltName = asn1.ObjectIdentifier{2, 5, 29, 17} // id-ce-subjectAltName, see section 4.2.16 of RFC5280

	// TCG specific OIDs, see section 4 of "TCG EK Credential Profile For TPM Family 2.0; Level 0", Version 2.1, Revision 13, 10 December 2018.
	OIDTcgAttributeTpmManufacturer = asn1.ObjectIdentifier{2, 23, 133, 2, 1} // tcg-at-tpmManufacturer
	OIDTcgAttributeTpmModel        = asn1.ObjectIdentifier{2, 23, 133, 2, 2} // tcg-at-tpmModel
	OIDTcgAttributeTpmVersion      = asn1.ObjectIdentifier{2, 23, 133, 2, 3} // tcg-at-tpmVersion
	OIDTcgKpEkCertificate          = asn1.ObjectIdentifier{2, 23, 133, 8, 1} // tcg-kp-EKCertificate
)

Functions

func MakeDefaultEKTemplate

func MakeDefaultEKTemplate() *tpm2.Public

func MakeDefaultSRKTemplate

func MakeDefaultSRKTemplate() *tpm2.Public