5、基于TPM 2.0的连续防篡改日志系统解析

基于TPM 2.0的连续防篡改日志系统解析

1. 验证阶段流程

在验证阶段，涉及到记录器（logger）和验证器（verifier）两个重要角色，它们的交互流程如下：
- 记录器流程 ：

attest to resetCount.
nonce ←recv from verifier
fhmac ←hmac(nonce, key)
log ←read whole log
tct ←read ticket
send (fhm, log, tct) to verifier
recv. (st, tct, del) from verifier
if st = 1 then
    save tct to disk
    delete epochs till del

• 验证器流程 ：

ask for attestation of resetCount
powfail ←current resetCount ̸= old resetCount
nonce, r ←generate nonces
send nonce to logger
(fhm, log, encV (n|r′)) ←recv from logger
check r′ is nonce used in last ticket, halt if not
epochkey ←hashn(sharedsecret|“epoch′′)
logavai