Added ST33 support for pre-provisioned device identity key and certificate

wolfSSL / wolfTPM

wolfTPM is a highly portable TPM 2.0 library, designed for embedded use.

https://www.wolfssl.com

GNU General Public License v2.0

230 stars 55 forks source link

Added ST33 support for pre-provisioned device identity key and certificate #336

Closed dgarske closed 3 months ago

dgarske commented 3 months ago

Add example for using TPM pre-provisioned device identity to TLS client example.
Add support for pre-provisioned TPM using the "TPM 2.0 Keys for Device Identity and Attestation" specification. Build macro: WOLFTPM_MFG_IDENTITY.
Added ST33 command for getting product info (serial number)
Added benchmarks for new ST33KTPM2XI2C.
Fixed ST33 vendor command to enable command codes (TPM2_SetCommandSet). It requires platform auth to be set.
Fixed 0x1XX error code parsing.

philljj commented 3 months ago

Can confirm this fixes unit, bench, and wrap. Will test tls_client and the rest next.

dgarske commented 3 months ago

Looks good to me. Tested WOLFTPM_MFG_IDENTITY on hardware, and reading pre-provisioned cert/key works with TLS. Wrap, native_test, unit, and bench all work.

Great, I also reviewed your fixes. Looks good. Please merge.