From: Jarkko Sakkinen <jarkko@kernel.org>
To: alban.kernel@gmail.com
Cc: Peter Huewe <peterhuewe@gmx.de>, Jason Gunthorpe <jgg@ziepe.ca>,
James Bottomley <James.Bottomley@hansenpartnership.com>,
Ard Biesheuvel <ardb@kernel.org>,
linux-integrity@vger.kernel.org, linux-kernel@vger.kernel.org
Subject: Re: [PATCH] tpm: Fix the value of TPM2_SE_TRIAL
Date: Sun, 8 Nov 2026 20:28:28 +0200 [thread overview]
Message-ID: <avC_TEMjF8qbCAd8@kernel.org> (raw)
In-Reply-To: <20261108-tpm-se-trial-v1-1-492218f9de41@gmail.com>
On Sun, Nov 08, 2026 at 06:05:39PM +0000, Alban Munari via B4 Relay wrote:
> From: Alban Munari <alban.kernel@gmail.com>
>
> The TPM 2.0 Library specification, Part 2: Structures, defines the
> session types (TPM_SE) as TPM_SE_HMAC = 0x00, TPM_SE_POLICY = 0x01 and
> TPM_SE_TRIAL = 0x03. TPM2_SE_TRIAL is defined as 0x02, which is not a
> session type: TPM2_StartAuthSession with it fails with TPM_RC_VALUE on
> the sessionType parameter, as swtpm 0.11.0 shows.
>
> No code in the kernel uses TPM2_SE_TRIAL, so nothing changes at run
> time. The TPM 2.0 selftests already define it as 0x03 in
> tools/testing/selftests/tpm2/tpm2.py.
>
> This change was found and written with an AI coding assistant (Claude
> Opus 5.5, Anthropic), while building trial sessions on an AMD fTPM with
> the value 0x03.
Please delete this paragraph. It is your responsibility to do the
fact checking. I.e. refer to a section in appropriate TCG spec that
defines this instead.
>
> Fixes: 699e3efd6c64 ("tpm: Add HMAC session start and end functions")
> Signed-off-by: Alban Munari <alban.kernel@gmail.com>
If no code uses it why fixes-tag?
> ---
> include/linux/tpm_command.h | 2 +-
> 1 file changed, 1 insertion(+), 1 deletion(-)
>
> diff --git a/include/linux/tpm_command.h b/include/linux/tpm_command.h
> index fc446a1282e2..076ee8ce816c 100644
> --- a/include/linux/tpm_command.h
> +++ b/include/linux/tpm_command.h
> @@ -171,7 +171,7 @@ struct tpm1_get_random_out {
> enum tpm2_session_types {
> TPM2_SE_HMAC = 0x00,
> TPM2_SE_POLICY = 0x01,
> - TPM2_SE_TRIAL = 0x02,
> + TPM2_SE_TRIAL = 0x03,
> };
>
> enum tpm2_timeouts {
>
> ---
> base-commit: 05441d697f7f9a927264f4058cbbc6a03dfcac9d
> change-id: 20261108-tpm-se-trial-580bef9b4f17
>
> Best regards,
> --
> Alban Munari <alban.kernel@gmail.com>
>
>
I think better action would be delete the enum and change the single
site to tpm_buf_append_u8(buf, 0x00 /* HMAC */);
Br, Jarkko
prev parent reply other threads:[~2026-11-08 18:28 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-11-08 18:05 Alban Munari via B4 Relay
2026-11-08 18:28 ` Jarkko Sakkinen [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=avC_TEMjF8qbCAd8@kernel.org \
--to=jarkko@kernel.org \
--cc=James.Bottomley@hansenpartnership.com \
--cc=alban.kernel@gmail.com \
--cc=ardb@kernel.org \
--cc=jgg@ziepe.ca \
--cc=linux-integrity@vger.kernel.org \
--cc=linux-kernel@vger.kernel.org \
--cc=peterhuewe@gmx.de \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox
all inboxes | Powered by JetHome®