blob: e43b7668bd46dfe6d454fd6c89e8d066f5e99208 [file] [log] [blame]
// Copyright 2014 The Chromium OS Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#include <string>
#include <base/macros.h>
namespace trunks {
// AuthorizationDelegate is an interface passed to TPM commands. The delegate
// takes care of providing the authorization data for commands and verifying
// authorization data for responses. It also handles parameter encryption for
// commands and parameter decryption for responses.
class AuthorizationDelegate {
AuthorizationDelegate() {}
virtual ~AuthorizationDelegate() {}
// Provides authorization data for a command which has a cpHash value of
// |command_hash|. The availability of encryption for the command is indicated
// by |is_*_parameter_encryption_possible|. On success, |authorization| is
// populated with the exact octets for the Authorization Area of the command.
// Returns true on success.
virtual bool GetCommandAuthorization(
const std::string& command_hash,
bool is_command_parameter_encryption_possible,
bool is_response_parameter_encryption_possible,
std::string* authorization) = 0;
// Checks authorization data for a response which has a rpHash value of
// |response_hash|. The exact octets from the Authorization Area of the
// response are given in |authorization|. Returns true iff the authorization
// is valid.
virtual bool CheckResponseAuthorization(const std::string& response_hash,
const std::string& authorization) = 0;
// Encrypts |parameter| if encryption is enabled. Returns true on success.
virtual bool EncryptCommandParameter(std::string* parameter) = 0;
// Decrypts |parameter| if encryption is enabled. Returns true on success.
virtual bool DecryptResponseParameter(std::string* parameter) = 0;
// Returns the current TPM-generated nonce that is associated with the
// authorization session. Returns true on success.
virtual bool GetTpmNonce(std::string* nonce) = 0;
} // namespace trunks