policyutil

package

Go to main page

Versions in this module

v1

v1.11.1

Jan 15, 2025

Changes in this version

type PolicySignedParams

+ HashAlg tpm2.HashAlgorithmId

v1.11.0

Jan 15, 2025

Changes in this version

+ type NameHash interface

+ Digest func(alg tpm2.HashAlgorithmId) (tpm2.Digest, error)

+ func CommandHandleDigest(alg tpm2.HashAlgorithmId, digest tpm2.Digest) NameHash

+ func CommandHandles(handles ...Named) NameHash

type PolicyBuilderBranch

+ func (b *PolicyBuilderBranch) PolicyPCRDigest(pcrDigest tpm2.Digest, pcrs tpm2.PCRSelectionList) (tpm2.Digest, error)

+ func (b *PolicyBuilderBranch) PolicyPCRValues(values tpm2.PCRValues) (tpm2.Digest, error)

v1.10.1

Jan 11, 2025

v1.10.0

Jan 7, 2025

v1.9.0

Jan 6, 2025

v1.8.0

Dec 20, 2024

v1.7.7

Nov 14, 2024

v1.7.6

Jul 31, 2024

v1.7.5

Jul 31, 2024

v1.7.4

Jul 31, 2024

v1.7.3

Jul 30, 2024

v1.7.2

Jul 30, 2024

v1.7.1

Jul 30, 2024

v1.7.0

Jul 30, 2024

v1.6.2

Apr 10, 2024

v1.6.1

Apr 9, 2024

v1.6.0

Apr 9, 2024

Changes in this version

type PolicyBuilderBranch

+ func (b *PolicyBuilderBranch) PolicyOR(pHashList ...tpm2.Digest) (tpm2.Digest, error)

v1.5.0

Apr 9, 2024

Changes in this version

+ type NVAuthorizedPolicy struct

+ Name tpm2.Name

+ Policy *Policy

+ type NamedHandle interface

+ Handle func() tpm2.Handle

type Policy

+ func (p *Policy) String() string

+ func (p *Policy) Stringer(alg tpm2.HashAlgorithmId, authorizedPolicies PolicyAuthorizedPolicies) fmt.Stringer

+ type PolicyAuthorizedPolicies interface

+ AuthorizedPolicies func(keySign tpm2.Name, policyRef tpm2.Nonce) ([]*Policy, error)

+ func NewPolicyAuthorizedPolicies(policies []*Policy, nvPolicies []NVAuthorizedPolicy) PolicyAuthorizedPolicies

+ type PolicyAuthorizedPoliciesData struct

+ AuthorizedPolicies []*Policy

type PolicyBuilder

+ func (b *PolicyBuilder) Digest() (tpm2.Digest, error)

type PolicyResourcesData

+ NVAuthorizedPolicies []NVAuthorizedPolicy

type PolicySessionUsage

+ func (u *PolicySessionUsage) WithAuthIndex(index uint8) *PolicySessionUsage

+ func (u *PolicySessionUsage) WithoutAuthValue() *PolicySessionUsage

+ func (u PolicySessionUsage) AllowAuthValue() bool

+ func (u PolicySessionUsage) AuthHandle() NamedHandle

+ func (u PolicySessionUsage) CommandCode() tpm2.CommandCode

+ func (u PolicySessionUsage) CpHash(alg tpm2.HashAlgorithmId) (tpm2.Digest, error)

+ func (u PolicySessionUsage) NameHash(alg tpm2.HashAlgorithmId) (tpm2.Digest, error)

type TPMHelper

+ GetPermanentHandleAuthPolicy func(handle tpm2.Handle) (tpm2.TaggedHash, error)

v1.4.0

Apr 4, 2024

Changes in this version

+ type ExternalSensitiveResources interface

+ ExternalSensitive func(name tpm2.Name) (*tpm2.Sensitive, error)

+ type NewPolicySessionFn func(*tpm2.TPMContext, tpm2.SessionContext, ...tpm2.SessionContext) PolicySession

+ type NewTPMHelperFn func(*tpm2.TPMContext, ...tpm2.SessionContext) TPMHelper

type Policy

+ func (p *Policy) AddDigest(alg tpm2.HashAlgorithmId) (tpm2.Digest, error)

type PolicyBuilder

+ func NewPolicyBuilderOR(alg tpm2.HashAlgorithmId, policies ...*Policy) *PolicyBuilder

+ func (b *PolicyBuilder) Build(alg tpm2.HashAlgorithmId) (tpm2.Digest, *Policy, error)

type PolicyExecuteResult

+ func (r *PolicyExecuteResult) CommandCode() (code tpm2.CommandCode, set bool)

+ func (r *PolicyExecuteResult) CpHash() (cpHashA tpm2.Digest, set bool)

+ func (r *PolicyExecuteResult) NameHash() (nameHash tpm2.Digest, set bool)

+ func (r *PolicyExecuteResult) NvWritten() (nvWrittenSet bool, set bool)

type PolicyResources

+ ContextLoad func(context *tpm2.Context, policy *Policy) ResourceContext

+ ContextSave func(resource tpm2.ResourceContext) *tpm2.Context

+ ExternalSensitive func(name tpm2.Name) (*tpm2.Sensitive, error)

+ type PolicySession interface

+ Context func() SessionContext

+ HashAlg func() tpm2.HashAlgorithmId

+ Name func() tpm2.Name

+ PolicyAuthValue func() error

+ PolicyAuthorize func(approvedPolicy tpm2.Digest, policyRef tpm2.Nonce, keySign tpm2.Name, ...) error

+ PolicyCommandCode func(code tpm2.CommandCode) error

+ PolicyCounterTimer func(operandB tpm2.Operand, offset uint16, operation tpm2.ArithmeticOp) error

+ PolicyCpHash func(cpHashA tpm2.Digest) error

+ PolicyDuplicationSelect func(objectName, newParentName tpm2.Name, includeObject bool) error

+ PolicyGetDigest func() (tpm2.Digest, error)

+ PolicyNV func(auth, index tpm2.ResourceContext, operandB tpm2.Operand, offset uint16, ...) error

+ PolicyNameHash func(nameHash tpm2.Digest) error

+ PolicyNvWritten func(writtenSet bool) error

+ PolicyOR func(pHashList tpm2.DigestList) error

+ PolicyPCR func(pcrDigest tpm2.Digest, pcrs tpm2.PCRSelectionList) error

+ PolicyPassword func() error

+ PolicySecret func(authObject tpm2.ResourceContext, cpHashA tpm2.Digest, policyRef tpm2.Nonce, ...) (tpm2.Timeout, *tpm2.TkAuth, error)

+ PolicySigned func(authKey tpm2.ResourceContext, includeNonceTPM bool, cpHashA tpm2.Digest, ...) (tpm2.Timeout, *tpm2.TkAuth, error)

+ PolicyTicket func(timeout tpm2.Timeout, cpHashA tpm2.Digest, policyRef tpm2.Nonce, ...) error

+ func NewTPMPolicySession(tpm *tpm2.TPMContext, policySession tpm2.SessionContext, ...) PolicySession

+ type PolicySignedParams struct

+ CpHash tpm2.Digest

+ Expiration int32

+ NonceTPM tpm2.Nonce

type ResourceContext

+ Policy func() *Policy

+ type SessionContext interface

+ Flush func()

+ Save func() (restore func() error, err error)

+ Session func() tpm2.SessionContext

+ type TPMHelper interface

+ LoadExternal func(inPrivate *tpm2.Sensitive, inPublic *tpm2.Public, hierarchy tpm2.Handle) (ResourceContext, error)

+ NVRead func(auth, index tpm2.ResourceContext, size, offset uint16, ...) (tpm2.MaxNVBuffer, error)

+ NVReadPublic func(handle tpm2.HandleContext) (*tpm2.NVPublic, error)

+ PCRRead func(pcrs tpm2.PCRSelectionList) (tpm2.PCRValues, error)

+ ReadClock func() (*tpm2.TimeInfo, error)

+ ReadPublic func(handle tpm2.HandleContext) (*tpm2.Public, error)

+ StartAuthSession func(sessionType tpm2.SessionType, alg tpm2.HashAlgorithmId) (SessionContext, PolicySession, error)

+ VerifySignature func(key tpm2.ResourceContext, digest tpm2.Digest, signature *tpm2.Signature) (*tpm2.TkVerified, error)

+ func NewTPMHelper(tpm *tpm2.TPMContext, params *TPMHelperParams, sessions ...tpm2.SessionContext) TPMHelper

+ type TPMHelperParams struct

+ NewPolicySessionFn NewPolicySessionFn

+ type TPMPolicyResourcesParams struct

+ Authorizer Authorizer

+ ExternalSensitiveResources ExternalSensitiveResources

+ NewPolicySessionFn NewPolicySessionFn

+ NewTPMHelperFn NewTPMHelperFn

+ SignedAuthorizer SignedAuthorizer

v1.3.0

Jan 4, 2024

v1.2.0

Dec 14, 2023

v1.1.0

Nov 18, 2023

Changes in this version

+ var ErrMissingDigest = errors.New("missing digest for session algorithm")

+ func ComputeCpHash(alg tpm2.HashAlgorithmId, command tpm2.CommandCode, handles []Named, ...) (tpm2.Digest, error)

+ func ComputeNameHash(alg tpm2.HashAlgorithmId, handles ...Named) (tpm2.Digest, error)

+ func ComputePCRDigest(alg tpm2.HashAlgorithmId, pcrs tpm2.PCRSelectionList, values tpm2.PCRValues) (tpm2.Digest, error)

+ func ComputePCRDigestFromAllValues(alg tpm2.HashAlgorithmId, values tpm2.PCRValues) (tpm2.PCRSelectionList, tpm2.Digest, error)

+ func ComputePolicyAuthorizationTBSDigest(alg crypto.Hash, message []byte, policyRef tpm2.Nonce) []byte

+ func SignPolicySignedAuthorization(rand io.Reader, signer crypto.Signer, nonceTPM tpm2.Nonce, cpHashA tpm2.Digest, ...) (*tpm2.Signature, error)

+ type Authorizer interface

+ Authorize func(resource tpm2.ResourceContext) error

+ type CpHash interface

+ Digest func(alg tpm2.HashAlgorithmId) (tpm2.Digest, error)

+ func CommandParameterDigest(alg tpm2.HashAlgorithmId, digest tpm2.Digest) CpHash

+ func CommandParameterDigests(digests ...tpm2.TaggedHash) CpHash

+ func CommandParameters(command tpm2.CommandCode, handles []Named, params ...interface{}) CpHash

+ type LoadPolicyParams struct

+ IgnoreAuthorizations []PolicyAuthorizationID

+ IgnoreNV []Named

+ Tickets []*PolicyTicket

+ type Named interface

+ Name func() tpm2.Name

+ type PersistentResource struct

+ Handle tpm2.Handle

+ Name tpm2.Name

+ Policy *Policy

+ type Policy struct

+ func (p *Policy) Authorize(rand io.Reader, authKey *tpm2.Public, policyRef tpm2.Nonce, ...) error

+ func (p *Policy) Branches() ([]string, error)

+ func (p *Policy) Compute(alg tpm2.HashAlgorithmId) (tpm2.Digest, error)

+ func (p *Policy) Details(alg tpm2.HashAlgorithmId, path string) (map[string]PolicyBranchDetails, error)

+ func (p *Policy) Digest(alg tpm2.HashAlgorithmId) (tpm2.Digest, error)

+ func (p *Policy) Execute(tpm TPMConnection, session tpm2.SessionContext, resources PolicyResources, ...) (result *PolicyExecuteResult, err error)

+ func (p *Policy) Unmarshal(r io.Reader) error

+ func (p *Policy) Validate(alg tpm2.HashAlgorithmId) (tpm2.Digest, error)

+ func (p Policy) Marshal(w io.Writer) error

+ type PolicyAuthorization struct

+ AuthKey *tpm2.Public

+ PolicyRef tpm2.Nonce

+ Signature *tpm2.Signature

+ func SignPolicyAuthorization(rand io.Reader, message []byte, authKey *tpm2.Public, policyRef tpm2.Nonce, ...) (*PolicyAuthorization, error)

+ func (a *PolicyAuthorization) Verify(message []byte) (ok bool, err error)

+ type PolicyAuthorizationDetails struct

+ AuthName tpm2.Name

+ PolicyRef tpm2.Nonce

+ type PolicyAuthorizationError struct

+ AuthName tpm2.Name

+ PolicyRef tpm2.Nonce

+ func (e *PolicyAuthorizationError) Error() string

+ func (e *PolicyAuthorizationError) Unwrap() error

+ type PolicyAuthorizationID = PolicyAuthorizationDetails

+ type PolicyBranchDetails struct

+ AuthValueNeeded bool

+ Authorize []PolicyAuthorizationDetails

+ CounterTimer []PolicyCounterTimerDetails

+ NV []PolicyNVDetails

+ PCR []PolicyPCRDetails

+ Secret []PolicyAuthorizationDetails

+ Signed []PolicyAuthorizationDetails

+ func (r *PolicyBranchDetails) CommandCode() (code tpm2.CommandCode, set bool)

+ func (r *PolicyBranchDetails) CpHash() (cpHashA tpm2.Digest, set bool)

+ func (r *PolicyBranchDetails) IsValid() bool

+ func (r *PolicyBranchDetails) NameHash() (nameHash tpm2.Digest, set bool)

+ func (r *PolicyBranchDetails) NvWritten() (nvWrittenSet bool, set bool)

+ type PolicyBuilder struct

+ func NewPolicyBuilder() *PolicyBuilder

+ func (b *PolicyBuilder) Policy() (*Policy, error)

+ func (b *PolicyBuilder) RootBranch() *PolicyBuilderBranch

+ type PolicyBuilderBranch struct

+ func (b *PolicyBuilderBranch) AddBranchNode() *PolicyBuilderBranchNode

+ func (b *PolicyBuilderBranch) PolicyAuthValue() error

+ func (b *PolicyBuilderBranch) PolicyAuthorize(policyRef tpm2.Nonce, keySign *tpm2.Public) error

+ func (b *PolicyBuilderBranch) PolicyCommandCode(code tpm2.CommandCode) error

+ func (b *PolicyBuilderBranch) PolicyCounterTimer(operandB tpm2.Operand, offset uint16, operation tpm2.ArithmeticOp) error

+ func (b *PolicyBuilderBranch) PolicyCpHash(code tpm2.CommandCode, handles []Named, params ...interface{}) error

+ func (b *PolicyBuilderBranch) PolicyDuplicationSelect(object, newParent Named, includeObject bool) error

+ func (b *PolicyBuilderBranch) PolicyNV(nvIndex *tpm2.NVPublic, operandB tpm2.Operand, offset uint16, ...) error

+ func (b *PolicyBuilderBranch) PolicyNameHash(handles ...Named) error

+ func (b *PolicyBuilderBranch) PolicyNvWritten(writtenSet bool) error

+ func (b *PolicyBuilderBranch) PolicyPCR(values tpm2.PCRValues) error

+ func (b *PolicyBuilderBranch) PolicyPassword() error

+ func (b *PolicyBuilderBranch) PolicySecret(authObject Named, policyRef tpm2.Nonce) error

+ func (b *PolicyBuilderBranch) PolicySigned(authKey *tpm2.Public, policyRef tpm2.Nonce) error

+ type PolicyBuilderBranchNode struct

+ func (n *PolicyBuilderBranchNode) AddBranch(name string) *PolicyBuilderBranch

+ type PolicyCounterTimerDetails struct

+ Offset uint16

+ OperandB tpm2.Operand

+ Operation tpm2.ArithmeticOp

+ type PolicyError struct

+ Path string

+ func (e *PolicyError) Error() string

+ func (e *PolicyError) Unwrap() error

+ type PolicyExecuteParams struct

+ IgnoreAuthorizations []PolicyAuthorizationID

+ IgnoreNV []Named

+ Path string

+ Tickets []*PolicyTicket

+ Usage *PolicySessionUsage

+ type PolicyExecuteResult struct

+ AuthValueNeeded bool

+ InvalidTickets []*PolicyTicket

+ NewTickets []*PolicyTicket

+ Path string

+ type PolicyNVDetails struct

+ Auth tpm2.Handle

+ Index tpm2.Handle

+ Name tpm2.Name

+ Offset uint16

+ OperandB tpm2.Operand

+ Operation tpm2.ArithmeticOp

+ type PolicyNVError struct

+ Index tpm2.Handle

+ Name tpm2.Name

+ func (e *PolicyNVError) Error() string

+ func (e *PolicyNVError) Unwrap() error

+ type PolicyPCRDetails struct

+ PCRDigest tpm2.Digest

+ PCRs tpm2.PCRSelectionList

+ type PolicyResources interface

+ Authorize func(resource tpm2.ResourceContext) error

+ AuthorizedPolicies func(keySign tpm2.Name, policyRef tpm2.Nonce) ([]*Policy, error)

+ LoadedResource func(name tpm2.Name, policyParams *LoadPolicyParams) (resource ResourceContext, policy *Policy, newTickets []*PolicyTicket, ...)

+ Policy func(name tpm2.Name) (*Policy, error)

+ SignedAuthorization func(sessionNonce tpm2.Nonce, authKey tpm2.Name, policyRef tpm2.Nonce) (*PolicySignedAuthorization, error)

+ func NewTPMPolicyResources(tpm *tpm2.TPMContext, data *PolicyResourcesData, authorizer Authorizer, ...) PolicyResources

+ type PolicyResourcesData struct

+ AuthorizedPolicies []*Policy

+ Persistent []PersistentResource

+ Transient []TransientResource

+ type PolicySessionUsage struct

+ func NewPolicySessionUsage(command tpm2.CommandCode, handles []Named, params ...interface{}) *PolicySessionUsage

+ func (u *PolicySessionUsage) NoAuthValue() *PolicySessionUsage

+ func (u *PolicySessionUsage) WithNVHandle(handle tpm2.Handle) *PolicySessionUsage

+ type PolicySignedAuthorization struct

+ Authorization *PolicyAuthorization

+ CpHash tpm2.Digest

+ Expiration int32

+ NonceTPM tpm2.Nonce

+ func NewPolicySignedAuthorization(sessionAlg tpm2.HashAlgorithmId, nonceTPM tpm2.Nonce, cpHashA CpHash, ...) (*PolicySignedAuthorization, error)

+ func (a *PolicySignedAuthorization) Sign(rand io.Reader, authKey *tpm2.Public, policyRef tpm2.Nonce, ...) error

+ func (a *PolicySignedAuthorization) Verify() (ok bool, err error)

+ type PolicyTicket struct

+ AuthName tpm2.Name

+ CpHash tpm2.Digest

+ PolicyRef tpm2.Nonce

+ Ticket *tpm2.TkAuth

+ Timeout tpm2.Timeout

+ type ResourceAuthorizeError struct

+ Name tpm2.Name

+ func (e *ResourceAuthorizeError) Error() string

+ func (e *ResourceAuthorizeError) Unwrap() error

+ type ResourceContext interface

+ Flush func() error

+ Resource func() tpm2.ResourceContext

+ type ResourceLoadError struct

+ Name tpm2.Name

+ func (e *ResourceLoadError) Error() string

+ func (e *ResourceLoadError) Unwrap() error

+ type SignedAuthorizer interface

+ SignedAuthorization func(sessionNonce tpm2.Nonce, authKey tpm2.Name, policyRef tpm2.Nonce) (*PolicySignedAuthorization, error)

+ type TPMConnection interface

+ ContextLoad func(context *tpm2.Context) (tpm2.HandleContext, error)

+ ContextSave func(handle tpm2.HandleContext) (*tpm2.Context, error)

+ FlushContext func(handle tpm2.HandleContext) error

+ LoadExternal func(inPrivate *tpm2.Sensitive, inPublic *tpm2.Public, hierarchy tpm2.Handle) (tpm2.ResourceContext, error)

+ NVRead func(auth, index tpm2.ResourceContext, size, offset uint16, ...) (tpm2.MaxNVBuffer, error)

+ NVReadPublic func(handle tpm2.HandleContext) (*tpm2.NVPublic, tpm2.Name, error)

+ PCRRead func(pcrs tpm2.PCRSelectionList) (tpm2.PCRValues, error)

+ PolicyAuthValue func(policySession tpm2.SessionContext) error

+ PolicyAuthorize func(policySession tpm2.SessionContext, approvedPolicy tpm2.Digest, ...) error

+ PolicyCommandCode func(policySession tpm2.SessionContext, code tpm2.CommandCode) error

+ PolicyCounterTimer func(policySession tpm2.SessionContext, operandB tpm2.Operand, offset uint16, ...) error

+ PolicyCpHash func(policySession tpm2.SessionContext, cpHashA tpm2.Digest) error

+ PolicyDuplicationSelect func(policySession tpm2.SessionContext, objectName, newParentName tpm2.Name, ...) error

+ PolicyGetDigest func(policySession tpm2.SessionContext) (tpm2.Digest, error)

+ PolicyNV func(auth, index tpm2.ResourceContext, policySession tpm2.SessionContext, ...) error

+ PolicyNameHash func(policySession tpm2.SessionContext, nameHash tpm2.Digest) error

+ PolicyNvWritten func(policySession tpm2.SessionContext, writtenSet bool) error

+ PolicyOR func(policySession tpm2.SessionContext, pHashList tpm2.DigestList) error

+ PolicyPCR func(policySession tpm2.SessionContext, pcrDigest tpm2.Digest, ...) error

+ PolicyPassword func(policySession tpm2.SessionContext) error

+ PolicySecret func(authObject tpm2.ResourceContext, policySession tpm2.SessionContext, ...) (tpm2.Timeout, *tpm2.TkAuth, error)

+ PolicySigned func(authKey tpm2.ResourceContext, policySession tpm2.SessionContext, ...) (tpm2.Timeout, *tpm2.TkAuth, error)

+ PolicyTicket func(policySession tpm2.SessionContext, timeout tpm2.Timeout, cpHashA tpm2.Digest, ...) error

+ ReadClock func() (*tpm2.TimeInfo, error)

+ ReadPublic func(handle tpm2.HandleContext) (*tpm2.Public, tpm2.Name, tpm2.Name, error)

+ StartAuthSession func(sessionType tpm2.SessionType, alg tpm2.HashAlgorithmId) (tpm2.SessionContext, error)

+ VerifySignature func(key tpm2.ResourceContext, digest tpm2.Digest, signature *tpm2.Signature) (*tpm2.TkVerified, error)

+ func NewTPMConnection(tpm *tpm2.TPMContext, sessions ...tpm2.SessionContext) TPMConnection

+ type TransientResource struct

+ ParentName tpm2.Name

+ Policy *Policy

+ Private tpm2.Private

+ Public *tpm2.Public

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL