ae_error_t CertificateProvisioningProtocol::msg3_create_header(const upse::Buffer& transactionID, uint32_t nonceSize, uint32_t quoteSize, uint32_t epidSigSize, uint32_t csrSize, provision_request_header_t& header)
{
ae_error_t status = AESM_PSE_PR_INTERNAL_ERROR;
do
{
uint32_t seq2_0_tlv_block_cipher_text_size = BLOCK_CIPHER_TEXT_TLV_SIZE(quoteSize + epidSigSize + csrSize);
uint32_t seq3_0_tlv_nonce_size = nonceSize;
uint32_t seq4_0_tlv_mac_size = MAC_TLV_SIZE(MAC_SIZE);
header.protocol = PSE_PROVISIONING;
header.version = TLV_VERSION_1;
header.type = static_cast<uint8_t>(TYPE_PSE_MSG3);
if (XID_SIZE != transactionID.getSize())
break;
if (memcpy_s(header.xid, sizeof(header.xid), transactionID.getData(), transactionID.getSize()) != 0)
break;
uint32_t totalSize = seq2_0_tlv_block_cipher_text_size + seq3_0_tlv_nonce_size + seq4_0_tlv_mac_size;
uint32_t serializedSize = _htonl(totalSize);
se_static_assert(sizeof(serializedSize) == sizeof(header.size));
if (memcpy_s(header.size, sizeof(header.size), &serializedSize, sizeof(serializedSize)) != 0)
break;
status = AE_SUCCESS;
} while (0);
return status;
}
//Function to initialize request header for ProvMsg1
//msg1_header: request header for ProvMsg1 to fill in
//use_flags: whether the flag tlv is included
//xid: transaction ID
//msg1_buffer_size: buffer size for ProvMsg1, in bytes
static ae_error_t prov_msg1_gen_header(provision_request_header_t *msg1_header,
bool use_flags,
const uint8_t *xid,
uint32_t msg1_buffer_size)
{
uint32_t total_size = 0;
//platform info tlv size
uint32_t field1_data_size = PLATFORM_INFO_TLV_SIZE();
field1_data_size += CIPHER_TEXT_TLV_SIZE(RSA_3072_KEY_BYTES);
//add flag tlv if needed
if(use_flags){
field1_data_size += FLAGS_TLV_SIZE();
}
if(sizeof(*msg1_header)>msg1_buffer_size){
AESM_DBG_ERROR("Too small ProvMsg1 buffer size");
return PVE_INSUFFICIENT_MEMORY_ERROR;
}
total_size = CIPHER_TEXT_TLV_SIZE(RSA_3072_KEY_BYTES) + BLOCK_CIPHER_TEXT_TLV_SIZE(field1_data_size) +MAC_TLV_SIZE(MAC_SIZE);
//initialize Msg1 Header
msg1_header->protocol = SE_EPID_PROVISIONING;
msg1_header->type = TYPE_PROV_MSG1;
msg1_header->version = TLV_VERSION_2;
if(0!=memcpy_s(msg1_header->xid, sizeof(msg1_header->xid), xid, XID_SIZE)){
AESM_DBG_FATAL("fail in memcpy_s");
return PVE_UNEXPECTED_ERROR;
}
uint32_t size_in;
//use as a tmp size, big endian required in msg header
size_in = _htonl(total_size);
//copy big endian msg body size into header
if(0!=memcpy_s(&msg1_header->size, sizeof(msg1_header->size),&size_in, sizeof(size_in))){
AESM_DBG_FATAL("fail in memcpy_s");
return PVE_UNEXPECTED_ERROR;
}
if(total_size +sizeof(*msg1_header) >msg1_buffer_size){
//the input msg body size is not large enough
AESM_DBG_ERROR("Too small ProvMsg1 buffer size");
return PVE_INSUFFICIENT_MEMORY_ERROR;
}
return AE_SUCCESS;
}
