wolfTPM Release v3.6.0

[dgarske]

Summary

Release includes minor bug fixes and new features such as TPM provisioning of IDevID/IAK, improved capabilities parsing, new TPM2_Certify example, new wolfTPM2_CreatePrimaryKey_ex API for creation ticket and tested support with Nations NS350 TPM.

Detail

• Fixed issue with TPM2_SetupPCRSel and added test cases. (PR Fixes for PCR selection and keygen with -sym= option #372)
• Fixed RC_WARN error codes (broken in commit f983525). (PR Proper fix for the RC_WARN error codes #378)
• Fixed issue with RSA/ECC symmetric field (should only be populated with restricted/decrypt) (PR Per TCG spec RSA/ECC symmetric field should only be populated for restricted/decrypt #375)
• Fixed examples/keygen/keygen -sym= argument. (PR Fixes for PCR selection and keygen with -sym= option #372)
• Fixed building wolfCrypt/wolfTPM without ECC or RSA and added tests. (PR Fixes and new tests for building wolfCrypt/wolfTPM without ECC or RSA #371)
• Fixed file descriptor check for /dev/tpm0 (PR Various improvements for /dev/tpm0 #366)
• Fixed STM32 GPIO SPI CS control to use pin number as bit offset, not direct value (PR Fix for STM32 GPIO SPI CS control to use pin number as bit offset #380)
• Fixed issues building with no filesystem. (PR Fix and test for no filesystem #374)
• Added support for parsing all capabilities from (TPM2_GetCapability) (PR Add support for TPM2_GetCapability for TPM_CAP_PCRS. #383)
• Added support for creation of IDevID or IAK with examples/keygen/create_primary. (PR Added example for TPM2_Certify #369)
• Added support for Nations NS350. (PR Tested support for Nations NS350 and added simple capabilities example #382)
• Added example for TPM2_Certify (see examples/attestation/certify) (PR Added example for TPM2_Certify #369)
• Added new wolfTPM2_CreatePrimaryKey_ex and WOLFTPM2_PKEY that supports returning creation ticket/hash. (PR Added example for TPM2_Certify #369)
• Added key templates for initial device (IDevID) and attestation keys (IAK). (PR Added example for TPM2_Certify #369)
• Added new build option for TPM provisioning (--enable-provisioning on by default). (PR Added example for TPM2_Certify #369)
• Added simple capabilities example (examples/wrap/caps) (PR Tested support for Nations NS350 and added simple capabilities example #382)
• Added example to manual verify quote with ECC signature. (PR add example manual verification of quote signature with ecc #379)
• Added tests for policy seal/unseal with multiple PCR's. (PR Added tests for policy seal/unseal with multiple PCR's. #377)
• Added -alg argument for PCR extend (PR Add support for TPM2_GetCapability for TPM_CAP_PCRS. #383)
• Added helper to get wolfCrypt hash type TPM2_GetTpmHashType (PR Helper to get wolfCrypt hash type #384)
• Added new policy hash helper API wolfTPM2_PolicyHash (PR Added example for TPM2_Certify #369)
• Added documentation for /dev/tpm0 permissions (PR Various improvements for /dev/tpm0 #366)
• Improved the TPM TLS examples for use with WOLFTPM_MFG_IDENTITY (PR Improve the TPM TLS examples for use with WOLFTPM_MFG_IDENTITY #376)
• Moved PTHREAD definition from options.h to config.h (avoids possible re-declaration issue) PR (Move PTHREAD definition from options.h to config.h #381)
• Switched handle/nvIndex string parsing to use strtoul. (PR Added example for TPM2_Certify #369)
• Various spelling and documentation cleanups. (PR Various improvements for /dev/tpm0 #366 / PR Minor documentation fixes #373)