forked from google/go-attestation
-
Notifications
You must be signed in to change notification settings - Fork 0
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Windows hacking #2
Draft
hslatman
wants to merge
27
commits into
master
Choose a base branch
from
herman/windows-hacking
base: master
Could not load branches
Branch not found: {{ refName }}
Loading
Could not load tags
Nothing to show
Loading
Are you sure you want to change the base?
Some commits from the old base branch may be removed from the timeline,
and old review comments may become outdated.
Draft
Commits on Apr 29, 2022
-
Add TPM 2 application key support for Windows
There's currently no support for creating application keys on Windows systems. This patch transitions the Windows key type to specifically refer to attestation keys, and reuses the existing wrapped key support for application keys. This allows the creation of keys in the platform store, while still allowing said keys to be manipulated with existing TPM functionality rather than duplicating it.
Configuration menu - View commit details
-
Copy full SHA for 3e6fc9e - Browse repository at this point
Copy the full SHA 3e6fc9eView commit details
Commits on Jun 2, 2022
-
Configuration menu - View commit details
-
Copy full SHA for ade05c9 - Browse repository at this point
Copy the full SHA ade05c9View commit details -
Configuration menu - View commit details
-
Copy full SHA for 164122a - Browse repository at this point
Copy the full SHA 164122aView commit details
Commits on Oct 27, 2022
-
Configuration menu - View commit details
-
Copy full SHA for ab74553 - Browse repository at this point
Copy the full SHA ab74553View commit details -
Configuration menu - View commit details
-
Copy full SHA for 31a9234 - Browse repository at this point
Copy the full SHA 31a9234View commit details -
Configuration menu - View commit details
-
Copy full SHA for f548032 - Browse repository at this point
Copy the full SHA f548032View commit details
Commits on Nov 8, 2022
-
Configuration menu - View commit details
-
Copy full SHA for 81aa7c3 - Browse repository at this point
Copy the full SHA 81aa7c3View commit details
Commits on Nov 10, 2022
-
Add signing support for keys generated on Windows
When generating a new key using a Windows TPM, a `wrappedKey20` was returned, which couldn't be used for signing on Windows, as it's backed by a `windowsTPM`. The `wrappedKey20` seems to be a type specifically aimed at usage with a `wrappedTPM20`, which in turn seems to be used on Linux and for testing, but not when instantiating a TPM on Windows. This commit adds the `newWindowsKey20` function, which returns a key backed by a `windowsTPM`. The key is a `windowsAK20`, now also conforming to the `key` interface, so that it can be used for signing purposes.
Configuration menu - View commit details
-
Copy full SHA for 1a8e4e7 - Browse repository at this point
Copy the full SHA 1a8e4e7View commit details
Commits on Nov 14, 2022
-
Configuration menu - View commit details
-
Copy full SHA for 5bc739d - Browse repository at this point
Copy the full SHA 5bc739dView commit details -
Configuration menu - View commit details
-
Copy full SHA for eb68d97 - Browse repository at this point
Copy the full SHA eb68d97View commit details -
Configuration menu - View commit details
-
Copy full SHA for 3543ffd - Browse repository at this point
Copy the full SHA 3543ffdView commit details
Commits on Nov 15, 2022
-
Configuration menu - View commit details
-
Copy full SHA for 3737d78 - Browse repository at this point
Copy the full SHA 3737d78View commit details -
Configuration menu - View commit details
-
Copy full SHA for 4dd9dc6 - Browse repository at this point
Copy the full SHA 4dd9dc6View commit details
Commits on Jan 4, 2023
-
Configuration menu - View commit details
-
Copy full SHA for b832351 - Browse repository at this point
Copy the full SHA b832351View commit details -
Configuration menu - View commit details
-
Copy full SHA for 7ad3b26 - Browse repository at this point
Copy the full SHA 7ad3b26View commit details -
Configuration menu - View commit details
-
Copy full SHA for 7d9b67d - Browse repository at this point
Copy the full SHA 7d9b67dView commit details
Commits on Jan 5, 2023
-
On Windows, when the key is managed by the OS, keys are stored on the filesystem. When trying to create a key with the same name, this will fail with the following error: `NCryptCreatePersistedKey returned 8009000F: The operation completed successfully.` This commit adds support for deleting these keys, so that a new key can be created with the same name. Have only tested this on Windows so far. My assumption is that for keys created with `go-attestation` on Linux, the keys aren't persisted "inside the TPM", so there's nothing to do when deleting them, except for any keys managed externally.
Configuration menu - View commit details
-
Copy full SHA for d197d79 - Browse repository at this point
Copy the full SHA d197d79View commit details
Commits on Jan 13, 2023
-
Configuration menu - View commit details
-
Copy full SHA for 37fd3fa - Browse repository at this point
Copy the full SHA 37fd3faView commit details -
Configuration menu - View commit details
-
Copy full SHA for a3f530a - Browse repository at this point
Copy the full SHA a3f530aView commit details -
Configuration menu - View commit details
-
Copy full SHA for 0ad94dd - Browse repository at this point
Copy the full SHA 0ad94ddView commit details
Commits on Feb 24, 2023
-
Configuration menu - View commit details
-
Copy full SHA for 0ea71a1 - Browse repository at this point
Copy the full SHA 0ea71a1View commit details -
Configuration menu - View commit details
-
Copy full SHA for eb81e6e - Browse repository at this point
Copy the full SHA eb81e6eView commit details -
Configuration menu - View commit details
-
Copy full SHA for 1bcb20a - Browse repository at this point
Copy the full SHA 1bcb20aView commit details
Commits on May 8, 2023
-
Configuration menu - View commit details
-
Copy full SHA for 2f91901 - Browse repository at this point
Copy the full SHA 2f91901View commit details
Commits on May 9, 2023
-
Configuration menu - View commit details
-
Copy full SHA for ef181aa - Browse repository at this point
Copy the full SHA ef181aaView commit details
Commits on Jun 27, 2023
-
Configuration menu - View commit details
-
Copy full SHA for 8df7c54 - Browse repository at this point
Copy the full SHA 8df7c54View commit details -
Configuration menu - View commit details
-
Copy full SHA for ce1f4b5 - Browse repository at this point
Copy the full SHA ce1f4b5View commit details
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.