[tpm2] Re: "tpm2_import" Integrity Check issue on a Big Endian 32 Bit Platform

Rajkumar K Sivasamy <rajkumar.k.sivasamy at gmail.com>
Newsgroups dev.linux.lists.tpm2
Message-ID <CADu5HqxAtjB6z-_0JX+GAauNL7v7jb1w_ogNecf=zy6VPhK36A@mail.gmail.com>
Hello William

I am using below versions:

   1. tpm2-tss 3.1.0
   2. tpm2-tools 5.2 2021-09-28


To further narrow down, I replaced tpm2-tss 3.1.0 with tpm2-tss 3.0.4 and
tpm2_import still failed with 0x3DF.

Now along with tpm2-tss- 3.0.4 I used tpm2-tools 5.2 and tpm2_import
succeeds; seems to be a problem with tpm2-tools t.2 2021-09-28.

Regards
Raj

On Thu, Dec 2, 2021 at 8:44 PM Roberts, William C <
william.c.roberts(a)intel.com> wrote:

> + Imran
>
> What version of tools and tss are you running?
>
> I just noticed that the tools CI doesn't have the multi-arch images
> enabled. Let me investigate adding this and see if I can reproduce.
> ------------------------------
> *From:* Rajkumar K Sivasamy <rajkumar.k.sivasamy(a)gmail.com>
> *Sent:* Wednesday, December 1, 2021 11:40 PM
> *To:* tpm2(a)lists.01.org <tpm2(a)lists.01.org>
> *Subject:* [tpm2] "tpm2_import" Integrity Check issue on a Big Endian 32
> Bit Platform
>
> Hello Team
>
> I am trying to use tpm2_import on a Big Endian 32 Bit platform and running
> into following error:
>
>
> --------------------------------------------------------------------------------------------------------------------------------
>
> *Command: *
>
>    1.
>
>    openssl genrsa -out private.pem 2048
>    2. tpm2_import -C 0x81000001 -G rsa -i private.pem -u key.pub -r
>    key.priv
>
>
> *Error:*
> ERROR:esys:src/tss2-esys/api/Esys_Import.c:110:Esys_Import() Esys Finish
> ErrorCode (0x000003df)
> ERROR: Esys_HMAC(0x3DF) - tpm:parameter(3):integrity check failed
> ERROR: Unable to run tpm2_import
> --------------------------------------------------------------------------------------------------------------------------------
>
>
> Need pointers to debug this issue.
> Have any of you come across this error with tpm2_import on Big Endian 32
> Bit Platform? Do we have a fix Or can you provide inputs on the source
> where I can look at for further debugging?
>
> Thanks
> Raj
>
attachment.htm (text/html, 4 KB)
<div dir="ltr"><div>Hello William</div><div><br></div><div>I am using below versions:</div><div>


















<ol style="margin-top:0in;margin-bottom:0in" type="a" start="1"><li class="gmail-MsoListParagraph" style="margin:0in;font-size:11pt;font-family:&quot;Calibri&quot;,sans-serif"><span>tpm2-tss
     3.1.0<span></span></span></li><li class="gmail-MsoListParagraph" style="margin:0in;font-size:11pt;font-family:&quot;Calibri&quot;,sans-serif"><span>tpm2-tools 5.2 2021-09-28</span></li></ol><div><br></div><div>To further narrow down, I replaced tpm2-tss 3.1.0 with<span lang="EN-SG"> tpm2-tss
     3.0.4<span></span></span> and tpm2_import still failed with 0x3DF.</div><div><br></div><div>Now along with tpm2-tss- 3.0.4 I used tpm2-tools 5.2 and tpm2_import succeeds; seems to be a problem with tpm2-tools t.2 2021-09-28.</div><div><br></div><div>Regards</div><div>Raj<br></div>





</div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Thu, Dec 2, 2021 at 8:44 PM Roberts, William C &lt;<a href="mailto:[email protected]">[email protected]</a>&gt; wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">




<div dir="ltr">
<div style="font-family:Calibri,Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
+ Imran</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
What version of tools and tss are you running?</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
I just noticed that the tools CI doesn&#39;t have the multi-arch images enabled. Let me investigate adding this and see if I can reproduce.</div>
<div id="gmail-m_1989335261215334022appendonsend"></div>
<hr style="display:inline-block;width:98%">
<div id="gmail-m_1989335261215334022divRplyFwdMsg" dir="ltr"><font style="font-size:11pt" face="Calibri, sans-serif" color="#000000"><b>From:</b> Rajkumar K Sivasamy &lt;<a href="mailto:[email protected]" target="_blank">[email protected]</a>&gt;<br>
<b>Sent:</b> Wednesday, December 1, 2021 11:40 PM<br>
<b>To:</b> <a href="mailto:[email protected]" target="_blank">[email protected]</a> &lt;<a href="mailto:[email protected]" target="_blank">[email protected]</a>&gt;<br>
<b>Subject:</b> [tpm2] &quot;tpm2_import&quot; Integrity Check issue on a Big Endian 32 Bit Platform</font>
<div> </div>
</div>
<div>
<div dir="ltr">
<div>Hello Team</div>
<div><br>
</div>
<div>I am trying to use tpm2_import on a Big Endian 32 Bit platform and running into following error:</div>
<div><br>
</div>
<div>--------------------------------------------------------------------------------------------------------------------------------<br>
</div>
<div><b><br>
</b></div>
<div><b>Command: </b><br>
</div>
<div>
<ol>
<li>
<p style="margin:0in;font-family:Calibri;font-size:11pt">openssl genrsa -out private.pem 2048</p>
</li><li>tpm2_import -C 0x81000001 -G rsa -i private.pem -u key.pub -r key.priv</li></ol>
</div>
<div><b><br>
</b></div>
<div><b>Error:</b><br>
</div>
<div></div>
<div>ERROR:esys:src/tss2-esys/api/Esys_Import.c:110:Esys_Import() Esys Finish ErrorCode (0x000003df)<br>
ERROR: Esys_HMAC(0x3DF) - tpm:parameter(3):integrity check failed<br>
ERROR: Unable to run tpm2_import<br>
</div>
<div>--------------------------------------------------------------------------------------------------------------------------------
<br>
</div>
<div><br>
</div>
<div>Need pointers to debug this issue.</div>
<div>Have any of you come across this error with tpm2_import on Big Endian 32 Bit Platform? Do we have a fix Or can you provide inputs on the source where I can look at for further debugging?<br>
</div>
<div><br>
</div>
<div>Thanks</div>
<div>Raj<br>
</div>
</div>
</div>
</div>

</blockquote></div>
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.