utils/regtests/testpcr.bat

REM #############################################################################
REM										#
REM			TPM2 regression test					#
REM			     Written by Ken Goldman				#
REM		       IBM Thomas J. Watson Research Center			#
REM										#
REM (c) Copyright IBM Corporation 2015 - 2019					#
REM 										#
REM All rights reserved.							#
REM 										#
REM Redistribution and use in source and binary forms, with or without		#
REM modification, are permitted provided that the following conditions are	#
REM met:									#
REM 										#
REM Redistributions of source code must retain the above copyright notice,	#
REM this list of conditions and the following disclaimer.			#
REM 										#
REM Redistributions in binary form must reproduce the above copyright		#
REM notice, this list of conditions and the following disclaimer in the		#
REM documentation and/or other materials provided with the distribution.	#
REM 										#
REM Neither the names of the IBM Corporation nor the names of its		#
REM contributors may be used to endorse or promote products derived from	#
REM this software without specific prior written permission.			#
REM 										#
REM THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS		#
REM "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT		#
REM LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR	#
REM A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT	#
REM HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,	#
REM SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT		#
REM LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,	#
REM DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY	#
REM THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT		#
REM (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE	#
REM OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.	#
REM										#
REM #############################################################################

setlocal enableDelayedExpansion

REM #
REM # for pcrextend
REM #
REM
REM # extend of aaa + 0 pad to digest length using pcrextend, use resettable PCR 16
REM
REM # sha1extaaa0.bin
REM # 1d 47 f6 8a ce d5 15 f7 79 73 71 b5 54 e3 2d 47
REM # 98 1a a0 a0
REM
REM # sha256extaaa0.bin
REM # c2 11 97 64 d1 16 13 bf 07 b7 e2 04 c3 5f 93 73
REM # 2b 4a e3 36 b4 35 4e bc 16 e8 d0 c3 96 3e be bb
REM
REM # sha384extaaa0.bin
REM # 29 29 63 e3 1c 34 c2 72 bd ea 27 15 40 94 af 92
REM # 50 ad 97 d9 e7 44 6b 83 6d 3a 73 7c 90 ca 47 df
REM # 2c 39 90 21 ce dd 00 85 3e f0 84 97 c5 a4 23 84
REM
REM # sha512extaaa0.bin
REM # 7f e1 e4 cf 01 52 93 13 6b f1 30 18 30 39 b6 a6
REM # 46 ea 00 8b 75 af d0 f8 46 6a 9b fe 53 1a f8 ad
REM # a8 67 a6 58 28 cf ce 48 60 77 52 9e 54 f1 83 0a
REM # a4 9a b7 80 56 2b ae a4 9c 67 a8 73 34 ff e7 78
REM
REM #
REM # for pcrevent
REM #
REM
REM # first hash using hash -ic aaa -ns
REM # then extend using policymaker
REM
REM # sha1 of aaa
REM # 7e240de74fb1ed08fa08d38063f6a6a91462a815
REM # extend
REM # ab 53 c7 ec 3f fe fe 21 9e 9d 89 da f1 8e 16 55
REM # 3e 23 8e a6
REM
REM # sha256 of aaa
REM # 9834876dcfb05cb167a5c24953eba58c4ac89b1adf57f28f2f9d09af107ee8f0
REM # extend
REM # df 81 1e 9d 19 a0 d3 3d e6 7b b1 c7 26 a6 20 5c
REM # d0 a2 eb 0f 61 b7 c9 ee 91 66 eb cf dc 17 db ab
REM
REM # sha384 of aaa
REM # 8e07e5bdd64aa37536c1f257a6b44963cc327b7d7dcb2cb47a22073d33414462bfa184487cf372ce0a19dfc83f8336d8
REM # extend of that
REM # 61 bc 70 39 e2 94 87 c2 17 b0 b1 46 10 5d 64 e6
REM # ad 32 a6 d5 c2 5b 45 01 a7 4b bc a7 7f cc 24 25
REM # 36 ca 1a 40 f9 36 44 f0 d8 b0 98 ea a6 50 97 4d
REM
REM # sha512 of aaa
REM # d6f644b19812e97b5d871658d6d3400ecd4787faeb9b8990c1e7608288664be77257104a58d033bcf1a0e0945ff06468ebe53e2dff36e248424c7273117dac09
REM # extend of that (using policymaker)
REM # cb 7f be b3 1c 29 61 24 4c 9c 47 80 84 0d b4 3a
REM # 76 3f ba 96 ef c1 d9 52 f4 e3 e0 2c 06 8a 31 8a
REM # e5 3f a0 a7 a1 74 e8 23 e3 07 1a cd c6 52 6f b6
REM # 77 6d 07 0f 36 47 27 4d a6 29 db c9 10 a7 6c 2a
REM
REM # all these variables are related
REM
REM # bank algorithm test pattern is

set BANKS=^
    "sha1"			^
    "sha256"			^
    "sha384"			^
    "sha512"			^
    "sha1   sha256"		^
    "sha1   sha384"		^
    "sha1   sha512"		^
    "sha256 sha384"		^
    "sha256 sha512"		^
    "sha384 sha512"		^
    "sha1   sha256 sha384"	^
    "sha1   sha256 sha512"	^
    "sha1   sha384 sha512"	^
    "sha256 sha384 sha512"	^
    "sha1   sha256 sha384 sha512"

REM # bank extend algorithm test pattern is

set EXTEND=^
    "-halg sha1"				^
    "-halg sha256"				^
    "-halg sha384"				^
    "-halg sha512"				^
    "-halg sha1   -halg sha256"			^
    "-halg sha1   -halg sha384"			^
    "-halg sha1   -halg sha512"			^
    "-halg sha256 -halg sha384"			^
    "-halg sha256 -halg sha512"			^
    "-halg sha384 -halg sha512"			^
    "-halg sha1   -halg sha256 -halg sha384"	^
    "-halg sha1   -halg sha256 -halg sha512"	^
    "-halg sha1   -halg sha384 -halg sha512"	^
    "-halg sha256 -halg sha384 -halg sha512"	^
    "-halg sha1   -halg sha256 -halg sha384 -halg sha512"

REM # bank event file test pattern is

set EVENT=^
    "-of1 tmpsha1.bin"						^
    "-of2 tmpsha256.bin"					^
    "-of3 tmpsha384.bin"					^
    "-of5 tmpsha512.bin"					^
    "-of1 tmpsha1.bin   -of2 tmpsha256.bin"			^
    "-of1 tmpsha1.bin   -of3 tmpsha384.bin"			^
    "-of1 tmpsha1.bin   -of5 tmpsha512.bin"			^
    "-of2 tmpsha256.bin -of3 tmpsha384.bin"			^
    "-of2 tmpsha256.bin -of5 tmpsha512.bin"			^
    "-of3 tmpsha384.bin -of5 tmpsha512.bin"			^
    "-of1 tmpsha1.bin   -of2 tmpsha256.bin -of3 tmpsha384.bin"	^
    "-of1 tmpsha1.bin   -of2 tmpsha256.bin -of5 tmpsha512.bin"	^
    "-of1 tmpsha1.bin   -of3 tmpsha384.bin -of5 tmpsha512.bin"	^
    "-of2 tmpsha256.bin -of3 tmpsha384.bin -of5 tmpsha512.bin"	^
    "-of1 tmpsha1.bin   -of2 tmpsha256.bin -of3 tmpsha384.bin -of5 tmpsha512.bin"
)

REM # assuming starts with starts with sha1 sha256 sha384 sha512

set ALLOC=^
    "-sha256 -sha384 -sha512"		^
    "-sha1   +sha256"			^
    "-sha256 +sha384"			^
    "-sha384 +sha512"			^
    "+sha1   +sha256 -sha512"		^
    "-sha256 +sha384"			^
    "-sha384 +sha512"			^
    "-sha1   +sha256 +sha384 -sha512"	^
    "-sha384 +sha512"			^
    "-sha256 +sha384"			^
    "+sha1   +sha256 -sha512"		^
    "-sha384 +sha512"			^
    "-sha256 +sha384"			^
    "-sha1   +sha256"			^
    "+sha1"
)

REM i is iterator over PCR bank allocation patterns
set i=0
for %%a in (!BANKS!) do set /A i+=1 & set BANKS[!i!]=%%~a
set i=0
for %%a in (!EXTEND!) do set /A i+=1 & set EXTEND[!i!]=%%~a
set i=0
for %%a in (!EVENT!) do set /A i+=1 & set EVENT[!i!]=%%~a
set i=0
for %%a in (!ALLOC!) do set /A i+=1 & set ALLOC[!i!]=%%~a
set L=!i!

for /L %%i in (1,1,!L!) do (

    echo ""
    echo "pcrallocate !BANKS[%%i]!"
    echo ""
    %TPM_EXE_PATH%pcrallocate !ALLOC[%%i]! > run.out
    IF !ERRORLEVEL! NEQ 0 (
      exit /B 1
    )

    echo "powerup"
    %TPM_EXE_PATH%powerup > run.out
    IF !ERRORLEVEL! NEQ 0 (
      exit /B 1
    )

    echo "startup"
    %TPM_EXE_PATH%startup > run.out
    IF !ERRORLEVEL! NEQ 0 (
      exit /B 1
    )

    echo "display PCR banks"
    %TPM_EXE_PATH%getcapability -cap 5 > run.out
    IF !ERRORLEVEL! NEQ 0 (
      exit /B 1
    )

    echo ""
    echo "PCR Extend"
    echo ""

    echo "PCR Reset"
    %TPM_EXE_PATH%pcrreset -ha 16 > run.out
    IF !ERRORLEVEL! NEQ 0 (
      exit /B 1
      )

    echo "PCR Extend !EXTEND[%%i]!"
    %TPM_EXE_PATH%pcrextend -ha 16 !EXTEND[%%i]! -if policies/aaa > run.out
    IF !ERRORLEVEL! NEQ 0 (
      exit /B 1
      )

    for %%H in (!BANKS[%%i]!) do (

    	echo "PCR Read %%H"
    	%TPM_EXE_PATH%pcrread -ha 16 -halg %%H -of tmp.bin > run.out
    	IF !ERRORLEVEL! NEQ 0 (
      	    exit /B 1
      	)

    	echo "Verify the read data %%H"
    	diff policies/%%Hextaaa0.bin tmp.bin > run.out
    	IF !ERRORLEVEL! NEQ 0 (
      	    exit /B 1
      	)
    )

    echo ""
    echo "PCR Event"
    echo ""

    echo "PCR Reset"
    %TPM_EXE_PATH%pcrreset -ha 16 > run.out
    IF !ERRORLEVEL! NEQ 0 (
        exit /B 1
    )

    echo "PCR Event !EVENT[%%i]!"
    %TPM_EXE_PATH%pcrevent -ha 16 -if policies/aaa !EVENT[%%i]! > run.out
    IF !ERRORLEVEL! NEQ 0 (
        exit /B 1
    )

    for %%H in (!BANKS[%%i]!) do (

    	echo "Verify Digest %%H"
    	diff policies/%%Haaa.bin tmp%%H.bin > run.out > run.out
	IF !ERRORLEVEL! NEQ 0 (
	    exit /B 1
	)

	echo "PCR Read %%H"
	%TPM_EXE_PATH%pcrread -ha 16 -halg %%H -of tmp%%H.bin > run.out
	IF !ERRORLEVEL! NEQ 0 (
	    exit /B 1
	)

	echo "Verify Digest %%H"
	diff policies/%%Hexthaaa.bin tmp%%H.bin > run.out
	IF !ERRORLEVEL! NEQ 0 (
	    exit /B 1
	)
    )

    echo ""
    echo "Event Sequence Complete"
    echo ""

    echo "PCR Reset"
    %TPM_EXE_PATH%pcrreset -ha 16 > run.out
        IF !ERRORLEVEL! NEQ 0 (
    exit /B 1
    )

    echo "Event sequence start, alg null"
    %TPM_EXE_PATH%hashsequencestart -halg null -pwda aaa > run.out
        IF !ERRORLEVEL! NEQ 0 (
    exit /B 1
    )

    echo "Event Sequence Complete"
    %TPM_EXE_PATH%eventsequencecomplete -hs 80000000 -pwds aaa -ha 16 -if policies/aaa !EVENT[%%i]! > run.out
        IF !ERRORLEVEL! NEQ 0 (
    exit /B 1
    )

    for %%H in (!BANKS[%%i]!) do (

    	echo "Verify Digest %%H"
	diff policies/%%Haaa.bin tmp%%H.bin > run.out
	    IF !ERRORLEVEL! NEQ 0 (
	    exit /B 1
	)

	echo "PCR Read %%H"
	%TPM_EXE_PATH%pcrread -ha 16 -halg %%H -of tmp%%H.bin > run.out
	    IF !ERRORLEVEL! NEQ 0 (
	    exit /B 1
	)

	echo "Verify Digest %%H"
	diff policies/%%Hexthaaa.bin tmp%%H.bin > run.out
	    IF !ERRORLEVEL! NEQ 0 (
	    exit /B 1
	)

    )

)

echo "PCR Reset"
%TPM_EXE_PATH%pcrreset -ha 16 > run.out
IF !ERRORLEVEL! NEQ 0 (
  exit /B 1
)

REM # recreate the primary key that was flushed on the powerup

echo "Create a platform primary storage key"
%TPM_EXE_PATH%createprimary -hi p -pwdk sto -pol policies/zerosha256.bin -tk pritk.bin -ch prich.bin > run.out
IF !ERRORLEVEL! NEQ 0 (
    exit /B 1
)

exit /B 0