Add remaining TPM commands to TPMDirect API

[chrisfenner]

Here are all the commands in 1.59. We can use this tracking bug to track implementation of the rest of them in the tpmdirect branch.

• [ ] AC_GetCapability
• [ ] AC_Send
• [ ] ACT_SetTimeout
• [x] ActivateCredential
• [x] Certify
• [x] CertifyCreation
• [ ] CertifyX509
• [ ] ChangeEPS
• [ ] ChangePPS
• [x] Clear
• [ ] ClearControl
• [ ] ClockRateAdjust
• [ ] ClockSet
• [x] Commit
• [ ] ContextLoad
• [ ] ContextSave
• [x] Create
• [x] CreateLoaded
• [x] CreatePrimary
• [ ] DictionaryAttackLockReset
• [ ] DictionaryAttackParameters
• [ ] Duplicate
• [ ] EC_Ephemeral
• [ ] ECC_Parameters
• [ ] ECDH_KeyGen
• [x] ECDH_ZGen
• [ ] EncryptDecrypt
• [ ] EncryptDecrypt2
• [ ] EventSequenceComplete
• [ ] EvictControl
• [ ] FieldUpgradeData
• [ ] FieldUpgradeStart
• [ ] FirmwareRead
• [x] FlushContext
• [x] GetCapability
• [ ] GetCommandAuditDigest
• [x] GetRandom
• [x] GetSessionAuditDigest
• [ ] GetTestResult
• [ ] GetTime
• [ ] Hash
• [ ] HashSequenceStart
• [ ] HierarchyChangeAuth
• [ ] HierarchyControl
• [ ] HMAC
• [ ] HMAC_Start
• [ ] Import
• [ ] IncrementalSelfTest
• [x] Load
• [x] LoadExternal
• [ ] MAC
• [ ] MAC_Start
• [ ] MakeCredential
• [x] NV_Certify
• [ ] NV_ChangeAuth
• [x] NV_DefineSpace
• [ ] NV_Extend
• [ ] NV_GlobalWriteLock
• [x] NV_Increment
• [x] NV_Read
• [ ] NV_ReadLock
• [x] NV_ReadPublic
• [ ] NV_SetBits
• [x] NV_UndefineSpace
• [x] NV_UndefineSpaceSpecial
• [x] NV_Write
• [x] NV_WriteLock
• [ ] ObjectChangeAuth
• [ ] PCR_Allocate
• [x] PCR_Event
• [x] PCR_Extend
• [x] PCR_Read
• [x] PCR_Reset
• [ ] PCR_SetAuthPolicy
• [ ] PCR_SetAuthValue
• [ ] Policy_AC_SendSelect
• [x] PolicyAuthorize
• [x] PolicyAuthorizeNV
• [ ] PolicyAuthValue
• [x] PolicyCommandCode
• [ ] PolicyCounterTimer
• [x] PolicyCpHash
• [ ] PolicyDuplicationSelect
• [x] PolicyGetDigest
• [ ] PolicyLocality
• [ ] PolicyNameHash
• [x] PolicyNV
• [x] PolicyNvWritten
• [x] PolicyOR
• [ ] PolicyPassword
• [x] PolicyPCR
• [ ] PolicyPhysicalPresence
• [ ] PolicyRestart
• [x] PolicySecret
• [x] PolicySigned
• [ ] PolicyTemplate
• [ ] PolicyTicket
• [ ] PP_Commands
• [x] Quote
• [ ] ReadClock
• [x] ReadPublic
• [ ] Rewrap
• [ ] RSA_Decrypt
• [ ] RSA_Encrypt
• [ ] SelfTest
• [ ] SequenceComplete
• [ ] SequenceUpdate
• [ ] SetAlgorithmSet
• [ ] SetCommandCodeAuditStatus
• [ ] SetPrimaryPolicy
• [x] Shutdown
• [x] Sign
• [x] StartAuthSession
• [x] Startup
• [ ] StirRandom
• [ ] TestParms
• [x] Unseal
• [x] VerifySignature
• [ ] ZGen_2Phase

[shuk777]

Hi, Chris. I'm trying to implement a ECC-DAA protocol using your repo, it seems that TPM2_Commit() is a necessary. Do you have plans for "commit" function recently?

[chrisfenner]

Hi, @shuk777! I doubt we will get to it too soon, but if you send a PR to the tpmdirect branch I'd be happy to take a look!

Chris

[chrisfenner]

@matt-tsai, here are the commands we'll need for the upcoming Google work on implicit attestation (https://github.com/google/pint):

• [x] ActivateCredential
• [x] Certify
• [x] CertifyCreation
• [x] Clear
• [x] Create
• [x] CreateLoaded
• [x] CreatePrimary
• [x] ECDH_ZGen
• [x] FlushContext
• [x] GetCapability
• [x] GetSessionAuditDigest
• [x] Load
• [x] NV_Certify
• [x] NV_DefineSpace
• [x] NV_Increment
• [x] NV_Read
• [x] NV_ReadPublic
• [x] NV_UndefineSpace
• [x] PCR_Event
• [x] PCR_Extend
• [x] PCR_Read
• [x] PCR_Reset
• [x] PolicyCommandCode
• [x] PolicyGetDigest
• [x] PolicyNV
• [x] PolicyOR
• [x] PolicyPCR
• [x] PolicySecret
• [x] Quote
• [x] ReadPublic
• [x] Sign
• [x] StartAuthSession
• [x] Startup
• [x] Unseal

[chrisfenner]

Over 1/3 done now. Congrats again to @matt-tsai on completing so much work on this this summer! We are well on the way to releasing TPMDirect.