stefanberger / libtpms

76%

master: 77%

LAST BUILD ON BRANCH pure_openssl_seeds

branch: pure_openssl_seeds

CHANGE BRANCH

x

Reset

• pure_openssl_seeds
• HEAD
• ac_link_ifelse
• autoconf_check_defines
• cflags_wmissing_prototypes
• configure_with_tpm2_default
• constant_time
• coverity-fixes
• coverity_scan
• cpp_coveralls
• cpp_coveralls.dashb
• cppcheck
• dcache
• dynamic_hlk_compliance
• ecc_consttime
• ecc_fixes
• extend_context_gap
• fix_304
• fix_fortify_source
• fix_issue_195
• fix_json
• fix_nistp521_parameter_reporting
• fix_readme
• fix_rsa_decrypt_stack_smash
• fix_s390x
• fix_tpm2_contextsave
• fuzzer-data
• hlk_compliant
• libtpms_added
• man_page_cleanup
• master
• master.autoupdate
• master.coverity
• master.fixes
• master.fuzzer
• master.next
• master.next,rhel6
• master.next.rsa
• master.ossl3
• master.sm4-getsymtestdata
• move-to-buildsys
• nvmarshal_typos
• pure_openssl
• pure_openssl_rsa_crt
• rev155
• rev159
• rev162
• rev164
• rsa_3072
• rsa_pkcs1_returnvalue
• silent_rules
• stable-0.6.0
• stable-0.6.0-compile-fixes
• stable-0.6.0-fix_issue_195
• stable-0.6.0.next
• stable-0.7.0
• stable-0.7.0-constanttime
• stable-0.7.0-ecc_consttime
• stable-0.7.0-fix_issue_195
• stable-0.7.0-fix_nistp521_parameter_reporting
• stable-0.7.0.next
• stable-0.7.0_fix_iv
• stable-0.8
• stable-0.8-erroneous-gitignore
• stable-0.8-fix_issue_195
• stable-0.8.next
• stable-0.8.next.ossl3
• stable-0.8_fix_iv
• stable-0.9
• stable-0.9.next
• stefanberger/add_sm4_to_json
• stefanberger/coverity_fixes
• stefanberger/do_not_write_permanent_state_if_only_clock_changed
• stefanberger/enable_camellia
• stefanberger/extend_context_gap
• stefanberger/openssl3-helpers-part1
• stefanberger/openssl3-helpers-part2
• stefanberger/prepare-0.9-release
• stefanberger/tpm12_coverity
• travis
• ubsan
• v0.6.1
• v0.6.2
• v0.6.3
• v0.6.4
• v0.6.5
• v0.6.6
• v0.7.0
• v0.7.1
• v0.7.10
• v0.7.2
• v0.7.3
• v0.7.4
• v0.7.5
• v0.7.6
• v0.7.7
• v0.7.8
• v0.7.9
• v0.8.0
• v0.8.1
• v0.8.2
• v0.8.3
• v0.8.4
• v0.8.5
• v0.8.6
• v0.8.7
• v0.9.0
• v0.9.1
• v0.9.2
• v0.9.3
• v0.9.4

tpm2: Pass along COMPAT_LEVEL to DRBG generator and pass to OBJECTs

This should be the last patch that activates OpenSSL key creation
in case a KDF is based on COMPAT_LEVEL_OPENSSL.

What may break the upgrade path are external keys. All those keys
can be used for key derivation via the NULL hierarchy using
TPM2_CreateLoaded(), with parent = NULL. The NULL hierarchy currently
indicates 'newSeed = TRUE', which would then be the reason to
use OpenSSL now for key creation while previously the original TPM 2
code was used.

Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>