TrouSerS 0.2.8 review
DownloadTrouSerS is a Trusted Computing Group Software Stack in short TCG TSS implementation
|
|
TrouSerS is a Trusted Computing Group Software Stack in short TCG TSS implementation.
TrouSerS complies with the TCG Software Stack Specification Version 1.1.
What's New in This Release:
Fixed bug in mc_add_entry, where the PCRInfo data was not being copied into the mem cache with the other fields of the key.
Fixed 2 bugs in spi_getset.c where setting the secret hash mode was passing subFlag to the internal set function instead of ulAttrib.
Added patch to retry the libtspi's recv() call to the TCSD if the call was interrupted before completion.
Made the popup string appear as a label on the popup, not the title. Also, got rid of annoying mouse-over texts.
Added a flag to pass to the get_secret function internally to indicate whether a popup should contain the confirm box.
Added support for callbacks in the identity creation code.
Updated the identity creation code in the TSP/TCS to support AES, DES, 3DES during identity creation.
Added symmetric encryption interfaces for openssl, Trspi.
In Tspi_Hash_Sign, fixed memory leak.
Added SetAttribData functions for RSA modulus/exponent per the upcoming additions to the TSS 1.2 errata 1 spec.
Fixed bug in TCS key cache where if 2 keys had the same public modulus, they could confuse the key cache manager.
Bind/Seal functions now return more descriptive errors codes and won't do the encryption if the data to use is larger than the RSA pubkey.
Made updates to the code/headers for the TSS_VALIDATION struct change to be issued as TSS 1.1 header file errata 1.
Bug fix: In LoadManuMaintPub's wrapping function in the TSP, we incorrectly passed a reference to the pubkey in loading the blob.
Fixed bugs in the maintenance commands, owner auth'd commands were using no auth tags in their commands sent to the TPM.
Fixed SF1546344: Track the release of auth handles by TCS context and take the fContinueAuthSession variable into account when calling the TPM to release a handle.
Fixed SF1545614: deadlock due to auth_mgr_osap taking the auth_mgr_lock before calling ensureKeyIsLoaded, which took the mem_cache_lock.
Added checks to ensure corrupt packets don't crash the tcsd.
Added configure option --with-gui=gtk/none to enable building with no popup support for embedded apps. The default secret mode becomes TSS_SECRET_MODE_NONE for all policies and the default context mode becomes TSS_TSPATTRIB_CONTEXT_SILENT to supress all popups.
Changed the Tspi_GetAttribData function to return a TCPA_PUBKEY blob as is specified in the portable data section.
Added a debugging #define in req_mgr.c to print all data passed to/from the TPM.
Updated Tspi_Context_LoadKeyByUUID to check in-memory keys by UUID when the TCS returns a filled-out loadkey info struct.
Removed the free of all context related memory when the context closes. Allows an app more flexibility in choosing what to free.
Removed check for secret mode None in establishing an OSAP session. Now, a secret of all 0's is used if no secret exists.
Added checks for 2 return codes in secret_TakeOwnership.
Fixed TSS_VERSION problem. There are no specific getcaps for software version vs. TSS spec version. Instead, the TSP's version structure contains spec version and software major/minor.
Removed obj_regdkey list references.
TrouSerS 0.2.8 search tags