/* SPDX-License-Identifier: BSD-2-Clause */
/*******************************************************************************
 * Copyright 2018-2019, Fraunhofer SIT sponsored by Infineon Technologies AG
 * All rights reserved.
 ******************************************************************************/
#ifndef IFAPI_POLICY_TYPES_H
#define IFAPI_POLICY_TYPES_H

#include "tss2_tpm2_types.h"

typedef UINT32 TPMI_POLICYTYPE;
#define POLICYELEMENTS                 0
#define POLICYOR                       1    /**< None */
#define POLICYSIGNED                   2    /**< None */
#define POLICYSECRET                   3    /**< None */
#define POLICYPCR                      4    /**< None */
#define POLICYLOCALITY                 5    /**< None */
#define POLICYNV                       6    /**< None */
#define POLICYCOUNTERTIMER             7    /**< None */
#define POLICYCOMMANDCODE              8    /**< None */
#define POLICYPHYSICALPRESENCE         9    /**< None */
#define POLICYCPHASH                   10    /**< None */
#define POLICYNAMEHASH                 11    /**< None */
#define POLICYDUPLICATIONSELECT        12    /**< None */
#define POLICYAUTHORIZE                13    /**< None */
#define POLICYAUTHVALUE                14    /**< None */
#define POLICYPASSWORD                 15    /**< None */
#define POLICYNVWRITTEN                16    /**< None */
#define POLICYTEMPLATE                 17    /**< None */
#define POLICYAUTHORIZENV              18    /**< None */
#define POLICYACTION                   19    /**< None */

/** Policy type TPMS_POLICYSIGNED
 */
typedef struct {
    TPM2B_NONCE                                nonceTPM;    /**< This is a value returned by TPM2_StartAuthSession and thus n */
    TPM2B_DIGEST                                cpHashA;    /**< This value will be automatically generated by the FAPI. */
    TPM2B_NONCE                               policyRef;    /**< Default is zero-length */
    INT32                                    expiration;    /**< This value will be -1 by the FAPI */
    TPMT_SIGNATURE                                 auth;    /**< This value is generated from at runtime via a callback. */
    TPM2B_NAME                                publicKey;    /**< This will be automatically generated from keyPath, keyPublic */
    char                                 *publicKeyHint;    /**< A human readable hint to denote which public key to use. */
    char                                       *keyPath;    /**< A reference to a key inside the FAPI keystore */
    TPMT_PUBLIC                               keyPublic;    /**< None */
    char                                        *keyPEM;    /**< <p>The TPM2B_NAME is constructed with a TPMT_PUBLIC from this */
    TPMI_ALG_HASH                         keyPEMhashAlg;    /**< (optional) Default = SHA256 */
    TPMT_SIGNATURE                        signature_tpm;
} TPMS_POLICYSIGNED;

/** Policy type TPMS_POLICYSECRET
 */
typedef struct {
    TPM2B_NONCE                                nonceTPM;    /**< None */
    TPM2B_DIGEST                                cpHashA;    /**< None */
    TPM2B_NONCE                               policyRef;    /**< Default is zero length */
    INT32                                    expiration;    /**< None */
    char                                    *objectPath;    /**< Path of the object */
    TPM2B_NAME                               objectName;    /**< Public name of the object */
} TPMS_POLICYSECRET;

/** Policy type TPMS_POLICYLOCALITY
 */
typedef struct {
    TPMA_LOCALITY                              locality;    /**< None */
} TPMS_POLICYLOCALITY;

/** Policy type TPMS_POLICYNV
 */
typedef struct {
    char                                        *nvPath;    /**< None */
    TPMI_RH_NV_INDEX                            nvIndex;    /**< None */
    TPM2B_NV_PUBLIC                            nvPublic;    /**< None */
    TPMI_RH_NV_AUTH                          authHandle;    /**< This is determined by FAPI at runtime. */
    TPM2B_OPERAND                              operandB;    /**< None */
    UINT16                                       offset;    /**< Default value is 0 */
    TPM2_EO                                   operation;    /**< Default value is EQUAL */
} TPMS_POLICYNV;

/** Policy type TPMS_POLICYCOUNTERTIMER
 */
typedef struct {
    TPM2B_OPERAND                              operandB;    /**< None */
    UINT16                                       offset;    /**< Default is 0 */
    TPM2_EO                                   operation;    /**< None */
} TPMS_POLICYCOUNTERTIMER;

/** Policy type TPMS_POLICYCOMMANDCODE
 */
typedef struct {
    TPM2_CC                                        code;    /**< None */
} TPMS_POLICYCOMMANDCODE;

/** Policy type TPMS_POLICYPHYSICALPRESENCE
 */
typedef struct {
} TPMS_POLICYPHYSICALPRESENCE;

/** Policy type TPMS_POLICYCPHASH
 */
typedef struct {
    TPM2B_DIGEST                                 cpHash;    /**< None */
} TPMS_POLICYCPHASH;

/** Policy type TPMS_POLICYNAMEHASH
 */
typedef struct {
    UINT32                                          count;    /**< Computed during instantiation */
    UINT32                                              i;    /**< Temporary index for policy calculation */
    TPM2B_NAME                             objectNames[3];    /**< computed during instantiation (if not initialized) */
    char                                    *namePaths[3];    /**< Paths of objects used for retrieving the names */
    TPM2B_DIGEST                                 nameHash;    /**< computed during policy calculation */
} TPMS_POLICYNAMEHASH;

/** Policy type TPMS_POLICYDUPLICATIONSELECT
 */
typedef struct {
    TPM2B_NAME                               objectName;    /**< Will not be used (see includeObject) */
    TPM2B_NAME                            newParentName;    /**< Automatically calculated */
    TPMI_YES_NO                           includeObject;    /**< Always NO */
    char                                 *newParentPath;    /**< None */
    TPM2B_PUBLIC                        newParentPublic;    /**< None */
} TPMS_POLICYDUPLICATIONSELECT;

/** Policy type TPMS_POLICYAUTHORIZATION
 */
typedef struct {
    char                                          *type;    /**< tpm */
    TPMT_PUBLIC                                     key;    /**< Selector of the algorithm used for the signature and the pub */
    TPM2B_NONCE                               policyRef;    /**< None */
    TPMT_SIGNATURE                            signature;    /**< None */
} TPMS_POLICYAUTHORIZATION;

typedef struct policy_object_node POLICY_OBJECT;

/** Policy type TPMS_POLICYAUTHORIZE
 */
typedef struct {
    TPM2B_DIGEST                         approvedPolicy;    /**< None */
    TPM2B_NONCE                               policyRef;    /**< None */
    TPM2B_NAME                                  keyName;    /**< Not exposed in JSON, but generated from keyPath, keyPublic o */
    TPMT_TK_VERIFIED                        checkTicket;    /**< None */
    char                                       *keyPath;    /**< A reference to a key inside the FAPI keystore */
    TPMT_PUBLIC                               keyPublic;    /**< None */
    char                                        *keyPEM;    /**< <p> everyone in favour<br /> The TPM2B_NAME is constructed w */
    TPMI_ALG_HASH                         keyPEMhashAlg;    /**< (optional) Default = SHA256 */
    POLICY_OBJECT                          *policy_list;
    TPMS_POLICYAUTHORIZATION             *authorization;
    TPMT_SIGNATURE                            signature;
} TPMS_POLICYAUTHORIZE;

/** Policy type TPMS_POLICYAUTHVALUE
 */
typedef struct {
} TPMS_POLICYAUTHVALUE;

/** Policy type TPMS_POLICYPASSWORD
 */
typedef struct {
} TPMS_POLICYPASSWORD;

/** Policy type TPMS_POLICYNVWRITTEN
 */
typedef struct {
    TPMI_YES_NO                              writtenSet;    /**< Default is yes */
} TPMS_POLICYNVWRITTEN;

/** Policy type TPMS_POLICYTEMPLATE
 */
typedef struct {
    TPM2B_DIGEST                           templateHash;    /**< None */
    TPM2B_PUBLIC                         templatePublic;    /**< None */
    char                                  *templateName;    /**< None */
} TPMS_POLICYTEMPLATE;

/** Policy type TPMS_POLICYAUTHORIZENV
 */
typedef struct {
    char                                        *nvPath;    /**< None */
    TPM2B_NV_PUBLIC                            nvPublic;    /**< None */
    TPM2B_DIGEST                                 policy;    /**< Policy Digest */
    TPMT_HA                                   nv_policy;    /**< Policy stored in NV ram */
    uint8_t                               *policy_buffer;
} TPMS_POLICYAUTHORIZENV;

/** Policy type TPMS_POLICYACTION
 */
typedef struct {
    char                                        *action;    /**< The FAPI will return a string representation of the JSON sub */
} TPMS_POLICYACTION;

/** Policy type TPMS_PCRVALUE
 */
typedef struct {
    UINT32                                          pcr;    /**< None */
    TPM2_ALG_ID                                 hashAlg;    /**< None */
    TPMU_HA                                      digest;    /**< None */
} TPMS_PCRVALUE;

/** Policy type TPML_PCRVALUES
 */
typedef struct TPML_PCRVALUES {
    UINT32                                        count;    /**< None */
    TPMS_PCRVALUE                                pcrs[];    /**< Array of pcr values */
} TPML_PCRVALUES;

/** Policy type TPMS_POLICYPCR
 */
typedef struct {
    struct TPML_PCRVALUES                         *pcrs;    /**< None */
    TPMS_PCR_SELECT                         currentPCRs;    /**< The hashAlg are inferred from */
    TPML_PCR_SELECTION               currentPCRandBanks;    /**< Complete selection with banks  */
} TPMS_POLICYPCR;

/** Policy type TPML_POLICYAUTHORIZATIONS
 */
typedef struct TPML_POLICYAUTHORIZATIONS {
    UINT32                                        count;    /**< None */
    TPMS_POLICYAUTHORIZATION             authorizations[];    /**< Array of policy elements */
} TPML_POLICYAUTHORIZATIONS;

typedef struct TPML_POLICYELEMENTS TPML_POLICYELEMENTS;

/** Policy type TPMS_POLICYBRANCH
 */
typedef struct {
    char                                          *name;    /**< None */
    char                                   *description;    /**< None */
    TPML_DIGEST_VALUES                    policyDigests;
    struct TPML_POLICYELEMENTS                   *policy;    /**< Array of policy elements */
} TPMS_POLICYBRANCH;

/** Policy type TPML_POLICYBRANCHES
 */
typedef struct TPML_POLICYBRANCHES {
    UINT32                                        count;    /**< None */
    TPMS_POLICYBRANCH                    authorizations[];    /**< Array of policy elements */
} TPML_POLICYBRANCHES;

/** Policy type TPMS_POLICYOR
 */
typedef struct {
    struct TPML_POLICYBRANCHES                 *branches;    /**< An (infinite) array of policy elements. This does not contai */
} TPMS_POLICYOR;

/** [u'']
 */
typedef union {
    TPMS_POLICYOR                              PolicyOr;    /**< None */
    TPMS_POLICYSIGNED                      PolicySigned;    /**< None */
    TPMS_POLICYSECRET                      PolicySecret;    /**< None */
    TPMS_POLICYPCR                            PolicyPCR;    /**< None */
    TPMS_POLICYLOCALITY                  PolicyLocality;    /**< None */
    TPMS_POLICYNV                              PolicyNV;    /**< None */
    TPMS_POLICYCOUNTERTIMER          PolicyCounterTimer;    /**< None */
    TPMS_POLICYCOMMANDCODE            PolicyCommandCode;    /**< None */
    TPMS_POLICYPHYSICALPRESENCE    PolicyPhysicalPresence;  /**< None */
    TPMS_POLICYCPHASH                      PolicyCpHash;    /**< None */
    TPMS_POLICYNAMEHASH                  PolicyNameHash;    /**< None */
    TPMS_POLICYDUPLICATIONSELECT   PolicyDuplicationSelect; /**< None */
    TPMS_POLICYAUTHORIZE                PolicyAuthorize;    /**< None */
    TPMS_POLICYAUTHVALUE                PolicyAuthValue;    /**< None */
    TPMS_POLICYPASSWORD                  PolicyPassword;    /**< None */
    TPMS_POLICYNVWRITTEN                PolicyNvWritten;    /**< None */
    TPMS_POLICYTEMPLATE                  PolicyTemplate;    /**< None */
    TPMS_POLICYAUTHORIZENV            PolicyAuthorizeNv;    /**< None */
    TPMS_POLICYACTION                      PolicyAction;    /**< None */
} TPMU_POLICYELEMENT;

/** Policy type TPMT_POLICYELEMENT
 */
typedef struct {
    TPMI_POLICYTYPE                                type;    /**< None */
    TPML_DIGEST_VALUES                    policyDigests;    /**< None */
    TPMU_POLICYELEMENT                          element;    /**< The union does is not embedded inside a field. */
} TPMT_POLICYELEMENT;

/** Policy type TPML_POLICYELEMENTS
 */
struct TPML_POLICYELEMENTS {
    UINT32                                        count;    /**< None */
    TPMT_POLICYELEMENT                         elements[];    /**< Array of policy elements */
};

/** Policy type TPMS_POLICY
 */
typedef struct TPMS_POLICY {
    char                                   *description;    /**< O */
    TPML_DIGEST_VALUES                    policyDigests;    /**< O */
    struct TPML_POLICYAUTHORIZATIONS     *policyAuthorizations;    /**< O */
    struct TPML_POLICYELEMENTS                   *policy;    /**< X */
} TPMS_POLICY;

#endif /* IFAPI_POLICY_TYPES_H */