* Re: [tpm2] SLB 9670 TPM 2.0 device, How many keys I can store inside TPM as persistent
@ 2018-04-06 19:11 Tadeusz Struk
0 siblings, 0 replies; 3+ messages in thread
From: Tadeusz Struk @ 2018-04-06 19:11 UTC (permalink / raw)
To: tpm2
[-- Attachment #1: Type: text/plain, Size: 1675 bytes --]
On 04/05/2018 10:49 PM, Tomasz Przybysz wrote:
> #define TPM_PT_HR_PERSISTENT_MIN (PT_FIXED + 15 ) /* the minimum number of persistent objects that can be held in TPM NV memoryNOTE This minimum shall be no less than the minimum value required by the platformspecific specification to which the TPM is built. */
>
> I don't uderstand. So what is max capacity of this device ?
The maximum capacity of the device is limited only by the amount of the NV memory in the chip, which for this chip is 7KB as far as I can see.
> *
> Up to 7 loaded persistent Objects***for my understandig it's max capacity. But why this parameter is called *TPM_PT_HR_PERSISTENT_MIN* ?
> vs
> "the minimum number of persistent objects that can be held in TPM NV memory"
>
> So is it min or max ?
It's min. The spec defines some minimums in order to ensure proper operation.
See section 41. "Minimums" in https://trustedcomputinggroup.org/wp-content/uploads/TPM-Rev-2.0-Part-1-Architecture-01.16.pdf
The chip vendor can define other minimums, not less than the minimums specified by the spec.
Put in other words. This tells you what is the minimum number of persistent objects a TPM needs to support to be able to support all TPM command implemented by the given TPM chip.
>
> What does 'loaded persistent' mean ? As I know persistent key is always loaded.
> When I want to use persistent key I don't need load it.
Right, you don't need to load a persistent key, assuming it wasn't evicted by tpm2_evictcontrol tool.
For more info see section 37.3 "Owner and Platform Evict Objects" from the spec above.
Hope that helps.
--
Tadeusz
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: [tpm2] SLB 9670 TPM 2.0 device, How many keys I can store inside TPM as persistent
@ 2018-04-06 6:30 Tomasz Przybysz
0 siblings, 0 replies; 3+ messages in thread
From: Tomasz Przybysz @ 2018-04-06 6:30 UTC (permalink / raw)
To: tpm2
[-- Attachment #1: Type: text/plain, Size: 10522 bytes --]
I have done next tests and:
./tpm2_getcap -c properties-variable
TPM_PT_HR_PERSISTENT: 0x00000012
TPM_PT_HR_PERSISTENT_AVAIL: 0x00000000
./tpm2_listpersistent
persistent-handle[0]:0x81010001 key-alg:rsa hash-alg:sha256
object-attr:fixedtpm|fixedparent|sensitivedataorigin|userwithauth|restricted|decrypt
persistent-handle[1]:0x81010002 key-alg:rsa hash-alg:sha256
object-attr:fixedtpm|fixedparent|sensitivedataorigin|userwithauth|decrypt|sign
persistent-handle[2]:0x81010003 key-alg:rsa hash-alg:sha256
object-attr:fixedtpm|fixedparent|sensitivedataorigin|userwithauth|restricted|decrypt
persistent-handle[3]:0x81010010 key-alg:rsa hash-alg:sha256
object-attr:fixedtpm|fixedparent|sensitivedataorigin|userwithauth|decrypt|sign
persistent-handle[4]:0x81010011 key-alg:rsa hash-alg:sha256
object-attr:fixedtpm|fixedparent|sensitivedataorigin|userwithauth|decrypt|sign
persistent-handle[5]:0x81010012 key-alg:rsa hash-alg:sha256
object-attr:fixedtpm|fixedparent|sensitivedataorigin|userwithauth|decrypt|sign
persistent-handle[6]:0x81010013 key-alg:rsa hash-alg:sha256
object-attr:fixedtpm|fixedparent|sensitivedataorigin|userwithauth|decrypt|sign
persistent-handle[7]:0x81010014 key-alg:rsa hash-alg:sha256
object-attr:fixedtpm|fixedparent|sensitivedataorigin|userwithauth|decrypt|sign
persistent-handle[8]:0x81010015 key-alg:rsa hash-alg:sha256
object-attr:fixedtpm|fixedparent|sensitivedataorigin|userwithauth|decrypt|sign
persistent-handle[9]:0x81010016 key-alg:rsa hash-alg:sha256
object-attr:fixedtpm|fixedparent|sensitivedataorigin|userwithauth|decrypt|sign
persistent-handle[10]:0x81010017 key-alg:rsa hash-alg:sha256
object-attr:fixedtpm|fixedparent|sensitivedataorigin|userwithauth|decrypt|sign
persistent-handle[11]:0x81010020 key-alg:rsa hash-alg:sha256
object-attr:fixedtpm|fixedparent|sensitivedataorigin|userwithauth|decrypt|sign
persistent-handle[12]:0x81010021 key-alg:rsa hash-alg:sha256
object-attr:fixedtpm|fixedparent|sensitivedataorigin|userwithauth|decrypt|sign
persistent-handle[13]:0x81010022 key-alg:rsa hash-alg:sha256
object-attr:fixedtpm|fixedparent|sensitivedataorigin|userwithauth|decrypt|sign
persistent-handle[14]:0x81010023 key-alg:rsa hash-alg:sha256
object-attr:fixedtpm|fixedparent|sensitivedataorigin|userwithauth|decrypt|sign
persistent-handle[15]:0x81010030 key-alg:rsa hash-alg:sha256
object-attr:fixedtpm|fixedparent|sensitivedataorigin|userwithauth|restricted|decrypt
persistent-handle[16]:0x81010060 key-alg:symcipher hash-alg:sha256
object-attr:fixedtpm|fixedparent|sensitivedataorigin|userwithauth|decrypt|sign
persistent-handle[17]:0x81010061 key-alg:symcipher hash-alg:sha256
object-attr:fixedtpm|fixedparent|sensitivedataorigin|userwithauth|decrypt|sign
So SLB 9670 has 18 slots for persistent object. Type of key doesn't
matter. Thare are always 18 slots.
W dniu 2018-04-06 o 07:49, Tomasz Przybysz pisze:
>
>
> Ten nadawca nie przeszedł testów wykrywających oszustwa i może nie być osobą, którą wydaje się być. Dowiedz się więcej o podszywaniu się
> <http://aka.ms/LearnAboutSpoofing>
> Opinia <http://aka.ms/SafetyTipsFeedback>
>
> Hi,
>
> I want to store about 16 RSA 2048 bits keys used to TLS protocol.
> I have Infineon SLB 9670 TPM2.0 chip.
> I wonder if I can store them inside TPM device (as persistant) or I
> need to store keys outside chip and load them to the device when needed ?
> What is the real capacity of this device ?
>
>
> *SLB 9670 TCG Family 2 Level 00 Rev. 01.16 Data Sheet says:*
>
> • Up to 3 loaded sessions (TPM_PT_HR_LOADED_MIN)
> • Up to 64 active sessions (TPM_PT_ACTIVE_SESSIONS_MAX)
> • Up to 3 loaded transient Objects (TPM_PT_HR_TRANSIENT_MIN)
> *• Up to 7 loaded persistent Objects (TPM_PT_HR_PERSISTENT_MIN)*
> • Up to 8 NV counters
> • Up to 1 kByte for command parameters and response parameters
> • Up to 768 Byte for NV read or NV write
>
>
> *tpm2-tss-1.4.0\include\sapi\tss2_tpm2_types.h says:*
>
> #define TPM_PT_HR_PERSISTENT_MIN (PT_FIXED + 15 ) /* the
> minimum number of persistent objects that can be held in TPM NV
> memoryNOTE This minimum shall be no less than the minimum value
> required by the platformspecific specification to which the TPM is
> built. */
>
> I don't uderstand. So what is max capacity of this device ?
> *
> Up to 7 loaded persistent Objects***for my understandig it's max
> capacity. But why this parameter is called *TPM_PT_HR_PERSISTENT_MIN* ?
> vs
> "the minimum number of persistent objects that can be held in TPM NV
> memory"
>
> So is it min or max ?
>
> What does 'loaded persistent' mean ? As I know persistent key is
> always loaded.
> When I want to use persistent key I don't need load it.
>
> from my TPM device:
> ./tpm2_getcap -c properties-fixed
> WARN: More data to be queried: capability: 0x6, property: 0x100
>
> TPM_PT_FAMILY_INDICATOR:
> as UINT32: 0x08322e3000
> as string: "2.0"
> TPM_PT_LEVEL: 0
> TPM_PT_REVISION: 1.16
> TPM_PT_DAY_OF_YEAR: 0x0000000f
> TPM_PT_YEAR: 0x000007e0
> TPM_PT_MANUFACTURER: 0x49465800
> TPM_PT_VENDOR_STRING_1:
> as UINT32: 0x534c4239
> as string: "SLB9"
> TPM_PT_VENDOR_STRING_2:
> as UINT32: 0x36373000
> as string: "670"
> TPM_PT_VENDOR_STRING_3:
> as UINT32: 0x00000000
> as string: ""
> TPM_PT_VENDOR_STRING_4:
> as UINT32: 0x00000000
> as string: ""
> TPM_PT_VENDOR_TPM_TYPE: 0x00000000
> TPM_PT_FIRMWARE_VERSION_1: 0x0007003d
> TPM_PT_FIRMWARE_VERSION_2: 0x000ae100
> TPM_PT_INPUT_BUFFER: 0x00000400
> TPM_PT_HR_TRANSIENT_MIN: 0x00000003
> *TPM_PT_HR_PERSISTENT_MIN: 0x00000007*
> TPM_PT_HR_LOADED_MIN: 0x00000003
> TPM_PT_ACTIVE_SESSIONS_MAX: 0x00000040
> TPM_PT_PCR_COUNT: 0x00000018
> TPM_PT_PCR_SELECT_MIN: 0x00000003
> TPM_PT_CONTEXT_GAP_MAX: 0x0000ffff
> TPM_PT_NV_COUNTERS_MAX: 0x00000008
> TPM_PT_NV_INDEX_MAX: 0x00000680
> TPM_PT_MEMORY: 0x00000006
> TPM_PT_CLOCK_UPDATE: 0x00080000
> TPM_PT_CONTEXT_HASH: 0x0000000b
> TPM_PT_CONTEXT_SYM: 0x00000006
> TPM_PT_CONTEXT_SYM_SIZE: 0x00000080
> TPM_PT_ORDERLY_COUNT: 0x000000ff
> TPM_PT_MAX_COMMAND_SIZE: 0x00000500
> TPM_PT_MAX_RESPONSE_SIZE: 0x00000500
> TPM_PT_MAX_DIGEST: 0x00000020
> TPM_PT_MAX_OBJECT_CONTEXT: 0x000003b8
> TPM_PT_MAX_SESSION_CONTEXT: 0x000000eb
> TPM_PT_PS_FAMILY_INDICATOR: 0x00000001
> TPM_PT_PS_LEVEL: 0x00000000
> TPM_PT_PS_REVISION: 0x00000100
> TPM_PT_PS_DAY_OF_YEAR: 0x00000000
> TPM_PT_PS_YEAR: 0x00000000
> TPM_PT_SPLIT_MAX: 0x00000080
> TPM_PT_TOTAL_COMMANDS: 0x0000005a
> TPM_PT_LIBRARY_COMMANDS: 0x00000059
> TPM_PT_VENDOR_COMMANDS: 0x00000001
> TPM_PT_NV_BUFFER_MAX: 0x00000300
>
> At this moment I can store and use 18 RSA keys inside TPM as
> persistent keys and I think I can store more.
>
> ./tpm2_listpersistent
> persistent-handle[0]:0x81010001 key-alg:rsa hash-alg:sha256
> object-attr:fixedtpm|fixedparent|sensitivedataorigin|userwithauth|restricted|decrypt
> persistent-handle[1]:0x81010002 key-alg:rsa hash-alg:sha256
> object-attr:fixedtpm|fixedparent|sensitivedataorigin|userwithauth|decrypt|sign
> persistent-handle[2]:0x81010003 key-alg:rsa hash-alg:sha256
> object-attr:fixedtpm|fixedparent|sensitivedataorigin|userwithauth|restricted|decrypt
> persistent-handle[3]:0x81010010 key-alg:rsa hash-alg:sha256
> object-attr:fixedtpm|fixedparent|sensitivedataorigin|userwithauth|decrypt|sign
> persistent-handle[4]:0x81010011 key-alg:rsa hash-alg:sha256
> object-attr:fixedtpm|fixedparent|sensitivedataorigin|userwithauth|decrypt|sign
> persistent-handle[5]:0x81010012 key-alg:rsa hash-alg:sha256
> object-attr:fixedtpm|fixedparent|sensitivedataorigin|userwithauth|decrypt|sign
> persistent-handle[6]:0x81010013 key-alg:rsa hash-alg:sha256
> object-attr:fixedtpm|fixedparent|sensitivedataorigin|userwithauth|decrypt|sign
> persistent-handle[7]:0x81010014 key-alg:rsa hash-alg:sha256
> object-attr:fixedtpm|fixedparent|sensitivedataorigin|userwithauth|decrypt|sign
> persistent-handle[8]:0x81010015 key-alg:rsa hash-alg:sha256
> object-attr:fixedtpm|fixedparent|sensitivedataorigin|userwithauth|decrypt|sign
> persistent-handle[9]:0x81010016 key-alg:rsa hash-alg:sha256
> object-attr:fixedtpm|fixedparent|sensitivedataorigin|userwithauth|decrypt|sign
> persistent-handle[10]:0x81010017 key-alg:rsa hash-alg:sha256
> object-attr:fixedtpm|fixedparent|sensitivedataorigin|userwithauth|decrypt|sign
> persistent-handle[11]:0x81010020 key-alg:rsa hash-alg:sha256
> object-attr:fixedtpm|fixedparent|sensitivedataorigin|userwithauth|decrypt|sign
> persistent-handle[12]:0x81010021 key-alg:rsa hash-alg:sha256
> object-attr:fixedtpm|fixedparent|sensitivedataorigin|userwithauth|decrypt|sign
> persistent-handle[13]:0x81010022 key-alg:rsa hash-alg:sha256
> object-attr:fixedtpm|fixedparent|sensitivedataorigin|userwithauth|decrypt|sign
> persistent-handle[14]:0x81010023 key-alg:rsa hash-alg:sha256
> object-attr:fixedtpm|fixedparent|sensitivedataorigin|userwithauth|decrypt|sign
> persistent-handle[15]:0x81010030 key-alg:rsa hash-alg:sha256
> object-attr:fixedtpm|fixedparent|sensitivedataorigin|userwithauth|restricted|decrypt
> persistent-handle[16]:0x81010031 key-alg:rsa hash-alg:sha256
> object-attr:fixedtpm|fixedparent|sensitivedataorigin|userwithauth|restricted|decrypt
> persistent-handle[17]:0x81010032 key-alg:rsa hash-alg:sha256
> object-attr:fixedtpm|fixedparent|sensitivedataorigin|userwithauth|restricted|decrypt
>
> I want to know the limits. Documented limits.
>
> Thanks,
> Tom
>
>
>
> _______________________________________________
> tpm2 mailing list
> tpm2(a)lists.01.org
> https://lists.01.org/mailman/listinfo/tpm2
[-- Attachment #2: attachment.html --]
[-- Type: text/html, Size: 14547 bytes --]
^ permalink raw reply [flat|nested] 3+ messages in thread
* [tpm2] SLB 9670 TPM 2.0 device, How many keys I can store inside TPM as persistent
@ 2018-04-06 5:49 Tomasz Przybysz
0 siblings, 0 replies; 3+ messages in thread
From: Tomasz Przybysz @ 2018-04-06 5:49 UTC (permalink / raw)
To: tpm2
[-- Attachment #1: Type: text/plain, Size: 6901 bytes --]
Hi,
I want to store about 16 RSA 2048 bits keys used to TLS protocol.
I have Infineon SLB 9670 TPM2.0 chip.
I wonder if I can store them inside TPM device (as persistant) or I need
to store keys outside chip and load them to the device when needed ?
What is the real capacity of this device ?
*SLB 9670 TCG Family 2 Level 00 Rev. 01.16 Data Sheet says:*
• Up to 3 loaded sessions (TPM_PT_HR_LOADED_MIN)
• Up to 64 active sessions (TPM_PT_ACTIVE_SESSIONS_MAX)
• Up to 3 loaded transient Objects (TPM_PT_HR_TRANSIENT_MIN)
*• Up to 7 loaded persistent Objects (TPM_PT_HR_PERSISTENT_MIN)*
• Up to 8 NV counters
• Up to 1 kByte for command parameters and response parameters
• Up to 768 Byte for NV read or NV write
*tpm2-tss-1.4.0\include\sapi\tss2_tpm2_types.h says:*
#define TPM_PT_HR_PERSISTENT_MIN (PT_FIXED + 15 ) /* the
minimum number of persistent objects that can be held in TPM NV
memoryNOTE This minimum shall be no less than the minimum value
required by the platformspecific specification to which the TPM is
built. */
I don't uderstand. So what is max capacity of this device ?
*
Up to 7 loaded persistent Objects***for my understandig it's max
capacity. But why this parameter is called *TPM_PT_HR_PERSISTENT_MIN* ?
vs
"the minimum number of persistent objects that can be held in TPM NV memory"
So is it min or max ?
What does 'loaded persistent' mean ? As I know persistent key is always
loaded.
When I want to use persistent key I don't need load it.
from my TPM device:
./tpm2_getcap -c properties-fixed
WARN: More data to be queried: capability: 0x6, property: 0x100
TPM_PT_FAMILY_INDICATOR:
as UINT32: 0x08322e3000
as string: "2.0"
TPM_PT_LEVEL: 0
TPM_PT_REVISION: 1.16
TPM_PT_DAY_OF_YEAR: 0x0000000f
TPM_PT_YEAR: 0x000007e0
TPM_PT_MANUFACTURER: 0x49465800
TPM_PT_VENDOR_STRING_1:
as UINT32: 0x534c4239
as string: "SLB9"
TPM_PT_VENDOR_STRING_2:
as UINT32: 0x36373000
as string: "670"
TPM_PT_VENDOR_STRING_3:
as UINT32: 0x00000000
as string: ""
TPM_PT_VENDOR_STRING_4:
as UINT32: 0x00000000
as string: ""
TPM_PT_VENDOR_TPM_TYPE: 0x00000000
TPM_PT_FIRMWARE_VERSION_1: 0x0007003d
TPM_PT_FIRMWARE_VERSION_2: 0x000ae100
TPM_PT_INPUT_BUFFER: 0x00000400
TPM_PT_HR_TRANSIENT_MIN: 0x00000003
*TPM_PT_HR_PERSISTENT_MIN: 0x00000007*
TPM_PT_HR_LOADED_MIN: 0x00000003
TPM_PT_ACTIVE_SESSIONS_MAX: 0x00000040
TPM_PT_PCR_COUNT: 0x00000018
TPM_PT_PCR_SELECT_MIN: 0x00000003
TPM_PT_CONTEXT_GAP_MAX: 0x0000ffff
TPM_PT_NV_COUNTERS_MAX: 0x00000008
TPM_PT_NV_INDEX_MAX: 0x00000680
TPM_PT_MEMORY: 0x00000006
TPM_PT_CLOCK_UPDATE: 0x00080000
TPM_PT_CONTEXT_HASH: 0x0000000b
TPM_PT_CONTEXT_SYM: 0x00000006
TPM_PT_CONTEXT_SYM_SIZE: 0x00000080
TPM_PT_ORDERLY_COUNT: 0x000000ff
TPM_PT_MAX_COMMAND_SIZE: 0x00000500
TPM_PT_MAX_RESPONSE_SIZE: 0x00000500
TPM_PT_MAX_DIGEST: 0x00000020
TPM_PT_MAX_OBJECT_CONTEXT: 0x000003b8
TPM_PT_MAX_SESSION_CONTEXT: 0x000000eb
TPM_PT_PS_FAMILY_INDICATOR: 0x00000001
TPM_PT_PS_LEVEL: 0x00000000
TPM_PT_PS_REVISION: 0x00000100
TPM_PT_PS_DAY_OF_YEAR: 0x00000000
TPM_PT_PS_YEAR: 0x00000000
TPM_PT_SPLIT_MAX: 0x00000080
TPM_PT_TOTAL_COMMANDS: 0x0000005a
TPM_PT_LIBRARY_COMMANDS: 0x00000059
TPM_PT_VENDOR_COMMANDS: 0x00000001
TPM_PT_NV_BUFFER_MAX: 0x00000300
At this moment I can store and use 18 RSA keys inside TPM as persistent
keys and I think I can store more.
./tpm2_listpersistent
persistent-handle[0]:0x81010001 key-alg:rsa hash-alg:sha256
object-attr:fixedtpm|fixedparent|sensitivedataorigin|userwithauth|restricted|decrypt
persistent-handle[1]:0x81010002 key-alg:rsa hash-alg:sha256
object-attr:fixedtpm|fixedparent|sensitivedataorigin|userwithauth|decrypt|sign
persistent-handle[2]:0x81010003 key-alg:rsa hash-alg:sha256
object-attr:fixedtpm|fixedparent|sensitivedataorigin|userwithauth|restricted|decrypt
persistent-handle[3]:0x81010010 key-alg:rsa hash-alg:sha256
object-attr:fixedtpm|fixedparent|sensitivedataorigin|userwithauth|decrypt|sign
persistent-handle[4]:0x81010011 key-alg:rsa hash-alg:sha256
object-attr:fixedtpm|fixedparent|sensitivedataorigin|userwithauth|decrypt|sign
persistent-handle[5]:0x81010012 key-alg:rsa hash-alg:sha256
object-attr:fixedtpm|fixedparent|sensitivedataorigin|userwithauth|decrypt|sign
persistent-handle[6]:0x81010013 key-alg:rsa hash-alg:sha256
object-attr:fixedtpm|fixedparent|sensitivedataorigin|userwithauth|decrypt|sign
persistent-handle[7]:0x81010014 key-alg:rsa hash-alg:sha256
object-attr:fixedtpm|fixedparent|sensitivedataorigin|userwithauth|decrypt|sign
persistent-handle[8]:0x81010015 key-alg:rsa hash-alg:sha256
object-attr:fixedtpm|fixedparent|sensitivedataorigin|userwithauth|decrypt|sign
persistent-handle[9]:0x81010016 key-alg:rsa hash-alg:sha256
object-attr:fixedtpm|fixedparent|sensitivedataorigin|userwithauth|decrypt|sign
persistent-handle[10]:0x81010017 key-alg:rsa hash-alg:sha256
object-attr:fixedtpm|fixedparent|sensitivedataorigin|userwithauth|decrypt|sign
persistent-handle[11]:0x81010020 key-alg:rsa hash-alg:sha256
object-attr:fixedtpm|fixedparent|sensitivedataorigin|userwithauth|decrypt|sign
persistent-handle[12]:0x81010021 key-alg:rsa hash-alg:sha256
object-attr:fixedtpm|fixedparent|sensitivedataorigin|userwithauth|decrypt|sign
persistent-handle[13]:0x81010022 key-alg:rsa hash-alg:sha256
object-attr:fixedtpm|fixedparent|sensitivedataorigin|userwithauth|decrypt|sign
persistent-handle[14]:0x81010023 key-alg:rsa hash-alg:sha256
object-attr:fixedtpm|fixedparent|sensitivedataorigin|userwithauth|decrypt|sign
persistent-handle[15]:0x81010030 key-alg:rsa hash-alg:sha256
object-attr:fixedtpm|fixedparent|sensitivedataorigin|userwithauth|restricted|decrypt
persistent-handle[16]:0x81010031 key-alg:rsa hash-alg:sha256
object-attr:fixedtpm|fixedparent|sensitivedataorigin|userwithauth|restricted|decrypt
persistent-handle[17]:0x81010032 key-alg:rsa hash-alg:sha256
object-attr:fixedtpm|fixedparent|sensitivedataorigin|userwithauth|restricted|decrypt
I want to know the limits. Documented limits.
Thanks,
Tom
[-- Attachment #2: attachment.html --]
[-- Type: text/html, Size: 8195 bytes --]
^ permalink raw reply [flat|nested] 3+ messages in thread
end of thread, other threads:[~2018-04-06 19:11 UTC | newest]
Thread overview: 3+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2018-04-06 19:11 [tpm2] SLB 9670 TPM 2.0 device, How many keys I can store inside TPM as persistent Tadeusz Struk
-- strict thread matches above, loose matches on Subject: below --
2018-04-06 6:30 Tomasz Przybysz
2018-04-06 5:49 Tomasz Przybysz
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox