Re: [RFC PATCH] tpm: don't return -EINVAL if TPM command validation fails

Ken Goldman
2017-12-22T17:38:28Z

On 12/17/2017 11:47 AM, Jarkko Sakkinen wrote:

> I did not really get the Ken's comment about incompatibility with
> different RM's. I guess all TPM user spaces should be able to handle
> TPM_RC_COMMAND_CODE and top bits are part of the TCG standard
> (TSS2_RESMGR_TPM_RC_LAYER):

I think (?) my comment was around the suggestion that the SAPI TSS could
map -EINVAL to TPM_RC_COMMAND_CODE. I.e, that all the user space TSS'es
(not different RMs) would have to follow this tread and fix their
implementations.

I wrote:

> Remember also that SAPI is just one TSS design. There are currently
> three others. And SAPI is targeted more as a building block than an
> end user library.
>
> Every TSS implementation would have to do this mapping. How would
> they even know to do it if they didn't notice this thread? It
> wouldn't be documented anywhere other than deep in kernel code.