tree 9b6d373be867b43be8b50ea5dfb64e0d449c0bf2
parent 4af9ce0b33d67e1cae40cb43dc258cc60a69c450
author Leo Lai <cylai@google.com> 1607334824 +0800
committer Commit Bot <commit-bot@chromium.org> 1608711796 +0000

attestation: Don't read EK with owner delegate when not feasible.

Using owner incapable owner delegate to read EK causes DA increments.

For testing, the following cases are tested and making sure the DA
doesn't increase:

1. w/o TPM ownership, it can read EK.
2. w/ owner password and delegate that can't read EK, it can read EK.
3. w/o owner password but delegate that can read EK. it can read EK.
4. w/o owner password but delegate that can't read EK, it can't read EK.

BUG=b:174713900
BUG=b:176039750
TEST="attestation_client get_enrollment_id --ignore_cache" reads EK.

Change-Id: I861c9fa278c96c92ee12b1ac9fc6c68f02a7e3c2
Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform2/+/2595759
Tested-by: Leo Lai <cylai@google.com>
Commit-Queue: Leo Lai <cylai@google.com>
Reviewed-by: Yi Chou <yich@google.com>