// This file was extracted from the TCG Published

// Trusted Platform Module Library

// Part 3: Commands

// Family "2.0"

// Level 00 Revision 01.16

// October 30, 2014

#include "InternalRoutines.h"

#include "CreatePrimary_fp.h"

#include "Object_spt_fp.h"

#include "Platform.h"

//

//

//     Error Returns                  Meaning

//

//     TPM_RC_ATTRIBUTES              sensitiveDataOrigin is CLEAR when 'sensitive.data' is an Empty

//                                    Buffer, or is SET when 'sensitive.data' is not empty; fixedTPM,

//                                    fixedParent, or encryptedDuplication attributes are inconsistent

//                                    between themselves or with those of the parent object; inconsistent

//                                    restricted, decrypt and sign attributes; attempt to inject sensitive data

//                                    for an asymmetric key; attempt to create a symmetric cipher key that

//                                    is not a decryption key

//     TPM_RC_KDF                     incorrect KDF specified for decrypting keyed hash object

//     TPM_RC_OBJECT_MEMORY           there is no free slot for the object

//     TPM_RC_SCHEME                  inconsistent attributes decrypt, sign, restricted and key's scheme ID;

//                                    or hash algorithm is inconsistent with the scheme ID for keyed hash

//                                    object

//     TPM_RC_SIZE                    size of public auth policy or sensitive auth value does not match

//                                    digest size of the name algorithm sensitive data size for the keyed

//                                    hash object is larger than is allowed for the scheme

//     TPM_RC_SYMMETRIC               a storage key with no symmetric algorithm specified; or non-storage

//                                    key with symmetric algorithm different from TPM_ALG_NULL

//     TPM_RC_TYPE                    unknown object type;

//

TPM_RC

TPM2_CreatePrimary(

   CreatePrimary_In    *in,                  // IN: input parameter list

   CreatePrimary_Out   *out                  // OUT: output parameter list

   )

{

// Local variables

   TPM_RC              result = TPM_RC_SUCCESS;

   TPMT_SENSITIVE      sensitive;

// Input Validation

   // The sensitiveDataOrigin attribute must be consistent with the setting of

   // the size of the data object in inSensitive.

   if(   (in->inPublic.t.publicArea.objectAttributes.sensitiveDataOrigin == SET)

      != (in->inSensitive.t.sensitive.data.t.size == 0 ))

       // Mismatch between the object attributes and the parameter.

       return TPM_RC_ATTRIBUTES + RC_CreatePrimary_inSensitive;

   // Check attributes in input public area. TPM_RC_ATTRIBUTES, TPM_RC_KDF,

   // TPM_RC_SCHEME, TPM_RC_SIZE, TPM_RC_SYMMETRIC, or TPM_RC_TYPE error may

   // be returned at this point.

   result = PublicAttributesValidation(FALSE, in->primaryHandle,

                                       &in->inPublic.t.publicArea);

   if(result != TPM_RC_SUCCESS)

       return RcSafeAddToResult(result, RC_CreatePrimary_inPublic);

   // Validate the sensitive area values

   if( MemoryRemoveTrailingZeros(&in->inSensitive.t.sensitive.userAuth)

           > CryptGetHashDigestSize(in->inPublic.t.publicArea.nameAlg))

//

       return TPM_RC_SIZE + RC_CreatePrimary_inSensitive;

// Command output

   // Generate Primary Object

   // The primary key generation process uses the Name of the input public

   // template to compute the key. The keys are generated from the template

   // before anything in the template is allowed to be changed.

   // A TPM_RC_KDF, TPM_RC_SIZE error may be returned at this point

   result = CryptCreateObject(in->primaryHandle, &in->inPublic.t.publicArea,

                              &in->inSensitive.t.sensitive,&sensitive);

   if(result != TPM_RC_SUCCESS)

       return result;

   // Fill in creation data

   FillInCreationData(in->primaryHandle, in->inPublic.t.publicArea.nameAlg,

                      &in->creationPCR, &in->outsideInfo, &out->creationData,

                      &out->creationHash);

   // Copy public area

   out->outPublic = in->inPublic;

   // Fill in private area for output

   ObjectComputeName(&(out->outPublic.t.publicArea), &out->name);

   // Compute creation ticket

   TicketComputeCreation(EntityGetHierarchy(in->primaryHandle), &out->name,

                         &out->creationHash, &out->creationTicket);

   // Create a internal object. A TPM_RC_OBJECT_MEMORY error may be returned

   // at this point.

   result = ObjectLoad(in->primaryHandle, &in->inPublic.t.publicArea, &sensitive,

                       &out->name, in->primaryHandle, TRUE, &out->objectHandle);

   return result;

}