Support for TPM 1.x - Githubissues

petasis commented 5 years ago

Hi all,

Is there any change of adding support for TPM 1.x, for those stacked with an old mainboard/bios that does not support TPM 2.0?

martinezjavier commented 5 years ago

@petasis I don't know of anyone working on this in the short, but if someone is interested patches are welcomed!

The pin is called tpm2 and not tpm to make it clear that it only supports TPM 2.0. Since TPM 2.0 is not backward compatible with TPM 1.2 (both the programming model and software stack is different) a tpm1 pin has to be implemented for TPM 1.2 support.

Something that would make TPM 1.2 support more complicated is the fact that the TPM 1.2 software stack (trousers) requires a user-space daemon (tcsd) which would have to run in the initramfs.

That's not the case for TPM 2.0 since clevis is using the kernel-space resource manager (/dev/tpmrm?). But that's not available for TPM 1.2 chips.

gastamper commented 5 years ago

Not trying to plug my own work but @petasis, consider this project if it fits your needs. It's not clevis, but I did use clevis as the basis for the dracut hooks.

@martinezjavier It's semi-tangential but you don't actually have to have trousers/tcsd running in order to just read from TPM 1.2, which is all we generally care about at boot time. See this binary for an example, which is what I used in the above-linked project.

phoenix-frozen commented 3 years ago

Can confirm, I used some tooling during my PhD that just talked to /dev/tpm0 without needing any of the usual TPM 1.2 TSS. No idea what happened to that tooling now, but I don't think it ships in Debian anymore. I think the core library those tools were based on was called "libtpm", but I can't find it now.

oldium commented 10 months ago

I have a working Clevis support for TPM 1.2 (currently modified directly in file system), so I plan to create a Pull Request this week. I am using tpm_sealdata and tpm_unsealdata with “well-known SRK password” (-z parameter to tpm_sealdata and tpm_unsealdata) to prevent any further password prompt during boot. The encryption and decryption can use PCR registers (-p parameter to tpm_sealdata). Currently it works inside normal initramfs, not with Dracut.

oldium commented 10 months ago

You can follow (work in progress) my development branch https://github.com/oldium/clevis/commits/feature/tpm1/.

The script uses tpm_sealdata and tpm_unsealdata tools to encrypt and decrypt secrets. It also uses “well-known” SRK password to prevent further password prompt during login (initially tpm_takeownership -z has to be used when taking TPM ownership to make this work).

What works:

Boot and unlock with TPM1.2: clevis luks bind -d /dev/<device> tpm1 '{"pcr_ids":"0,4,7"}'
Encrypt and decrypt: echo test | clevis encrypt tpm1 '{"pcr_ids":"0,4,7"}' | clevis decrypt

Status:

[✅ Done] Clevis encrypt, decrypt, bind support
[✅ Done] initramfs-tools support
[✅ Done] Systemd support
[✅ Done] Manual page for clevis-encrypt-tpm1
[✅ Done] Tests for tpm1 pin
[✅ Done] Dracut support

oldium commented 10 months ago

As this is work-in-progress, I plan to change the encryption algorithm tomorrow - currently the password is sealed directly with tpm_sealdata. I will do what TPM2 does (I understand more what it does and why now 😅) - it generates a cryptographically strong random encryption key (for encrypting the password) and encrypts the key with TPM afterwards. And during decrypting it decrypts the key first with TPM and afterwards decrypts the password with the decrypted key.

EDIT: it seems I do not get it fully yet, so investigating...

EDIT2: tpm2 really seals the encryption key (JWK) used to encrypt the password and unseals the JWK afterwards. This can be done with tpm_sealdata and tpm_unsealdata too.

oldium commented 10 months ago

Done. The code is now sealing JWK (which is used to encrypt the password) into TPM similar to what the tpm2 pin does.

oldium commented 10 months ago

TPM1 pin work is done, so now the Dracut and Systemd parts...

oldium commented 6 months ago

Updated systemd dependencies (so that tcsd is able to start before other services - same as clevis). I will play with Dracut now, I have a VM with sofware-emulated TPM 1.2, so it should be safe 😊