| /systemd-251/src/cryptsetup/ |
| D | cryptsetup-tpm2.c | 58 uint32_t pcr_mask, in acquire_tpm2_key() argument
117 pcr_mask, in acquire_tpm2_key()
140 pcr_mask, in acquire_tpm2_key()
180 uint32_t pcr_mask = 0; in find_tpm2_auto_data() local
210 assert(pcr_mask == 0); in find_tpm2_auto_data()
223 pcr_mask |= UINT32_C(1) << u; in find_tpm2_auto_data()
227 … search_pcr_mask != pcr_mask) /* PCR mask doesn't match what is configured, ignore this entry */ in find_tpm2_auto_data()
312 *ret_pcr_mask = pcr_mask; in find_tpm2_auto_data()
|
| D | cryptsetup-tpm2.h | 17 uint32_t pcr_mask,
54 uint32_t pcr_mask, in acquire_tpm2_key() argument
|
| D | cryptsetup.c | 1358 uint32_t pcr_mask; in attach_luks_or_plain_or_bitlk_by_tpm2() local
1366 &pcr_mask, in attach_luks_or_plain_or_bitlk_by_tpm2()
1391 pcr_mask, in attach_luks_or_plain_or_bitlk_by_tpm2()
|
| /systemd-251/src/cryptsetup/cryptsetup-tokens/ |
| D | luks2-tpm2.c | 16 uint32_t pcr_mask, in acquire_luks2_key() argument
57 pcr_mask, pcr_bank, in acquire_luks2_key()
77 uint32_t pcr_mask = 0; in parse_luks2_tpm2_data() local
108 pcr_mask |= UINT32_C(1) << u; in parse_luks2_tpm2_data()
112 search_pcr_mask != pcr_mask) in parse_luks2_tpm2_data()
168 *ret_pcr_mask = pcr_mask; in parse_luks2_tpm2_data()
|
| D | cryptsetup-token-systemd-tpm2.c | 61 uint32_t pcr_mask; in cryptsetup_token_open() local
84 …r = parse_luks2_tpm2_data(json, params.search_pcr_mask, &pcr_mask, &pcr_bank, &primary_alg, &base6… in cryptsetup_token_open()
99 pcr_mask, in cryptsetup_token_open()
143 uint32_t pcr_mask; in cryptsetup_token_dump() local
152 …r = parse_luks2_tpm2_data(json, UINT32_MAX, &pcr_mask, &pcr_bank, &primary_alg, &base64_blob, &hex… in cryptsetup_token_dump()
157 if ((pcr_mask & (UINT32_C(1) << i)) && in cryptsetup_token_dump()
|
| D | luks2-tpm2.h | 10 uint32_t pcr_mask,
|
| /systemd-251/src/cryptenroll/ |
| D | cryptenroll-tpm2.c | 133 uint32_t pcr_mask, in enroll_tpm2() argument
150 assert(pcr_mask < (1U << TPM2_PCRS_MAX)); /* Support 24 PCR banks */ in enroll_tpm2()
160 …r = tpm2_seal(device, pcr_mask, pin_str, &secret, &secret_size, &blob, &blob_size, &hash, &hash_si… in enroll_tpm2()
177 …r = tpm2_unseal(device, pcr_mask, pcr_bank, primary_alg, blob, blob_size, hash, hash_size, pin_str… in enroll_tpm2()
203 …r = tpm2_make_luks2_json(keyslot, pcr_mask, pcr_bank, primary_alg, blob, blob_size, hash, hash_siz… in enroll_tpm2()
|
| D | cryptenroll-tpm2.h | 10 …nst void *volume_key, size_t volume_key_size, const char *device, uint32_t pcr_mask, bool use_pin);
12 …st void *volume_key, size_t volume_key_size, const char *device, uint32_t pcr_mask, bool use_pin) { in enroll_tpm2() argument
|
| /systemd-251/src/shared/ |
| D | tpm2-util.c | 488 uint32_t pcr_mask, in tpm2_get_best_pcr_bank() argument
548 … good = tpm2_pcr_mask_good(c, pcap->data.assignedPCR.pcrSelections[i].hash, pcr_mask); in tpm2_get_best_pcr_bank()
668 uint32_t pcr_mask, in tpm2_make_pcr_session() argument
695 r = tpm2_pcr_mask_good(c, pcr_bank, pcr_mask); in tpm2_make_pcr_session()
701 tpm2_pcr_mask_to_selecion(pcr_mask, pcr_bank, &pcr_selection); in tpm2_make_pcr_session()
707 r = tpm2_get_best_pcr_bank(c, pcr_mask, &h); in tpm2_make_pcr_session()
711 tpm2_pcr_mask_to_selecion(pcr_mask, h, &pcr_selection); in tpm2_make_pcr_session()
823 uint32_t pcr_mask, in tpm2_seal() argument
859 assert(pcr_mask < (UINT32_C(1) << TPM2_PCRS_MAX)); /* Support 24 PCR banks */ in tpm2_seal()
891 … r = tpm2_make_pcr_session(c.esys_context, primary, session, pcr_mask, UINT16_MAX, !!pin, NULL, in tpm2_seal()
[all …]
|
| D | tpm2-util.h | 47 int tpm2_seal(const char *device, uint32_t pcr_mask, const char *pin, void **ret_secret, size_t *re…
48 int tpm2_unseal(const char *device, uint32_t pcr_mask, uint16_t pcr_bank, uint16_t primary_alg, con…
57 int tpm2_make_luks2_json(int keyslot, uint32_t pcr_mask, uint16_t pcr_bank, uint16_t primary_alg, c…
|
| D | creds-util.c | 422 …le64_t pcr_mask; /* Note that the spec for PC Clients only mandates 24 PCRs, and that's what sy… member
687 t->pcr_mask = htole64(tpm2_pcr_mask); in encrypt_credential_and_warn()
850 if (le64toh(t->pcr_mask) >= (UINT64_C(1) << TPM2_PCRS_MAX)) in decrypt_credential_and_warn()
871 le64toh(t->pcr_mask), in decrypt_credential_and_warn()
|