libhwsec/backend/tpm1/config.h

// Copyright 2022 The ChromiumOS Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.

#ifndef LIBHWSEC_BACKEND_TPM1_CONFIG_H_
#define LIBHWSEC_BACKEND_TPM1_CONFIG_H_

#include <cstdint>
#include <map>
#include <memory>
#include <string>
#include <utility>
#include <vector>

#include <brillo/secure_blob.h>

#include "libhwsec/backend/config.h"
#include "libhwsec/backend/tpm1/tss_helper.h"
#include "libhwsec/proxy/proxy.h"
#include "libhwsec/status.h"
#include "libhwsec/structures/key.h"
#include "libhwsec/structures/operation_policy.h"

namespace hwsec {

extern const int kCurrentUserPcrTpm1;

class ConfigTpm1 : public Config {
 public:
  ConfigTpm1(overalls::Overalls& overalls, TssHelper& tss_helper)
      : overalls_(overalls), tss_helper_(tss_helper) {}

  StatusOr<OperationPolicy> ToOperationPolicy(
      const OperationPolicySetting& policy) override;
  Status SetCurrentUser(const std::string& current_user) override;
  StatusOr<bool> IsCurrentUserSet() override;
  StatusOr<QuoteResult> Quote(DeviceConfigs device_config, Key key) override;

  using PcrMap = std::map<uint32_t, brillo::Blob>;

  // Converts a device config usage into a PCR map.
  StatusOr<PcrMap> ToPcrMap(const DeviceConfigs& device_config);

  // Converts a device config usage into a PCR map, and fill the value with
  // real PCR value.
  StatusOr<PcrMap> ToCurrentPcrValueMap(const DeviceConfigs& device_config);

  // Converts a device config setting into a PCR map.
  StatusOr<PcrMap> ToSettingsPcrMap(const DeviceConfigSettings& settings);

 private:
  StatusOr<brillo::Blob> ReadPcr(uint32_t pcr_index);

  overalls::Overalls& overalls_;
  TssHelper& tss_helper_;
};

}  // namespace hwsec

#endif  // LIBHWSEC_BACKEND_TPM1_CONFIG_H_