tss_bind.3

IBM开发的TPM的驱动, 有少量的例子可以供参考

.\" Copyright 2004 IBM (Jeff Kravitz)
.\"
.\" Written Feb 11 2004, Jeff Kravitz
.\"
.TH "TSS_Bind" 3  2004-02-11 "IBM" "TPM Library"
.SH NAME
TSS_Bind
.SH SYNOPSIS
.nf
.B #include <tpmfunc.h>
.sp
.BR "uint32_t TSS_Bind" "(RSA *key,"
             unsigned char *data, unsigned int datalen,
             unsigned char *blob, unsigned int *bloblen)
.fi
.SH DESCRIPTION
The \fBTSS_Bind()\fP function performs a public key encryption operation
using a public RSA Key.  The resulting encrypted data can only
be recovered via a \fBTPM_Unbind\fP operation on a TPM that contains
the private key corresponding to the public key.
.SH ARGUMENTS
The arguments include...
.TP 10
key
A pointer to an OpenSSL RSA public key structure.  This can be obtained
via the \fBTPM_GetPubKey()\fP function, or via the \fBTSS_convpubkey()\fP
function.
.TP 10
data
A pointer to the data to be encrypted.  
.TP 10
datalen
An integer containing the length of the data to be encrypted.
.TP 10
blob
A pointer to an area to receive the encrypted data.
.TP 10
bloblen
A pointer to an integer which will receive the length of the encrypted data.
.SH NOTES
The \fBTSS_Bind\fP function
does not perform blocking of data, so the data to be encrypted has
to be shorter than the public key modulus.  Blocking and unblocking
of data longer than this must be performed by the calling program.
.P
The area receiving the encrypted data must be the size of the maximum key modulus,
as no buffer overflow checking is performed.  For current TPM usage, a length
of 256 bytes is the maximum.
.SH RESTRICTIONS
The TPM supports binding of data with either no RSA padding, or OAEP + SHA1 + MGF1
padding, using a OAEP parameter value of 'TCPA'.  The \fBTSS_Bind()\fP and
\fBTPM_Unbind()\fP functions only support the latter.  This means that the
maximum size of the encrypted data is somewhat less than the public key modulus,
to leave space for the padding overhead.
.SH "RETURN VALUE"
0 if the operation is successful. non-zero otherwise.
The non zero value can be converted to an error message via the function \fBTPM_GetErrMsg()\fP.
.SH "SEE ALSO"
.BR TPM_Unbind(3) , TPM_GetPubKey(3) ,  TSS_convpubkey(3) , TPM_GetErrMsg(3) .
.SH AUTHOR
Jeff Kravitz, IBM T.J. Watson Research Center