fapi_int.h

/* SPDX-License-Identifier: BSD-2-Clause */
/*******************************************************************************
 * Copyright 2018-2019, Fraunhofer SIT sponsored by Infineon Technologies AG
 * All rights reserved.
 ******************************************************************************/
#ifndef FAPI_INT_H
#define FAPI_INT_H
 
#include <json.h>    // for json_object
#include <stdbool.h> // for bool, false, true
#include <stdint.h>  // for uint8_t, uint32_t, uint64_t
#include <stdio.h>   // for size_t, NULL
#include <unistd.h>  // for R_OK, W_OK
 
#include "fapi_types.h"               // for NODE_STR_T, NODE_OBJECT_T, UIN...
#include "ifapi_config.h"             // for IFAPI_CONFIG
#include "ifapi_eventlog.h"           // for IFAPI_EVENT, FAPI_QUOTE_INFO
#include "ifapi_io.h"                 // for IFAPI_IO
#include "ifapi_keystore.h"           // for IFAPI_OBJECT, IFAPI_IO_STATE
#include "ifapi_policy_instantiate.h" // for IFAPI_POLICY_EVAL_INST_CTX
#include "ifapi_policy_store.h"       // for IFAPI_POLICY_STORE
#include "ifapi_policy_types.h"       // for TPMS_POLICY, TPMS_POLICYAUTHOR...
#include "ifapi_profiles.h"           // for IFAPI_PROFILE, IFAPI_PROFILES
#include "tss2_common.h"              // for UINT32, UINT16, BYTE, TSS2_BAS...
#include "tss2_esys.h"                // for ESYS_TR, ESYS_TR_NONE, ESYS_CO...
#include "tss2_fapi.h"                // for Fapi_CB_Auth, Fapi_CB_Branch
#include "tss2_tpm2_types.h"          // for TPM2_HANDLE, TPMS_CAPABILITY_DATA
#include "util/aux_util.h"            // for goto_if_error, TPM2_ERROR_FORMAT
 
#define DEFAULT_LOG_DIR       "/run/tpm2_tss"
#define IFAPI_PCR_LOG_FILE    "pcr.log"
#define IFAPI_OBJECT_TYPE     ".json"
#define IFAPI_OBJECT_FILE     "object.json"
#define IFAPI_SRK_KEY_PATH    "/HS/SRK"
#define IFAPI_EK_KEY_PATH     "/HE/EK"
#define IFAPI_HS_PATH         "/HS"
#define IFAPI_HE_PATH         "/HE"
#define IFAPI_HN_PATH         "/HN"
#define IFAPI_LOCKOUT_PATH    "/LOCKOUT"
#define IFAPI_SRK_OBJECT_PATH "/HS/SRK/object.json"
#define IFAPI_HS_OBJECT_PATH  "/HS/object.json"
 
typedef UINT32 TSS2_KEY_TYPE;
#define TSS2_SRK                 2
#define TSS2_EK                  3
#define MIN_EK_CERT_HANDLE       0x1c00000
#define MIN_PLATFORM_CERT_HANDLE 0x01C08000
#define MAX_PLATFORM_CERT_HANDLE 0x01C0FFFF
 
typedef UINT8 IFAPI_SESSION_TYPE;
#define IFAPI_SESSION_GEN_SRK      0x01
#define IFAPI_SESSION1             0x02
#define IFAPI_SESSION2             0x04
#define IFAPI_SESSION_USE_SRK      0x08
 
#define IFAPI_POLICY_PATH          "policy"
#define IFAPI_NV_PATH              "nv"
#define IFAPI_EXT_PATH             "ext"
#define IFAPI_FILE_DELIM           "/"
#define IFAPI_LIST_DELIM           ":"
#define IFAPI_FILE_DELIM_CHAR      '/'
#define IFAPI_PUB_KEY_DIR          "ext"
#define IFAPI_POLICY_DIR           "policy"
#define IFAPI_PEM_PUBLIC_STRING    "-----BEGIN PUBLIC KEY-----"
#define IFAPI_PEM_PRIVATE_KEY      "-----BEGIN PRIVATE KEY-----"
#define IFAPI_PEM_RSA_PRIVATE_KEY  "-----BEGIN RSA PRIVATE KEY-----"
#define IFAPI_PEM_ECC_PRIVATE_KEY  "-----BEGIN EC PRIVATE KEY-----"
#define IFAPI_JSON_TAG_POLICY      "policy"
#define IFAPI_JSON_TAG_OBJECT_TYPE "objectType"
#define IFAPI_JSON_TAG_DUPLICATE   "public_parent"
 
#define FAPI_WRITE                 W_OK
#define FAPI_READ                  R_OK
 
#if TPM2_MAX_NV_BUFFER_SIZE > TPM2_MAX_DIGEST_BUFFER
#define IFAPI_MAX_BUFFER_SIZE TPM2_MAX_NV_BUFFER_SIZE
#else
#define IFAPI_MAX_BUFFER_SIZE TPM2_MAX_DIGEST_BUFFER
#endif
 
#define IFAPI_FLUSH_PARENT     true
#define IFAPI_NOT_FLUSH_PARENT false
 
#ifndef MAX
#define MAX(a, b) ((a) > (b) ? (a) : (b))
#endif
 
/* Definition of FAPI buffer for TPM2B transmission */
typedef struct {
    UINT16 size;
    BYTE   buffer[IFAPI_MAX_BUFFER_SIZE];
} IFAPI_MAX_BUFFER;
 
#define OSSL_FREE(S, TYPE)                                                                         \
    if ((S) != NULL) {                                                                             \
        TYPE##_free((void *)(S));                                                                  \
        (S) = NULL;                                                                                \
    }
 
#define FAPI_COPY_DIGEST(dest_buffer, dest_size, src, src_size)                                    \
    if ((src_size) > sizeof(TPMU_HA)) {                                                            \
        return_error(TSS2_FAPI_RC_BAD_VALUE, "Digest size too large.");                            \
    }                                                                                              \
    memcpy(dest_buffer, (src), (src_size));                                                        \
    (dest_size) = src_size
 
#define HASH_UPDATE(CONTEXT, TYPE, OBJECT, R, LABEL)                                               \
    {                                                                                              \
        uint8_t buffer[sizeof(TYPE)];                                                              \
        size_t  offset = 0;                                                                        \
        (R) = Tss2_MU_##TYPE##_Marshal(OBJECT, &buffer[0], sizeof(TYPE), &offset);                 \
        goto_if_error(R, "Marshal for hash update", LABEL);                                        \
        (R) = ifapi_crypto_hash_update(CONTEXT, (const uint8_t *)&buffer[0], offset);              \
        goto_if_error(R, "crypto hash update", LABEL);                                             \
    }
 
#define HASH_UPDATE_BUFFER(CONTEXT, BUFFER, SIZE, R, LABEL)                                        \
    R = ifapi_crypto_hash_update(CONTEXT, (const uint8_t *)(BUFFER), SIZE);                        \
    goto_if_error(R, "crypto hash update", LABEL);
 
#define FAPI_SYNC(r, msg, label, ...)                                                              \
    if (base_rc(r) == TSS2_BASE_RC_TRY_AGAIN)                                                      \
        return TSS2_FAPI_RC_TRY_AGAIN;                                                             \
    if (r != TSS2_RC_SUCCESS) {                                                                    \
        LOG_ERROR(TPM2_ERROR_FORMAT " " msg, TPM2_ERROR_TEXT(r), ##__VA_ARGS__);                   \
        goto label;                                                                                \
    }
 
#define ENC_SESSION_IF_POLICY(auth_session)                                                        \
    ((auth_session) == ESYS_TR_PASSWORD || (auth_session) == ESYS_TR_NONE                          \
     || (auth_session) == context->session2 || !context->session2)                                 \
        ? ESYS_TR_NONE                                                                             \
        : context->session2

enum IFAPI_GET_CERT_STATE {
    GET_CERT_INIT = 0,
    GET_CERT_WAIT_FOR_GET_CAP,
    GET_CERT_GET_CERT_NV,
    GET_CERT_GET_CERT_NV_FINISH,
    GET_CERT_GET_CERT_READ_PUBLIC,
    GET_CERT_GET_CERT_READ_HIERARCHY,
    GET_CERT_READ_CERT
};

enum IFAPI_CLEANUP_STATE { CLEANUP_INIT = 0, CLEANUP_SESSION1, CLEANUP_SESSION2, CLEANUP_SRK };

enum IFAPI_READ_NV_PUBLIC_STATE {
    READ_NV_PUBLIC_INIT = 0,
    READ_NV_PUBLIC_GET_ESYS_TR,
    READ_NV_PUBLIC_GET_PUBLIC
};

enum IFAPI_CHECK_NV_STATE {
    CHECK_NV_INIT = 0,
    CHECK_NV_WAIT_FOR_GET_CAP,
    CHECK_NV_GET_ESYS_HANDLE,
    CHECK_NV_WAIT_FOR_READ_PUBLIC
};

enum IFAPI_INSTANTIATE_POLICIES_STATE {
    POLICIES_INSTANTIATION_INIT = 0,
    POLICIES_INSTANTIATION_WAIT
};
 
typedef struct {
    enum IFAPI_INSTANTIATE_POLICIES_STATE state;
    size_t                                pol_idx;
    TPMS_POLICY                          *policies[5];
} IFAPI_POLICIES;
 
#define IFAPI_MAX_CAP_INFO 17
 
typedef struct {
    char                 *description;
    TPMS_CAPABILITY_DATA *capability;
} IFAPI_CAP_INFO;
 
typedef struct {
    char          *fapi_version; 
    IFAPI_CONFIG   fapi_config;  
    IFAPI_CAP_INFO cap[IFAPI_MAX_CAP_INFO];
} IFAPI_INFO;

typedef struct {
    TPMI_YES_NO system;            
    TPMI_YES_NO persistent;        
    UINT32      persistent_handle; 
    TPM2B_PUBLIC public;           
    UINT16 unique_zero;            
    bool   unique_rsa_set;         
    bool   unique_ecc_set;         
} IFAPI_KEY_TEMPLATE;

typedef struct {
    TPMI_YES_NO system;            
    TPMI_RH_HIERARCHY hierarchy;   
    char             *description; 
    TPMS_NV_PUBLIC public;         
} IFAPI_NV_TEMPLATE;

enum FAPI_STATE_NV_READ {
    NV_READ_INIT = 0,
    NV_READ_AUTHORIZE,
    NV_READ_AUTHORIZE2,
    NV_READ_AUTH_SENT,
    NV_READ_CHECK_HANDLE,
    NV_READ_GET_CAPABILITY,
    NV_READ_GET_ESYS_HANDLE,
    NV_READ_GET_NV_PUBLIC,
    NV_READ_WRITE_CHANGED_OBJECT
};

enum FAPI_STATE_NV_WRITE {
    NV2_WRITE_INIT = 0,
    NV2_WRITE_READ,
    NV2_WRITE_WAIT_FOR_SESSSION,
    NV2_WRITE_NULL_AUTH_SENT,
    NV2_WRITE_AUTH_SENT,
    NV2_WRITE_WRITE_PREPARE,
    NV2_WRITE_WRITE,
    NV2_WRITE_AUTHORIZE,
    NV2_WRITE_AUTHORIZE2
};

typedef struct {
    char *nvPath;                            
    char *policyPath;                        
    TPM2B_NV_PUBLIC public;                  
    ESYS_TR           esys_auth_handle;      
    ESYS_TR           esys_handle;           
    TPM2_HANDLE       tpm_handle;            
    size_t            numBytes;              
    UINT16            bytesRequested;        
    UINT16            offset;                
    size_t            data_idx;              
    const uint8_t    *data;                  
    uint8_t          *nv_buffer;             
    uint8_t          *rdata;                 
    size_t            size;                  
    IFAPI_OBJECT      auth_object;           
    IFAPI_OBJECT      nv_object;             
    TPM2B_AUTH        auth;                  
    IFAPI_NV          nv_obj;                
    ESYS_TR           auth_index;            
    ESYS_TR           auth_session;          
    uint64_t          bitmap;                
    IFAPI_NV_TEMPLATE public_templ;          
    enum FAPI_STATE_NV_READ  nv_read_state;  
    enum FAPI_STATE_NV_WRITE nv_write_state; 
    uint8_t                 *write_data;
    char                    *logData;       
    json_object             *jso_event_log; 
    TPMI_RH_NV_INDEX         maxNvIndex;    
    IFAPI_EVENT              pcr_event;     
    TPML_DIGEST_VALUES       digests;       
    bool skip_policy_computation;           
    enum IFAPI_CHECK_NV_STATE nv_check;     
    TPMS_CAPABILITY_DATA     *capability;   /* TPM capability data to check nv index */
} IFAPI_NV_Cmds;

typedef struct {
    TPMS_CAPABILITY_DATA *capability;       /* TPM capability data to check available algs */
    char                **pathlist;         
    size_t                numPaths;         
    size_t                numNullPrimaries; 
    size_t        primary_idx;              
    UINT32        nv_cap_idx;               
    size_t        path_idx;                 
    IFAPI_OBJECT *null_primaries;           
} IFAPI_INITIALIZE;

enum FAPI_NV_CREATE {
    CREATE_NV_CHECK_NV_OBJECTS_INIT = 0,
    CREATE_NV_CHECK_NV_OBJECTS,
    CREATE_NV_READ_NV_OBJECT,
    CREATE_NV_GET_TPM_NV_HANDLES,
    CREATE_NV_GET_TPM_NV_HANDLES2,
    CREATE_NV_CHECK_NV_INDEX,
    CREATE_NV_NV_GET_ESYS_HANDLE,
    CREATE_NV_NV_WAIT_FOR_READ_PUBLIC,
    CREATE_NV_WRITE
};

typedef struct {
    enum FAPI_NV_CREATE   state;          
    TPMS_CAPABILITY_DATA *capability;     
    char                **pathlist;       
    size_t                numPaths;       
    UINT32                nv_cap_idx;     
    size_t                path_idx;       
    TPMI_RH_NV_INDEX     *nv_idx_list;    
    TPMI_YES_NO           more_data;      
    TPM2_HANDLE           nv_index;       
    ESYS_TR               esys_nv_handle; 
    IFAPI_OBJECT          nv_object;      
    char                 *path;           
} IFAPI_CREATE_NV;

typedef struct {
    TPML_DIGEST_VALUES    digest_list;       
    TPML_DIGEST_VALUES   *event_digests;     
    ESYS_TR               PCR;               
    TPML_PCR_SELECTION    pcr_selection;     
    TPML_PCR_SELECTION   *pcr_selection_out; 
    UINT32                update_count;
    TPML_DIGEST          *pcrValues; /* The values returned by PCR_Read */
    TPM2_HANDLE           pcrIndex;
    TPMI_ALG_HASH         hashAlg;
    const char           *keyPath;        
    ESYS_TR               handle;         
    IFAPI_OBJECT         *key_object;     
    TPMS_CAPABILITY_DATA *capabilityData; /* TPM capability data to check available algs */
    uint32_t             *pcrList;        
    size_t                pcrListSize;    
    TPM2B_DATA            qualifyingData; 
    uint8_t const        *eventData;
    TPM2B_EVENT           event;
    size_t                eventDataSize;
    uint32_t const       *hashAlgs;
    uint32_t             *hashAlgs2;
    size_t                numHashAlgs;
    char const           *quoteInfo;
    char                 *certificate;
    TPM2B_ATTEST         *tpm_quoted;
    TPMT_SIGNATURE       *tpm_signature;
    uint8_t              *signature;
    size_t                signatureSize;
    char const           *logData;
    char                 *pcrLog;
    IFAPI_EVENT           pcr_event;
    json_object          *event_list;
    FAPI_QUOTE_INFO       fapi_quote_info;
    uint8_t              *pcrValue;
    size_t                pcrValueSize;
    char                 *event_log_file;
} IFAPI_PCR;

typedef struct {
    char        *description; 
    UINT8_ARY    appData;     
    IFAPI_OBJECT object;      
    char        *object_path; 
    json_object *jso;         
    char        *jso_string;  
} IFAPI_Path_SetDescription;

typedef struct {
    size_t   numBytes;       
    size_t   idx;            
    UINT16   bytesRequested; 
    uint8_t *data;           
    uint8_t *ret_data;       
} IFAPI_GetRandom;

typedef struct {
    const char  *pem_cert;     
    char        *pem_cert_dup; 
    const char  *key_path;     
    NODE_STR_T  *path_list;    
    IFAPI_OBJECT key_object;   
} IFAPI_Key_SetCertificate;

enum IFAPI_KEY_CREATE_STATE {
    KEY_CREATE_INIT = 0,
    KEY_CREATE_WAIT_FOR_SESSION,
    KEY_CREATE_WAIT_FOR_PARENT,
    KEY_CREATE_AUTH_SENT,
    KEY_CREATE_WAIT_FOR_LOAD_AUTHORIZATION,
    KEY_CREATE_WAIT_FOR_KEY,
    KEY_CREATE_WAIT_FOR_HIERARCHY,
    KEY_CREATE_AUTHORIZE_HIERARCHY,
    KEY_CREATE_WAIT_FOR_EVICT_CONTROL,
    KEY_CREATE_WRITE_PREPARE,
    KEY_CREATE_WRITE,
    KEY_CREATE_FLUSH1,
    KEY_CREATE_FLUSH2,
    KEY_CREATE_CALCULATE_POLICY,
    KEY_CREATE_PRIMARY_CALCULATE_POLICY,
    KEY_CREATE_WAIT_FOR_AUTHORIZATION,
    KEY_CREATE_CLEANUP,
    KEY_CREATE_WAIT_FOR_RANDOM,
    KEY_CREATE_PRIMARY_INIT,
    KEY_CREATE_PRIMARY_WAIT_FOR_SESSION,
    KEY_CREATE_PRIMARY_WAIT_FOR_HIERARCHY,
    KEY_CREATE_PRIMARY_WAIT_FOR_AUTHORIZE1,
    KEY_CREATE_PRIMARY_WAIT_FOR_AUTHORIZE2,
    KEY_CREATE_PRIMARY_WAIT_FOR_PRIMARY,
    KEY_CREATE_PRIMARY_WAIT_FOR_EVICT_CONTROL,
    KEY_CREATE_PRIMARY_FLUSH,
    KEY_CREATE_PRIMARY_WRITE_PREPARE,
    KEY_CREATE_PRIMARY_WRITE,
    KEY_CREATE_PRIMARY_CLEANUP
};

typedef struct {
    enum IFAPI_KEY_CREATE_STATE state;
    const char                 *keyPath;      
    NODE_STR_T                 *path_list;    
    IFAPI_OBJECT                parent;       
    IFAPI_OBJECT                object;       
    IFAPI_KEY_TEMPLATE          public_templ; 
    TPM2B_PUBLIC public;                      
    IFAPI_OBJECT           hierarchy;         
    TPM2B_SENSITIVE_CREATE inSensitive;
    TPM2B_DATA             outsideInfo;
    TPML_PCR_SELECTION     creationPCR;
    ESYS_TR                handle;
    const char            *authValue;
    const char            *policyPath;
    const IFAPI_PROFILE   *profile;
    bool                   gen_sensitive_random; 
} IFAPI_Key_Create;

typedef struct {
    char const          *keyPath; 
    uint8_t const       *in_data;
    size_t               in_dataSize;
    IFAPI_OBJECT        *key_object;     
    ESYS_TR              key_handle;     
    size_t               numBytes;       
    size_t               decrypt;        
    UINT16               bytesRequested; 
    TPMT_RSA_DECRYPT     rsa_scheme;
    ESYS_TR              object_handle;
    char                *policy_path;
    ESYS_TR              auth_session;
    const IFAPI_PROFILE *profile;
    uint8_t             *plainText;
    size_t               plainTextSize;
    uint8_t             *cipherText;
    size_t               cipherTextSize;
} IFAPI_Data_EncryptDecrypt;

enum FAPI_SIGN_STATE {
    SIGN_INIT = 0,
    SIGN_WAIT_FOR_SESSION,
    SIGN_WAIT_FOR_KEY,
    SIGN_AUTH_SENT,
    SIGN_WAIT_FOR_FLUSH
};

typedef struct {
    enum FAPI_SIGN_STATE state;         
    const char          *keyPath;       
    ESYS_TR              handle;        
    TPM2B_DIGEST         digest;        
    uint8_t             *data;          
    size_t               data_size;     
    size_t               offset;        
    size_t               chunk;         
    TPMT_SIG_SCHEME      scheme;        
    IFAPI_OBJECT        *key_object;    
    TPMT_SIGNATURE      *tpm_signature; 
    TPMI_YES_NO          decrypt;       
    TPMT_SIGNATURE      *signature;     
    char const          *padding;       
    char                *certificate;   
    uint8_t             *ret_signature; 
    size_t               signatureSize;
    char                *publicKey; 
    TPMT_TK_HASHCHECK   *validation;
    ESYS_TR              sequence_handle; 
} IFAPI_Key_Sign;

typedef struct {
    const char           *keyPath;     
    IFAPI_OBJECT         *object;      
    TPM2B_SENSITIVE_DATA *unseal_data; 
} IFAPI_Unseal;

typedef struct {
    TPMS_CAPABILITY_DATA *capability_data; 
    TPMS_CAPABILITY_DATA *fetched_data;    
    size_t                idx_info_cap;
    IFAPI_INFO            info_obj;
    UINT32                property_count;
    UINT32                property;
} IFAPI_GetInfo;

enum IFAPI_HIERACHY_AUTHORIZATION_STATE {
    HIERARCHY_CHANGE_AUTH_INIT = 0,
    HIERARCHY_CHANGE_AUTH_NULL_AUTH_SENT,
    HIERARCHY_CHANGE_AUTH_AUTH_SENT
};

enum IFAPI_HIERACHY_POLICY_AUTHORIZATION_STATE {
    HIERARCHY_CHANGE_POLICY_INIT = 0,
    HIERARCHY_CHANGE_POLICY_NULL_AUTH_SENT,
    HIERARCHY_CHANGE_POLICY_AUTHORIZE,
    HIERARCHY_CHANGE_POLICY_AUTH_SENT
};

typedef struct {
    const char    *entityPath;       
    ESYS_TR        handle;           
    IFAPI_OBJECT  *key_object;       
    const char    *authValue;        
    TPM2B_AUTH     newAuthValue;     
    TPM2B_PRIVATE *newPrivate;       
    IFAPI_OBJECT   object;           
    IFAPI_OBJECT   hiearchy_object;  
    ESYS_TR        nv_index;         
    ESYS_TR        hierarchy_handle; 
    char         **pathlist;         
    size_t         numPaths;         
    size_t         numPathsCleanup;  
} IFAPI_Entity_ChangeAuth;

typedef struct {
    const char              *policyPath;     
    const char              *signingKeyPath; 
    TPM2B_DIGEST             policyRef;
    TPMS_POLICYAUTHORIZATION authorization;
} IFAPI_Fapi_AuthorizePolicy;

typedef struct {
    const char    *policyPath; 
    TPMI_ALG_HASH *hash_alg;   
    size_t         hash_size;  
    size_t         digest_idx; 
} IFAPI_api_WriteAuthorizeNv;

typedef struct {
    IFAPI_OBJECT       hierarchy_lockout;       
    IFAPI_OBJECT       hierarchy_hs;            
    IFAPI_OBJECT       hierarchy_he;            
    IFAPI_OBJECT       hierarchy_hn;            
    IFAPI_OBJECT      *hierarchy;               
    TPMS_POLICY       *hierarchy_policy;        
    IFAPI_KEY_TEMPLATE public_templ;            
    TPM2B_PUBLIC public;                        
    char                 **pathlist;            
    size_t                 numPaths;            
    size_t                 numHierarchyObjects; 
    size_t                 hiearchy_idx;        
    size_t                 path_idx;            
    IFAPI_OBJECT          *hierarchies;         
    TPM2B_SENSITIVE_CREATE inSensitive;
    TPM2B_DATA             outsideInfo;
    TPML_PCR_SELECTION     creationPCR;
    ESYS_TR                handle;
    const char            *authValueLockout;
    const char            *authValueEh;
    const char            *policyPathEh;
    const char            *authValueSh;
    const char            *policyPathSh;
    size_t                 digest_idx;
    size_t                 hash_size;
    TPM2_HANDLE            cert_nv_idx;
    TPM2B_NV_PUBLIC       *nvPublic;
    ESYS_TR                esys_nv_cert_handle;
    char                  *pem_cert;
    TPM2_ALG_ID            cert_key_type;
    size_t                 cert_count;
    size_t                 cert_idx;
    TPMS_CAPABILITY_DATA  *capabilityData;
    IFAPI_OBJECT           hierarchy_object;
    TPM2B_AUTH             hierarchy_auth;
    TPM2B_DIGEST           policy_digest;
    char                  *intermed_crt;
    char                  *root_crt;
    TPMA_PERMANENT         auth_state;
    ESYS_TR                srk_esys_handle;
    ESYS_TR                ek_esys_handle;
    ESYS_TR                srk_tpm_handle;
    ESYS_TR                ek_tpm_handle;
    bool                   srk_exists;
    TPM2_HANDLE            template_nv_index;
    TPM2_HANDLE            nonce_nv_index;
    bool                   cert_chain_exists;
    uint8_t               *certs;
    size_t                 cert_list_size;
    IFAPI_POLICIES         policies;
 
} IFAPI_Provision;

typedef struct {
    char                  *path;      
    IFAPI_OBJECT           hierarchy; 
    IFAPI_OBJECT           pkey_object;
    TPM2B_SENSITIVE_CREATE inSensitive;
    TPM2B_DATA             outsideInfo;
    TPML_PCR_SELECTION     creationPCR;
    ESYS_TR                handle;
    TPMI_DH_PERSISTENT     persistent_handle;
    TPMS_CAPABILITY_DATA  *capabilityData;
} IFAPI_CreatePrimary;

typedef struct {
    const char    *keyPath;
    uint8_t const *signature;
    size_t         signatureSize;
    uint8_t const *digest;
    size_t         digestSize;
    IFAPI_OBJECT   key_object;
} IFAPI_Key_VerifySignature;

enum IFAPI_STATE_POLICY {
    POLICY_INIT = 0,
    POLICY_READ,
    POLICY_READ_FINISH,
    POLICY_INSTANTIATE_PREPARE,
    POLICY_INSTANTIATE,
    POLICY_EXECUTE_PREPARE,
    POLICY_EXECUTE,
    POLICY_FLUSH
};
 
typedef struct IFAPI_POLICY_EXEC_CTX  IFAPI_POLICY_EXEC_CTX;
typedef struct IFAPI_POLICYUTIL_STACK IFAPI_POLICYUTIL_STACK;

enum FAPI_CREATE_SESSION_STATE { CREATE_SESSION_INIT = 0, CREATE_SESSION, WAIT_FOR_CREATE_SESSION };

typedef struct {
    enum IFAPI_STATE_POLICY state;
    struct TPMS_POLICY      policy;
    size_t                  digest_idx;
    size_t                  hash_size;
    char                  **pathlist; 
    TPMI_ALG_HASH           hash_alg;
    IFAPI_POLICY_EXEC_CTX *policy_stack; 
    IFAPI_POLICYUTIL_STACK *util_current_policy;
    IFAPI_POLICYUTIL_STACK *policyutil_stack;
    ESYS_TR session; 
    enum FAPI_CREATE_SESSION_STATE create_session_state;
    char                          *path;
    IFAPI_POLICY_EVAL_INST_CTX     eval_ctx;
} IFAPI_POLICY_CTX;

enum IFAPI_STATE_FILE_SEARCH { FSEARCH_INIT = 0, FSEARCH_READ, FSEARCH_OBJECT };

typedef struct {
    enum IFAPI_STATE_FILE_SEARCH state;
    char                       **pathlist; 
    size_t                       path_idx; 
    size_t                       numPaths; 
    char                        *current_path;
} IFAPI_FILE_SEARCH_CTX;

enum FAPI_STATE_PREPARE_LOAD_KEY {
    PREPARE_LOAD_KEY_INIT = 0,
    PREPARE_LOAD_KEY_WAIT_FOR_SESSION,
    PREPARE_LOAD_KEY_INIT_KEY,
    PREPARE_LOAD_KEY_WAIT_FOR_KEY
};

enum FAPI_STATE_LOAD_KEY {
    LOAD_KEY_GET_PATH = 0,
    LOAD_KEY_READ_KEY,
    LOAD_KEY_WAIT_FOR_PRIMARY,
    LOAD_KEY_LOAD_KEY,
    LOAD_KEY_AUTH,
    LOAD_KEY_AUTHORIZE
};

typedef struct {
    char const        *pathOfKeyToDuplicate; 
    char const        *pathToPublicKeyOfNewParent; 
    TPM2B_PUBLIC       public_parent;              
    IFAPI_OBJECT      *key_object;  
    IFAPI_OBJECT       export_tree; 
    IFAPI_OBJECT       pub_key;     
    IFAPI_OBJECT       dup_key;     
    struct TPMS_POLICY policy;
    ESYS_TR            handle_ext_key;
    char              *exportedData;
} IFAPI_ExportKey;

typedef struct {
    char const *path;             
    IFAPI_OBJECT  object;         
    TPMS_POLICY   policy;         
    TPMI_ALG_HASH hashAlg;        
    size_t        profile_idx;    
    bool          compute_policy; 
} IFAPI_ExportPolicy;

typedef struct {
    IFAPI_OBJECT  object;
    TPM2B_NAME    parent_name;
    IFAPI_OBJECT *parent_object;
    IFAPI_OBJECT  new_object;
    char         *parent_path;
    char         *out_path;
    TPM2B_PRIVATE *private;
    char                *jso_string;
    const IFAPI_PROFILE *profile;
    IFAPI_KEY_TEMPLATE   public_templ; 
    const char          *ossl_priv;    
    TPM2B_SENSITIVE      sensitive;    
} IFAPI_ImportKey;

typedef struct {
    enum FAPI_STATE_LOAD_KEY         state; 
    enum FAPI_STATE_PREPARE_LOAD_KEY prepare_state;
    NODE_STR_T                      *path_list; 
    NODE_OBJECT_T                   *key_list;
    IFAPI_OBJECT                     auth_object;
    size_t                           position;
    ESYS_TR                          handle;
    ESYS_TR                          parent_handle;
    bool                             parent_handle_persistent;
    IFAPI_OBJECT                    *key_object;
    char                            *key_path;
    char const                      *path;
} IFAPI_LoadKey;

typedef struct {
    bool         is_key;            
    bool         is_persistent_key; 
    ESYS_TR      new_object_handle;
    TPM2_HANDLE  permanentHandle; 
    IFAPI_OBJECT auth_object;     
    ESYS_TR      auth_index;      
    char        *path;            
    IFAPI_OBJECT object;          
    char       **pathlist;        
    size_t       numPaths;        
    size_t       path_idx;        
} IFAPI_Entity_Delete;

typedef struct {
    uint8_t       type;              
    uint8_t      *data;              
    size_t        length;            
    bool          is_key;            
    bool          is_persistent_key; 
    ESYS_TR       new_object_handle;
    TPM2_HANDLE   permanentHandle; 
    IFAPI_OBJECT  auth_object;     
    ESYS_TR       auth_index;      
    char         *path;            
    IFAPI_OBJECT  object;          
    IFAPI_OBJECT *key_object;      
} IFAPI_GetEsysBlob;

typedef struct {
    const char *searchPath; 
} IFAPI_Entities_List;

typedef union {
    IFAPI_Provision            Provision;
    IFAPI_Key_Create           Key_Create;
    IFAPI_Key_SetCertificate   Key_SetCertificate;
    IFAPI_Entity_ChangeAuth    Entity_ChangeAuth;
    IFAPI_Entity_Delete        Entity_Delete;
    IFAPI_GetEsysBlob          GetEsysBlob;
    IFAPI_Entities_List        Entities_List;
    IFAPI_Key_VerifySignature  Key_VerifySignature;
    IFAPI_Data_EncryptDecrypt  Data_EncryptDecrypt;
    IFAPI_PCR                  pcr;
    IFAPI_INITIALIZE           Initialize;
    IFAPI_Path_SetDescription  path_set_info;
    IFAPI_Fapi_AuthorizePolicy Policy_AuthorizeNewPolicy;
    IFAPI_api_WriteAuthorizeNv WriteAuthorizeNV;
    IFAPI_ExportKey            ExportKey;
    IFAPI_ImportKey            ImportKey;
    IFAPI_Unseal               Unseal;
    IFAPI_GetInfo              GetInfo;
    IFAPI_ExportPolicy         ExportPolicy;
} IFAPI_CMD_STATE;

enum FAPI_STATE_PRIMARY {
    PRIMARY_INIT = 0,
    PRIMARY_READ_KEY,
    PRIMARY_READ_HIERARCHY,
    PRIMARY_READ_HIERARCHY_FINISH,
    PRIMARY_AUTHORIZE_HIERARCHY,
    PRIMARY_GET_AUTH_VALUE,
    PRIMARY_WAIT_FOR_PRIMARY,
    PRIMARY_HAUTH_SENT,
    PRIMARY_CREATED,
    PRIMARY_VERIFY_PERSISTENT,
    PRIMARY_GET_CAP
};

enum FAPI_STATE_SESSION {
    SESSION_INIT = 0,
    SESSION_WAIT_FOR_PRIMARY,
    SESSION_CREATE_SESSION,
    SESSION_WAIT_FOR_SESSION1,
    SESSION_WAIT_FOR_SESSION2
};

enum FAPI_STATE_GET_RANDOM { GET_RANDOM_INIT = 0, GET_RANDOM_SENT };

enum FAPI_FLUSH_STATE { FLUSH_INIT = 0, WAIT_FOR_FLUSH };

enum FAPI_STATE {
    FAPI_STATE_INIT = 0,      
    FAPI_STATE_INTERNALERROR, 
    INITIALIZE_READ,
    INITIALIZE_INIT_TCTI,
    INITIALIZE_GET_CAP,
    INITIALIZE_WAIT_FOR_CAP,
    INITIALIZE_READ_PROFILE,
    INITIALIZE_READ_PROFILE_INIT,
    INITIALIZE_READ_TIME,
    INITIALIZE_CHECK_NULL_PRIMARY,
    INITIALIZE_READ_NULL_PRIMARY,
    INITIALIZE_CHECK_EXISTING_NV,
    PROVISION_WAIT_FOR_GET_CAP_AUTH_STATE,
    PROVISION_WAIT_FOR_GET_CAP0,
    PROVISION_WAIT_FOR_GET_CAP1,
    PROVISION_INIT_GET_CAP2,
    PROVISION_WAIT_FOR_GET_CAP2,
    PROVISION_GET_CERT_NV,
    PROVISION_GET_CERT_NV_FINISH,
    PROVISION_GET_CERT_READ_PUBLIC,
    PROVISION_READ_CERT,
    PROVISION_READ_CERT_CHAIN,
    PROVISION_PREPARE_READ_ROOT_CERT,
    PROVISION_READ_ROOT_CERT,
    PROVISION_PREPARE_READ_INT_CERT,
    PROVISION_READ_INT_CERT,
    PROVISION_INIT,
    PROVISION_INIT_SRK,
    PROVISION_WAIT_FOR_EK_SESSION,
    PROVISION_WAIT_FOR_SRK_SESSION,
    PROVISION_AUTH_EK_NO_AUTH_SENT,
    PROVISION_AUTH_EK_AUTH_SENT,
    PROVISION_AUTH_SRK_NO_AUTH_SENT,
    PROVISION_AUTH_SRK_AUTH_SENT,
    PROVISION_CLEAN_EK_SESSION,
    PROVISION_CLEAN_SRK_SESSION,
    PROVISION_EK_WRITE_PREPARE,
    PROVISION_EK_WRITE,
    PROVISION_EK_CHECK_CERT,
    PROVISION_SRK_WRITE_PREPARE,
    PROVISION_SRK_WRITE,
    PROVISION_WAIT_FOR_EK_PERSISTENT,
    PROVISION_WAIT_FOR_SRK_PERSISTENT,
    PROVISION_CHANGE_LOCKOUT_AUTH,
    PROVISION_CHANGE_EH_CHECK,
    PROVISION_CHANGE_EH_AUTH,
    PROVISION_CHANGE_SH_CHECK,
    PROVISION_CHANGE_SH_AUTH,
    PROVISION_EH_CHANGE_POLICY,
    PROVISION_SH_CHANGE_POLICY,
    PROVISION_LOCKOUT_CHANGE_POLICY,
    PROVISION_FINISHED,
    PROVISION_WRITE_SH,
    PROVISION_WRITE_EH,
    PROVISION_PREPARE_NULL,
    PROVISION_WRITE_NULL,
    PROVISION_WRITE_LOCKOUT,
    PROVISION_WRITE_LOCKOUT_PARAM,
    PROVISION_PREPARE_LOCKOUT_PARAM,
    PROVISION_AUTHORIZE_LOCKOUT,
    PROVISION_FLUSH_SRK,
    PROVISION_FLUSH_EK,
    PROVISION_CHECK_FOR_VENDOR_CERT,
    PROVISION_GET_VENDOR,
    PROVISION_GET_HIERARCHIES,
    PROVISION_READ_HIERARCHIES,
    PROVISION_READ_HIERARCHY,
    PROVISION_WRITE_HIERARCHIES,
    PROVISION_WRITE_HIERARCHY,
    PROVISION_PREPARE_GET_CAP_AUTH_STATE,
    PROVISION_SRK_GET_PERSISTENT_NAME,
    PROVISION_CHECK_SRK_EVICT_CONTROL,
    PROVISION_AUTHORIZE_HS_FOR_EK_EVICT,
    PROVISION_PREPARE_EK_EVICT,
    PROVISION_READ_EK_TEMPLATE,
    PROVISION_READ_EK_NONCE,
    PROVISION_CHECK_EXISTING_NV,
 
    KEY_CREATE,
    KEY_CREATE_PRIMARY,
 
    CREATE_SEAL,
 
    KEY_SET_CERTIFICATE_READ,
    KEY_SET_CERTIFICATE_WRITE,
 
    KEY_GET_CERTIFICATE_READ,
 
    GET_RANDOM_WAIT_FOR_SESSION,
    GET_RANDOM_WAIT_FOR_RANDOM,
    GET_RANDOM_CLEANUP,
 
    NV_CREATE_READ_PROFILE,
    NV_CREATE_READ_HIERARCHY,
    NV_CREATE_AUTHORIZE_HIERARCHY,
    NV_CREATE_GET_INDEX,
    NV_CREATE_FIND_INDEX,
    NV_CREATE_WAIT_FOR_SESSION,
 
    NV_CREATE_AUTH_SENT,
    NV_CREATE_WRITE,
    NV_CREATE_CALCULATE_POLICY,
    NV_CREATE_CHECK_EXISTING,
    NV_CREATE_INDEX,
    NV_CREATE_SERIALIZE,
 
    NV_WRITE_READ,
    NV_WRITE_WRITE,
    NV_WRITE_CLEANUP,
 
    NV_EXTEND_READ,
    NV_EXTEND_WAIT_FOR_SESSION,
    NV_EXTEND_AUTHORIZE,
    NV_EXTEND_AUTH_SENT,
    NV_EXTEND_WRITE,
    NV_EXTEND_CLEANUP,
 
    NV_INCREMENT_READ,
    NV_INCREMENT_WAIT_FOR_SESSION,
    NV_INCREMENT_AUTHORIZE,
    NV_INCREMENT_AUTH_SENT,
    NV_INCREMENT_WRITE,
    NV_INCREMENT_CLEANUP,
 
    NV_SET_BITS_READ,
    NV_SET_BITS_WAIT_FOR_SESSION,
    NV_SET_BITS_AUTHORIZE,
    NV_SET_BITS_AUTH_SENT,
    NV_SET_BITS_WRITE,
    NV_SET_BITS_CLEANUP,
 
    NV_READ_READ,
    NV_READ_WAIT,
    NV_READ_WAIT_FOR_SESSION,
    NV_READ_CLEANUP,
 
    ENTITY_DELETE_GET_FILE,
    ENTITY_DELETE_READ,
    ENTITY_DELETE_WAIT_FOR_SESSION,
    ENTITY_DELETE_NULL_AUTH_SENT_FOR_KEY,
    ENTITY_DELETE_AUTH_SENT_FOR_KEY,
    ENTITY_DELETE_NULL_AUTH_SENT_FOR_NV,
    ENTITY_DELETE_AUTH_SENT_FOR_NV,
    ENTITY_DELETE_KEY,
    ENTITY_DELETE_KEY_WAIT_FOR_HIERARCHY,
    ENTITY_DELETE_KEY_WAIT_FOR_AUTHORIZATION,
    ENTITY_DELETE_AUTHORIZE_NV,
    ENTITY_DELETE_FILE,
    ENTITY_DELETE_POLICY,
    ENTITY_DELETE_REMOVE_DIRS,
    ENTITY_DELETE_CLEANUP,
    ENTITY_DELETE_READ_HIERARCHY,
 
    GET_ESYS_BLOB_GET_FILE,
    GET_ESYS_BLOB_READ,
    GET_ESYS_BLOB_NULL_AUTH_SENT_FOR_KEY,
    GET_ESYS_BLOB_AUTH_SENT_FOR_KEY,
    GET_ESYS_BLOB_NULL_AUTH_SENT_FOR_NV,
    GET_ESYS_BLOB_AUTH_SENT_FOR_NV,
    GET_ESYS_BLOB_KEY,
    GET_ESYS_BLOB_WAIT_FOR_KEY,
    GET_ESYS_BLOB_WAIT_FOR_CONTEXT_SAVE,
    GET_ESYS_BLOB_SERIALIZE,
    GET_ESYS_BLOB_FILE,
    GET_ESYS_BLOB_WAIT_FOR_FLUSH,
    GET_ESYS_BLOB_CLEANUP,
 
    ENTITY_GET_TPM_BLOBS_READ,
 
    KEY_SIGN_WAIT_FOR_KEY,
    KEY_SIGN_WAIT_FOR_SIGN,
    KEY_SIGN_CLEANUP,
 
    KEY_DIGEST_AND_SIGN_WAIT_FOR_KEY,
    KEY_DIGEST_AND_SIGN_WAIT_FOR_SIGN,
    KEY_DIGEST_AND_SIGN_COMPUTE_HASH,
    KEY_DIGEST_AND_SIGN_WAIT_FOR_HASH,
    KEY_DIGEST_AND_SIGN_WAIT_FOR_HASH_SEQUENCE_INIT,
    KEY_DIGEST_AND_SIGN_WAIT_FOR_HASH_UPDATE_INIT,
    KEY_DIGEST_AND_SIGN_WAIT_FOR_HASH_UPDTATE,
    KEY_DIGEST_AND_SIGN_WAIT_FOR_HASH_COMPLETE_INIT,
    KEY_DIGEST_AND_SIGN_WAIT_FOR_HASH_COMPLETE,
    KEY_DIGEST_AND_SIGN_CLEANUP,
 
    ENTITY_CHANGE_AUTH_WAIT_FOR_SESSION,
    ENTITY_CHANGE_AUTH_WAIT_FOR_KEY,
    ENTITY_CHANGE_AUTH_AUTH_SENT,
    ENTITY_CHANGE_AUTH_WAIT_FOR_FLUSH,
    ENTITY_CHANGE_AUTH_WRITE_PREPARE,
    ENTITY_CHANGE_AUTH_WRITE,
    ENTITY_CHANGE_AUTH_WAIT_FOR_KEY_AUTH,
    ENTITY_CHANGE_AUTH_WAIT_FOR_NV_READ,
    ENTITY_CHANGE_AUTH_WAIT_FOR_NV_AUTH,
    ENTITY_CHANGE_AUTH_WAIT_FOR_NV_CHANGE_AUTH,
    ENTITY_CHANGE_AUTH_HIERARCHY_CHANGE_AUTH,
    ENTITY_CHANGE_AUTH_HIERARCHY_READ,
    ENTITY_CHANGE_AUTH_HIERARCHY_AUTHORIZE,
    ENTITY_CHANGE_AUTH_SAVE_HIERARCHIES_PREPARE,
    ENTITY_CHANGE_AUTH_SAVE_HIERARCHIES_FINISH,
    ENTITY_CHANGE_AUTH_CLEANUP,
 
    DATA_ENCRYPT_WAIT_FOR_PROFILE,
    DATA_ENCRYPT_WAIT_FOR_SESSION,
    DATA_ENCRYPT_WAIT_FOR_KEY,
    DATA_ENCRYPT_WAIT_FOR_EXT_KEY,
    DATA_ENCRYPT_WAIT_FOR_FLUSH,
    DATA_ENCRYPT_WAIT_FOR_RSA_ENCRYPTION,
    DATA_ENCRYPT_CLEAN,
 
    DATA_DECRYPT_WAIT_FOR_PROFILE,
    DATA_DECRYPT_WAIT_FOR_SESSION,
    DATA_DECRYPT_WAIT_FOR_KEY,
    DATA_DECRYPT_WAIT_FOR_FLUSH,
    DATA_DECRYPT_WAIT_FOR_RSA_DECRYPTION,
    DATA_DECRYPT_AUTHORIZE_KEY,
    DATA_DECRYPT_CLEANUP,
 
    PCR_EXTEND_WAIT_FOR_SESSION,
    PCR_EXTEND_WAIT_FOR_GET_CAP,
    PCR_EXTEND_READ_EVENT_LOG,
    PCR_EXTEND_APPEND_EVENT_LOG,
    PCR_EXTEND_FINISH,
    PCR_EXTEND_CLEANUP,
 
    PCR_READ_READ_PCR,
    PCR_READ_READ_EVENT_LIST,
 
    PCR_QUOTE_WAIT_FOR_GET_CAP,
    PCR_QUOTE_WAIT_FOR_SESSION,
    PCR_QUOTE_WAIT_FOR_KEY,
    PCR_QUOTE_AUTH_SENT,
    PCR_QUOTE_AUTHORIZE,
    PCR_QUOTE_WAIT_FOR_FLUSH,
    PCR_QUOTE_READ_EVENT_LIST,
    PCR_QUOTE_CLEANUP,
 
    PATH_SET_DESCRIPTION_READ,
    PATH_SET_DESCRIPTION_WRITE,
 
    PATH_GET_DESCRIPTION_READ,
 
    APP_DATA_SET_READ,
    APP_DATA_SET_WRITE,
 
    AUTHORIZE_NEW_CALCULATE_POLICY,
    AUTHORIZE_NEW_LOAD_KEY,
    AUTHORIZE_NEW_KEY_SIGN_POLICY,
    AUTHORIZE_NEW_WRITE_POLICY_PREPARE,
    AUTHORIZE_NEW_WRITE_POLICY,
    AUTHORIZE_NEW_CLEANUP,
 
    WRITE_AUTHORIZE_NV_READ_NV,
    WRITE_AUTHORIZE_NV_CALCULATE_POLICY,
    WRITE_AUTHORIZE_NV_WRITE_NV_RAM_PREPARE,
    WRITE_AUTHORIZE_NV_WRITE_NV_RAM,
    WRITE_AUTHORIZE_NV_WRITE_OBJCECT,
    WRITE_AUTHORIZE_NV_WRITE_POLICY_PREPARE,
    WRITE_AUTHORIZE_NV_WRITE_POLICY,
    WRITE_AUTHORIZE_NV_CLEANUP,
 
    EXPORT_KEY_READ_PUB_KEY,
    EXPORT_KEY_READ_PUB_KEY_PARENT,
    EXPORT_KEY_WAIT_FOR_KEY,
    EXPORT_KEY_WAIT_FOR_DUPLICATE,
    EXPORT_KEY_WAIT_FOR_EXT_KEY,
    EXPORT_KEY_WAIT_FOR_AUTHORIZATON,
    EXPORT_KEY_WAIT_FOR_FLUSH1,
    EXPORT_KEY_WAIT_FOR_FLUSH2,
    EXPORT_KEY_CLEANUP,
 
    IMPORT_KEY_WRITE_POLICY,
    IMPORT_KEY_WRITE,
    IMPORT_KEY_SEARCH,
    IMPORT_KEY_LOAD_PARENT,
    IMPORT_KEY_AUTHORIZE_PARENT,
    IMPORT_KEY_IMPORT,
    IMPORT_KEY_WAIT_FOR_FLUSH,
    IMPORT_KEY_WRITE_OBJECT_PREPARE,
    IMPORT_KEY_WRITE_OBJECT,
    IMPORT_KEY_CLEANUP,
    IMPORT_WAIT_FOR_SESSION,
    IMPORT_WAIT_FOR_PARENT,
    IMPORT_WAIT_FOR_AUTHORIZATION,
    IMPORT_WAIT_FOR_KEY,
    IMPORT_WRITE,
    IMPORT_FLUSH_PARENT,
    IMPORT_FLUSH_KEY,
    IMPORT_CLEANUP,
 
    UNSEAL_WAIT_FOR_KEY,
    UNSEAL_AUTHORIZE_OBJECT,
    UNSEAL_WAIT_FOR_UNSEAL,
    UNSEAL_WAIT_FOR_FLUSH,
    UNSEAL_CLEANUP,
 
    GET_PLATFORM_CERTIFICATE,
 
    POLICY_EXPORT_READ_OBJECT,
    POLICY_EXPORT_READ_OBJECT_FINISH,
    POLICY_EXPORT_READ_POLICY,
    POLICY_EXPORT_READ_POLICY_FINISH,
    POLICY_EXPORT_CHECK_DIGEST,
    POLICY_EXPORT_COMPUTE_POLICY_DIGEST,
 
    VERIFY_QUOTE_READ,
 
    GET_INFO_GET_CAP,
    GET_INFO_GET_CAP_MORE,
    GET_INFO_WAIT_FOR_CAP
};

struct IFAPI_CALLBACKS {
    Fapi_CB_Auth         auth;
    void                *authData;
    Fapi_CB_Branch       branch;
    void                *branchData;
    Fapi_CB_Sign         sign;
    void                *signData;
    Fapi_CB_PolicyAction action;
    void                *actionData;
};

struct FAPI_CONTEXT {
    ESYS_CONTEXT *esys;                  
    struct IFAPI_CALLBACKS    callbacks; 
    struct IFAPI_IO           io;
    struct IFAPI_EVENTLOG     eventlog;
    struct IFAPI_KEYSTORE     keystore;
    struct IFAPI_POLICY_STORE pstore;
    struct IFAPI_PROFILES     profiles;
    TPMS_TIME_INFO            init_time; 
 
    enum FAPI_STATE            state;         
    enum FAPI_STATE_PRIMARY    primary_state; 
    enum FAPI_STATE_SESSION    session_state; 
    enum FAPI_STATE_GET_RANDOM get_random_state; 
    enum IFAPI_HIERACHY_AUTHORIZATION_STATE        hierarchy_state;
    enum IFAPI_HIERACHY_POLICY_AUTHORIZATION_STATE hierarchy_policy_state;
    enum IFAPI_GET_CERT_STATE                      get_cert_state;
    enum FAPI_FLUSH_STATE    flush_object_state; 
    enum IFAPI_CLEANUP_STATE cleanup_state; 
    enum IFAPI_READ_NV_PUBLIC_STATE read_nv_public_state;
    IFAPI_CONFIG                    config; 
    UINT32          nv_buffer_max; 
    IFAPI_CMD_STATE cmd;           
    IFAPI_NV_Cmds         nv_cmd;
    IFAPI_CREATE_NV       create_nv;
    IFAPI_GetRandom       get_random;
    IFAPI_CreatePrimary   createPrimary;
    IFAPI_LoadKey         loadKey;
    ESYS_TR               session1;       
    ESYS_TR               session2;       
    ESYS_TR               policy_session; 
    ESYS_TR               ek_handle;
    ESYS_TR               srk_handle;
    TPMI_DH_PERSISTENT    ek_persistent;
    TPMI_DH_PERSISTENT    srk_persistent;
    IFAPI_SESSION_TYPE    session_flags;
    TPMA_SESSION          session1_attribute_flags;
    TPMA_SESSION          session2_attribute_flags;
    IFAPI_MAX_BUFFER      aux_data; 
    IFAPI_POLICY_CTX      policy;   
    IFAPI_FILE_SEARCH_CTX fsearch;  
    IFAPI_Key_Sign        Key_Sign; 
    enum IFAPI_IO_STATE   io_state;
    NODE_OBJECT_T        *object_list;
    IFAPI_OBJECT         *duplicate_key; 
    IFAPI_OBJECT         *current_auth_object;
};
 
#define VENDOR_IFX  0x49465800
#define VENDOR_INTC 0x494E5443
#define VEDNOR_IBM  0x49424D20
#define VENDOR_AMD  0x414D4400
 
#endif /* FAPI_INT_H */