ISO_IEC_11889-3_2009.pdf

Reference numberISO/IEC 11889-3:2009(E)ISO/IEC 2009 INTERNATIONAL STANDARD ISO/IEC11889-3First edition2009-05-15Information technology Trusted Platform Module Part 3:Structures Technologies de linformation Module de plate-forme de confiance Partie 3:Structures ISO/IEC 11889-3:2009(E)PDF disclaimer This PDF file may contain embedded typefaces.In accordance with Adobes licensing policy,this file may be printed or viewed but shall not be edited unless the typefaces which are embedded are licensed to and installed on the computer performing the editing.In downloading this file,parties accept therein the responsibility of not infringing Adobes licensing policy.The ISO Central Secretariat accepts no liability in this area.Adobe is a trademark of Adobe Systems Incorporated.Details of the software products used to create this PDF file can be found in the General Info relative to the file;the PDF-creation parameters were optimized for printing.Every care has been taken to ensure that the file is suitable for use by ISO member bodies.In the unlikely event that a problem relating to it is found,please inform the Central Secretariat at the address given below.COPYRIGHT PROTECTED DOCUMENT ISO/IEC 2009 All rights reserved.Unless otherwise specified,no part of this publication may be reproduced or utilized in any form or by any means,electronic or mechanical,including photocopying and microfilm,without permission in writing from either ISO at the address below or ISOs member body in the country of the requester.ISO copyright office Case postale 56 CH-1211 Geneva 20 Tel.+41 22 749 01 11 Fax +41 22 749 09 47 E-mail copyrightiso.org Web www.iso.org Published in Switzerland ii ISO/IEC 2009 All rights reserved ISO/IEC 11889-3:2009(E)ISO/IEC 2009 All rights reserved iii Table of Contents 1.Scope 1 1.1 Key words 1 1.2 Statement Type 1 2.Normative references 2 3.Abbreviated Terms 3 4.Structures and Formats 5 4.1 Representation of Information 5 4.1.1 Endness of Structures 5 4.1.2 Byte Packing 5 4.1.3 Lengths 5 4.1.4 Structure Definitions 5 4.2 Defines 6 4.2.1 Basic data types 6 4.2.2 Boolean types 6 4.2.3 Helper redefinitions 6 4.2.4 Vendor specific 8 5.Structure Tags 9 5.1 TPM_STRUCTURE_TAG 10 6.Types 12 6.1 TPM_RESOURCE_TYPE 12 6.2 TPM_PAYLOAD_TYPE 13 6.3 TPM_ENTITY_TYPE 14 6.4 Handles 15 6.4.1 Reserved Key Handles 16 6.5 TPM_STARTUP_TYPE 17 6.6 TPM_STARTUP_EFFECTS 18 6.7 TPM_PROTOCOL_ID 19 6.8 TPM_ALGORITHM_ID 20 6.9 TPM_PHYSICAL_PRESENCE 21 6.10 TPM_MIGRATE_SCHEME 22 6.11 TPM_EK_TYPE 23 6.12 TPM_PLATFORM_SPECIFIC 24 7.Basic Structures 25 7.1 TPM_STRUCT_VER 25 7.2 TPM_VERSION_BYTE 26 7.3 TPM_VERSION 27 7.4 TPM_DIGEST 28 ISO/IEC 11889-3:2009(E)iv ISO/IEC 2009 All rights reserved 7.4.1 Creating a PCR composite hash 29 7.5 TPM_NONCE 30 7.5.1 TPM_PROOF 31 7.6 TPM_AUTHDATA 32 7.7 TPM_KEY_HANDLE_LIST 33 7.8 TPM_KEY_USAGE values 34 7.8.1 Mandatory Key Usage Schemes 34 7.9 TPM_AUTH_DATA_USAGE values 36 7.10 TPM_KEY_FLAGS 37 7.11 TPM_CHANGEAUTH_VALIDATE 38 7.12 TPM_MIGRATIONKEYAUTH 39 7.13 TPM_COUNTER_VALUE 40 7.14 TPM_SIGN_INFO Structure 41 7.15 TPM_MSA_COMPOSITE 42 7.16 TPM_CMK_AUTH 43 7.17 TPM_CMK_DELEGATE values 44 7.18 TPM_SELECT_SIZE 45 7.19 TPM_CMK_MIGAUTH 46 7.20 TPM_CMK_SIGTICKET 47 7.21 TPM_CMK_MA_APPROVAL 48 8.TPM_TAG(Command and Response Tags)49 9.Internal Data Held By TPM 50 9.1 TPM_PERMANENT_FLAGS 51 9.1.1 Flag Restrictions 55 9.2 TPM_STCLEAR_FLAGS 56 9.2.1 Flag Restrictions 58 9.3 TPM_STANY_FLAGS 59 9.3.1 Flag Restrictions 60 9.4 TPM_PERMANENT_DATA 61 9.4.1 Flag Restrictions 64 9.5 TPM_STCLEAR_DATA 65 Flag Restrictions 66 Deferred Physical Presence Bit Map 66 9.6 TPM_STANY_DATA 67 9.6.1 Flag Restrictions 68 10.PCR Structures 69 10.1 TPM_PCR_SELECTION 70 10.2 TPM_PCR_COMPOSITE 72 10.3 TPM_PCR_INFO 73 10.4 TPM_PCR_INFO_LONG 74 ISO/IEC 11889-3:2009(E)ISO/IEC 2009 All rights reserved v 10.5 TPM_PCR_INFO_SHORT 75 10.6 TPM_LOCALITY_SELECTION 76 10.7 PCR Attributes 77 10.8 TPM_PCR_ATTRIBUTES 78 10.8.1 Comparing command locality to PCR flags 79 10.9 Debug PCR register 80 10.10 Mapping PCR Structures 81 11.Storage Structures 83 11.1 TPM_STORED_DATA 83 11.2 TPM_STORED_DATA12 84 11.3 TPM_SEALED_DATA 85 11.4 TPM_SYMMETRIC_KEY 86 11.5 TPM_BOUND_DATA 87 12.TPM_KEY complex 88 12.1 TPM_KEY_PARMS 89 12.1.1 TPM_RSA_KEY_PARMS 90 12.1.2 TPM_SYMMETRIC_KEY_PARMS 90 12.2 TPM_KEY 91 12.3 TPM_KEY12 92 12.4 TPM_STORE_PUBKEY 93 12.5 TPM_PUBKEY 94 12.6 TPM_STORE_ASYMKEY 95 12.7 TPM_STORE_PRIVKEY 96 12.8 TPM_MIGRATE_ASYMKEY 97 12.9 TPM_KEY_CONTROL 98 13.Signed Structures 99 13.1 TPM_CERTIFY_INFO Structure 99 13.2 TPM_CERTIFY_INFO2 Structure 100 13.3 TPM_QUOTE_INFO Structure 101 13.4 TPM_QUOTE_INFO2 Structure 102 14.Identity Structures 103 14.1 TPM_EK_BLOB 103 14.2 TPM_EK_BLOB_ACTIVATE 104 14.3 TPM_EK_BLOB_AUTH 105 14.4 TPM_CHOSENID_HASH 106 14.5 TPM_IDENTITY_CONTENTS 107 14.6 TPM_IDENTITY_REQ 108 14.7 TPM_IDENTITY_PROOF 109 14.8 TPM_ASYM_CA_CONTENTS 110 14.9 TPM_SYM_CA_ATTESTATION 111 ISO/IEC 11889-3:2009(E)vi ISO/IEC 2009 All rights reserved 15.Tra