LCOV - code coverage report
Current view: top level - library/spdm_common_lib - libspdm_com_context_data.c (source / functions) Coverage Total Hit
Test: coverage.info Lines: 44.6 % 1680 750
Test Date: 2026-07-26 08:53:33 Functions: 84.6 % 78 66

            Line data    Source code
       1              : /**
       2              :  *  Copyright Notice:
       3              :  *  Copyright 2021-2026 DMTF. All rights reserved.
       4              :  *  License: BSD 3-Clause License. For full text see link: https://github.com/DMTF/libspdm/blob/main/LICENSE.md
       5              :  **/
       6              : 
       7              : #include "internal/libspdm_common_lib.h"
       8              : #include "internal/libspdm_secured_message_lib.h"
       9              : #include "internal/libspdm_fips_lib.h"
      10              : 
      11              : #if LIBSPDM_ENABLE_CAPABILITY_CHUNK_CAP
      12              : /* first section */
      13        68263 : uint32_t libspdm_get_scratch_buffer_secure_message_offset(void) {
      14        68263 :     return 0;
      15              : }
      16              : 
      17       421309 : uint32_t libspdm_get_scratch_buffer_secure_message_capacity(libspdm_context_t *spdm_context) {
      18       421309 :     return spdm_context->local_context.capability.max_spdm_msg_size +
      19       842618 :            spdm_context->local_context.capability.transport_header_size +
      20       421309 :            spdm_context->local_context.capability.transport_tail_size;
      21              : }
      22              : 
      23              : /* second section */
      24           54 : uint32_t libspdm_get_scratch_buffer_large_message_offset(libspdm_context_t *spdm_context) {
      25           54 :     return libspdm_get_scratch_buffer_secure_message_capacity(spdm_context);
      26              : }
      27              : 
      28       353022 : uint32_t libspdm_get_scratch_buffer_large_message_capacity(libspdm_context_t *spdm_context) {
      29       353022 :     return spdm_context->local_context.capability.max_spdm_msg_size;
      30              : }
      31              : #endif
      32              : 
      33              : /* third section */
      34       202273 : uint32_t libspdm_get_scratch_buffer_sender_receiver_offset(libspdm_context_t *spdm_context) {
      35       202273 :     return 0 +
      36              : #if LIBSPDM_ENABLE_CAPABILITY_CHUNK_CAP
      37              :            libspdm_get_scratch_buffer_secure_message_capacity(spdm_context) +
      38       202273 :            libspdm_get_scratch_buffer_large_message_capacity(spdm_context) +
      39              : #endif
      40              :            0;
      41              : }
      42              : 
      43       284688 : uint32_t libspdm_get_scratch_buffer_sender_receiver_capacity(libspdm_context_t *spdm_context) {
      44       284688 :     return spdm_context->local_context.capability.max_spdm_msg_size +
      45       569376 :            spdm_context->local_context.capability.transport_header_size +
      46       284688 :            spdm_context->local_context.capability.transport_tail_size;
      47              : }
      48              : 
      49              : #if LIBSPDM_ENABLE_CAPABILITY_CHUNK_CAP
      50              : /* fourth section */
      51        13318 : uint32_t libspdm_get_scratch_buffer_large_sender_receiver_offset(libspdm_context_t *spdm_context) {
      52        13318 :     return libspdm_get_scratch_buffer_secure_message_capacity(spdm_context) +
      53        26636 :            libspdm_get_scratch_buffer_large_message_capacity(spdm_context) +
      54        13318 :            libspdm_get_scratch_buffer_sender_receiver_capacity(spdm_context);
      55              : }
      56              : 
      57       148055 : uint32_t libspdm_get_scratch_buffer_large_sender_receiver_capacity(libspdm_context_t *spdm_context)
      58              : {
      59       148055 :     return spdm_context->local_context.capability.max_spdm_msg_size +
      60       296110 :            spdm_context->local_context.capability.transport_header_size +
      61       148055 :            spdm_context->local_context.capability.transport_tail_size;
      62              : }
      63              : #endif
      64              : 
      65              : /* fifth section */
      66          122 : uint32_t libspdm_get_scratch_buffer_last_spdm_request_offset(libspdm_context_t *spdm_context) {
      67          122 :     return 0 +
      68              : #if LIBSPDM_ENABLE_CAPABILITY_CHUNK_CAP
      69          122 :            libspdm_get_scratch_buffer_secure_message_capacity(spdm_context) +
      70          122 :            libspdm_get_scratch_buffer_large_message_capacity(spdm_context) +
      71              : #endif
      72          122 :            libspdm_get_scratch_buffer_sender_receiver_capacity(spdm_context) +
      73              : #if LIBSPDM_ENABLE_CAPABILITY_CHUNK_CAP
      74          122 :            libspdm_get_scratch_buffer_large_sender_receiver_capacity(spdm_context) +
      75              : #endif
      76              :            0;
      77              : }
      78              : 
      79       276889 : uint32_t libspdm_get_scratch_buffer_last_spdm_request_capacity(libspdm_context_t *spdm_context) {
      80       276889 :     return spdm_context->local_context.capability.max_spdm_msg_size;
      81              : }
      82              : 
      83              : #if LIBSPDM_RESPOND_IF_READY_SUPPORT
      84              : /* sixth section */
      85          122 : uint32_t libspdm_get_scratch_buffer_cache_spdm_request_offset(libspdm_context_t *spdm_context) {
      86          122 :     return 0 +
      87              : #if LIBSPDM_ENABLE_CAPABILITY_CHUNK_CAP
      88          122 :            libspdm_get_scratch_buffer_secure_message_capacity(spdm_context) +
      89          122 :            libspdm_get_scratch_buffer_large_message_capacity(spdm_context) +
      90              : #endif
      91          122 :            libspdm_get_scratch_buffer_sender_receiver_capacity(spdm_context) +
      92              : #if LIBSPDM_ENABLE_CAPABILITY_CHUNK_CAP
      93          122 :            libspdm_get_scratch_buffer_large_sender_receiver_capacity(spdm_context) +
      94              : #endif
      95          122 :            libspdm_get_scratch_buffer_last_spdm_request_capacity(spdm_context) +
      96              :            0;
      97              : }
      98              : 
      99       274097 : uint32_t libspdm_get_scratch_buffer_cache_spdm_request_capacity(libspdm_context_t *spdm_context) {
     100       274097 :     return spdm_context->local_context.capability.max_spdm_msg_size;
     101              : }
     102              : #endif
     103              : 
     104              : /* combination */
     105       137157 : uint32_t libspdm_get_scratch_buffer_capacity(libspdm_context_t *spdm_context) {
     106       137157 :     return 0 +
     107              : #if LIBSPDM_ENABLE_CAPABILITY_CHUNK_CAP
     108       137157 :            libspdm_get_scratch_buffer_secure_message_capacity(spdm_context) +
     109       137157 :            libspdm_get_scratch_buffer_large_message_capacity(spdm_context) +
     110              : #endif
     111       137157 :            libspdm_get_scratch_buffer_sender_receiver_capacity(spdm_context) +
     112              : #if LIBSPDM_ENABLE_CAPABILITY_CHUNK_CAP
     113       137157 :            libspdm_get_scratch_buffer_large_sender_receiver_capacity(spdm_context) +
     114              : #endif
     115       137157 :            libspdm_get_scratch_buffer_last_spdm_request_capacity(spdm_context) +
     116              : #if LIBSPDM_RESPOND_IF_READY_SUPPORT
     117       137157 :            libspdm_get_scratch_buffer_cache_spdm_request_capacity(spdm_context) +
     118              : #endif
     119              :            0;
     120              : }
     121              : 
     122              : /**
     123              :  * Returns if an SPDM data_type requires session info.
     124              :  *
     125              :  * @param data_type  SPDM data type.
     126              :  *
     127              :  * @retval true  session info is required.
     128              :  * @retval false session info is not required.
     129              :  **/
     130           42 : static bool need_session_info_for_data(libspdm_data_type_t data_type)
     131              : {
     132           42 :     switch (data_type) {
     133            0 :     case LIBSPDM_DATA_SESSION_SECURED_MESSAGE_VERSION:
     134              :     case LIBSPDM_DATA_SESSION_USE_PSK:
     135              :     case LIBSPDM_DATA_SESSION_MUT_AUTH_REQUESTED:
     136              :     case LIBSPDM_DATA_SESSION_END_SESSION_ATTRIBUTES:
     137              :     case LIBSPDM_DATA_SESSION_POLICY:
     138              :     case LIBSPDM_DATA_SESSION_SEQUENCE_NUMBER_RSP_DIR:
     139              :     case LIBSPDM_DATA_SESSION_SEQUENCE_NUMBER_REQ_DIR:
     140              :     case LIBSPDM_DATA_SESSION_SEQUENCE_NUMBER_ENDIAN:
     141            0 :         return true;
     142           42 :     default:
     143           42 :         return false;
     144              :     }
     145              : }
     146              : 
     147           30 : libspdm_return_t libspdm_set_data(void *spdm_context, libspdm_data_type_t data_type,
     148              :                                   const libspdm_data_parameter_t *parameter, const void *data,
     149              :                                   size_t data_size)
     150              : {
     151              :     libspdm_context_t *context;
     152              :     uint32_t session_id;
     153              :     uint32_t data32;
     154              :     libspdm_session_info_t *session_info;
     155              :     uint8_t slot_id;
     156              :     uint8_t mut_auth_requested;
     157              :     uint8_t root_cert_index;
     158              :     uint16_t data16;
     159              : #if !(LIBSPDM_RECORD_TRANSCRIPT_DATA_SUPPORT) && LIBSPDM_CERT_PARSE_SUPPORT
     160              :     bool status;
     161              :     const uint8_t *cert_buffer;
     162              :     size_t cert_buffer_size;
     163              : #endif
     164              : 
     165           30 :     if (spdm_context == NULL || data_type >= LIBSPDM_DATA_MAX) {
     166            0 :         return LIBSPDM_STATUS_INVALID_PARAMETER;
     167              :     }
     168              : 
     169           30 :     context = spdm_context;
     170              : 
     171           30 :     if (need_session_info_for_data(data_type)) {
     172            0 :         if (parameter->location != LIBSPDM_DATA_LOCATION_SESSION) {
     173            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     174              :         }
     175            0 :         session_id = libspdm_read_uint32(parameter->additional_data);
     176            0 :         session_info = libspdm_get_session_info_via_session_id(context, session_id);
     177            0 :         if (session_info == NULL) {
     178            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     179              :         }
     180              :     } else {
     181           30 :         session_info = NULL;
     182              :     }
     183              : 
     184           30 :     switch (data_type) {
     185            0 :     case LIBSPDM_DATA_SPDM_VERSION:
     186            0 :         LIBSPDM_ASSERT (data_size <= sizeof(spdm_version_number_t) * SPDM_MAX_VERSION_COUNT);
     187            0 :         if (parameter->location == LIBSPDM_DATA_LOCATION_CONNECTION) {
     188              :             /* Only have one connected version */
     189            0 :             LIBSPDM_ASSERT (data_size == sizeof(spdm_version_number_t));
     190            0 :             libspdm_copy_mem(&(context->connection_info.version),
     191              :                              sizeof(context->connection_info.version),
     192              :                              data,
     193              :                              sizeof(spdm_version_number_t));
     194            0 :         } else if (parameter->location == LIBSPDM_DATA_LOCATION_LOCAL) {
     195            0 :             context->local_context.version.spdm_version_count =
     196            0 :                 (uint8_t)(data_size / sizeof(spdm_version_number_t));
     197            0 :             libspdm_copy_mem(context->local_context.version.spdm_version,
     198              :                              sizeof(context->local_context.version.spdm_version),
     199              :                              data,
     200            0 :                              context->local_context.version.spdm_version_count *
     201              :                              sizeof(spdm_version_number_t));
     202              :         } else {
     203            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     204              :         }
     205            0 :         break;
     206            0 :     case LIBSPDM_DATA_SECURED_MESSAGE_VERSION:
     207            0 :         LIBSPDM_ASSERT (data_size <=
     208              :                         sizeof(spdm_version_number_t) * SECURED_SPDM_MAX_VERSION_COUNT);
     209            0 :         if (parameter->location == LIBSPDM_DATA_LOCATION_LOCAL) {
     210            0 :             context->local_context.secured_message_version.secured_message_version_count =
     211            0 :                 (uint8_t)(data_size / sizeof(spdm_version_number_t));
     212            0 :             libspdm_copy_mem(context->local_context.secured_message_version.secured_message_version,
     213              :                              sizeof(context->local_context.secured_message_version.secured_message_version),
     214              :                              data,
     215            0 :                              context->local_context.secured_message_version.
     216              :                              secured_message_version_count * sizeof(spdm_version_number_t));
     217              :         } else {
     218            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     219              :         }
     220            0 :         break;
     221            0 :     case LIBSPDM_DATA_CAPABILITY_FLAGS:
     222            0 :         if (data_size != sizeof(uint32_t)) {
     223            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     224              :         }
     225              : 
     226            0 :         data32 = libspdm_read_uint32((const uint8_t *)data);
     227              : 
     228            0 :         if (parameter->location == LIBSPDM_DATA_LOCATION_LOCAL) {
     229              :             #if !(LIBSPDM_ENABLE_CAPABILITY_CERT_CAP)
     230              :             LIBSPDM_ASSERT((data32 & SPDM_GET_CAPABILITIES_RESPONSE_FLAGS_CERT_CAP) == 0);
     231              :             #endif /* !LIBSPDM_ENABLE_CAPABILITY_CERT_CAP */
     232              : 
     233              :             #if !(LIBSPDM_ENABLE_CAPABILITY_CHAL_CAP)
     234              :             LIBSPDM_ASSERT((data32 & SPDM_GET_CAPABILITIES_RESPONSE_FLAGS_CHAL_CAP) == 0);
     235              :             #endif /* !LIBSPDM_ENABLE_CAPABILITY_CHAL_CAP */
     236              : 
     237              :             #if !(LIBSPDM_ENABLE_CAPABILITY_MEAS_CAP)
     238              :             LIBSPDM_ASSERT((data32 & SPDM_GET_CAPABILITIES_RESPONSE_FLAGS_MEAS_CAP) == 0);
     239              :             #endif /* !LIBSPDM_ENABLE_CAPABILITY_MEAS_CAP */
     240              : 
     241              :             #if !(LIBSPDM_ENABLE_CAPABILITY_MEL_CAP)
     242              :             LIBSPDM_ASSERT((data32 & SPDM_GET_CAPABILITIES_RESPONSE_FLAGS_MEL_CAP) == 0);
     243              :             #endif /* !LIBSPDM_ENABLE_CAPABILITY_MEL_CAP */
     244              : 
     245              :             #if !(LIBSPDM_ENABLE_CAPABILITY_KEY_EX_CAP)
     246              :             LIBSPDM_ASSERT((data32 & SPDM_GET_CAPABILITIES_RESPONSE_FLAGS_KEY_EX_CAP) == 0);
     247              :             #endif /* !LIBSPDM_ENABLE_CAPABILITY_KEY_EX_CAP */
     248              : 
     249              :             #if !(LIBSPDM_ENABLE_CAPABILITY_PSK_CAP)
     250              :             LIBSPDM_ASSERT((data32 & SPDM_GET_CAPABILITIES_RESPONSE_FLAGS_PSK_CAP) == 0);
     251              :             #endif /* !LIBSPDM_ENABLE_CAPABILITY_PSK_CAP */
     252              : 
     253              :             #if !(LIBSPDM_ENABLE_CAPABILITY_ENDPOINT_INFO_CAP)
     254              :             LIBSPDM_ASSERT((data32 & SPDM_GET_CAPABILITIES_RESPONSE_FLAGS_EP_INFO_CAP) == 0);
     255              :             #endif /* !LIBSPDM_ENABLE_CAPABILITY_ENDPOINT_INFO_CAP */
     256              : 
     257            0 :             context->local_context.capability.flags = data32;
     258            0 :         } else if (parameter->location == LIBSPDM_DATA_LOCATION_CONNECTION) {
     259            0 :             context->connection_info.capability.flags = data32;
     260              :         } else {
     261            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     262              :         }
     263            0 :         break;
     264            0 :     case LIBSPDM_DATA_CAPABILITY_EXT_FLAGS:
     265            0 :         if (data_size != sizeof(uint16_t)) {
     266            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     267              :         }
     268              : 
     269            0 :         data16 = libspdm_read_uint16((const uint8_t *)data);
     270              : 
     271            0 :         if (parameter->location == LIBSPDM_DATA_LOCATION_LOCAL) {
     272            0 :             context->local_context.capability.ext_flags = data16;
     273            0 :         } else if (parameter->location == LIBSPDM_DATA_LOCATION_CONNECTION) {
     274            0 :             context->connection_info.capability.ext_flags = data16;
     275              :         } else {
     276            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     277              :         }
     278            0 :         break;
     279            0 :     case LIBSPDM_DATA_CAPABILITY_CT_EXPONENT:
     280            0 :         if (data_size != sizeof(uint8_t)) {
     281            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     282              :         }
     283            0 :         if (parameter->location == LIBSPDM_DATA_LOCATION_CONNECTION) {
     284            0 :             context->connection_info.capability.ct_exponent = *(const uint8_t *)data;
     285            0 :         } else if (parameter->location == LIBSPDM_DATA_LOCATION_LOCAL) {
     286            0 :             context->local_context.capability.ct_exponent = *(const uint8_t *)data;
     287              :         } else {
     288            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     289              :         }
     290            0 :         break;
     291            0 :     case LIBSPDM_DATA_CAPABILITY_RTT_US:
     292            0 :         if (data_size != sizeof(uint64_t)) {
     293            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     294              :         }
     295            0 :         if (parameter->location != LIBSPDM_DATA_LOCATION_LOCAL) {
     296            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     297              :         }
     298            0 :         context->local_context.capability.rtt = libspdm_read_uint64((const uint8_t *)data);
     299            0 :         break;
     300            0 :     case LIBSPDM_DATA_CAPABILITY_MAX_SPDM_MSG_SIZE:
     301            0 :         if (data_size != sizeof(uint32_t)) {
     302            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     303              :         }
     304              :         /* The local max_spdm_msg_size is set by libspdm_register_transport_layer_func.
     305              :          * Only the connection's max_spdm_msg_size is settable here. */
     306            0 :         if (parameter->location != LIBSPDM_DATA_LOCATION_CONNECTION) {
     307            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     308              :         }
     309            0 :         data32 = libspdm_read_uint32((const uint8_t *)data);
     310            0 :         LIBSPDM_ASSERT (data32 >= SPDM_MIN_DATA_TRANSFER_SIZE_VERSION_12);
     311            0 :         context->connection_info.capability.max_spdm_msg_size = data32;
     312            0 :         break;
     313            0 :     case LIBSPDM_DATA_MEASUREMENT_SPEC:
     314            0 :         if (data_size != sizeof(uint8_t)) {
     315            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     316              :         }
     317            0 :         if (parameter->location == LIBSPDM_DATA_LOCATION_CONNECTION) {
     318            0 :             context->connection_info.algorithm.measurement_spec = *(const uint8_t *)data;
     319            0 :         } else if (parameter->location == LIBSPDM_DATA_LOCATION_LOCAL) {
     320            0 :             context->local_context.algorithm.measurement_spec = *(const uint8_t *)data;
     321              :         } else {
     322            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     323              :         }
     324            0 :         break;
     325            0 :     case LIBSPDM_DATA_MEASUREMENT_HASH_ALGO:
     326            0 :         if (data_size != sizeof(uint32_t)) {
     327            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     328              :         }
     329            0 :         data32 = libspdm_read_uint32((const uint8_t *)data);
     330            0 :         if (parameter->location == LIBSPDM_DATA_LOCATION_CONNECTION) {
     331            0 :             context->connection_info.algorithm.measurement_hash_algo = data32;
     332            0 :         } else if (parameter->location == LIBSPDM_DATA_LOCATION_LOCAL) {
     333            0 :             context->local_context.algorithm.measurement_hash_algo = data32;
     334              :         } else {
     335            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     336              :         }
     337            0 :         break;
     338            0 :     case LIBSPDM_DATA_BASE_ASYM_ALGO:
     339            0 :         if (data_size != sizeof(uint32_t)) {
     340            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     341              :         }
     342            0 :         data32 = libspdm_read_uint32((const uint8_t *)data);
     343            0 :         if (parameter->location == LIBSPDM_DATA_LOCATION_CONNECTION) {
     344            0 :             context->connection_info.algorithm.base_asym_algo = data32;
     345            0 :         } else if (parameter->location == LIBSPDM_DATA_LOCATION_LOCAL) {
     346            0 :             context->local_context.algorithm.base_asym_algo = data32;
     347              :         } else {
     348            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     349              :         }
     350            0 :         break;
     351            0 :     case LIBSPDM_DATA_BASE_HASH_ALGO:
     352            0 :         if (data_size != sizeof(uint32_t)) {
     353            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     354              :         }
     355            0 :         data32 = libspdm_read_uint32((const uint8_t *)data);
     356            0 :         if (parameter->location == LIBSPDM_DATA_LOCATION_CONNECTION) {
     357            0 :             context->connection_info.algorithm.base_hash_algo = data32;
     358            0 :         } else if (parameter->location == LIBSPDM_DATA_LOCATION_LOCAL) {
     359            0 :             context->local_context.algorithm.base_hash_algo = data32;
     360              :         } else {
     361            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     362              :         }
     363            0 :         break;
     364            0 :     case LIBSPDM_DATA_DHE_NAME_GROUP:
     365            0 :         if (data_size != sizeof(uint16_t)) {
     366            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     367              :         }
     368            0 :         data16 = libspdm_read_uint16((const uint8_t *)data);
     369            0 :         if (parameter->location == LIBSPDM_DATA_LOCATION_CONNECTION) {
     370            0 :             context->connection_info.algorithm.dhe_named_group = data16;
     371            0 :         } else if (parameter->location == LIBSPDM_DATA_LOCATION_LOCAL) {
     372            0 :             context->local_context.algorithm.dhe_named_group = data16;
     373              :         } else {
     374            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     375              :         }
     376            0 :         break;
     377            0 :     case LIBSPDM_DATA_AEAD_CIPHER_SUITE:
     378            0 :         if (data_size != sizeof(uint16_t)) {
     379            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     380              :         }
     381            0 :         data16 = libspdm_read_uint16((const uint8_t *)data);
     382            0 :         if (parameter->location == LIBSPDM_DATA_LOCATION_CONNECTION) {
     383            0 :             context->connection_info.algorithm.aead_cipher_suite = data16;
     384            0 :         } else if (parameter->location == LIBSPDM_DATA_LOCATION_LOCAL) {
     385            0 :             context->local_context.algorithm.aead_cipher_suite = data16;
     386              :         } else {
     387            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     388              :         }
     389            0 :         break;
     390            0 :     case LIBSPDM_DATA_REQ_BASE_ASYM_ALG:
     391            0 :         if (data_size != sizeof(uint16_t)) {
     392            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     393              :         }
     394            0 :         data16 = libspdm_read_uint16((const uint8_t *)data);
     395            0 :         if (parameter->location == LIBSPDM_DATA_LOCATION_CONNECTION) {
     396            0 :             context->connection_info.algorithm.req_base_asym_alg = data16;
     397            0 :         } else if (parameter->location == LIBSPDM_DATA_LOCATION_LOCAL) {
     398            0 :             context->local_context.algorithm.req_base_asym_alg = data16;
     399              :         } else {
     400            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     401              :         }
     402            0 :         break;
     403            0 :     case LIBSPDM_DATA_KEY_SCHEDULE:
     404            0 :         if (data_size != sizeof(uint16_t)) {
     405            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     406              :         }
     407            0 :         data16 = libspdm_read_uint16((const uint8_t *)data);
     408            0 :         if (parameter->location == LIBSPDM_DATA_LOCATION_CONNECTION) {
     409            0 :             context->connection_info.algorithm.key_schedule = data16;
     410            0 :         } else if (parameter->location == LIBSPDM_DATA_LOCATION_LOCAL) {
     411            0 :             context->local_context.algorithm.key_schedule = data16;
     412              :         } else {
     413            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     414              :         }
     415            0 :         break;
     416            0 :     case LIBSPDM_DATA_OTHER_PARAMS_SUPPORT:
     417            0 :         if (data_size != sizeof(uint8_t)) {
     418            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     419              :         }
     420            0 :         if (parameter->location == LIBSPDM_DATA_LOCATION_CONNECTION) {
     421            0 :             context->connection_info.algorithm.other_params_support = *(const uint8_t *)data;
     422            0 :         } else if (parameter->location == LIBSPDM_DATA_LOCATION_LOCAL) {
     423            0 :             context->local_context.algorithm.other_params_support = *(const uint8_t *)data;
     424              :         } else {
     425            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     426              :         }
     427            0 :         break;
     428            0 :     case LIBSPDM_DATA_MEL_SPEC:
     429            0 :         if (data_size != sizeof(uint8_t)) {
     430            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     431              :         }
     432            0 :         if (parameter->location == LIBSPDM_DATA_LOCATION_CONNECTION) {
     433            0 :             context->connection_info.algorithm.mel_spec = *(const uint8_t *)data;
     434            0 :         } else if (parameter->location == LIBSPDM_DATA_LOCATION_LOCAL) {
     435            0 :             context->local_context.algorithm.mel_spec = *(const uint8_t *)data;
     436              :         } else {
     437            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     438              :         }
     439            0 :         break;
     440            0 :     case LIBSPDM_DATA_PQC_ASYM_ALGO:
     441            0 :         if (data_size != sizeof(uint32_t)) {
     442            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     443              :         }
     444            0 :         data32 = libspdm_read_uint32((const uint8_t *)data);
     445            0 :         if (parameter->location == LIBSPDM_DATA_LOCATION_CONNECTION) {
     446            0 :             context->connection_info.algorithm.pqc_asym_algo = data32;
     447            0 :         } else if (parameter->location == LIBSPDM_DATA_LOCATION_LOCAL) {
     448            0 :             context->local_context.algorithm.pqc_asym_algo = data32;
     449              :         } else {
     450            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     451              :         }
     452            0 :         break;
     453            0 :     case LIBSPDM_DATA_REQ_PQC_ASYM_ALG:
     454            0 :         if (data_size != sizeof(uint32_t)) {
     455            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     456              :         }
     457            0 :         data32 = libspdm_read_uint32((const uint8_t *)data);
     458            0 :         if (parameter->location == LIBSPDM_DATA_LOCATION_CONNECTION) {
     459            0 :             context->connection_info.algorithm.req_pqc_asym_alg = data32;
     460            0 :         } else if (parameter->location == LIBSPDM_DATA_LOCATION_LOCAL) {
     461            0 :             context->local_context.algorithm.req_pqc_asym_alg = data32;
     462              :         } else {
     463            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     464              :         }
     465            0 :         break;
     466            0 :     case LIBSPDM_DATA_KEM_ALG:
     467            0 :         if (data_size != sizeof(uint32_t)) {
     468            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     469              :         }
     470            0 :         data32 = libspdm_read_uint32((const uint8_t *)data);
     471            0 :         if (parameter->location == LIBSPDM_DATA_LOCATION_CONNECTION) {
     472            0 :             context->connection_info.algorithm.kem_alg = data32;
     473            0 :         } else if (parameter->location == LIBSPDM_DATA_LOCATION_LOCAL) {
     474            0 :             context->local_context.algorithm.kem_alg = data32;
     475              :         } else {
     476            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     477              :         }
     478            0 :         break;
     479            0 :     case LIBSPDM_DATA_ALGO_PRIORITY_PQC_FIRST:
     480            0 :         if (data_size != sizeof(bool)) {
     481            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     482              :         }
     483            0 :         if (parameter->location == LIBSPDM_DATA_LOCATION_LOCAL) {
     484            0 :             context->local_context.algorithm.pqc_first = *(const bool *)data;
     485              :         } else {
     486            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     487              :         }
     488            0 :         break;
     489            0 :     case LIBSPDM_DATA_CONNECTION_STATE:
     490            0 :         if (data_size != sizeof(libspdm_connection_state_t)) {
     491            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     492              :         }
     493            0 :         if (parameter->location != LIBSPDM_DATA_LOCATION_CONNECTION) {
     494            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     495              :         }
     496            0 :         context->connection_info.connection_state = libspdm_read_uint32((const uint8_t *)data);
     497            0 :         break;
     498            0 :     case LIBSPDM_DATA_RESPONSE_STATE:
     499            0 :         if (data_size != sizeof(libspdm_response_state_t)) {
     500            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     501              :         }
     502            0 :         context->response_state = libspdm_read_uint32((const uint8_t *)data);
     503            0 :         break;
     504            2 :     case LIBSPDM_DATA_PEER_PUBLIC_ROOT_CERT:
     505            2 :         if (parameter->location != LIBSPDM_DATA_LOCATION_LOCAL) {
     506            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     507              :         }
     508            2 :         root_cert_index = 0;
     509           11 :         while (context->local_context.peer_root_cert_provision[root_cert_index] != NULL) {
     510           10 :             root_cert_index++;
     511           10 :             if (root_cert_index >= LIBSPDM_MAX_ROOT_CERT_SUPPORT) {
     512            1 :                 return LIBSPDM_STATUS_BUFFER_FULL;
     513              :             }
     514              :         }
     515            1 :         context->local_context.peer_root_cert_provision_size[root_cert_index] = data_size;
     516            1 :         context->local_context.peer_root_cert_provision[root_cert_index] = data;
     517            1 :         break;
     518           11 :     case LIBSPDM_DATA_LOCAL_PUBLIC_CERT_CHAIN:
     519           11 :         if (parameter->location != LIBSPDM_DATA_LOCATION_LOCAL) {
     520            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     521              :         }
     522           11 :         slot_id = parameter->additional_data[0];
     523           11 :         if (slot_id >= SPDM_MAX_SLOT_COUNT) {
     524            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     525              :         }
     526           11 :         context->local_context.local_cert_chain_provision_size[slot_id] = data_size;
     527           11 :         context->local_context.local_cert_chain_provision[slot_id] = data;
     528           11 :         break;
     529            0 :     case LIBSPDM_DATA_LOCAL_SUPPORTED_SLOT_MASK:
     530            0 :         if (parameter->location != LIBSPDM_DATA_LOCATION_LOCAL) {
     531            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     532              :         }
     533            0 :         if (data_size != sizeof(uint8_t)) {
     534            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     535              :         }
     536            0 :         context->local_context.local_supported_slot_mask = *(const uint8_t *)data;
     537            0 :         break;
     538            0 :     case LIBSPDM_DATA_LOCAL_KEY_PAIR_ID:
     539            0 :         if (parameter->location != LIBSPDM_DATA_LOCATION_LOCAL) {
     540            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     541              :         }
     542            0 :         slot_id = parameter->additional_data[0];
     543            0 :         if (slot_id >= SPDM_MAX_SLOT_COUNT) {
     544            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     545              :         }
     546            0 :         if (data_size != sizeof(spdm_key_pair_id_t)) {
     547            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     548              :         }
     549            0 :         context->local_context.local_key_pair_id[slot_id] = *(const spdm_key_pair_id_t *)data;
     550            0 :         break;
     551            0 :     case LIBSPDM_DATA_LOCAL_CERT_INFO:
     552            0 :         if (parameter->location != LIBSPDM_DATA_LOCATION_LOCAL) {
     553            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     554              :         }
     555            0 :         slot_id = parameter->additional_data[0];
     556            0 :         if (slot_id >= SPDM_MAX_SLOT_COUNT) {
     557            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     558              :         }
     559            0 :         if (data_size != sizeof(spdm_certificate_info_t)) {
     560            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     561              :         }
     562            0 :         context->local_context.local_cert_info[slot_id] = *(const spdm_certificate_info_t *)data;
     563            0 :         break;
     564            0 :     case LIBSPDM_DATA_LOCAL_KEY_USAGE_BIT_MASK:
     565            0 :         if (parameter->location != LIBSPDM_DATA_LOCATION_LOCAL) {
     566            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     567              :         }
     568            0 :         slot_id = parameter->additional_data[0];
     569            0 :         if (slot_id >= SPDM_MAX_SLOT_COUNT) {
     570            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     571              :         }
     572            0 :         if (data_size != sizeof(spdm_key_usage_bit_mask_t)) {
     573            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     574              :         }
     575            0 :         context->local_context.local_key_usage_bit_mask[slot_id] =
     576            0 :             libspdm_read_uint16((const uint8_t *)data);
     577            0 :         break;
     578            3 :     case LIBSPDM_DATA_PEER_USED_CERT_CHAIN_BUFFER:
     579            3 :         if (parameter->location != LIBSPDM_DATA_LOCATION_CONNECTION) {
     580            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     581              :         }
     582            3 :         slot_id = parameter->additional_data[0];
     583            3 :         if (slot_id >= SPDM_MAX_SLOT_COUNT) {
     584            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     585              :         }
     586              : #if LIBSPDM_RECORD_TRANSCRIPT_DATA_SUPPORT
     587              :         if (data_size > LIBSPDM_MAX_CERT_CHAIN_SIZE) {
     588              :             return LIBSPDM_STATUS_BUFFER_TOO_SMALL;
     589              :         }
     590              :         context->connection_info.peer_used_cert_chain[slot_id].buffer_size = data_size;
     591              :         libspdm_copy_mem(context->connection_info.peer_used_cert_chain[slot_id].buffer,
     592              :                          sizeof(context->connection_info.peer_used_cert_chain[slot_id].buffer),
     593              :                          data, data_size);
     594              : #else
     595              : #if LIBSPDM_CERT_PARSE_SUPPORT
     596            3 :         status = libspdm_hash_all(
     597              :             context->connection_info.algorithm.base_hash_algo,
     598              :             data, data_size,
     599            3 :             context->connection_info.peer_used_cert_chain[slot_id].buffer_hash);
     600            3 :         if (!status) {
     601            0 :             return LIBSPDM_STATUS_CRYPTO_ERROR;
     602              :         }
     603              : 
     604            6 :         context->connection_info.peer_used_cert_chain[slot_id].buffer_hash_size =
     605            3 :             libspdm_get_hash_size(context->connection_info.algorithm.base_hash_algo);
     606              : 
     607              :         /*process the SPDM cert header and hash*/
     608            3 :         data = (const uint8_t *)data + sizeof(spdm_cert_chain_t) +
     609            3 :                libspdm_get_hash_size(context->connection_info.algorithm.base_hash_algo);
     610            3 :         data_size = data_size -
     611              :                     (sizeof(spdm_cert_chain_t) +
     612            3 :                      libspdm_get_hash_size(context->connection_info.algorithm.base_hash_algo));
     613              : 
     614              :         /* Get leaf cert from cert chain */
     615            3 :         status = libspdm_x509_get_cert_from_cert_chain(data, data_size, -1,
     616              :                                                        &cert_buffer, &cert_buffer_size);
     617            3 :         if (!status) {
     618            0 :             return LIBSPDM_STATUS_CRYPTO_ERROR;
     619              :         }
     620              : 
     621            3 :         status = false;
     622              : #if (LIBSPDM_RSA_SSA_SUPPORT) || (LIBSPDM_RSA_PSS_SUPPORT)
     623            3 :         if (!status) {
     624            3 :             status = libspdm_rsa_get_public_key_from_x509(
     625              :                 cert_buffer, cert_buffer_size,
     626            3 :                 &context->connection_info.peer_used_cert_chain[slot_id].leaf_cert_public_key);
     627              :         }
     628              : #endif
     629              : #if LIBSPDM_ECDSA_SUPPORT
     630            3 :         if (!status) {
     631            3 :             status = libspdm_ec_get_public_key_from_x509(
     632              :                 cert_buffer, cert_buffer_size,
     633            3 :                 &context->connection_info.peer_used_cert_chain[slot_id].leaf_cert_public_key);
     634              :         }
     635              : #endif
     636              : #if (LIBSPDM_EDDSA_ED25519_SUPPORT) || (LIBSPDM_EDDSA_ED448_SUPPORT)
     637              :         if (!status) {
     638              :             status = libspdm_ecd_get_public_key_from_x509(
     639              :                 cert_buffer, cert_buffer_size,
     640              :                 &context->connection_info.peer_used_cert_chain[slot_id].leaf_cert_public_key);
     641              :         }
     642              : #endif
     643              : #if LIBSPDM_SM2_DSA_SUPPORT
     644              :         if (!status) {
     645              :             status = libspdm_sm2_get_public_key_from_x509(
     646              :                 cert_buffer, cert_buffer_size,
     647              :                 &context->connection_info.peer_used_cert_chain[slot_id].leaf_cert_public_key);
     648              :         }
     649              : #endif
     650            3 :         if (!status) {
     651            0 :             return LIBSPDM_STATUS_INVALID_CERT;
     652              :         }
     653              : #else
     654              :         LIBSPDM_ASSERT (false);
     655              : #endif /* LIBSPDM_CERT_PARSE_SUPPORT */
     656              : #endif /* LIBSPDM_RECORD_TRANSCRIPT_DATA_SUPPORT */
     657            3 :         break;
     658            0 :     case LIBSPDM_DATA_PEER_PUBLIC_KEY:
     659            0 :         if (parameter->location != LIBSPDM_DATA_LOCATION_LOCAL) {
     660            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     661              :         }
     662            0 :         context->local_context.peer_public_key_provision_size = data_size;
     663            0 :         context->local_context.peer_public_key_provision = data;
     664            0 :         break;
     665            0 :     case LIBSPDM_DATA_LOCAL_PUBLIC_KEY:
     666            0 :         if (parameter->location != LIBSPDM_DATA_LOCATION_LOCAL) {
     667            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     668              :         }
     669            0 :         context->local_context.local_public_key_provision_size = data_size;
     670            0 :         context->local_context.local_public_key_provision = data;
     671            0 :         break;
     672            0 :     case LIBSPDM_DATA_MUT_AUTH_REQUESTED:
     673            0 :         if (data_size != sizeof(uint8_t)) {
     674            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     675              :         }
     676            0 :         if (parameter->location != LIBSPDM_DATA_LOCATION_LOCAL) {
     677            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     678              :         }
     679            0 :         mut_auth_requested = *(const uint8_t *)data;
     680            0 :         if (((mut_auth_requested != 0) &&
     681              :              (mut_auth_requested !=
     682            0 :               SPDM_KEY_EXCHANGE_RESPONSE_MUT_AUTH_REQUESTED) &&
     683              :              (mut_auth_requested !=
     684            0 :               SPDM_KEY_EXCHANGE_RESPONSE_MUT_AUTH_REQUESTED_WITH_ENCAP_REQUEST) &&
     685              :              (mut_auth_requested !=
     686              :               SPDM_KEY_EXCHANGE_RESPONSE_MUT_AUTH_REQUESTED_WITH_GET_DIGESTS))) {
     687            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     688              :         }
     689            0 :         context->encap_context.request_id = 0;
     690            0 :         slot_id = parameter->additional_data[0];
     691            0 :         if ((slot_id >= SPDM_MAX_SLOT_COUNT) && (slot_id != 0xFF)) {
     692            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     693              :         }
     694            0 :         context->encap_context.req_slot_id = slot_id;
     695            0 :         break;
     696            0 :     case LIBSPDM_DATA_HEARTBEAT_PERIOD:
     697            0 :         if (data_size != sizeof(uint8_t)) {
     698            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     699              :         }
     700            0 :         if (parameter->location != LIBSPDM_DATA_LOCATION_LOCAL) {
     701            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     702              :         }
     703            0 :         context->local_context.heartbeat_period = *(const uint8_t *)data;
     704            0 :         break;
     705            4 :     case LIBSPDM_DATA_APP_CONTEXT_DATA:
     706            4 :         if (data_size != sizeof(void *) || *(void *const *)data == NULL) {
     707            2 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     708              :         }
     709            2 :         context->app_context_data_ptr = *(void *const *)data;
     710            2 :         break;
     711            0 :     case LIBSPDM_DATA_HANDLE_ERROR_RETURN_POLICY:
     712            0 :         if (data_size != sizeof(uint8_t)) {
     713            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     714              :         }
     715            0 :         context->handle_error_return_policy = *(const uint8_t *)data;
     716            0 :         break;
     717            0 :     case LIBSPDM_DATA_VCA_CACHE:
     718            0 :         if (data_size > sizeof(context->transcript.message_a.buffer)) {
     719            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     720              :         }
     721            0 :         context->transcript.message_a.buffer_size = data_size;
     722            0 :         libspdm_copy_mem(context->transcript.message_a.buffer,
     723              :                          sizeof(context->transcript.message_a.buffer),
     724              :                          data, data_size);
     725            0 :         break;
     726            0 :     case LIBSPDM_DATA_IS_REQUESTER:
     727            0 :         if (data_size != sizeof(bool)) {
     728            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     729              :         }
     730            0 :         if (parameter->location != LIBSPDM_DATA_LOCATION_LOCAL) {
     731            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     732              :         }
     733            0 :         context->local_context.is_requester = *(const bool *)data;
     734            0 :         break;
     735            0 :     case LIBSPDM_DATA_REQUEST_RETRY_TIMES:
     736            0 :         if (data_size != sizeof(uint8_t)) {
     737            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     738              :         }
     739            0 :         context->retry_times = *(const uint8_t *)data;
     740            0 :         break;
     741            0 :     case LIBSPDM_DATA_REQUEST_RETRY_DELAY_TIME:
     742            0 :         if (data_size != sizeof(uint64_t)) {
     743            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     744              :         }
     745            0 :         context->retry_delay_time = *(const uint64_t *)data;
     746            0 :         break;
     747            5 :     case LIBSPDM_DATA_MAX_DHE_SESSION_COUNT:
     748            5 :         if (data_size != sizeof(uint32_t)) {
     749            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     750              :         }
     751            5 :         if (*(const uint32_t *)data > LIBSPDM_MAX_SESSION_COUNT - context->max_psk_session_count) {
     752            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     753              :         }
     754            5 :         context->max_dhe_session_count = *(const uint32_t *)data;
     755            5 :         break;
     756            5 :     case LIBSPDM_DATA_MAX_PSK_SESSION_COUNT:
     757            5 :         if (data_size != sizeof(uint32_t)) {
     758            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     759              :         }
     760            5 :         if (*(const uint32_t *)data > LIBSPDM_MAX_SESSION_COUNT - context->max_dhe_session_count) {
     761            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     762              :         }
     763            5 :         context->max_psk_session_count = *(const uint32_t *)data;
     764            5 :         break;
     765            0 :     case LIBSPDM_DATA_MAX_SPDM_SESSION_SEQUENCE_NUMBER:
     766            0 :         if (data_size != sizeof(uint64_t)) {
     767            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     768              :         }
     769            0 :         context->max_spdm_session_sequence_number = *(const uint64_t *)data;
     770            0 :         if (context->max_spdm_session_sequence_number == 0) {
     771            0 :             context->max_spdm_session_sequence_number = LIBSPDM_MAX_SPDM_SESSION_SEQUENCE_NUMBER;
     772              :         }
     773            0 :         break;
     774            0 :     case LIBSPDM_DATA_SPDM_VERSION_10_11_VERIFY_SIGNATURE_ENDIAN:
     775            0 :         if (data_size != sizeof(uint8_t)) {
     776            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     777              :         }
     778            0 :         if (*(const uint8_t*)data != LIBSPDM_SPDM_10_11_VERIFY_SIGNATURE_ENDIAN_BIG_ONLY &&
     779            0 :             *(const uint8_t*)data != LIBSPDM_SPDM_10_11_VERIFY_SIGNATURE_ENDIAN_LITTLE_ONLY &&
     780            0 :             *(const uint8_t*)data != LIBSPDM_SPDM_10_11_VERIFY_SIGNATURE_ENDIAN_BIG_OR_LITTLE) {
     781            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     782              :         }
     783            0 :         context->spdm_10_11_verify_signature_endian = *(const uint8_t*)data;
     784            0 :         break;
     785            0 :     case LIBSPDM_DATA_SEQUENCE_NUMBER_ENDIAN:
     786            0 :         if (data_size != sizeof(uint8_t)) {
     787            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     788              :         }
     789            0 :         context->sequence_number_endian = *(const uint8_t *)data;
     790            0 :         break;
     791            0 :     case LIBSPDM_DATA_MULTI_KEY_CONN_REQ:
     792            0 :         if (parameter->location != LIBSPDM_DATA_LOCATION_CONNECTION) {
     793            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     794              :         }
     795            0 :         if (data_size != sizeof(bool)) {
     796            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     797              :         }
     798            0 :         context->connection_info.multi_key_conn_req = *(const bool *)data;
     799            0 :         break;
     800            0 :     case LIBSPDM_DATA_MULTI_KEY_CONN_RSP:
     801            0 :         if (parameter->location != LIBSPDM_DATA_LOCATION_CONNECTION) {
     802            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     803              :         }
     804            0 :         if (data_size != sizeof(bool)) {
     805            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     806              :         }
     807            0 :         context->connection_info.multi_key_conn_rsp = *(const bool *)data;
     808            0 :         break;
     809            0 :     default:
     810            0 :         return LIBSPDM_STATUS_UNSUPPORTED_CAP;
     811              :         break;
     812              :     }
     813              : 
     814           27 :     return LIBSPDM_STATUS_SUCCESS;
     815              : }
     816              : 
     817           12 : libspdm_return_t libspdm_get_data(void *spdm_context, libspdm_data_type_t data_type,
     818              :                                   const libspdm_data_parameter_t *parameter,
     819              :                                   void *data, size_t *data_size)
     820              : {
     821              :     libspdm_context_t *context;
     822           12 :     libspdm_secured_message_context_t *secured_context = NULL;
     823              :     size_t target_data_size;
     824              :     void *target_data;
     825              :     uint32_t session_id;
     826              :     libspdm_session_info_t *session_info;
     827              :     uint8_t slot_id;
     828              : 
     829           12 :     if (spdm_context == NULL || data == NULL || data_size == NULL ||
     830              :         data_type >= LIBSPDM_DATA_MAX) {
     831            0 :         return LIBSPDM_STATUS_INVALID_PARAMETER;
     832              :     }
     833              : 
     834           12 :     context = spdm_context;
     835              : 
     836           12 :     if (data_type == LIBSPDM_DATA_SESSION_END_SESSION_ATTRIBUTES) {
     837              :         /* end_session_attributes is present in both a session context as well as an
     838              :          * spdm context. */
     839            0 :         session_id = libspdm_read_uint32(parameter->additional_data);
     840            0 :         session_info = libspdm_get_session_info_via_session_id(context, session_id);
     841           12 :     } else if (need_session_info_for_data(data_type)) {
     842            0 :         if (parameter->location != LIBSPDM_DATA_LOCATION_SESSION) {
     843            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     844              :         }
     845            0 :         session_id = libspdm_read_uint32(parameter->additional_data);
     846            0 :         session_info = libspdm_get_session_info_via_session_id(context, session_id);
     847            0 :         if (session_info == NULL) {
     848            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     849              :         }
     850            0 :         secured_context = session_info->secured_message_context;
     851              :     } else {
     852           12 :         session_info = NULL;
     853              :     }
     854              : 
     855           12 :     switch (data_type) {
     856            0 :     case LIBSPDM_DATA_SPDM_VERSION:
     857            0 :         if (parameter->location != LIBSPDM_DATA_LOCATION_CONNECTION) {
     858            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     859              :         }
     860            0 :         target_data_size = sizeof(spdm_version_number_t);
     861            0 :         target_data = &(context->connection_info.version);
     862            0 :         break;
     863            0 :     case LIBSPDM_DATA_SESSION_SECURED_MESSAGE_VERSION:
     864            0 :         target_data_size = sizeof(spdm_version_number_t);
     865            0 :         target_data = &(secured_context->secured_message_version);
     866            0 :         break;
     867            0 :     case LIBSPDM_DATA_CAPABILITY_FLAGS:
     868            0 :         target_data_size = sizeof(uint32_t);
     869            0 :         if (parameter->location == LIBSPDM_DATA_LOCATION_CONNECTION) {
     870            0 :             target_data = &context->connection_info.capability.flags;
     871            0 :         } else if (parameter->location == LIBSPDM_DATA_LOCATION_LOCAL) {
     872            0 :             target_data = &context->local_context.capability.flags;
     873              :         } else {
     874            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     875              :         }
     876            0 :         break;
     877            0 :     case LIBSPDM_DATA_CAPABILITY_EXT_FLAGS:
     878            0 :         target_data_size = sizeof(uint16_t);
     879            0 :         if (parameter->location == LIBSPDM_DATA_LOCATION_CONNECTION) {
     880            0 :             target_data = &context->connection_info.capability.ext_flags;
     881            0 :         } else if (parameter->location == LIBSPDM_DATA_LOCATION_LOCAL) {
     882            0 :             target_data = &context->local_context.capability.ext_flags;
     883              :         } else {
     884            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     885              :         }
     886            0 :         break;
     887            0 :     case LIBSPDM_DATA_CAPABILITY_CT_EXPONENT:
     888            0 :         target_data_size = sizeof(uint8_t);
     889            0 :         if (parameter->location == LIBSPDM_DATA_LOCATION_CONNECTION) {
     890            0 :             target_data = &context->connection_info.capability.ct_exponent;
     891            0 :         } else if (parameter->location == LIBSPDM_DATA_LOCATION_LOCAL) {
     892            0 :             target_data = &context->local_context.capability.ct_exponent;
     893              :         } else {
     894            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     895              :         }
     896            0 :         break;
     897            0 :     case LIBSPDM_DATA_CAPABILITY_DATA_TRANSFER_SIZE:
     898            0 :         target_data_size = sizeof(uint32_t);
     899            0 :         if (parameter->location == LIBSPDM_DATA_LOCATION_CONNECTION) {
     900            0 :             target_data = &context->connection_info.capability.data_transfer_size;
     901            0 :         } else if (parameter->location == LIBSPDM_DATA_LOCATION_LOCAL) {
     902            0 :             target_data = &context->local_context.capability.data_transfer_size;
     903              :         } else {
     904            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     905              :         }
     906            0 :         break;
     907            0 :     case LIBSPDM_DATA_CAPABILITY_MAX_SPDM_MSG_SIZE:
     908            0 :         target_data_size = sizeof(uint32_t);
     909            0 :         if (parameter->location == LIBSPDM_DATA_LOCATION_CONNECTION) {
     910            0 :             target_data = &context->connection_info.capability.max_spdm_msg_size;
     911            0 :         } else if (parameter->location == LIBSPDM_DATA_LOCATION_LOCAL) {
     912            0 :             target_data = &context->local_context.capability.max_spdm_msg_size;
     913              :         } else {
     914            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     915              :         }
     916            0 :         break;
     917            0 :     case LIBSPDM_DATA_CAPABILITY_SENDER_DATA_TRANSFER_SIZE:
     918            0 :         target_data_size = sizeof(uint32_t);
     919            0 :         if (parameter->location == LIBSPDM_DATA_LOCATION_CONNECTION) {
     920            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     921            0 :         } else if (parameter->location == LIBSPDM_DATA_LOCATION_LOCAL) {
     922            0 :             target_data = &context->local_context.capability.sender_data_transfer_size;
     923              :         } else {
     924            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     925              :         }
     926            0 :         break;
     927            0 :     case LIBSPDM_DATA_MEASUREMENT_SPEC:
     928            0 :         if (parameter->location != LIBSPDM_DATA_LOCATION_CONNECTION) {
     929            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     930              :         }
     931            0 :         target_data_size = sizeof(uint8_t);
     932            0 :         target_data = &context->connection_info.algorithm.measurement_spec;
     933            0 :         break;
     934            0 :     case LIBSPDM_DATA_MEASUREMENT_HASH_ALGO:
     935            0 :         if (parameter->location != LIBSPDM_DATA_LOCATION_CONNECTION) {
     936            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     937              :         }
     938            0 :         target_data_size = sizeof(uint32_t);
     939            0 :         target_data = &context->connection_info.algorithm.measurement_hash_algo;
     940            0 :         break;
     941            0 :     case LIBSPDM_DATA_BASE_ASYM_ALGO:
     942            0 :         if (parameter->location != LIBSPDM_DATA_LOCATION_CONNECTION) {
     943            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     944              :         }
     945            0 :         target_data_size = sizeof(uint32_t);
     946            0 :         target_data = &context->connection_info.algorithm.base_asym_algo;
     947            0 :         break;
     948            0 :     case LIBSPDM_DATA_BASE_HASH_ALGO:
     949            0 :         if (parameter->location != LIBSPDM_DATA_LOCATION_CONNECTION) {
     950            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     951              :         }
     952            0 :         target_data_size = sizeof(uint32_t);
     953            0 :         target_data = &context->connection_info.algorithm.base_hash_algo;
     954            0 :         break;
     955            0 :     case LIBSPDM_DATA_DHE_NAME_GROUP:
     956            0 :         if (parameter->location != LIBSPDM_DATA_LOCATION_CONNECTION) {
     957            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     958              :         }
     959            0 :         target_data_size = sizeof(uint16_t);
     960            0 :         target_data = &context->connection_info.algorithm.dhe_named_group;
     961            0 :         break;
     962            0 :     case LIBSPDM_DATA_AEAD_CIPHER_SUITE:
     963            0 :         if (parameter->location != LIBSPDM_DATA_LOCATION_CONNECTION) {
     964            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     965              :         }
     966            0 :         target_data_size = sizeof(uint16_t);
     967            0 :         target_data = &context->connection_info.algorithm.aead_cipher_suite;
     968            0 :         break;
     969            0 :     case LIBSPDM_DATA_REQ_BASE_ASYM_ALG:
     970            0 :         if (parameter->location != LIBSPDM_DATA_LOCATION_CONNECTION) {
     971            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     972              :         }
     973            0 :         target_data_size = sizeof(uint16_t);
     974            0 :         target_data = &context->connection_info.algorithm.req_base_asym_alg;
     975            0 :         break;
     976            0 :     case LIBSPDM_DATA_KEY_SCHEDULE:
     977            0 :         if (parameter->location != LIBSPDM_DATA_LOCATION_CONNECTION) {
     978            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     979              :         }
     980            0 :         target_data_size = sizeof(uint16_t);
     981            0 :         target_data = &context->connection_info.algorithm.key_schedule;
     982            0 :         break;
     983            0 :     case LIBSPDM_DATA_OTHER_PARAMS_SUPPORT:
     984            0 :         if (parameter->location != LIBSPDM_DATA_LOCATION_CONNECTION) {
     985            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     986              :         }
     987            0 :         target_data_size = sizeof(uint8_t);
     988            0 :         target_data = &context->connection_info.algorithm.other_params_support;
     989            0 :         break;
     990            0 :     case LIBSPDM_DATA_MEL_SPEC:
     991            0 :         if (parameter->location != LIBSPDM_DATA_LOCATION_CONNECTION) {
     992            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
     993              :         }
     994            0 :         target_data_size = sizeof(uint8_t);
     995            0 :         target_data = &context->connection_info.algorithm.mel_spec;
     996            0 :         break;
     997            0 :     case LIBSPDM_DATA_PQC_ASYM_ALGO:
     998            0 :         if (parameter->location != LIBSPDM_DATA_LOCATION_CONNECTION) {
     999            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
    1000              :         }
    1001            0 :         target_data_size = sizeof(uint32_t);
    1002            0 :         target_data = &context->connection_info.algorithm.pqc_asym_algo;
    1003            0 :         break;
    1004            0 :     case LIBSPDM_DATA_REQ_PQC_ASYM_ALG:
    1005            0 :         if (parameter->location != LIBSPDM_DATA_LOCATION_CONNECTION) {
    1006            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
    1007              :         }
    1008            0 :         target_data_size = sizeof(uint32_t);
    1009            0 :         target_data = &context->connection_info.algorithm.req_pqc_asym_alg;
    1010            0 :         break;
    1011            0 :     case LIBSPDM_DATA_KEM_ALG:
    1012            0 :         if (parameter->location != LIBSPDM_DATA_LOCATION_CONNECTION) {
    1013            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
    1014              :         }
    1015            0 :         target_data_size = sizeof(uint32_t);
    1016            0 :         target_data = &context->connection_info.algorithm.kem_alg;
    1017            0 :         break;
    1018            0 :     case LIBSPDM_DATA_CONNECTION_STATE:
    1019            0 :         if (parameter->location != LIBSPDM_DATA_LOCATION_CONNECTION) {
    1020            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
    1021              :         }
    1022            0 :         target_data_size = sizeof(libspdm_connection_state_t);
    1023            0 :         target_data = &context->connection_info.connection_state;
    1024            0 :         break;
    1025            0 :     case LIBSPDM_DATA_RESPONSE_STATE:
    1026            0 :         target_data_size = sizeof(libspdm_response_state_t);
    1027            0 :         target_data = &context->response_state;
    1028            0 :         break;
    1029            6 :     case LIBSPDM_DATA_PEER_PROVISIONED_SLOT_MASK:
    1030            6 :         if (parameter->location != LIBSPDM_DATA_LOCATION_CONNECTION) {
    1031            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
    1032              :         }
    1033            6 :         target_data_size = sizeof(uint8_t);
    1034            6 :         target_data = &context->connection_info.peer_provisioned_slot_mask;
    1035            6 :         break;
    1036            0 :     case LIBSPDM_DATA_PEER_SUPPORTED_SLOT_MASK:
    1037            0 :         if (parameter->location != LIBSPDM_DATA_LOCATION_CONNECTION) {
    1038            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
    1039              :         }
    1040            0 :         target_data_size = sizeof(uint8_t);
    1041            0 :         target_data = &context->connection_info.peer_supported_slot_mask;
    1042            0 :         break;
    1043            0 :     case LIBSPDM_DATA_PEER_KEY_PAIR_ID:
    1044            0 :         if (parameter->location != LIBSPDM_DATA_LOCATION_CONNECTION) {
    1045            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
    1046              :         }
    1047            0 :         slot_id = parameter->additional_data[0];
    1048            0 :         if (slot_id >= SPDM_MAX_SLOT_COUNT) {
    1049            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
    1050              :         }
    1051            0 :         target_data_size = sizeof(spdm_key_pair_id_t);
    1052            0 :         target_data = &context->connection_info.peer_key_pair_id[slot_id];
    1053            0 :         break;
    1054            0 :     case LIBSPDM_DATA_PEER_CERT_INFO:
    1055            0 :         if (parameter->location != LIBSPDM_DATA_LOCATION_CONNECTION) {
    1056            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
    1057              :         }
    1058            0 :         slot_id = parameter->additional_data[0];
    1059            0 :         if (slot_id >= SPDM_MAX_SLOT_COUNT) {
    1060            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
    1061              :         }
    1062            0 :         target_data_size = sizeof(spdm_certificate_info_t);
    1063            0 :         target_data = &context->connection_info.peer_cert_info[slot_id];
    1064            0 :         break;
    1065            0 :     case LIBSPDM_DATA_PEER_KEY_USAGE_BIT_MASK:
    1066            0 :         if (parameter->location != LIBSPDM_DATA_LOCATION_CONNECTION) {
    1067            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
    1068              :         }
    1069            0 :         slot_id = parameter->additional_data[0];
    1070            0 :         if (slot_id >= SPDM_MAX_SLOT_COUNT) {
    1071            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
    1072              :         }
    1073            0 :         target_data_size = sizeof(spdm_key_usage_bit_mask_t);
    1074            0 :         target_data = &context->connection_info.peer_key_usage_bit_mask[slot_id];
    1075            0 :         break;
    1076            0 :     case LIBSPDM_DATA_SESSION_USE_PSK:
    1077            0 :         target_data_size = sizeof(bool);
    1078            0 :         target_data = &session_info->use_psk;
    1079            0 :         break;
    1080            0 :     case LIBSPDM_DATA_SESSION_MUT_AUTH_REQUESTED:
    1081            0 :         target_data_size = sizeof(uint8_t);
    1082            0 :         target_data = &session_info->mut_auth_requested;
    1083            0 :         break;
    1084            0 :     case LIBSPDM_DATA_SESSION_END_SESSION_ATTRIBUTES:
    1085            0 :         if (parameter->location != LIBSPDM_DATA_LOCATION_CONNECTION) {
    1086            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
    1087              :         }
    1088            0 :         target_data_size = sizeof(uint8_t);
    1089            0 :         if (session_info == NULL) {
    1090            0 :             target_data = &context->connection_info.end_session_attributes;
    1091              :         } else {
    1092            0 :             target_data = &session_info->end_session_attributes;
    1093              :         }
    1094            0 :         break;
    1095            0 :     case LIBSPDM_DATA_SESSION_POLICY:
    1096            0 :         target_data_size = sizeof(uint8_t);
    1097            0 :         target_data = &session_info->session_policy;
    1098            0 :         break;
    1099            6 :     case LIBSPDM_DATA_APP_CONTEXT_DATA:
    1100            6 :         target_data_size = sizeof(void *);
    1101            6 :         target_data = &context->app_context_data_ptr;
    1102            6 :         break;
    1103            0 :     case LIBSPDM_DATA_HANDLE_ERROR_RETURN_POLICY:
    1104            0 :         target_data_size = sizeof(uint8_t);
    1105            0 :         target_data = &context->handle_error_return_policy;
    1106            0 :         break;
    1107            0 :     case LIBSPDM_DATA_MAX_DHE_SESSION_COUNT:
    1108            0 :         target_data_size = sizeof(uint32_t);
    1109            0 :         target_data = &context->max_dhe_session_count;
    1110            0 :         break;
    1111            0 :     case LIBSPDM_DATA_MAX_PSK_SESSION_COUNT:
    1112            0 :         target_data_size = sizeof(uint32_t);
    1113            0 :         target_data = &context->max_psk_session_count;
    1114            0 :         break;
    1115            0 :     case LIBSPDM_DATA_SESSION_SEQUENCE_NUMBER_REQ_DIR:
    1116            0 :         target_data_size = sizeof(uint64_t);
    1117            0 :         target_data = &secured_context->application_secret.request_data_sequence_number;
    1118            0 :         break;
    1119            0 :     case LIBSPDM_DATA_SESSION_SEQUENCE_NUMBER_RSP_DIR:
    1120            0 :         target_data_size = sizeof(uint64_t);
    1121            0 :         target_data = &secured_context->application_secret.response_data_sequence_number;
    1122            0 :         break;
    1123            0 :     case LIBSPDM_DATA_MAX_SPDM_SESSION_SEQUENCE_NUMBER:
    1124            0 :         target_data_size = sizeof(uint64_t);
    1125            0 :         target_data = &context->max_spdm_session_sequence_number;
    1126            0 :         break;
    1127            0 :     case LIBSPDM_DATA_VCA_CACHE:
    1128            0 :         target_data_size = context->transcript.message_a.buffer_size;
    1129            0 :         target_data = context->transcript.message_a.buffer;
    1130            0 :         break;
    1131            0 :     case LIBSPDM_DATA_REQUEST_AND_SIZE:
    1132            0 :         target_data_size = context->last_spdm_request_size;
    1133            0 :         target_data = context->last_spdm_request;
    1134            0 :         break;
    1135            0 :     case LIBSPDM_DATA_SPDM_VERSION_10_11_VERIFY_SIGNATURE_ENDIAN:
    1136            0 :         target_data_size = sizeof(uint8_t);
    1137            0 :         target_data = &context->spdm_10_11_verify_signature_endian;
    1138            0 :         break;
    1139            0 :     case LIBSPDM_DATA_SEQUENCE_NUMBER_ENDIAN:
    1140            0 :         target_data_size = sizeof(uint8_t);
    1141            0 :         target_data = &context->sequence_number_endian;
    1142            0 :         break;
    1143            0 :     case LIBSPDM_DATA_SESSION_SEQUENCE_NUMBER_ENDIAN:
    1144            0 :         target_data_size = sizeof(uint8_t);
    1145            0 :         target_data = &secured_context->sequence_number_endian;
    1146            0 :         break;
    1147            0 :     case LIBSPDM_DATA_MULTI_KEY_CONN_REQ:
    1148            0 :         if (parameter->location != LIBSPDM_DATA_LOCATION_CONNECTION) {
    1149            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
    1150              :         }
    1151            0 :         target_data_size = sizeof(bool);
    1152            0 :         target_data = &context->connection_info.multi_key_conn_req;
    1153            0 :         break;
    1154            0 :     case LIBSPDM_DATA_MULTI_KEY_CONN_RSP:
    1155            0 :         if (parameter->location != LIBSPDM_DATA_LOCATION_CONNECTION) {
    1156            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
    1157              :         }
    1158            0 :         target_data_size = sizeof(bool);
    1159            0 :         target_data = &context->connection_info.multi_key_conn_rsp;
    1160            0 :         break;
    1161            0 :     default:
    1162            0 :         return LIBSPDM_STATUS_UNSUPPORTED_CAP;
    1163              :         break;
    1164              :     }
    1165              : 
    1166           12 :     if (*data_size < target_data_size) {
    1167            1 :         *data_size = target_data_size;
    1168            1 :         return LIBSPDM_STATUS_BUFFER_TOO_SMALL;
    1169              :     }
    1170           11 :     libspdm_copy_mem(data, *data_size, target_data, target_data_size);
    1171           11 :     *data_size = target_data_size;
    1172              : 
    1173           11 :     return LIBSPDM_STATUS_SUCCESS;
    1174              : }
    1175              : 
    1176              : #if LIBSPDM_CHECK_SPDM_CONTEXT
    1177            3 : bool libspdm_check_context (void *spdm_context)
    1178              : {
    1179              :     libspdm_context_t *context;
    1180              :     size_t index;
    1181              : 
    1182            3 :     context = spdm_context;
    1183              : 
    1184            3 :     if (context->local_context.capability.data_transfer_size <
    1185              :         SPDM_MIN_DATA_TRANSFER_SIZE_VERSION_12) {
    1186            1 :         LIBSPDM_DEBUG((LIBSPDM_DEBUG_ERROR,
    1187              :                        "data_transfer_size must be greater than or equal "
    1188              :                        "to SPDM_MIN_DATA_TRANSFER_SIZE (%d).\n",
    1189              :                        SPDM_MIN_DATA_TRANSFER_SIZE_VERSION_12));
    1190            1 :         return false;
    1191              :     }
    1192              : 
    1193            2 :     if (context->local_context.capability.max_spdm_msg_size <
    1194            2 :         context->local_context.capability.data_transfer_size) {
    1195            1 :         LIBSPDM_DEBUG((LIBSPDM_DEBUG_ERROR,
    1196              :                        "max_spdm_msg_size (%d) must be greater than or "
    1197              :                        "equal to data_transfer_size (%d).\n",
    1198              :                        context->local_context.capability.max_spdm_msg_size,
    1199              :                        context->local_context.capability.data_transfer_size));
    1200            1 :         return false;
    1201              :     }
    1202              : 
    1203            1 :     if (context->local_context.capability.sender_data_transfer_size <
    1204              :         SPDM_MIN_DATA_TRANSFER_SIZE_VERSION_12) {
    1205            0 :         LIBSPDM_DEBUG((LIBSPDM_DEBUG_ERROR,
    1206              :                        "sender_data_transfer_size must be greater than or equal "
    1207              :                        "to %d.\n", SPDM_MIN_DATA_TRANSFER_SIZE_VERSION_12));
    1208            0 :         return false;
    1209              :     }
    1210              : 
    1211            1 :     if (context->local_context.capability.max_spdm_msg_size <
    1212            1 :         context->local_context.capability.sender_data_transfer_size) {
    1213            0 :         LIBSPDM_DEBUG((LIBSPDM_DEBUG_ERROR,
    1214              :                        "max_spdm_msg_size (%d) must be greater than or "
    1215              :                        "equal to sender_data_transfer_size (%d).\n",
    1216              :                        context->local_context.capability.max_spdm_msg_size,
    1217              :                        context->local_context.capability.sender_data_transfer_size));
    1218            0 :         return false;
    1219              :     }
    1220              : 
    1221            1 :     if (((context->local_context.capability.flags &
    1222            0 :           SPDM_GET_CAPABILITIES_RESPONSE_FLAGS_CHUNK_CAP) != 0) &&
    1223            0 :         (context->local_context.capability.max_spdm_msg_size != 0)) {
    1224            0 :         for (index = 0; index < SPDM_MAX_SLOT_COUNT; index++) {
    1225            0 :             if ((context->local_context.local_cert_chain_provision_size[index] != 0) &&
    1226            0 :                 (context->local_context.local_cert_chain_provision_size[index] +
    1227              :                  sizeof(spdm_certificate_response_t) >
    1228            0 :                  context->local_context.capability.max_spdm_msg_size)) {
    1229            0 :                 LIBSPDM_DEBUG((LIBSPDM_DEBUG_ERROR,
    1230              :                                "max_spdm_msg_size (%d) must be greater than or "
    1231              :                                "equal to local_cert_chain_provision_size[%zu] (%zu).\n",
    1232              :                                context->local_context.capability.max_spdm_msg_size, index,
    1233              :                                context->local_context.local_cert_chain_provision_size[index]));
    1234            0 :                 return false;
    1235              :             }
    1236              :         }
    1237              :     }
    1238              : 
    1239            1 :     return true;
    1240              : }
    1241              : #endif /* LIBSPDM_CHECK_CONTEXT */
    1242              : 
    1243          689 : void libspdm_reset_message_a(libspdm_context_t *spdm_context)
    1244              : {
    1245          689 :     libspdm_reset_managed_buffer(&spdm_context->transcript.message_a);
    1246          689 : }
    1247              : 
    1248           56 : void libspdm_reset_message_d(libspdm_context_t *spdm_context)
    1249              : {
    1250           56 :     libspdm_reset_managed_buffer(&spdm_context->transcript.message_d);
    1251              :     /* Restarting the DIGESTS transcript reopens the "immediately follows VCA" window. */
    1252           56 :     spdm_context->connection_info.digest_transcript_window_closed = false;
    1253           56 : }
    1254              : 
    1255         1026 : void libspdm_reset_message_b(libspdm_context_t *spdm_context)
    1256              : {
    1257              : #if LIBSPDM_RECORD_TRANSCRIPT_DATA_SUPPORT
    1258              :     libspdm_reset_managed_buffer(&spdm_context->transcript.message_b);
    1259              : #else
    1260         1026 :     if (spdm_context->transcript.digest_context_m1m2 != NULL) {
    1261          188 :         libspdm_hash_free (spdm_context->connection_info.algorithm.base_hash_algo,
    1262              :                            spdm_context->transcript.digest_context_m1m2);
    1263          188 :         spdm_context->transcript.digest_context_m1m2 = NULL;
    1264              :     }
    1265              : #endif
    1266         1026 : }
    1267              : 
    1268          599 : void libspdm_reset_message_c(libspdm_context_t *spdm_context)
    1269              : {
    1270              : #if LIBSPDM_RECORD_TRANSCRIPT_DATA_SUPPORT
    1271              :     libspdm_reset_managed_buffer(&spdm_context->transcript.message_c);
    1272              : #else
    1273          599 :     if (spdm_context->transcript.digest_context_m1m2 != NULL) {
    1274            0 :         libspdm_hash_free (spdm_context->connection_info.algorithm.base_hash_algo,
    1275              :                            spdm_context->transcript.digest_context_m1m2);
    1276            0 :         spdm_context->transcript.digest_context_m1m2 = NULL;
    1277              :     }
    1278              : #endif
    1279          599 : }
    1280              : 
    1281          532 : void libspdm_reset_message_mut_b(libspdm_context_t *spdm_context)
    1282              : {
    1283              : #if LIBSPDM_RECORD_TRANSCRIPT_DATA_SUPPORT
    1284              :     libspdm_reset_managed_buffer(&spdm_context->transcript.message_mut_b);
    1285              : #else
    1286          532 :     if (spdm_context->transcript.digest_context_mut_m1m2 != NULL) {
    1287           33 :         libspdm_hash_free (spdm_context->connection_info.algorithm.base_hash_algo,
    1288              :                            spdm_context->transcript.digest_context_mut_m1m2);
    1289           33 :         spdm_context->transcript.digest_context_mut_m1m2 = NULL;
    1290              :     }
    1291              : #endif
    1292          532 : }
    1293              : 
    1294          510 : void libspdm_reset_message_mut_c(libspdm_context_t *spdm_context)
    1295              : {
    1296              : #if LIBSPDM_RECORD_TRANSCRIPT_DATA_SUPPORT
    1297              :     libspdm_reset_managed_buffer(&spdm_context->transcript.message_mut_c);
    1298              : #else
    1299          510 :     if (spdm_context->transcript.digest_context_mut_m1m2 != NULL) {
    1300            0 :         libspdm_hash_free (spdm_context->connection_info.algorithm.base_hash_algo,
    1301              :                            spdm_context->transcript.digest_context_mut_m1m2);
    1302            0 :         spdm_context->transcript.digest_context_mut_m1m2 = NULL;
    1303              :     }
    1304              : #endif
    1305          510 : }
    1306              : 
    1307         4309 : void libspdm_reset_message_m(libspdm_context_t *spdm_context, void *session_info)
    1308              : {
    1309              :     libspdm_session_info_t *spdm_session_info;
    1310              : 
    1311         4309 :     spdm_session_info = session_info;
    1312              : #if LIBSPDM_RECORD_TRANSCRIPT_DATA_SUPPORT
    1313              :     if (spdm_session_info == NULL) {
    1314              :         libspdm_reset_managed_buffer(&spdm_context->transcript.message_m);
    1315              :     } else {
    1316              :         libspdm_reset_managed_buffer(&spdm_session_info->session_transcript.message_m);
    1317              :     }
    1318              : #else
    1319         4309 :     if (spdm_session_info == NULL) {
    1320         4025 :         if (spdm_context->transcript.digest_context_l1l2 != NULL) {
    1321           62 :             libspdm_hash_free (spdm_context->connection_info.algorithm.base_hash_algo,
    1322              :                                spdm_context->transcript.digest_context_l1l2);
    1323           62 :             spdm_context->transcript.digest_context_l1l2 = NULL;
    1324              :         }
    1325              :     } else {
    1326          284 :         if (spdm_session_info->session_transcript.digest_context_l1l2 != NULL) {
    1327            2 :             libspdm_hash_free (spdm_context->connection_info.algorithm.base_hash_algo,
    1328              :                                spdm_session_info->session_transcript.digest_context_l1l2);
    1329            2 :             spdm_session_info->session_transcript.digest_context_l1l2 = NULL;
    1330              :         }
    1331              :     }
    1332              : #endif
    1333              : #if LIBSPDM_ENABLE_CAPABILITY_MEAS_CAP
    1334         4309 :     if (spdm_context->spdm_meas_log_reset_callback != NULL) {
    1335           79 :         spdm_context->spdm_meas_log_reset_callback(
    1336              :             spdm_context, spdm_session_info == NULL ? NULL : &spdm_session_info->session_id);
    1337              :     }
    1338              : #endif /* LIBSPDM_ENABLE_CAPABILITY_MEAS_CAP */
    1339         4309 : }
    1340              : 
    1341            0 : void libspdm_reset_message_k(libspdm_context_t *spdm_context, void *session_info)
    1342              : {
    1343              :     libspdm_session_info_t *spdm_session_info;
    1344              : 
    1345            0 :     spdm_session_info = session_info;
    1346              : #if LIBSPDM_RECORD_TRANSCRIPT_DATA_SUPPORT
    1347              :     libspdm_reset_managed_buffer(&spdm_session_info->session_transcript.message_k);
    1348              : #else
    1349              :     {
    1350            0 :         if (spdm_session_info->session_transcript.digest_context_th != NULL) {
    1351            0 :             libspdm_hash_free (spdm_context->connection_info.algorithm.base_hash_algo,
    1352              :                                spdm_session_info->session_transcript.digest_context_th);
    1353            0 :             spdm_session_info->session_transcript.digest_context_th = NULL;
    1354              :         }
    1355            0 :         if (spdm_session_info->session_transcript.digest_context_th_backup != NULL) {
    1356            0 :             libspdm_hash_free (spdm_context->connection_info.algorithm.base_hash_algo,
    1357              :                                spdm_session_info->session_transcript.digest_context_th_backup);
    1358            0 :             spdm_session_info->session_transcript.digest_context_th_backup = NULL;
    1359              :         }
    1360              :     }
    1361              : #endif
    1362            0 : }
    1363              : 
    1364            8 : void libspdm_reset_message_encap_d(void *session_info)
    1365              : {
    1366              :     libspdm_session_info_t *spdm_session_info;
    1367              : 
    1368            8 :     spdm_session_info = session_info;
    1369            8 :     libspdm_reset_managed_buffer(&spdm_session_info->session_transcript.message_encap_d);
    1370              :     /* Restarting the encapsulated DIGESTS transcript reopens the "first encapsulated response"
    1371              :      * window. */
    1372            8 :     spdm_session_info->session_transcript.encap_digest_window_closed = false;
    1373            8 : }
    1374              : 
    1375           21 : void libspdm_reset_message_f(libspdm_context_t *spdm_context, void *session_info)
    1376              : {
    1377              :     libspdm_session_info_t *spdm_session_info;
    1378              : 
    1379           21 :     spdm_session_info = session_info;
    1380              : #if LIBSPDM_RECORD_TRANSCRIPT_DATA_SUPPORT
    1381              :     libspdm_reset_managed_buffer(&spdm_session_info->session_transcript.message_f);
    1382              : #else
    1383              :     {
    1384           21 :         if (spdm_session_info->session_transcript.digest_context_th != NULL) {
    1385           21 :             libspdm_hash_free (spdm_context->connection_info.algorithm.base_hash_algo,
    1386              :                                spdm_session_info->session_transcript.digest_context_th);
    1387           21 :             spdm_session_info->session_transcript.digest_context_th =
    1388           21 :                 spdm_session_info->session_transcript.digest_context_th_backup;
    1389           21 :             spdm_session_info->session_transcript.digest_context_th_backup = NULL;
    1390              :         }
    1391           21 :         spdm_session_info->session_transcript.message_f_initialized = false;
    1392              :     }
    1393              : #endif
    1394           21 : }
    1395              : 
    1396          188 : void libspdm_reset_message_e(libspdm_context_t *spdm_context, void *session_info)
    1397              : {
    1398              :     libspdm_session_info_t *spdm_session_info;
    1399              : 
    1400          188 :     spdm_session_info = session_info;
    1401              : #if LIBSPDM_RECORD_TRANSCRIPT_DATA_SUPPORT
    1402              :     if (spdm_session_info == NULL) {
    1403              :         libspdm_reset_managed_buffer(&spdm_context->transcript.message_e);
    1404              :     } else {
    1405              :         libspdm_reset_managed_buffer(&spdm_session_info->session_transcript.message_e);
    1406              :     }
    1407              : #else
    1408          188 :     if (spdm_session_info == NULL) {
    1409          180 :         if (spdm_context->transcript.digest_context_il1il2 != NULL) {
    1410           14 :             libspdm_hash_free (spdm_context->connection_info.algorithm.base_hash_algo,
    1411              :                                spdm_context->transcript.digest_context_il1il2);
    1412           14 :             spdm_context->transcript.digest_context_il1il2 = NULL;
    1413              :         }
    1414              :     } else {
    1415            8 :         if (spdm_session_info->session_transcript.digest_context_il1il2 != NULL) {
    1416            3 :             libspdm_hash_free (spdm_context->connection_info.algorithm.base_hash_algo,
    1417              :                                spdm_session_info->session_transcript.digest_context_il1il2);
    1418            3 :             spdm_session_info->session_transcript.digest_context_il1il2 = NULL;
    1419              :         }
    1420              :     }
    1421              : #endif
    1422          188 : }
    1423              : 
    1424          147 : void libspdm_reset_message_encap_e(libspdm_context_t *spdm_context, void *session_info)
    1425              : {
    1426              :     libspdm_session_info_t *spdm_session_info;
    1427              : 
    1428          147 :     spdm_session_info = session_info;
    1429              : #if LIBSPDM_RECORD_TRANSCRIPT_DATA_SUPPORT
    1430              :     if (spdm_session_info == NULL) {
    1431              :         libspdm_reset_managed_buffer(&spdm_context->transcript.message_encap_e);
    1432              :     } else {
    1433              :         libspdm_reset_managed_buffer(&spdm_session_info->session_transcript.message_encap_e);
    1434              :     }
    1435              : #else
    1436          147 :     if (spdm_session_info == NULL) {
    1437          140 :         if (spdm_context->transcript.digest_context_encap_il1il2 != NULL) {
    1438           12 :             libspdm_hash_free (spdm_context->connection_info.algorithm.base_hash_algo,
    1439              :                                spdm_context->transcript.digest_context_encap_il1il2);
    1440           12 :             spdm_context->transcript.digest_context_encap_il1il2 = NULL;
    1441              :         }
    1442              :     } else {
    1443            7 :         if (spdm_session_info->session_transcript.digest_context_encap_il1il2 != NULL) {
    1444            2 :             libspdm_hash_free (spdm_context->connection_info.algorithm.base_hash_algo,
    1445              :                                spdm_session_info->session_transcript.digest_context_encap_il1il2);
    1446            2 :             spdm_session_info->session_transcript.digest_context_encap_il1il2 = NULL;
    1447              :         }
    1448              :     }
    1449              : #endif
    1450          147 : }
    1451              : 
    1452         4401 : void libspdm_reset_message_buffer_via_request_code(void *context, void *session_info,
    1453              :                                                    uint8_t request_code)
    1454              : {
    1455              :     libspdm_context_t *spdm_context;
    1456              : 
    1457         4401 :     spdm_context = context;
    1458              :     /* Close the DIGESTS transcript window once a non-GET_DIGESTS request is processed after
    1459              :      * NEGOTIATED (the state check excludes the VCA messages). */
    1460         4401 :     if ((request_code != SPDM_GET_DIGESTS) &&
    1461         4334 :         (spdm_context->connection_info.connection_state >= LIBSPDM_CONNECTION_STATE_NEGOTIATED)) {
    1462         4132 :         spdm_context->connection_info.digest_transcript_window_closed = true;
    1463              :     }
    1464              :     /**
    1465              :      * Any request other than SPDM_GET_MEASUREMENTS resets L1/L2
    1466              :      */
    1467         4401 :     if (request_code != SPDM_GET_MEASUREMENTS) {
    1468         3975 :         libspdm_reset_message_m(spdm_context, session_info);
    1469              :     }
    1470              :     /**
    1471              :      * If the Requester issued GET_MEASUREMENTS or KEY_EXCHANGE or FINISH or PSK_EXCHANGE
    1472              :      * or PSK_FINISH or KEY_UPDATE or HEARTBEAT or GET_ENCAPSULATED_REQUEST or DELIVER_ENCAPSULATED_RESPONSE
    1473              :      * or END_SESSION request(s) or SPDM_GET_MEASUREMENT_EXTENSION_LOG and skipped CHALLENGE completion, M1 and M2 are reset to null.
    1474              :      */
    1475         4401 :     switch (request_code)
    1476              :     {
    1477          883 :     case SPDM_KEY_EXCHANGE:
    1478              :     case SPDM_GET_MEASUREMENTS:
    1479              :     case SPDM_FINISH:
    1480              :     case SPDM_PSK_EXCHANGE:
    1481              :     case SPDM_PSK_FINISH:
    1482              :     case SPDM_KEY_UPDATE:
    1483              :     case SPDM_HEARTBEAT:
    1484              :     case SPDM_GET_ENCAPSULATED_REQUEST:
    1485              :     case SPDM_END_SESSION:
    1486              :     case SPDM_GET_MEASUREMENT_EXTENSION_LOG:
    1487          883 :         if (spdm_context->connection_info.connection_state <
    1488              :             LIBSPDM_CONNECTION_STATE_AUTHENTICATED) {
    1489          441 :             libspdm_reset_message_b(spdm_context);
    1490          441 :             libspdm_reset_message_c(spdm_context);
    1491          441 :             libspdm_reset_message_mut_b(spdm_context);
    1492          441 :             libspdm_reset_message_mut_c(spdm_context);
    1493              :         }
    1494          883 :         break;
    1495            5 :     case SPDM_DELIVER_ENCAPSULATED_RESPONSE:
    1496            5 :         if (spdm_context->connection_info.connection_state <
    1497              :             LIBSPDM_CONNECTION_STATE_AUTHENTICATED) {
    1498            5 :             libspdm_reset_message_b(spdm_context);
    1499            5 :             libspdm_reset_message_c(spdm_context);
    1500              :         }
    1501            5 :         break;
    1502           67 :     case SPDM_GET_DIGESTS:
    1503           67 :         libspdm_reset_message_b(spdm_context);
    1504           67 :         break;
    1505           56 :     case SPDM_GET_ENDPOINT_INFO:
    1506           56 :         libspdm_reset_message_e(spdm_context, session_info);
    1507           56 :         libspdm_reset_message_encap_e(spdm_context, session_info);
    1508           56 :         break;
    1509         3390 :     default:
    1510         3390 :         break;
    1511              :     }
    1512         4401 : }
    1513              : 
    1514           15 : void libspdm_reset_message_buffer_via_encap_request_code(void *context, void *session_info,
    1515              :                                                          uint8_t request_code)
    1516              : {
    1517              :     libspdm_session_info_t *spdm_session_info;
    1518              : 
    1519              :     /* The encapsulated flow only affects the session transcript. */
    1520           15 :     if (session_info == NULL) {
    1521           13 :         return;
    1522              :     }
    1523            2 :     spdm_session_info = session_info;
    1524              : 
    1525              :     /* Close the encapsulated DIGESTS window if the first encapsulated request is not GET_DIGESTS.
    1526              :      * Enforced here (not from a fixed local sequence) so it holds for whatever order the peer drives,
    1527              :      * for both the Requester and Responder encapsulated flows. */
    1528            3 :     if ((request_code != SPDM_GET_DIGESTS) &&
    1529            1 :         (libspdm_get_managed_buffer_size(
    1530            1 :              &spdm_session_info->session_transcript.message_encap_d) == 0)) {
    1531            1 :         spdm_session_info->session_transcript.encap_digest_window_closed = true;
    1532              :     }
    1533              : }
    1534              : 
    1535          191 : libspdm_return_t libspdm_append_message_a(libspdm_context_t *spdm_context, const void *message,
    1536              :                                           size_t message_size)
    1537              : {
    1538          191 :     return libspdm_append_managed_buffer(&spdm_context->transcript.message_a,
    1539              :                                          message, message_size);
    1540              : }
    1541              : 
    1542            9 : libspdm_return_t libspdm_append_message_d(libspdm_context_t *spdm_context, const void *message,
    1543              :                                           size_t message_size)
    1544              : {
    1545              :     /* Window closed: the GET_DIGESTS did not immediately follow the VCA, so no DIGESTS is added. */
    1546            9 :     if (spdm_context->connection_info.digest_transcript_window_closed) {
    1547            1 :         return LIBSPDM_STATUS_SUCCESS;
    1548              :     }
    1549              :     /* Only the first message D after VCA in connection counts  */
    1550            8 :     if (libspdm_get_managed_buffer_size(&spdm_context->transcript.message_d) != 0) {
    1551            1 :         return LIBSPDM_STATUS_SUCCESS;
    1552              :     }
    1553            7 :     return libspdm_append_managed_buffer(&spdm_context->transcript.message_d,
    1554              :                                          message, message_size);
    1555              : }
    1556              : 
    1557         6198 : libspdm_return_t libspdm_append_message_b(libspdm_context_t *spdm_context, const void *message,
    1558              :                                           size_t message_size)
    1559              : {
    1560              : #if LIBSPDM_RECORD_TRANSCRIPT_DATA_SUPPORT
    1561              :     return libspdm_append_managed_buffer(&spdm_context->transcript.message_b,
    1562              :                                          message, message_size);
    1563              : #else
    1564              :     {
    1565              :         bool result;
    1566              : 
    1567         6198 :         if (spdm_context->transcript.digest_context_m1m2 == NULL) {
    1568          166 :             spdm_context->transcript.digest_context_m1m2 = libspdm_hash_new (
    1569              :                 spdm_context->connection_info.algorithm.base_hash_algo);
    1570          166 :             if (spdm_context->transcript.digest_context_m1m2 == NULL) {
    1571            0 :                 return LIBSPDM_STATUS_CRYPTO_ERROR;
    1572              :             }
    1573          166 :             result = libspdm_hash_init (spdm_context->connection_info.algorithm.base_hash_algo,
    1574              :                                         spdm_context->transcript.digest_context_m1m2);
    1575          166 :             if (!result) {
    1576            0 :                 libspdm_hash_free (spdm_context->connection_info.algorithm.base_hash_algo,
    1577              :                                    spdm_context->transcript.digest_context_m1m2);
    1578            0 :                 spdm_context->transcript.digest_context_m1m2 = NULL;
    1579            0 :                 return LIBSPDM_STATUS_CRYPTO_ERROR;
    1580              :             }
    1581          166 :             result = libspdm_hash_update (spdm_context->connection_info.algorithm.base_hash_algo,
    1582              :                                           spdm_context->transcript.digest_context_m1m2,
    1583          166 :                                           libspdm_get_managed_buffer(&spdm_context->transcript.
    1584              :                                                                      message_a),
    1585          166 :                                           libspdm_get_managed_buffer_size(&spdm_context->transcript.
    1586              :                                                                           message_a));
    1587          166 :             if (!result) {
    1588            0 :                 libspdm_hash_free (spdm_context->connection_info.algorithm.base_hash_algo,
    1589              :                                    spdm_context->transcript.digest_context_m1m2);
    1590            0 :                 spdm_context->transcript.digest_context_m1m2 = NULL;
    1591            0 :                 return LIBSPDM_STATUS_CRYPTO_ERROR;
    1592              :             }
    1593              :         }
    1594              : 
    1595         6198 :         result = libspdm_hash_update (spdm_context->connection_info.algorithm.base_hash_algo,
    1596              :                                       spdm_context->transcript.digest_context_m1m2, message,
    1597              :                                       message_size);
    1598         6198 :         if (!result) {
    1599            0 :             libspdm_hash_free (spdm_context->connection_info.algorithm.base_hash_algo,
    1600              :                                spdm_context->transcript.digest_context_m1m2);
    1601            0 :             spdm_context->transcript.digest_context_m1m2 = NULL;
    1602            0 :             return LIBSPDM_STATUS_CRYPTO_ERROR;
    1603              :         }
    1604              : 
    1605         6198 :         return LIBSPDM_STATUS_SUCCESS;
    1606              :     }
    1607              : #endif
    1608              : }
    1609              : 
    1610           52 : libspdm_return_t libspdm_append_message_c(libspdm_context_t *spdm_context, const void *message,
    1611              :                                           size_t message_size)
    1612              : {
    1613              : #if LIBSPDM_RECORD_TRANSCRIPT_DATA_SUPPORT
    1614              :     return libspdm_append_managed_buffer(&spdm_context->transcript.message_c,
    1615              :                                          message, message_size);
    1616              : #else
    1617              :     {
    1618              :         bool result;
    1619              : 
    1620           52 :         if (spdm_context->transcript.digest_context_m1m2 == NULL) {
    1621           25 :             spdm_context->transcript.digest_context_m1m2 = libspdm_hash_new (
    1622              :                 spdm_context->connection_info.algorithm.base_hash_algo);
    1623           25 :             if (spdm_context->transcript.digest_context_m1m2 == NULL) {
    1624            0 :                 return LIBSPDM_STATUS_CRYPTO_ERROR;
    1625              :             }
    1626           25 :             result = libspdm_hash_init (spdm_context->connection_info.algorithm.base_hash_algo,
    1627              :                                         spdm_context->transcript.digest_context_m1m2);
    1628           25 :             if (!result) {
    1629            0 :                 libspdm_hash_free (spdm_context->connection_info.algorithm.base_hash_algo,
    1630              :                                    spdm_context->transcript.digest_context_m1m2);
    1631            0 :                 spdm_context->transcript.digest_context_m1m2 = NULL;
    1632            0 :                 return LIBSPDM_STATUS_CRYPTO_ERROR;
    1633              :             }
    1634           25 :             result = libspdm_hash_update (spdm_context->connection_info.algorithm.base_hash_algo,
    1635              :                                           spdm_context->transcript.digest_context_m1m2,
    1636           25 :                                           libspdm_get_managed_buffer(&spdm_context->transcript.
    1637              :                                                                      message_a),
    1638           25 :                                           libspdm_get_managed_buffer_size(&spdm_context->transcript.
    1639              :                                                                           message_a));
    1640           25 :             if (!result) {
    1641            0 :                 libspdm_hash_free (spdm_context->connection_info.algorithm.base_hash_algo,
    1642              :                                    spdm_context->transcript.digest_context_m1m2);
    1643            0 :                 spdm_context->transcript.digest_context_m1m2 = NULL;
    1644            0 :                 return LIBSPDM_STATUS_CRYPTO_ERROR;
    1645              :             }
    1646              :         }
    1647              : 
    1648           52 :         result = libspdm_hash_update (spdm_context->connection_info.algorithm.base_hash_algo,
    1649              :                                       spdm_context->transcript.digest_context_m1m2, message,
    1650              :                                       message_size);
    1651           52 :         if (!result) {
    1652            0 :             libspdm_hash_free (spdm_context->connection_info.algorithm.base_hash_algo,
    1653              :                                spdm_context->transcript.digest_context_m1m2);
    1654            0 :             spdm_context->transcript.digest_context_m1m2 = NULL;
    1655            0 :             return LIBSPDM_STATUS_CRYPTO_ERROR;
    1656              :         }
    1657              : 
    1658           52 :         return LIBSPDM_STATUS_SUCCESS;
    1659              :     }
    1660              : #endif
    1661              : }
    1662              : 
    1663         2979 : libspdm_return_t libspdm_append_message_mut_b(libspdm_context_t *spdm_context, const void *message,
    1664              :                                               size_t message_size)
    1665              : {
    1666              : #if LIBSPDM_RECORD_TRANSCRIPT_DATA_SUPPORT
    1667              :     return libspdm_append_managed_buffer(&spdm_context->transcript.message_mut_b,
    1668              :                                          message, message_size);
    1669              : #else
    1670              :     {
    1671              :         bool result;
    1672              : 
    1673         2979 :         if (spdm_context->transcript.digest_context_mut_m1m2 == NULL) {
    1674           32 :             spdm_context->transcript.digest_context_mut_m1m2 = libspdm_hash_new (
    1675              :                 spdm_context->connection_info.algorithm.base_hash_algo);
    1676           32 :             if (spdm_context->transcript.digest_context_mut_m1m2 == NULL) {
    1677            0 :                 return LIBSPDM_STATUS_CRYPTO_ERROR;
    1678              :             }
    1679           32 :             result = libspdm_hash_init (spdm_context->connection_info.algorithm.base_hash_algo,
    1680              :                                         spdm_context->transcript.digest_context_mut_m1m2);
    1681           32 :             if (!result) {
    1682            0 :                 libspdm_hash_free (spdm_context->connection_info.algorithm.base_hash_algo,
    1683              :                                    spdm_context->transcript.digest_context_mut_m1m2);
    1684            0 :                 spdm_context->transcript.digest_context_mut_m1m2 = NULL;
    1685            0 :                 return LIBSPDM_STATUS_CRYPTO_ERROR;
    1686              :             }
    1687           32 :             if ((spdm_context->connection_info.version >> SPDM_VERSION_NUMBER_SHIFT_BIT) >
    1688              :                 SPDM_MESSAGE_VERSION_11) {
    1689              : 
    1690              :                 /* Need append VCA since 1.2 script */
    1691            5 :                 result = libspdm_hash_update (
    1692              :                     spdm_context->connection_info.algorithm.base_hash_algo,
    1693              :                     spdm_context->transcript.digest_context_mut_m1m2,
    1694            5 :                     libspdm_get_managed_buffer(&spdm_context->transcript.message_a),
    1695            5 :                     libspdm_get_managed_buffer_size(&spdm_context->transcript.
    1696              :                                                     message_a));
    1697            5 :                 if (!result) {
    1698            0 :                     libspdm_hash_free (spdm_context->connection_info.algorithm.base_hash_algo,
    1699              :                                        spdm_context->transcript.digest_context_mut_m1m2);
    1700            0 :                     spdm_context->transcript.digest_context_mut_m1m2 = NULL;
    1701            0 :                     return LIBSPDM_STATUS_CRYPTO_ERROR;
    1702              :                 }
    1703              :             }
    1704              :         }
    1705              : 
    1706         2979 :         result = libspdm_hash_update (spdm_context->connection_info.algorithm.base_hash_algo,
    1707              :                                       spdm_context->transcript.digest_context_mut_m1m2, message,
    1708              :                                       message_size);
    1709         2979 :         if (!result) {
    1710            0 :             libspdm_hash_free (spdm_context->connection_info.algorithm.base_hash_algo,
    1711              :                                spdm_context->transcript.digest_context_mut_m1m2);
    1712            0 :             spdm_context->transcript.digest_context_mut_m1m2 = NULL;
    1713            0 :             return LIBSPDM_STATUS_CRYPTO_ERROR;
    1714              :         }
    1715              : 
    1716         2979 :         return LIBSPDM_STATUS_SUCCESS;
    1717              :     }
    1718              : #endif
    1719              : }
    1720              : 
    1721           10 : libspdm_return_t libspdm_append_message_mut_c(libspdm_context_t *spdm_context, const void *message,
    1722              :                                               size_t message_size)
    1723              : {
    1724              : #if LIBSPDM_RECORD_TRANSCRIPT_DATA_SUPPORT
    1725              :     return libspdm_append_managed_buffer(&spdm_context->transcript.message_mut_c,
    1726              :                                          message, message_size);
    1727              : #else
    1728              :     {
    1729              :         bool result;
    1730              : 
    1731           10 :         if (spdm_context->transcript.digest_context_mut_m1m2 == NULL) {
    1732            7 :             spdm_context->transcript.digest_context_mut_m1m2 = libspdm_hash_new (
    1733              :                 spdm_context->connection_info.algorithm.base_hash_algo);
    1734            7 :             if (spdm_context->transcript.digest_context_mut_m1m2 == NULL) {
    1735            0 :                 return LIBSPDM_STATUS_CRYPTO_ERROR;
    1736              :             }
    1737            7 :             result = libspdm_hash_init (spdm_context->connection_info.algorithm.base_hash_algo,
    1738              :                                         spdm_context->transcript.digest_context_mut_m1m2);
    1739            7 :             if (!result) {
    1740            0 :                 libspdm_hash_free (spdm_context->connection_info.algorithm.base_hash_algo,
    1741              :                                    spdm_context->transcript.digest_context_mut_m1m2);
    1742            0 :                 spdm_context->transcript.digest_context_mut_m1m2 = NULL;
    1743            0 :                 return LIBSPDM_STATUS_CRYPTO_ERROR;
    1744              :             }
    1745            7 :             if ((spdm_context->connection_info.version >> SPDM_VERSION_NUMBER_SHIFT_BIT) >
    1746              :                 SPDM_MESSAGE_VERSION_11) {
    1747              : 
    1748              :                 /* Need append VCA since 1.2 script */
    1749            2 :                 result = libspdm_hash_update (
    1750              :                     spdm_context->connection_info.algorithm.base_hash_algo,
    1751              :                     spdm_context->transcript.digest_context_mut_m1m2,
    1752            2 :                     libspdm_get_managed_buffer(&spdm_context->transcript.message_a),
    1753            2 :                     libspdm_get_managed_buffer_size(&spdm_context->transcript.
    1754              :                                                     message_a));
    1755            2 :                 if (!result) {
    1756            0 :                     libspdm_hash_free (spdm_context->connection_info.algorithm.base_hash_algo,
    1757              :                                        spdm_context->transcript.digest_context_mut_m1m2);
    1758            0 :                     spdm_context->transcript.digest_context_mut_m1m2 = NULL;
    1759            0 :                     return LIBSPDM_STATUS_CRYPTO_ERROR;
    1760              :                 }
    1761              :             }
    1762              :         }
    1763              : 
    1764           10 :         result = libspdm_hash_update (spdm_context->connection_info.algorithm.base_hash_algo,
    1765              :                                       spdm_context->transcript.digest_context_mut_m1m2, message,
    1766              :                                       message_size);
    1767           10 :         if (!result) {
    1768            0 :             libspdm_hash_free (spdm_context->connection_info.algorithm.base_hash_algo,
    1769              :                                spdm_context->transcript.digest_context_mut_m1m2);
    1770            0 :             spdm_context->transcript.digest_context_mut_m1m2 = NULL;
    1771            0 :             return LIBSPDM_STATUS_CRYPTO_ERROR;
    1772              :         }
    1773              : 
    1774           10 :         return LIBSPDM_STATUS_SUCCESS;
    1775              :     }
    1776              : #endif
    1777              : }
    1778              : 
    1779          722 : libspdm_return_t libspdm_append_message_m(libspdm_context_t *spdm_context, void *session_info,
    1780              :                                           const void *message, size_t message_size)
    1781              : {
    1782              :     libspdm_session_info_t *spdm_session_info;
    1783              : 
    1784          722 :     spdm_session_info = session_info;
    1785              : #if LIBSPDM_RECORD_TRANSCRIPT_DATA_SUPPORT
    1786              :     if (spdm_session_info == NULL) {
    1787              :         return libspdm_append_managed_buffer(&spdm_context->transcript.message_m,
    1788              :                                              message, message_size);
    1789              :     } else {
    1790              :         return libspdm_append_managed_buffer(&spdm_session_info->session_transcript.message_m,
    1791              :                                              message, message_size);
    1792              :     }
    1793              : #else
    1794              :     {
    1795              :         bool result;
    1796              : 
    1797          722 :         if (spdm_session_info == NULL) {
    1798          718 :             if (spdm_context->transcript.digest_context_l1l2 == NULL) {
    1799           62 :                 spdm_context->transcript.digest_context_l1l2 = libspdm_hash_new (
    1800              :                     spdm_context->connection_info.algorithm.base_hash_algo);
    1801           62 :                 if (spdm_context->transcript.digest_context_l1l2 == NULL) {
    1802            0 :                     return LIBSPDM_STATUS_CRYPTO_ERROR;
    1803              :                 }
    1804           62 :                 result = libspdm_hash_init (spdm_context->connection_info.algorithm.base_hash_algo,
    1805              :                                             spdm_context->transcript.digest_context_l1l2);
    1806           62 :                 if (!result) {
    1807            0 :                     libspdm_hash_free (spdm_context->connection_info.algorithm.base_hash_algo,
    1808              :                                        spdm_context->transcript.digest_context_l1l2);
    1809            0 :                     spdm_context->transcript.digest_context_l1l2 = NULL;
    1810            0 :                     return LIBSPDM_STATUS_CRYPTO_ERROR;
    1811              :                 }
    1812           62 :                 if ((spdm_context->connection_info.version >> SPDM_VERSION_NUMBER_SHIFT_BIT) >
    1813              :                     SPDM_MESSAGE_VERSION_11) {
    1814              : 
    1815              :                     /* Need append VCA since 1.2 script */
    1816           13 :                     result = libspdm_hash_update (
    1817              :                         spdm_context->connection_info.algorithm.base_hash_algo,
    1818              :                         spdm_context->transcript.digest_context_l1l2,
    1819           13 :                         libspdm_get_managed_buffer(
    1820           13 :                             &spdm_context->transcript.message_a),
    1821           13 :                         libspdm_get_managed_buffer_size(&spdm_context->transcript.
    1822              :                                                         message_a));
    1823           13 :                     if (!result) {
    1824            0 :                         libspdm_hash_free (spdm_context->connection_info.algorithm.base_hash_algo,
    1825              :                                            spdm_context->transcript.digest_context_l1l2);
    1826            0 :                         spdm_context->transcript.digest_context_l1l2 = NULL;
    1827            0 :                         return LIBSPDM_STATUS_CRYPTO_ERROR;
    1828              :                     }
    1829              :                 }
    1830              :             }
    1831          718 :             result = libspdm_hash_update (spdm_context->connection_info.algorithm.base_hash_algo,
    1832              :                                           spdm_context->transcript.digest_context_l1l2, message,
    1833              :                                           message_size);
    1834          718 :             if (!result) {
    1835            0 :                 libspdm_hash_free (spdm_context->connection_info.algorithm.base_hash_algo,
    1836              :                                    spdm_context->transcript.digest_context_l1l2);
    1837            0 :                 spdm_context->transcript.digest_context_l1l2 = NULL;
    1838            0 :                 return LIBSPDM_STATUS_CRYPTO_ERROR;
    1839              :             }
    1840              :         } else {
    1841            4 :             if (spdm_session_info->session_transcript.digest_context_l1l2 == NULL) {
    1842            2 :                 spdm_session_info->session_transcript.digest_context_l1l2 = libspdm_hash_new (
    1843              :                     spdm_context->connection_info.algorithm.base_hash_algo);
    1844            2 :                 if (spdm_session_info->session_transcript.digest_context_l1l2 == NULL) {
    1845            0 :                     return LIBSPDM_STATUS_CRYPTO_ERROR;
    1846              :                 }
    1847            2 :                 result = libspdm_hash_init (spdm_context->connection_info.algorithm.base_hash_algo,
    1848              :                                             spdm_session_info->session_transcript.digest_context_l1l2);
    1849            2 :                 if (!result) {
    1850            0 :                     libspdm_hash_free (spdm_context->connection_info.algorithm.base_hash_algo,
    1851              :                                        spdm_session_info->session_transcript.digest_context_l1l2);
    1852            0 :                     spdm_session_info->session_transcript.digest_context_l1l2 = NULL;
    1853            0 :                     return LIBSPDM_STATUS_CRYPTO_ERROR;
    1854              :                 }
    1855            2 :                 if ((spdm_context->connection_info.version >> SPDM_VERSION_NUMBER_SHIFT_BIT) >
    1856              :                     SPDM_MESSAGE_VERSION_11) {
    1857              : 
    1858              :                     /* Need append VCA since 1.2 script*/
    1859              : 
    1860            0 :                     result = libspdm_hash_update (
    1861              :                         spdm_context->connection_info.algorithm.base_hash_algo,
    1862              :                         spdm_session_info->session_transcript.digest_context_l1l2,
    1863            0 :                         libspdm_get_managed_buffer(
    1864            0 :                             &spdm_context->transcript.message_a),
    1865            0 :                         libspdm_get_managed_buffer_size(&spdm_context->transcript.
    1866              :                                                         message_a));
    1867            0 :                     if (!result) {
    1868            0 :                         libspdm_hash_free (spdm_context->connection_info.algorithm.base_hash_algo,
    1869              :                                            spdm_session_info->session_transcript.digest_context_l1l2);
    1870            0 :                         spdm_session_info->session_transcript.digest_context_l1l2 = NULL;
    1871            0 :                         return LIBSPDM_STATUS_CRYPTO_ERROR;
    1872              :                     }
    1873              :                 }
    1874              :             }
    1875            4 :             result = libspdm_hash_update (spdm_context->connection_info.algorithm.base_hash_algo,
    1876              :                                           spdm_session_info->session_transcript.digest_context_l1l2,
    1877              :                                           message, message_size);
    1878            4 :             if (!result) {
    1879            0 :                 libspdm_hash_free (spdm_context->connection_info.algorithm.base_hash_algo,
    1880              :                                    spdm_session_info->session_transcript.digest_context_l1l2);
    1881            0 :                 spdm_session_info->session_transcript.digest_context_l1l2 = NULL;
    1882            0 :                 return LIBSPDM_STATUS_CRYPTO_ERROR;
    1883              :             }
    1884              :         }
    1885              : 
    1886          722 :         return LIBSPDM_STATUS_SUCCESS;
    1887              :     }
    1888              : #endif
    1889              : }
    1890              : 
    1891          310 : libspdm_return_t libspdm_append_message_k(libspdm_context_t *spdm_context,
    1892              :                                           void *session_info,
    1893              :                                           bool is_requester, const void *message,
    1894              :                                           size_t message_size)
    1895              : {
    1896              :     libspdm_session_info_t *spdm_session_info;
    1897              : 
    1898          310 :     spdm_session_info = session_info;
    1899              : #if LIBSPDM_RECORD_TRANSCRIPT_DATA_SUPPORT
    1900              :     return libspdm_append_managed_buffer(
    1901              :         &spdm_session_info->session_transcript.message_k, message,
    1902              :         message_size);
    1903              : #else
    1904              :     {
    1905              :         uint8_t *cert_chain_buffer;
    1906              :         size_t cert_chain_buffer_size;
    1907              :         bool result;
    1908              :         uint8_t cert_chain_buffer_hash[LIBSPDM_MAX_HASH_SIZE];
    1909              :         uint32_t hash_size;
    1910              :         uint8_t slot_id;
    1911              : 
    1912          310 :         hash_size = libspdm_get_hash_size(spdm_context->connection_info.algorithm.base_hash_algo);
    1913              : 
    1914          310 :         if (spdm_session_info->session_transcript.digest_context_th == NULL) {
    1915          161 :             if (!spdm_session_info->use_psk) {
    1916           92 :                 if (is_requester) {
    1917           59 :                     slot_id = spdm_session_info->peer_used_cert_chain_slot_id;
    1918           59 :                     LIBSPDM_ASSERT((slot_id < SPDM_MAX_SLOT_COUNT) || (slot_id == 0xFF));
    1919           59 :                     if (slot_id == 0xFF) {
    1920            2 :                         result = libspdm_get_peer_public_key_buffer(
    1921              :                             spdm_context, (const void **)&cert_chain_buffer,
    1922              :                             &cert_chain_buffer_size);
    1923            2 :                         if (!result) {
    1924            0 :                             return LIBSPDM_STATUS_INVALID_STATE_PEER;
    1925              :                         }
    1926              : 
    1927            2 :                         result = libspdm_hash_all(
    1928              :                             spdm_context->connection_info.algorithm.base_hash_algo,
    1929              :                             cert_chain_buffer, cert_chain_buffer_size,
    1930              :                             cert_chain_buffer_hash);
    1931            2 :                         if (!result) {
    1932            0 :                             return LIBSPDM_STATUS_CRYPTO_ERROR;
    1933              :                         }
    1934              :                     } else {
    1935           57 :                         LIBSPDM_ASSERT(
    1936              :                             hash_size ==
    1937              :                             spdm_context->connection_info
    1938              :                             .peer_used_cert_chain[slot_id].buffer_hash_size);
    1939              : 
    1940           57 :                         libspdm_copy_mem(cert_chain_buffer_hash,
    1941              :                                          sizeof(cert_chain_buffer_hash),
    1942              :                                          spdm_context->connection_info
    1943           57 :                                          .peer_used_cert_chain[slot_id].buffer_hash,
    1944              :                                          hash_size);
    1945              :                     }
    1946              :                 } else {
    1947           33 :                     slot_id = spdm_session_info->local_used_cert_chain_slot_id;
    1948           33 :                     LIBSPDM_ASSERT((slot_id < SPDM_MAX_SLOT_COUNT) || (slot_id == 0xFF));
    1949           33 :                     if (slot_id == 0xFF) {
    1950            2 :                         result = libspdm_get_local_public_key_buffer(
    1951              :                             spdm_context, (const void **)&cert_chain_buffer,
    1952              :                             &cert_chain_buffer_size);
    1953            2 :                         if (!result) {
    1954            0 :                             return LIBSPDM_STATUS_INVALID_STATE_LOCAL;
    1955              :                         }
    1956              :                     } else {
    1957           31 :                         libspdm_get_local_cert_chain_buffer(
    1958              :                             spdm_context, slot_id, (const void **)&cert_chain_buffer,
    1959              :                             &cert_chain_buffer_size);
    1960              :                     }
    1961              : 
    1962           33 :                     result = libspdm_hash_all(
    1963              :                         spdm_context->connection_info.algorithm.base_hash_algo,
    1964              :                         cert_chain_buffer, cert_chain_buffer_size,
    1965              :                         cert_chain_buffer_hash);
    1966           33 :                     if (!result) {
    1967            0 :                         return LIBSPDM_STATUS_CRYPTO_ERROR;
    1968              :                     }
    1969              :                 }
    1970              :             }
    1971              :         }
    1972              : 
    1973              : 
    1974              :         /* prepare digest_context_th*/
    1975              : 
    1976          310 :         if (spdm_session_info->session_transcript.digest_context_th == NULL) {
    1977          161 :             spdm_session_info->session_transcript.digest_context_th = libspdm_hash_new (
    1978              :                 spdm_context->connection_info.algorithm.base_hash_algo);
    1979          161 :             if (spdm_session_info->session_transcript.digest_context_th == NULL) {
    1980            0 :                 return LIBSPDM_STATUS_CRYPTO_ERROR;
    1981              :             }
    1982          161 :             result = libspdm_hash_init (spdm_context->connection_info.algorithm.base_hash_algo,
    1983              :                                         spdm_session_info->session_transcript.digest_context_th);
    1984          161 :             if (!result) {
    1985            0 :                 libspdm_hash_free (spdm_context->connection_info.algorithm.base_hash_algo,
    1986              :                                    spdm_session_info->session_transcript.digest_context_th);
    1987            0 :                 spdm_session_info->session_transcript.digest_context_th = NULL;
    1988            0 :                 return LIBSPDM_STATUS_CRYPTO_ERROR;
    1989              :             }
    1990          161 :             result = libspdm_hash_update (spdm_context->connection_info.algorithm.base_hash_algo,
    1991              :                                           spdm_session_info->session_transcript.digest_context_th,
    1992          161 :                                           libspdm_get_managed_buffer(&spdm_context->transcript.
    1993              :                                                                      message_a),
    1994              :                                           libspdm_get_managed_buffer_size(
    1995          161 :                                               &spdm_context->transcript.message_a));
    1996          161 :             if (!result) {
    1997            0 :                 libspdm_hash_free (spdm_context->connection_info.algorithm.base_hash_algo,
    1998              :                                    spdm_session_info->session_transcript.digest_context_th);
    1999            0 :                 spdm_session_info->session_transcript.digest_context_th = NULL;
    2000            0 :                 return LIBSPDM_STATUS_CRYPTO_ERROR;
    2001              :             }
    2002          161 :             if (!spdm_session_info->use_psk) {
    2003           92 :                 if (spdm_context->connection_info.multi_key_conn_rsp) {
    2004            0 :                     result = libspdm_hash_update (
    2005              :                         spdm_context->connection_info.algorithm.base_hash_algo,
    2006              :                         spdm_session_info->session_transcript.digest_context_th,
    2007            0 :                         libspdm_get_managed_buffer(&spdm_context->transcript.message_d),
    2008            0 :                         libspdm_get_managed_buffer_size(&spdm_context->transcript.message_d));
    2009            0 :                     if (!result) {
    2010            0 :                         libspdm_hash_free (spdm_context->connection_info.algorithm.base_hash_algo,
    2011              :                                            spdm_session_info->session_transcript.digest_context_th);
    2012            0 :                         spdm_session_info->session_transcript.digest_context_th = NULL;
    2013            0 :                         return LIBSPDM_STATUS_CRYPTO_ERROR;
    2014              :                     }
    2015              :                 }
    2016              : 
    2017           92 :                 result = libspdm_hash_update (
    2018              :                     spdm_context->connection_info.algorithm.base_hash_algo,
    2019              :                     spdm_session_info->session_transcript.digest_context_th,
    2020              :                     cert_chain_buffer_hash, hash_size);
    2021           92 :                 if (!result) {
    2022            0 :                     libspdm_hash_free (spdm_context->connection_info.algorithm.base_hash_algo,
    2023              :                                        spdm_session_info->session_transcript.digest_context_th);
    2024            0 :                     spdm_session_info->session_transcript.digest_context_th = NULL;
    2025            0 :                     return LIBSPDM_STATUS_CRYPTO_ERROR;
    2026              :                 }
    2027              :             }
    2028              :         }
    2029          310 :         result = libspdm_hash_update (spdm_context->connection_info.algorithm.base_hash_algo,
    2030              :                                       spdm_session_info->session_transcript.digest_context_th,
    2031              :                                       message,
    2032              :                                       message_size);
    2033          310 :         if (!result) {
    2034            0 :             libspdm_hash_free (spdm_context->connection_info.algorithm.base_hash_algo,
    2035              :                                spdm_session_info->session_transcript.digest_context_th);
    2036            0 :             spdm_session_info->session_transcript.digest_context_th = NULL;
    2037            0 :             return LIBSPDM_STATUS_CRYPTO_ERROR;
    2038              :         }
    2039          310 :         return LIBSPDM_STATUS_SUCCESS;
    2040              :     }
    2041              : #endif
    2042              : }
    2043              : 
    2044            6 : libspdm_return_t libspdm_append_message_encap_d(void *session_info,
    2045              :                                                 const void *message,
    2046              :                                                 size_t message_size)
    2047              : {
    2048              :     libspdm_session_info_t *spdm_session_info;
    2049              : 
    2050            6 :     spdm_session_info = session_info;
    2051              :     /* Window closed: the encapsulated DIGESTS is not the first encap response, so it is not added. */
    2052            6 :     if (spdm_session_info->session_transcript.encap_digest_window_closed) {
    2053            1 :         return LIBSPDM_STATUS_SUCCESS;
    2054              :     }
    2055              :     /* Only the first message EncapD in current session counts  */
    2056            5 :     if (libspdm_get_managed_buffer_size(&spdm_session_info->session_transcript.message_encap_d) !=
    2057              :         0) {
    2058            0 :         return LIBSPDM_STATUS_SUCCESS;
    2059              :     }
    2060            5 :     return libspdm_append_managed_buffer(
    2061            5 :         &spdm_session_info->session_transcript.message_encap_d, message,
    2062              :         message_size);
    2063              : }
    2064              : 
    2065          263 : libspdm_return_t libspdm_append_message_f(libspdm_context_t *spdm_context,
    2066              :                                           void *session_info,
    2067              :                                           bool is_requester, const void *message,
    2068              :                                           size_t message_size)
    2069              : {
    2070              :     libspdm_session_info_t *spdm_session_info;
    2071              : 
    2072          263 :     spdm_session_info = session_info;
    2073              : #if LIBSPDM_RECORD_TRANSCRIPT_DATA_SUPPORT
    2074              :     return libspdm_append_managed_buffer(
    2075              :         &spdm_session_info->session_transcript.message_f, message,
    2076              :         message_size);
    2077              : #else
    2078              :     {
    2079              :         const uint8_t *mut_cert_chain_buffer;
    2080              :         size_t mut_cert_chain_buffer_size;
    2081              :         bool result;
    2082              :         uint8_t mut_cert_chain_buffer_hash[LIBSPDM_MAX_HASH_SIZE];
    2083              :         uint32_t hash_size;
    2084              :         libspdm_return_t status;
    2085              :         uint8_t slot_id;
    2086              : 
    2087          263 :         hash_size = libspdm_get_hash_size(spdm_context->connection_info.algorithm.base_hash_algo);
    2088              : 
    2089          263 :         if (!spdm_session_info->session_transcript.message_f_initialized) {
    2090              :             /* digest_context_th might be NULL in unit test, where message_k is hardcoded. */
    2091          100 :             if (spdm_session_info->session_transcript.digest_context_th == NULL) {
    2092              :                 status =
    2093           99 :                     libspdm_append_message_k (spdm_context, session_info, is_requester, NULL, 0);
    2094           99 :                 if (LIBSPDM_STATUS_IS_ERROR(status)) {
    2095            0 :                     return status;
    2096              :                 }
    2097              :             }
    2098              : 
    2099          100 :             if (!spdm_session_info->use_psk && (spdm_session_info->mut_auth_requested != 0)) {
    2100           16 :                 if (is_requester) {
    2101            5 :                     slot_id = spdm_session_info->local_used_cert_chain_slot_id;
    2102            5 :                     LIBSPDM_ASSERT((slot_id < SPDM_MAX_SLOT_COUNT) || (slot_id == 0xFF));
    2103            5 :                     if (slot_id == 0xFF) {
    2104            0 :                         result = libspdm_get_local_public_key_buffer(
    2105              :                             spdm_context,
    2106              :                             (const void **)&mut_cert_chain_buffer,
    2107              :                             &mut_cert_chain_buffer_size);
    2108            0 :                         if (!result) {
    2109            0 :                             return LIBSPDM_STATUS_INVALID_STATE_LOCAL;
    2110              :                         }
    2111              :                     } else {
    2112            5 :                         libspdm_get_local_cert_chain_buffer(
    2113              :                             spdm_context,
    2114              :                             slot_id,
    2115              :                             (const void **)&mut_cert_chain_buffer,
    2116              :                             &mut_cert_chain_buffer_size);
    2117              :                     }
    2118              : 
    2119            5 :                     result = libspdm_hash_all(
    2120              :                         spdm_context->connection_info.algorithm.base_hash_algo,
    2121              :                         mut_cert_chain_buffer, mut_cert_chain_buffer_size,
    2122              :                         mut_cert_chain_buffer_hash);
    2123            5 :                     if (!result) {
    2124            0 :                         return LIBSPDM_STATUS_CRYPTO_ERROR;
    2125              :                     }
    2126              :                 } else {
    2127           11 :                     slot_id = spdm_session_info->peer_used_cert_chain_slot_id;
    2128           11 :                     LIBSPDM_ASSERT((slot_id < SPDM_MAX_SLOT_COUNT) || (slot_id == 0xFF));
    2129           11 :                     if (slot_id == 0xFF) {
    2130            1 :                         result = libspdm_get_peer_public_key_buffer(
    2131              :                             spdm_context,
    2132              :                             (const void **)&mut_cert_chain_buffer,
    2133              :                             &mut_cert_chain_buffer_size);
    2134            1 :                         if (!result) {
    2135            0 :                             return LIBSPDM_STATUS_INVALID_STATE_PEER;
    2136              :                         }
    2137              : 
    2138            1 :                         result = libspdm_hash_all(
    2139              :                             spdm_context->connection_info.algorithm.base_hash_algo,
    2140              :                             mut_cert_chain_buffer, mut_cert_chain_buffer_size,
    2141              :                             mut_cert_chain_buffer_hash);
    2142            1 :                         if (!result) {
    2143            0 :                             return LIBSPDM_STATUS_CRYPTO_ERROR;
    2144              :                         }
    2145              :                     } else {
    2146           10 :                         LIBSPDM_ASSERT(
    2147              :                             hash_size ==
    2148              :                             spdm_context->connection_info
    2149              :                             .peer_used_cert_chain[slot_id].buffer_hash_size);
    2150              : 
    2151           10 :                         libspdm_copy_mem(mut_cert_chain_buffer_hash,
    2152              :                                          sizeof(mut_cert_chain_buffer_hash),
    2153              :                                          spdm_context->connection_info
    2154           10 :                                          .peer_used_cert_chain[slot_id].buffer_hash,
    2155              :                                          hash_size);
    2156              :                     }
    2157              :                 }
    2158              :             }
    2159              : 
    2160              :             /* It is first time call, backup current message_k context
    2161              :              * this backup will be used in reset_message_f.*/
    2162              : 
    2163          100 :             LIBSPDM_ASSERT (spdm_session_info->session_transcript.digest_context_th != NULL);
    2164          100 :             spdm_session_info->session_transcript.digest_context_th_backup = libspdm_hash_new (
    2165              :                 spdm_context->connection_info.algorithm.base_hash_algo);
    2166          100 :             if (spdm_session_info->session_transcript.digest_context_th_backup == NULL) {
    2167            0 :                 return LIBSPDM_STATUS_CRYPTO_ERROR;
    2168              :             }
    2169          100 :             result = libspdm_hash_duplicate (spdm_context->connection_info.algorithm.base_hash_algo,
    2170          100 :                                              spdm_session_info->session_transcript.digest_context_th,
    2171              :                                              spdm_session_info->session_transcript.digest_context_th_backup);
    2172          100 :             if (!result) {
    2173            0 :                 libspdm_hash_free (spdm_context->connection_info.algorithm.base_hash_algo,
    2174              :                                    spdm_session_info->session_transcript.digest_context_th_backup);
    2175            0 :                 spdm_session_info->session_transcript.digest_context_th_backup = NULL;
    2176            0 :                 return LIBSPDM_STATUS_CRYPTO_ERROR;
    2177              :             }
    2178              :         }
    2179              : 
    2180              : 
    2181              :         /* prepare digest_context_th*/
    2182              : 
    2183          263 :         LIBSPDM_ASSERT (spdm_session_info->session_transcript.digest_context_th != NULL);
    2184          263 :         if (!spdm_session_info->session_transcript.message_f_initialized) {
    2185          100 :             if (!spdm_session_info->use_psk && (spdm_session_info->mut_auth_requested != 0)) {
    2186           16 :                 if (spdm_context->connection_info.multi_key_conn_req) {
    2187            0 :                     result = libspdm_hash_update (
    2188              :                         spdm_context->connection_info.algorithm.base_hash_algo,
    2189              :                         spdm_session_info->session_transcript.digest_context_th,
    2190            0 :                         libspdm_get_managed_buffer(&spdm_session_info->session_transcript.
    2191              :                                                    message_encap_d),
    2192            0 :                         libspdm_get_managed_buffer_size(&spdm_session_info->session_transcript.
    2193              :                                                         message_encap_d));
    2194            0 :                     if (!result) {
    2195            0 :                         libspdm_hash_free (spdm_context->connection_info.algorithm.base_hash_algo,
    2196              :                                            spdm_session_info->session_transcript.digest_context_th);
    2197            0 :                         spdm_session_info->session_transcript.digest_context_th = NULL;
    2198            0 :                         return LIBSPDM_STATUS_CRYPTO_ERROR;
    2199              :                     }
    2200              :                 }
    2201              : 
    2202           16 :                 result = libspdm_hash_update (
    2203              :                     spdm_context->connection_info.algorithm.base_hash_algo,
    2204              :                     spdm_session_info->session_transcript.digest_context_th,
    2205              :                     mut_cert_chain_buffer_hash, hash_size);
    2206           16 :                 if (!result) {
    2207            0 :                     libspdm_hash_free (spdm_context->connection_info.algorithm.base_hash_algo,
    2208              :                                        spdm_session_info->session_transcript.digest_context_th);
    2209            0 :                     spdm_session_info->session_transcript.digest_context_th = NULL;
    2210            0 :                     return LIBSPDM_STATUS_CRYPTO_ERROR;
    2211              :                 }
    2212              :             }
    2213              :         }
    2214          263 :         result = libspdm_hash_update (spdm_context->connection_info.algorithm.base_hash_algo,
    2215              :                                       spdm_session_info->session_transcript.digest_context_th,
    2216              :                                       message,
    2217              :                                       message_size);
    2218          263 :         if (!result) {
    2219            0 :             libspdm_hash_free (spdm_context->connection_info.algorithm.base_hash_algo,
    2220              :                                spdm_session_info->session_transcript.digest_context_th);
    2221            0 :             spdm_session_info->session_transcript.digest_context_th = NULL;
    2222            0 :             return LIBSPDM_STATUS_CRYPTO_ERROR;
    2223              :         }
    2224              : 
    2225          263 :         spdm_session_info->session_transcript.message_f_initialized = true;
    2226          263 :         return LIBSPDM_STATUS_SUCCESS;
    2227              :     }
    2228              : #endif
    2229              : }
    2230              : 
    2231           34 : libspdm_return_t libspdm_append_message_e(libspdm_context_t *spdm_context, void *session_info,
    2232              :                                           const void *message, size_t message_size)
    2233              : {
    2234              :     libspdm_session_info_t *spdm_session_info;
    2235              : 
    2236           34 :     spdm_session_info = session_info;
    2237              : #if LIBSPDM_RECORD_TRANSCRIPT_DATA_SUPPORT
    2238              :     if (spdm_session_info == NULL) {
    2239              :         return libspdm_append_managed_buffer(&spdm_context->transcript.message_e,
    2240              :                                              message, message_size);
    2241              :     } else {
    2242              :         return libspdm_append_managed_buffer(&spdm_session_info->session_transcript.message_e,
    2243              :                                              message, message_size);
    2244              :     }
    2245              : #else
    2246              :     {
    2247              :         bool result;
    2248              : 
    2249           34 :         if (spdm_session_info == NULL) {
    2250           28 :             if (spdm_context->transcript.digest_context_il1il2 == NULL) {
    2251           14 :                 spdm_context->transcript.digest_context_il1il2 = libspdm_hash_new (
    2252              :                     spdm_context->connection_info.algorithm.base_hash_algo);
    2253           14 :                 if (spdm_context->transcript.digest_context_il1il2 == NULL) {
    2254            0 :                     return LIBSPDM_STATUS_CRYPTO_ERROR;
    2255              :                 }
    2256           14 :                 result = libspdm_hash_init (spdm_context->connection_info.algorithm.base_hash_algo,
    2257              :                                             spdm_context->transcript.digest_context_il1il2);
    2258           14 :                 if (!result) {
    2259            0 :                     libspdm_hash_free (spdm_context->connection_info.algorithm.base_hash_algo,
    2260              :                                        spdm_context->transcript.digest_context_il1il2);
    2261            0 :                     spdm_context->transcript.digest_context_il1il2 = NULL;
    2262            0 :                     return LIBSPDM_STATUS_CRYPTO_ERROR;
    2263              :                 }
    2264              : 
    2265           14 :                 result = libspdm_hash_update (
    2266              :                     spdm_context->connection_info.algorithm.base_hash_algo,
    2267              :                     spdm_context->transcript.digest_context_il1il2,
    2268           14 :                     libspdm_get_managed_buffer(&spdm_context->transcript.message_a),
    2269           14 :                     libspdm_get_managed_buffer_size(&spdm_context->transcript.message_a));
    2270              : 
    2271           14 :                 if (!result) {
    2272            0 :                     libspdm_hash_free (spdm_context->connection_info.algorithm.base_hash_algo,
    2273              :                                        spdm_context->transcript.digest_context_il1il2);
    2274            0 :                     spdm_context->transcript.digest_context_il1il2 = NULL;
    2275            0 :                     return LIBSPDM_STATUS_CRYPTO_ERROR;
    2276              :                 }
    2277              :             }
    2278           28 :             result = libspdm_hash_update (spdm_context->connection_info.algorithm.base_hash_algo,
    2279              :                                           spdm_context->transcript.digest_context_il1il2, message,
    2280              :                                           message_size);
    2281           28 :             if (!result) {
    2282            0 :                 libspdm_hash_free (spdm_context->connection_info.algorithm.base_hash_algo,
    2283              :                                    spdm_context->transcript.digest_context_il1il2);
    2284            0 :                 spdm_context->transcript.digest_context_il1il2 = NULL;
    2285            0 :                 return LIBSPDM_STATUS_CRYPTO_ERROR;
    2286              :             }
    2287              :         } else {
    2288            6 :             if (spdm_session_info->session_transcript.digest_context_il1il2 == NULL) {
    2289            3 :                 spdm_session_info->session_transcript.digest_context_il1il2 = libspdm_hash_new (
    2290              :                     spdm_context->connection_info.algorithm.base_hash_algo);
    2291            3 :                 if (spdm_session_info->session_transcript.digest_context_il1il2 == NULL) {
    2292            0 :                     return LIBSPDM_STATUS_CRYPTO_ERROR;
    2293              :                 }
    2294            3 :                 result = libspdm_hash_init (spdm_context->connection_info.algorithm.base_hash_algo,
    2295              :                                             spdm_session_info->session_transcript.digest_context_il1il2);
    2296            3 :                 if (!result) {
    2297            0 :                     libspdm_hash_free (spdm_context->connection_info.algorithm.base_hash_algo,
    2298              :                                        spdm_session_info->session_transcript.digest_context_il1il2);
    2299            0 :                     spdm_session_info->session_transcript.digest_context_il1il2 = NULL;
    2300            0 :                     return LIBSPDM_STATUS_CRYPTO_ERROR;
    2301              :                 }
    2302              : 
    2303            3 :                 result = libspdm_hash_update (
    2304              :                     spdm_context->connection_info.algorithm.base_hash_algo,
    2305              :                     spdm_session_info->session_transcript.digest_context_il1il2,
    2306            3 :                     libspdm_get_managed_buffer(&spdm_context->transcript.message_a),
    2307            3 :                     libspdm_get_managed_buffer_size(&spdm_context->transcript.message_a));
    2308              : 
    2309            3 :                 if (!result) {
    2310            0 :                     libspdm_hash_free (spdm_context->connection_info.algorithm.base_hash_algo,
    2311              :                                        spdm_session_info->session_transcript.digest_context_il1il2);
    2312            0 :                     spdm_session_info->session_transcript.digest_context_il1il2 = NULL;
    2313            0 :                     return LIBSPDM_STATUS_CRYPTO_ERROR;
    2314              :                 }
    2315              :             }
    2316            6 :             result = libspdm_hash_update (spdm_context->connection_info.algorithm.base_hash_algo,
    2317              :                                           spdm_session_info->session_transcript.digest_context_il1il2,
    2318              :                                           message, message_size);
    2319            6 :             if (!result) {
    2320            0 :                 libspdm_hash_free (spdm_context->connection_info.algorithm.base_hash_algo,
    2321              :                                    spdm_session_info->session_transcript.digest_context_il1il2);
    2322            0 :                 spdm_session_info->session_transcript.digest_context_il1il2 = NULL;
    2323            0 :                 return LIBSPDM_STATUS_CRYPTO_ERROR;
    2324              :             }
    2325              :         }
    2326              : 
    2327           34 :         return LIBSPDM_STATUS_SUCCESS;
    2328              :     }
    2329              : #endif
    2330              : }
    2331              : 
    2332           24 : libspdm_return_t libspdm_append_message_encap_e(libspdm_context_t *spdm_context, void *session_info,
    2333              :                                                 const void *message, size_t message_size)
    2334              : {
    2335              :     libspdm_session_info_t *spdm_session_info;
    2336              : 
    2337           24 :     spdm_session_info = session_info;
    2338              : #if LIBSPDM_RECORD_TRANSCRIPT_DATA_SUPPORT
    2339              :     if (spdm_session_info == NULL) {
    2340              :         return libspdm_append_managed_buffer(&spdm_context->transcript.message_encap_e,
    2341              :                                              message, message_size);
    2342              :     } else {
    2343              :         return libspdm_append_managed_buffer(&spdm_session_info->session_transcript.message_encap_e,
    2344              :                                              message, message_size);
    2345              :     }
    2346              : #else
    2347              :     {
    2348              :         bool result;
    2349              : 
    2350           24 :         if (spdm_session_info == NULL) {
    2351           19 :             if (spdm_context->transcript.digest_context_encap_il1il2 == NULL) {
    2352           12 :                 spdm_context->transcript.digest_context_encap_il1il2 = libspdm_hash_new (
    2353              :                     spdm_context->connection_info.algorithm.base_hash_algo);
    2354           12 :                 if (spdm_context->transcript.digest_context_encap_il1il2 == NULL) {
    2355            0 :                     return LIBSPDM_STATUS_CRYPTO_ERROR;
    2356              :                 }
    2357           12 :                 result = libspdm_hash_init (spdm_context->connection_info.algorithm.base_hash_algo,
    2358              :                                             spdm_context->transcript.digest_context_encap_il1il2);
    2359           12 :                 if (!result) {
    2360            0 :                     libspdm_hash_free (spdm_context->connection_info.algorithm.base_hash_algo,
    2361              :                                        spdm_context->transcript.digest_context_encap_il1il2);
    2362            0 :                     spdm_context->transcript.digest_context_encap_il1il2 = NULL;
    2363            0 :                     return LIBSPDM_STATUS_CRYPTO_ERROR;
    2364              :                 }
    2365              : 
    2366           12 :                 result = libspdm_hash_update (
    2367              :                     spdm_context->connection_info.algorithm.base_hash_algo,
    2368              :                     spdm_context->transcript.digest_context_encap_il1il2,
    2369           12 :                     libspdm_get_managed_buffer(&spdm_context->transcript.message_a),
    2370           12 :                     libspdm_get_managed_buffer_size(&spdm_context->transcript.message_a));
    2371              : 
    2372           12 :                 if (!result) {
    2373            0 :                     libspdm_hash_free (spdm_context->connection_info.algorithm.base_hash_algo,
    2374              :                                        spdm_context->transcript.digest_context_encap_il1il2);
    2375            0 :                     spdm_context->transcript.digest_context_encap_il1il2 = NULL;
    2376            0 :                     return LIBSPDM_STATUS_CRYPTO_ERROR;
    2377              :                 }
    2378              :             }
    2379           19 :             result = libspdm_hash_update (spdm_context->connection_info.algorithm.base_hash_algo,
    2380              :                                           spdm_context->transcript.digest_context_encap_il1il2,
    2381              :                                           message,
    2382              :                                           message_size);
    2383           19 :             if (!result) {
    2384            0 :                 libspdm_hash_free (spdm_context->connection_info.algorithm.base_hash_algo,
    2385              :                                    spdm_context->transcript.digest_context_encap_il1il2);
    2386            0 :                 spdm_context->transcript.digest_context_encap_il1il2 = NULL;
    2387            0 :                 return LIBSPDM_STATUS_CRYPTO_ERROR;
    2388              :             }
    2389              :         } else {
    2390            5 :             if (spdm_session_info->session_transcript.digest_context_encap_il1il2 == NULL) {
    2391            3 :                 spdm_session_info->session_transcript.digest_context_encap_il1il2 =
    2392            3 :                     libspdm_hash_new (spdm_context->connection_info.algorithm.base_hash_algo);
    2393            3 :                 if (spdm_session_info->session_transcript.digest_context_encap_il1il2 == NULL) {
    2394            0 :                     return LIBSPDM_STATUS_CRYPTO_ERROR;
    2395              :                 }
    2396            3 :                 result = libspdm_hash_init (spdm_context->connection_info.algorithm.base_hash_algo,
    2397              :                                             spdm_session_info->session_transcript.digest_context_encap_il1il2);
    2398            3 :                 if (!result) {
    2399            0 :                     libspdm_hash_free (spdm_context->connection_info.algorithm.base_hash_algo,
    2400              :                                        spdm_session_info->session_transcript.digest_context_encap_il1il2);
    2401            0 :                     spdm_session_info->session_transcript.digest_context_encap_il1il2 = NULL;
    2402            0 :                     return LIBSPDM_STATUS_CRYPTO_ERROR;
    2403              :                 }
    2404              : 
    2405            3 :                 result = libspdm_hash_update (
    2406              :                     spdm_context->connection_info.algorithm.base_hash_algo,
    2407              :                     spdm_session_info->session_transcript.digest_context_encap_il1il2,
    2408            3 :                     libspdm_get_managed_buffer(&spdm_context->transcript.message_a),
    2409            3 :                     libspdm_get_managed_buffer_size(&spdm_context->transcript.message_a));
    2410              : 
    2411            3 :                 if (!result) {
    2412            0 :                     libspdm_hash_free (spdm_context->connection_info.algorithm.base_hash_algo,
    2413              :                                        spdm_session_info->session_transcript.digest_context_encap_il1il2);
    2414            0 :                     spdm_session_info->session_transcript.digest_context_encap_il1il2 = NULL;
    2415            0 :                     return LIBSPDM_STATUS_CRYPTO_ERROR;
    2416              :                 }
    2417              :             }
    2418            5 :             result = libspdm_hash_update (spdm_context->connection_info.algorithm.base_hash_algo,
    2419              :                                           spdm_session_info->session_transcript.digest_context_encap_il1il2,
    2420              :                                           message, message_size);
    2421            5 :             if (!result) {
    2422            0 :                 libspdm_hash_free (spdm_context->connection_info.algorithm.base_hash_algo,
    2423              :                                    spdm_session_info->session_transcript.digest_context_encap_il1il2);
    2424            0 :                 spdm_session_info->session_transcript.digest_context_encap_il1il2 = NULL;
    2425            0 :                 return LIBSPDM_STATUS_CRYPTO_ERROR;
    2426              :             }
    2427              :         }
    2428              : 
    2429           24 :         return LIBSPDM_STATUS_SUCCESS;
    2430              :     }
    2431              : #endif
    2432              : }
    2433            0 : bool libspdm_is_version_supported(const libspdm_context_t *spdm_context, uint8_t version)
    2434              : {
    2435            0 :     if (version == (spdm_context->connection_info.version >> SPDM_VERSION_NUMBER_SHIFT_BIT)) {
    2436            0 :         return true;
    2437              :     }
    2438              : 
    2439            0 :     return false;
    2440              : }
    2441              : 
    2442       274078 : uint8_t libspdm_get_connection_version(const libspdm_context_t *spdm_context)
    2443              : {
    2444       274078 :     return (uint8_t)(spdm_context->connection_info.version >> SPDM_VERSION_NUMBER_SHIFT_BIT);
    2445              : }
    2446              : 
    2447        78812 : bool libspdm_is_capabilities_flag_supported(const libspdm_context_t *spdm_context,
    2448              :                                             bool is_requester,
    2449              :                                             uint32_t requester_capabilities_flag,
    2450              :                                             uint32_t responder_capabilities_flag)
    2451              : {
    2452              :     uint32_t negotiated_requester_capabilities_flag;
    2453              :     uint32_t negotiated_responder_capabilities_flag;
    2454              : 
    2455        78812 :     if (is_requester) {
    2456        74125 :         negotiated_requester_capabilities_flag = spdm_context->local_context.capability.flags;
    2457        74125 :         negotiated_responder_capabilities_flag = spdm_context->connection_info.capability.flags;
    2458              :     } else {
    2459         4687 :         negotiated_requester_capabilities_flag = spdm_context->connection_info.capability.flags;
    2460         4687 :         negotiated_responder_capabilities_flag = spdm_context->local_context.capability.flags;
    2461              :     }
    2462              : 
    2463        78812 :     if (((requester_capabilities_flag == 0) ||
    2464        74960 :          ((negotiated_requester_capabilities_flag &
    2465        72119 :            requester_capabilities_flag) != 0)) &&
    2466        70563 :         ((responder_capabilities_flag == 0) ||
    2467        70563 :          ((negotiated_responder_capabilities_flag &
    2468              :            responder_capabilities_flag) != 0))) {
    2469        71175 :         return true;
    2470              :     } else {
    2471         7637 :         return false;
    2472              :     }
    2473              : }
    2474              : 
    2475            0 : bool libspdm_is_capabilities_ext_flag_supported(const libspdm_context_t *spdm_context,
    2476              :                                                 bool is_requester,
    2477              :                                                 uint16_t requester_capabilities_ext_flag,
    2478              :                                                 uint16_t responder_capabilities_ext_flag)
    2479              : {
    2480              :     uint16_t negotiated_requester_capabilities_ext_flag;
    2481              :     uint16_t negotiated_responder_capabilities_ext_flag;
    2482              : 
    2483            0 :     if (is_requester) {
    2484            0 :         negotiated_requester_capabilities_ext_flag = spdm_context->local_context.capability.ext_flags;
    2485            0 :         negotiated_responder_capabilities_ext_flag = spdm_context->connection_info.capability.ext_flags;
    2486              :     } else {
    2487            0 :         negotiated_requester_capabilities_ext_flag = spdm_context->connection_info.capability.ext_flags;
    2488            0 :         negotiated_responder_capabilities_ext_flag = spdm_context->local_context.capability.ext_flags;
    2489              :     }
    2490              : 
    2491            0 :     if (((requester_capabilities_ext_flag == 0) ||
    2492              :          ((negotiated_requester_capabilities_ext_flag &
    2493            0 :            requester_capabilities_ext_flag) != 0)) &&
    2494            0 :         ((responder_capabilities_ext_flag == 0) ||
    2495              :          ((negotiated_responder_capabilities_ext_flag &
    2496            0 :            responder_capabilities_ext_flag) != 0))) {
    2497            0 :         return true;
    2498              :     } else {
    2499            0 :         return false;
    2500              :     }
    2501              : }
    2502              : 
    2503           33 : bool libspdm_is_encap_supported(const libspdm_context_t *spdm_context)
    2504              : {
    2505           33 :     if (libspdm_get_connection_version(spdm_context) == SPDM_MESSAGE_VERSION_10) {
    2506            0 :         return false;
    2507           33 :     } else if (libspdm_get_connection_version(spdm_context) == SPDM_MESSAGE_VERSION_12) {
    2508              :         /* ENCAP_CAP was erroneously deprecated in SPDM 1.2.0 and 1.2.1, and MUT_AUTH_CAP
    2509              :          * was used in its place. In SPDM 1.2.2 and later ENCAP_CAP is undeprecated. Since
    2510              :          * UpdateVersionNumber must be ignored when checking interoperability libspdm will check
    2511              :          * if ENCAP_CAP or MUT_AUTH_CAP is set. */
    2512            2 :         const bool is_req_encap_cap_supported = libspdm_is_capabilities_flag_supported(
    2513            2 :             spdm_context, spdm_context->local_context.is_requester,
    2514              :             SPDM_GET_CAPABILITIES_REQUEST_FLAGS_ENCAP_CAP, 0);
    2515            2 :         const bool is_req_mut_auth_cap_supported = libspdm_is_capabilities_flag_supported(
    2516            2 :             spdm_context, spdm_context->local_context.is_requester,
    2517              :             SPDM_GET_CAPABILITIES_REQUEST_FLAGS_MUT_AUTH_CAP, 0);
    2518            2 :         const bool is_rsp_encap_cap_supported = libspdm_is_capabilities_flag_supported(
    2519            2 :             spdm_context, spdm_context->local_context.is_requester,
    2520              :             0, SPDM_GET_CAPABILITIES_RESPONSE_FLAGS_ENCAP_CAP);
    2521            2 :         const bool is_rsp_mut_auth_cap_supported = libspdm_is_capabilities_flag_supported(
    2522            2 :             spdm_context, spdm_context->local_context.is_requester,
    2523              :             0, SPDM_GET_CAPABILITIES_RESPONSE_FLAGS_MUT_AUTH_CAP);
    2524              : 
    2525            2 :         return ((is_req_encap_cap_supported || is_req_mut_auth_cap_supported) &&
    2526            0 :                 (is_rsp_encap_cap_supported || is_rsp_mut_auth_cap_supported));
    2527              :     } else {
    2528              :         /* For SPDM 1.1 and 1.3 and later only check ENCAP_CAP. */
    2529           31 :         return libspdm_is_capabilities_flag_supported(
    2530           31 :             spdm_context, spdm_context->local_context.is_requester,
    2531              :             SPDM_GET_CAPABILITIES_REQUEST_FLAGS_ENCAP_CAP,
    2532              :             SPDM_GET_CAPABILITIES_RESPONSE_FLAGS_ENCAP_CAP);
    2533              :     }
    2534              : }
    2535              : 
    2536          117 : void libspdm_register_device_io_func(
    2537              :     void *spdm_context, libspdm_device_send_message_func send_message,
    2538              :     libspdm_device_receive_message_func receive_message)
    2539              : {
    2540              :     libspdm_context_t *context;
    2541              : 
    2542          117 :     context = spdm_context;
    2543          117 :     context->send_message = send_message;
    2544          117 :     context->receive_message = receive_message;
    2545          117 : }
    2546              : 
    2547          118 : void libspdm_register_device_buffer_func(
    2548              :     void *spdm_context,
    2549              :     uint32_t sender_buffer_size,
    2550              :     uint32_t receiver_buffer_size,
    2551              :     libspdm_device_acquire_sender_buffer_func acquire_sender_buffer,
    2552              :     libspdm_device_release_sender_buffer_func release_sender_buffer,
    2553              :     libspdm_device_acquire_receiver_buffer_func acquire_receiver_buffer,
    2554              :     libspdm_device_release_receiver_buffer_func release_receiver_buffer)
    2555              : {
    2556              :     libspdm_context_t *context;
    2557              : 
    2558          118 :     context = spdm_context;
    2559          118 :     context->sender_buffer_size = sender_buffer_size;
    2560          118 :     context->receiver_buffer_size = receiver_buffer_size;
    2561          118 :     context->acquire_sender_buffer = acquire_sender_buffer;
    2562          118 :     context->release_sender_buffer = release_sender_buffer;
    2563          118 :     context->acquire_receiver_buffer = acquire_receiver_buffer;
    2564          118 :     context->release_receiver_buffer = release_receiver_buffer;
    2565              : 
    2566          118 :     LIBSPDM_ASSERT (sender_buffer_size >=
    2567              :                     context->local_context.capability.transport_header_size +
    2568              :                     context->local_context.capability.transport_tail_size);
    2569          118 :     sender_buffer_size -= (context->local_context.capability.transport_header_size +
    2570          118 :                            context->local_context.capability.transport_tail_size);
    2571          118 :     LIBSPDM_ASSERT (sender_buffer_size >= SPDM_MIN_DATA_TRANSFER_SIZE_VERSION_12);
    2572          118 :     context->local_context.capability.sender_data_transfer_size = sender_buffer_size;
    2573              : 
    2574          118 :     LIBSPDM_ASSERT(receiver_buffer_size >=
    2575              :                    context->local_context.capability.transport_header_size +
    2576              :                    context->local_context.capability.transport_tail_size);
    2577          118 :     receiver_buffer_size -= (context->local_context.capability.transport_header_size +
    2578          118 :                              context->local_context.capability.transport_tail_size);
    2579          118 :     LIBSPDM_ASSERT (receiver_buffer_size >= SPDM_MIN_DATA_TRANSFER_SIZE_VERSION_12);
    2580          118 :     context->local_context.capability.data_transfer_size = receiver_buffer_size;
    2581          118 : }
    2582              : 
    2583          119 : void libspdm_register_transport_layer_func(
    2584              :     void *spdm_context,
    2585              :     uint32_t max_spdm_msg_size,
    2586              :     uint32_t transport_header_size,
    2587              :     uint32_t transport_tail_size,
    2588              :     libspdm_transport_encode_message_func transport_encode_message,
    2589              :     libspdm_transport_decode_message_func transport_decode_message)
    2590              : {
    2591              :     libspdm_context_t *context;
    2592              : 
    2593          119 :     context = spdm_context;
    2594              : 
    2595              :     /* fix the data_transfer_size if it is set before */
    2596          119 :     if ((context->local_context.capability.data_transfer_size != 0) &&
    2597            1 :         (context->local_context.capability.data_transfer_size ==
    2598            1 :          context->receiver_buffer_size)) {
    2599            0 :         context->local_context.capability.data_transfer_size =
    2600            0 :             (uint32_t)(context->receiver_buffer_size -
    2601            0 :                        (transport_header_size + transport_tail_size));
    2602              :     }
    2603          119 :     if ((context->local_context.capability.sender_data_transfer_size != 0) &&
    2604            1 :         (context->local_context.capability.sender_data_transfer_size ==
    2605            1 :          context->sender_buffer_size)) {
    2606            0 :         context->local_context.capability.sender_data_transfer_size =
    2607            0 :             (uint32_t)(context->sender_buffer_size -
    2608            0 :                        (transport_header_size + transport_tail_size));
    2609              :     }
    2610              : 
    2611          119 :     context->local_context.capability.max_spdm_msg_size = max_spdm_msg_size;
    2612          119 :     context->local_context.capability.transport_header_size = transport_header_size;
    2613          119 :     context->local_context.capability.transport_tail_size = transport_tail_size;
    2614          119 :     context->transport_encode_message = transport_encode_message;
    2615          119 :     context->transport_decode_message = transport_decode_message;
    2616          119 : }
    2617              : 
    2618            0 : void libspdm_register_verify_spdm_cert_chain_func(
    2619              :     void *spdm_context,
    2620              :     const libspdm_verify_spdm_cert_chain_func verify_spdm_cert_chain)
    2621              : {
    2622              :     libspdm_context_t *context;
    2623              : 
    2624            0 :     context = spdm_context;
    2625            0 :     context->local_context.verify_peer_spdm_cert_chain = verify_spdm_cert_chain;
    2626            0 : }
    2627              : 
    2628          122 : size_t libspdm_get_sizeof_required_scratch_buffer (void *spdm_context)
    2629              : {
    2630              :     libspdm_context_t *context;
    2631              :     size_t scratch_buffer_size;
    2632              : 
    2633          122 :     context = spdm_context;
    2634          122 :     LIBSPDM_ASSERT (context->local_context.capability.max_spdm_msg_size != 0);
    2635              : 
    2636          122 :     scratch_buffer_size = libspdm_get_scratch_buffer_capacity(context);
    2637          122 :     return scratch_buffer_size;
    2638              : }
    2639              : 
    2640          122 : void libspdm_set_scratch_buffer (
    2641              :     void *spdm_context,
    2642              :     void *scratch_buffer,
    2643              :     size_t scratch_buffer_size)
    2644              : {
    2645              :     libspdm_context_t *context;
    2646              : 
    2647          122 :     context = spdm_context;
    2648          122 :     LIBSPDM_ASSERT (context->local_context.capability.max_spdm_msg_size != 0);
    2649          122 :     LIBSPDM_ASSERT (scratch_buffer_size >= libspdm_get_scratch_buffer_capacity(spdm_context));
    2650          122 :     context->scratch_buffer = scratch_buffer;
    2651          122 :     context->scratch_buffer_size = scratch_buffer_size;
    2652          122 :     context->last_spdm_request = (uint8_t *)scratch_buffer +
    2653          122 :                                  libspdm_get_scratch_buffer_last_spdm_request_offset(spdm_context);
    2654              : #if LIBSPDM_RESPOND_IF_READY_SUPPORT
    2655          122 :     context->cache_spdm_request = (uint8_t *)scratch_buffer +
    2656          122 :                                   libspdm_get_scratch_buffer_cache_spdm_request_offset(spdm_context);
    2657              : #endif
    2658          122 : }
    2659              : 
    2660       136913 : void libspdm_get_scratch_buffer (
    2661              :     void *spdm_context,
    2662              :     void **scratch_buffer,
    2663              :     size_t *scratch_buffer_size)
    2664              : {
    2665              :     libspdm_context_t *context;
    2666              : 
    2667       136913 :     context = spdm_context;
    2668       136913 :     LIBSPDM_ASSERT (context->scratch_buffer != NULL);
    2669       136913 :     LIBSPDM_ASSERT (context->scratch_buffer_size >=
    2670              :                     libspdm_get_scratch_buffer_capacity(spdm_context));
    2671       136913 :     *scratch_buffer = context->scratch_buffer;
    2672       136913 :     *scratch_buffer_size = context->scratch_buffer_size;
    2673              :     /* need to remove last 2 sections, because they are for libspdm internal state track. */
    2674       136913 :     *scratch_buffer_size -= libspdm_get_scratch_buffer_last_spdm_request_capacity(spdm_context);
    2675              : #if LIBSPDM_RESPOND_IF_READY_SUPPORT
    2676       136913 :     *scratch_buffer_size -= libspdm_get_scratch_buffer_cache_spdm_request_capacity(spdm_context);
    2677              : #endif
    2678       136913 : }
    2679              : 
    2680         2695 : libspdm_return_t libspdm_acquire_sender_buffer (
    2681              :     libspdm_context_t *spdm_context, size_t *max_msg_size, void **msg_buf_ptr)
    2682              : {
    2683              :     libspdm_return_t status;
    2684              : 
    2685         2695 :     LIBSPDM_ASSERT (spdm_context->sender_buffer == NULL);
    2686         2695 :     LIBSPDM_ASSERT (spdm_context->sender_buffer_size != 0);
    2687         2695 :     status = spdm_context->acquire_sender_buffer (spdm_context, msg_buf_ptr);
    2688         2695 :     if (status != LIBSPDM_STATUS_SUCCESS) {
    2689            7 :         return status;
    2690              :     }
    2691         2688 :     spdm_context->sender_buffer = *msg_buf_ptr;
    2692         2688 :     *max_msg_size = spdm_context->sender_buffer_size;
    2693              :     #if LIBSPDM_ENABLE_CAPABILITY_CHUNK_CAP
    2694              :     /* it return scratch buffer, because the requester need build message there.*/
    2695         5376 :     *msg_buf_ptr = (uint8_t *)spdm_context->scratch_buffer +
    2696         2688 :                    libspdm_get_scratch_buffer_large_sender_receiver_offset(spdm_context);
    2697         2688 :     *max_msg_size = libspdm_get_scratch_buffer_large_sender_receiver_capacity(spdm_context);
    2698              :     #endif
    2699         2688 :     return LIBSPDM_STATUS_SUCCESS;
    2700              : }
    2701              : 
    2702         2688 : void libspdm_release_sender_buffer (libspdm_context_t *spdm_context)
    2703              : {
    2704         2688 :     LIBSPDM_ASSERT(spdm_context->sender_buffer != NULL);
    2705         2688 :     LIBSPDM_ASSERT(spdm_context->sender_buffer_size != 0);
    2706              : 
    2707         2688 :     spdm_context->release_sender_buffer (spdm_context, spdm_context->sender_buffer);
    2708         2688 :     spdm_context->sender_buffer = NULL;
    2709         2688 : }
    2710              : 
    2711        68304 : void libspdm_get_sender_buffer (
    2712              :     libspdm_context_t *spdm_context,
    2713              :     void **sender_buffer,
    2714              :     size_t *sender_buffer_size)
    2715              : {
    2716        68304 :     *sender_buffer = spdm_context->sender_buffer;
    2717        68304 :     *sender_buffer_size = spdm_context->sender_buffer_size;
    2718        68304 : }
    2719              : 
    2720         2645 : libspdm_return_t libspdm_acquire_receiver_buffer (
    2721              :     libspdm_context_t *spdm_context, size_t *max_msg_size, void **msg_buf_ptr)
    2722              : {
    2723              :     libspdm_return_t status;
    2724              : 
    2725         2645 :     LIBSPDM_ASSERT (spdm_context->receiver_buffer == NULL);
    2726         2645 :     LIBSPDM_ASSERT (spdm_context->receiver_buffer_size != 0);
    2727         2645 :     status = spdm_context->acquire_receiver_buffer (spdm_context, msg_buf_ptr);
    2728         2645 :     if (status != LIBSPDM_STATUS_SUCCESS) {
    2729            7 :         return status;
    2730              :     }
    2731         2638 :     spdm_context->receiver_buffer = *msg_buf_ptr;
    2732         2638 :     *max_msg_size = spdm_context->receiver_buffer_size;
    2733              :     #if LIBSPDM_ENABLE_CAPABILITY_CHUNK_CAP
    2734              :     /* it return scratch buffer, because the requester need build message there.*/
    2735         5276 :     *msg_buf_ptr = (uint8_t *)spdm_context->scratch_buffer +
    2736         2638 :                    libspdm_get_scratch_buffer_large_sender_receiver_offset(spdm_context);
    2737         2638 :     *max_msg_size = libspdm_get_scratch_buffer_large_sender_receiver_capacity(spdm_context);
    2738              :     #endif
    2739         2638 :     return LIBSPDM_STATUS_SUCCESS;
    2740              : }
    2741              : 
    2742         2638 : void libspdm_release_receiver_buffer (libspdm_context_t *spdm_context)
    2743              : {
    2744         2638 :     LIBSPDM_ASSERT(spdm_context->receiver_buffer != NULL);
    2745         2638 :     LIBSPDM_ASSERT(spdm_context->receiver_buffer_size != 0);
    2746              : 
    2747         2638 :     spdm_context->release_receiver_buffer (spdm_context, spdm_context->receiver_buffer);
    2748         2638 :     spdm_context->receiver_buffer = NULL;
    2749         2638 : }
    2750              : 
    2751            0 : void libspdm_get_receiver_buffer (
    2752              :     libspdm_context_t *spdm_context,
    2753              :     void **receiver_buffer,
    2754              :     size_t *receiver_buffer_size)
    2755              : {
    2756            0 :     *receiver_buffer = spdm_context->receiver_buffer;
    2757            0 :     *receiver_buffer_size = spdm_context->receiver_buffer_size;
    2758            0 : }
    2759              : 
    2760            0 : void libspdm_get_last_spdm_error_struct(void *spdm_context, libspdm_error_struct_t *last_spdm_error)
    2761              : {
    2762              :     libspdm_context_t *context;
    2763              : 
    2764            0 :     context = spdm_context;
    2765            0 :     libspdm_copy_mem(last_spdm_error, sizeof(libspdm_error_struct_t),
    2766            0 :                      &context->last_spdm_error,sizeof(libspdm_error_struct_t));
    2767            0 : }
    2768              : 
    2769        68402 : void libspdm_set_last_spdm_error_struct(void *spdm_context, libspdm_error_struct_t *last_spdm_error)
    2770              : {
    2771              :     libspdm_context_t *context;
    2772              : 
    2773        68402 :     context = spdm_context;
    2774        68402 :     libspdm_copy_mem(&context->last_spdm_error, sizeof(context->last_spdm_error),
    2775              :                      last_spdm_error, sizeof(libspdm_error_struct_t));
    2776        68402 : }
    2777              : 
    2778              : #if LIBSPDM_FIPS_MODE
    2779            0 : libspdm_return_t libspdm_init_fips_selftest_context(void *fips_selftest_context,
    2780              :                                                     size_t buffer_size,
    2781              :                                                     void *buffer)
    2782              : {
    2783              :     libspdm_fips_selftest_context_t *context;
    2784            0 :     LIBSPDM_ASSERT(fips_selftest_context != NULL);
    2785              :     LIBSPDM_ASSERT(buffer_size >= LIBSPDM_FIPS_REQUIRED_BUFFER_SIZE);
    2786            0 :     if (buffer_size > 0) {
    2787            0 :         LIBSPDM_ASSERT(buffer != NULL);
    2788              :     }
    2789              : 
    2790            0 :     context = fips_selftest_context;
    2791              : 
    2792              :     /*No tested for every used algo*/
    2793            0 :     context->tested_algo = 0;
    2794              :     /*self_test result is false for every used algo*/
    2795            0 :     context->self_test_result = 0;
    2796              :     /*The buffer provided by integrator to hold large intermediate results*/
    2797            0 :     context->selftest_buffer_size = buffer_size;
    2798            0 :     context->selftest_buffer = buffer;
    2799              : 
    2800            0 :     return LIBSPDM_STATUS_SUCCESS;
    2801              : }
    2802              : 
    2803            0 : size_t libspdm_get_fips_selftest_context_size(void)
    2804              : {
    2805              :     size_t size;
    2806              : 
    2807            0 :     size = sizeof(libspdm_fips_selftest_context_t);
    2808            0 :     return size;
    2809              : }
    2810              : 
    2811            0 : size_t libspdm_get_fips_selftest_buffer_size(void)
    2812              : {
    2813            0 :     return LIBSPDM_FIPS_REQUIRED_BUFFER_SIZE;
    2814              : }
    2815              : 
    2816            0 : bool libspdm_import_fips_selftest_context_to_spdm_context(void *spdm_context,
    2817              :                                                           void *fips_selftest_context,
    2818              :                                                           size_t fips_selftest_context_size)
    2819              : {
    2820              :     libspdm_fips_selftest_context_t *libspdm_fips_selftest_context;
    2821              :     libspdm_context_t *libspdm_context;
    2822              : 
    2823            0 :     libspdm_context = spdm_context;
    2824            0 :     libspdm_fips_selftest_context = fips_selftest_context;
    2825              : 
    2826            0 :     if ((libspdm_context == NULL) || (libspdm_fips_selftest_context == NULL)) {
    2827            0 :         return false;
    2828              :     }
    2829            0 :     if (fips_selftest_context_size != sizeof(libspdm_fips_selftest_context_t)) {
    2830            0 :         return false;
    2831              :     }
    2832              : 
    2833            0 :     libspdm_copy_mem(&(libspdm_context->fips_selftest_context),
    2834              :                      sizeof(libspdm_fips_selftest_context_t),
    2835              :                      libspdm_fips_selftest_context, sizeof(libspdm_fips_selftest_context_t));
    2836            0 :     return true;
    2837              : }
    2838              : 
    2839            0 : bool libspdm_export_fips_selftest_context_from_spdm_context(void *spdm_context,
    2840              :                                                             void *fips_selftest_context,
    2841              :                                                             size_t fips_selftest_context_size)
    2842              : {
    2843              :     libspdm_fips_selftest_context_t *libspdm_fips_selftest_context;
    2844              :     libspdm_context_t *libspdm_context;
    2845              : 
    2846            0 :     libspdm_context = spdm_context;
    2847            0 :     libspdm_fips_selftest_context = fips_selftest_context;
    2848              : 
    2849            0 :     if ((libspdm_context == NULL) || (libspdm_fips_selftest_context == NULL)) {
    2850            0 :         return false;
    2851              :     }
    2852            0 :     if (fips_selftest_context_size != sizeof(libspdm_fips_selftest_context_t)) {
    2853            0 :         return false;
    2854              :     }
    2855              : 
    2856            0 :     libspdm_copy_mem(libspdm_fips_selftest_context,
    2857              :                      sizeof(libspdm_fips_selftest_context_t),
    2858            0 :                      &(libspdm_context->fips_selftest_context),
    2859              :                      sizeof(libspdm_fips_selftest_context_t));
    2860            0 :     return true;
    2861              : }
    2862              : 
    2863              : #endif /* LIBSPDM_FIPS_MODE */
    2864              : 
    2865          125 : libspdm_return_t libspdm_init_context_with_secured_context(void *spdm_context,
    2866              :                                                            void **secured_contexts,
    2867              :                                                            size_t num_secured_contexts)
    2868              : {
    2869              :     libspdm_context_t *context;
    2870              :     size_t index;
    2871              : 
    2872          125 :     LIBSPDM_ASSERT(spdm_context != NULL);
    2873          125 :     LIBSPDM_ASSERT(secured_contexts != NULL);
    2874          125 :     LIBSPDM_ASSERT(num_secured_contexts == LIBSPDM_MAX_SESSION_COUNT);
    2875              : 
    2876          125 :     context = spdm_context;
    2877          125 :     libspdm_zero_mem(context, sizeof(libspdm_context_t));
    2878          125 :     context->version = LIBSPDM_CONTEXT_STRUCT_VERSION;
    2879          125 :     context->transcript.message_a.max_buffer_size =
    2880              :         sizeof(context->transcript.message_a.buffer);
    2881          125 :     context->transcript.message_d.max_buffer_size =
    2882              :         sizeof(context->transcript.message_d.buffer);
    2883              : #if LIBSPDM_RECORD_TRANSCRIPT_DATA_SUPPORT
    2884              :     context->transcript.message_b.max_buffer_size =
    2885              :         sizeof(context->transcript.message_b.buffer);
    2886              :     context->transcript.message_c.max_buffer_size =
    2887              :         sizeof(context->transcript.message_c.buffer);
    2888              :     context->transcript.message_mut_b.max_buffer_size =
    2889              :         sizeof(context->transcript.message_mut_b.buffer);
    2890              :     context->transcript.message_mut_c.max_buffer_size =
    2891              :         sizeof(context->transcript.message_mut_c.buffer);
    2892              :     context->transcript.message_m.max_buffer_size =
    2893              :         sizeof(context->transcript.message_m.buffer);
    2894              :     context->transcript.message_e.max_buffer_size =
    2895              :         sizeof(context->transcript.message_e.buffer);
    2896              :     context->transcript.message_encap_e.max_buffer_size =
    2897              :         sizeof(context->transcript.message_encap_e.buffer);
    2898              : #endif
    2899          125 :     context->response_state = LIBSPDM_RESPONSE_STATE_NORMAL;
    2900          125 :     context->local_context.version.spdm_version_count = SPDM_MAX_VERSION_COUNT;
    2901          125 :     context->local_context.version.spdm_version[0] = SPDM_MESSAGE_VERSION_10 <<
    2902              :                                                      SPDM_VERSION_NUMBER_SHIFT_BIT;
    2903          125 :     context->local_context.version.spdm_version[1] = SPDM_MESSAGE_VERSION_11 <<
    2904              :                                                      SPDM_VERSION_NUMBER_SHIFT_BIT;
    2905          125 :     context->local_context.version.spdm_version[2] = SPDM_MESSAGE_VERSION_12 <<
    2906              :                                                      SPDM_VERSION_NUMBER_SHIFT_BIT;
    2907          125 :     context->local_context.version.spdm_version[3] = SPDM_MESSAGE_VERSION_13 <<
    2908              :                                                      SPDM_VERSION_NUMBER_SHIFT_BIT;
    2909          125 :     context->local_context.version.spdm_version[4] = SPDM_MESSAGE_VERSION_14 <<
    2910              :                                                      SPDM_VERSION_NUMBER_SHIFT_BIT;
    2911          125 :     context->local_context.secured_message_version.secured_message_version_count =
    2912              :         SECURED_SPDM_MAX_VERSION_COUNT;
    2913          125 :     context->local_context.secured_message_version.secured_message_version[0] =
    2914              :         SECURED_SPDM_VERSION_10 << SPDM_VERSION_NUMBER_SHIFT_BIT;
    2915          125 :     context->local_context.secured_message_version.secured_message_version[1] =
    2916              :         SECURED_SPDM_VERSION_11 << SPDM_VERSION_NUMBER_SHIFT_BIT;
    2917          125 :     context->local_context.secured_message_version.secured_message_version[2] =
    2918              :         SECURED_SPDM_VERSION_12 << SPDM_VERSION_NUMBER_SHIFT_BIT;
    2919          125 :     context->local_context.capability.st1 = SPDM_ST1_VALUE_US;
    2920              : 
    2921          125 :     context->mut_auth_cert_chain_buffer_size = 0;
    2922              : 
    2923          125 :     context->max_spdm_session_sequence_number = LIBSPDM_MAX_SPDM_SESSION_SEQUENCE_NUMBER;
    2924              : 
    2925          125 :     context->latest_session_id = INVALID_SESSION_ID;
    2926          125 :     context->last_spdm_request_session_id = INVALID_SESSION_ID;
    2927          125 :     context->last_spdm_request_session_id_valid = false;
    2928          125 :     context->last_spdm_request_size = 0;
    2929              : 
    2930              :     /* To be updated in libspdm_register_device_buffer_func */
    2931          125 :     context->local_context.capability.data_transfer_size = 0;
    2932          125 :     context->local_context.capability.sender_data_transfer_size = 0;
    2933          125 :     context->local_context.capability.max_spdm_msg_size = 0;
    2934              : 
    2935          625 :     for (index = 0; index < num_secured_contexts; index++) {
    2936          500 :         if (secured_contexts[index] == NULL) {
    2937            0 :             return LIBSPDM_STATUS_INVALID_PARAMETER;
    2938              :         }
    2939              : 
    2940          500 :         context->session_info[index].secured_message_context = secured_contexts[index];
    2941          500 :         libspdm_secured_message_init_context(
    2942              :             context->session_info[index].secured_message_context);
    2943              :     }
    2944              : 
    2945          125 :     return LIBSPDM_STATUS_SUCCESS;
    2946              : }
    2947              : 
    2948          124 : libspdm_return_t libspdm_init_context(void *spdm_context)
    2949              : {
    2950              :     libspdm_context_t *context;
    2951              :     void *secured_context;
    2952              :     void *secured_contexts[LIBSPDM_MAX_SESSION_COUNT];
    2953              :     size_t secured_context_size;
    2954              :     size_t index;
    2955              : 
    2956          124 :     LIBSPDM_ASSERT(spdm_context != NULL);
    2957              : 
    2958              :     /* libspdm_get_context_size() allocates space for all secured message
    2959              :      * contexts. They are appended to the general SPDM context. */
    2960          124 :     context = spdm_context;
    2961          124 :     secured_context = (void *)((size_t)(context + 1));
    2962          124 :     secured_context_size = libspdm_secured_message_get_context_size();
    2963              : 
    2964          620 :     for (index = 0; index < LIBSPDM_MAX_SESSION_COUNT; index++)
    2965              :     {
    2966          496 :         secured_contexts[index] = (uint8_t *)secured_context + secured_context_size * index;
    2967              :     }
    2968              : 
    2969          124 :     return libspdm_init_context_with_secured_context(spdm_context,
    2970              :                                                      secured_contexts,
    2971              :                                                      LIBSPDM_MAX_SESSION_COUNT);
    2972              : }
    2973              : 
    2974           45 : void libspdm_reset_context(void *spdm_context)
    2975              : {
    2976              :     libspdm_context_t *context;
    2977              :     size_t index;
    2978              : #if !(LIBSPDM_RECORD_TRANSCRIPT_DATA_SUPPORT)
    2979              :     void *pubkey_context;
    2980              :     bool is_requester;
    2981              :     uint8_t slot_index;
    2982              : #endif
    2983              : 
    2984           45 :     context = spdm_context;
    2985              : #if !(LIBSPDM_RECORD_TRANSCRIPT_DATA_SUPPORT)
    2986           45 :     is_requester = context->local_context.is_requester;
    2987              : #endif
    2988              : 
    2989              :     /* Clear all information about previous connection. Local context information is preserved. */
    2990              : 
    2991              :     /* Need to clear session information and message transcripts before negotiated algorithm
    2992              :      * information is cleared. */
    2993          225 :     for (index = 0; index < LIBSPDM_MAX_SESSION_COUNT; index++)
    2994              :     {
    2995          180 :         libspdm_session_info_init(context,
    2996              :                                   &context->session_info[index],
    2997              :                                   INVALID_SESSION_ID,
    2998              :                                   0,
    2999              :                                   false);
    3000              :     }
    3001              : 
    3002           45 :     libspdm_reset_message_a(spdm_context);
    3003           45 :     libspdm_reset_message_d(spdm_context);
    3004           45 :     libspdm_reset_message_b(spdm_context);
    3005           45 :     libspdm_reset_message_c(spdm_context);
    3006           45 :     libspdm_reset_message_mut_b(spdm_context);
    3007           45 :     libspdm_reset_message_mut_c(spdm_context);
    3008           45 :     libspdm_reset_message_m(spdm_context, NULL);
    3009           45 :     libspdm_reset_message_e(spdm_context, NULL);
    3010           45 :     libspdm_reset_message_encap_e(spdm_context, NULL);
    3011              : 
    3012              : #if !(LIBSPDM_RECORD_TRANSCRIPT_DATA_SUPPORT)
    3013              :     /* Free the peer leaf certificate public key contexts while the negotiated
    3014              :      * algorithm they were parsed under is still known; that algorithm is cleared
    3015              :      * below, and these contexts are otherwise only released in
    3016              :      * libspdm_deinit_context, so they leak across every re-connection. */
    3017          405 :     for (slot_index = 0; slot_index < SPDM_MAX_SLOT_COUNT; slot_index++) {
    3018          360 :         pubkey_context = context->connection_info.peer_used_cert_chain[slot_index].
    3019              :                          leaf_cert_public_key;
    3020              : 
    3021          360 :         if (pubkey_context != NULL) {
    3022            1 :             if (is_requester) {
    3023            1 :                 if (context->connection_info.algorithm.pqc_asym_algo != 0) {
    3024            0 :                     libspdm_pqc_asym_free(
    3025              :                         context->connection_info.algorithm.pqc_asym_algo, pubkey_context);
    3026              :                 } else {
    3027            1 :                     libspdm_asym_free(
    3028              :                         context->connection_info.algorithm.base_asym_algo, pubkey_context);
    3029              :                 }
    3030              :             } else {
    3031            0 :                 if (context->connection_info.algorithm.req_pqc_asym_alg != 0) {
    3032            0 :                     libspdm_req_pqc_asym_free(
    3033              :                         context->connection_info.algorithm.req_pqc_asym_alg, pubkey_context);
    3034              :                 } else {
    3035            0 :                     libspdm_req_asym_free(
    3036            0 :                         context->connection_info.algorithm.req_base_asym_alg, pubkey_context);
    3037              :                 }
    3038              :             }
    3039              : 
    3040            1 :             context->connection_info.peer_used_cert_chain[slot_index].leaf_cert_public_key = NULL;
    3041              :         }
    3042              :     }
    3043              : #endif
    3044              : 
    3045           45 :     context->connection_info.connection_state = LIBSPDM_CONNECTION_STATE_NOT_STARTED;
    3046           45 :     libspdm_zero_mem(&context->connection_info.version, sizeof(spdm_version_number_t));
    3047           45 :     libspdm_zero_mem(&context->connection_info.capability,
    3048              :                      sizeof(libspdm_device_capability_t));
    3049           45 :     libspdm_zero_mem(&context->connection_info.algorithm, sizeof(libspdm_device_algorithm_t));
    3050           45 :     libspdm_zero_mem(&context->last_spdm_error, sizeof(libspdm_error_struct_t));
    3051           45 :     libspdm_zero_mem(&context->encap_context, sizeof(libspdm_encap_context_t));
    3052           45 :     context->connection_info.multi_key_conn_req = false;
    3053           45 :     context->connection_info.multi_key_conn_rsp = false;
    3054              : #if LIBSPDM_RESPOND_IF_READY_SUPPORT
    3055           45 :     context->cache_spdm_request_size = 0;
    3056              : #endif
    3057           45 :     context->response_state = LIBSPDM_RESPONSE_STATE_NORMAL;
    3058           45 :     context->current_token = 0;
    3059           45 :     context->latest_session_id = INVALID_SESSION_ID;
    3060           45 :     context->last_spdm_request_session_id = INVALID_SESSION_ID;
    3061           45 :     context->last_spdm_request_session_id_valid = false;
    3062           45 :     context->last_spdm_request_size = 0;
    3063           45 :     context->mut_auth_cert_chain_buffer_size = 0;
    3064           45 :     context->current_dhe_session_count = 0;
    3065           45 :     context->current_psk_session_count = 0;
    3066           45 : }
    3067              : 
    3068            0 : void libspdm_deinit_context(void *spdm_context)
    3069              : {
    3070              :     uint32_t session_id;
    3071              :     libspdm_context_t *context;
    3072              :     libspdm_session_info_t *session_info;
    3073              : #if !(LIBSPDM_RECORD_TRANSCRIPT_DATA_SUPPORT)
    3074              :     void *pubkey_context;
    3075              :     bool is_requester;
    3076              :     uint8_t slot_index;
    3077              : #endif
    3078              : 
    3079            0 :     context = spdm_context;
    3080              : 
    3081              : #if !(LIBSPDM_RECORD_TRANSCRIPT_DATA_SUPPORT)
    3082            0 :     is_requester = context->local_context.is_requester;
    3083              : 
    3084            0 :     for (slot_index = 0; slot_index < SPDM_MAX_SLOT_COUNT; slot_index++) {
    3085            0 :         pubkey_context = context->connection_info.peer_used_cert_chain[slot_index].
    3086              :                          leaf_cert_public_key;
    3087              : 
    3088            0 :         if (pubkey_context != NULL) {
    3089            0 :             if (is_requester) {
    3090            0 :                 if (context->connection_info.algorithm.pqc_asym_algo != 0) {
    3091            0 :                     libspdm_pqc_asym_free(
    3092              :                         context->connection_info.algorithm.pqc_asym_algo, pubkey_context);
    3093              :                 } else {
    3094            0 :                     libspdm_asym_free(
    3095              :                         context->connection_info.algorithm.base_asym_algo, pubkey_context);
    3096              :                 }
    3097              :             } else {
    3098            0 :                 if (context->connection_info.algorithm.req_pqc_asym_alg != 0) {
    3099            0 :                     libspdm_req_pqc_asym_free(
    3100              :                         context->connection_info.algorithm.req_pqc_asym_alg, pubkey_context);
    3101              :                 } else {
    3102            0 :                     libspdm_req_asym_free(
    3103            0 :                         context->connection_info.algorithm.req_base_asym_alg, pubkey_context);
    3104              :                 }
    3105              :             }
    3106              : 
    3107            0 :             context->connection_info.peer_used_cert_chain[slot_index].leaf_cert_public_key = NULL;
    3108              :         }
    3109              :     }
    3110              : #endif
    3111              : 
    3112            0 :     libspdm_reset_message_a(context);
    3113            0 :     libspdm_reset_message_d(context);
    3114            0 :     libspdm_reset_message_b(context);
    3115            0 :     libspdm_reset_message_c(context);
    3116            0 :     libspdm_reset_message_mut_b(context);
    3117            0 :     libspdm_reset_message_mut_c(context);
    3118            0 :     libspdm_reset_message_m(spdm_context, NULL);
    3119            0 :     libspdm_reset_message_e(spdm_context, NULL);
    3120            0 :     libspdm_reset_message_encap_e(spdm_context, NULL);
    3121            0 :     for (session_id = 0; session_id < LIBSPDM_MAX_SESSION_COUNT; session_id++) {
    3122            0 :         session_info = &context->session_info[session_id];
    3123            0 :         libspdm_reset_message_m(context, session_info);
    3124            0 :         libspdm_reset_message_e(context, session_info);
    3125            0 :         libspdm_reset_message_encap_e(context, session_info);
    3126            0 :         libspdm_reset_message_encap_d(session_info);
    3127            0 :         libspdm_reset_message_k(context, session_info);
    3128            0 :         libspdm_reset_message_f(context, session_info);
    3129              :     }
    3130            0 : }
    3131              : 
    3132          124 : size_t libspdm_get_context_size(void)
    3133              : {
    3134              :     size_t size;
    3135              : 
    3136          124 :     size = sizeof(libspdm_context_t) +
    3137          124 :            libspdm_secured_message_get_context_size() * LIBSPDM_MAX_SESSION_COUNT;
    3138          124 :     LIBSPDM_ASSERT (size == LIBSPDM_CONTEXT_SIZE_ALL);
    3139          124 :     return size;
    3140              : }
    3141              : 
    3142            1 : size_t libspdm_get_context_size_without_secured_context(void)
    3143              : {
    3144              :     size_t size;
    3145              : 
    3146            1 :     size = sizeof(libspdm_context_t);
    3147            1 :     LIBSPDM_ASSERT (size == LIBSPDM_CONTEXT_SIZE_WITHOUT_SECURED_CONTEXT);
    3148            1 :     return size;
    3149              : }
    3150              : 
    3151          253 : uint8_t libspdm_get_version_from_version_number(spdm_version_number_t ver)
    3152              : {
    3153          253 :     return (uint8_t)(ver >> SPDM_VERSION_NUMBER_SHIFT_BIT);
    3154              : }
    3155              : 
    3156           60 : void libspdm_version_number_sort(spdm_version_number_t *ver_set, size_t ver_num)
    3157              : {
    3158              :     size_t index;
    3159              :     size_t index_sort;
    3160              :     size_t index_max;
    3161              :     spdm_version_number_t version;
    3162              : 
    3163              :     /* Select sort */
    3164           60 :     if (ver_num > 1) {
    3165          135 :         for (index_sort = 0; index_sort < ver_num; index_sort++) {
    3166          103 :             index_max = index_sort;
    3167          230 :             for (index = index_sort + 1; index < ver_num; index++) {
    3168              :                 /* if ver_ser[index] higher than ver_set[index_max] */
    3169          127 :                 if (ver_set[index] > ver_set[index_max]) {
    3170           74 :                     index_max = index;
    3171              :                 }
    3172              :             }
    3173              :             /* swap ver_ser[index_min] and ver_set[index_sort] */
    3174          103 :             version = ver_set[index_sort];
    3175          103 :             ver_set[index_sort] = ver_set[index_max];
    3176          103 :             ver_set[index_max] = version;
    3177              :         }
    3178              :     }
    3179           60 : }
    3180              : 
    3181           30 : bool libspdm_negotiate_connection_version(spdm_version_number_t *common_version,
    3182              :                                           spdm_version_number_t *req_ver_set,
    3183              :                                           size_t req_ver_num,
    3184              :                                           const spdm_version_number_t *res_ver_set,
    3185              :                                           size_t res_ver_num)
    3186              : {
    3187              :     spdm_version_number_t req_version_list[LIBSPDM_MAX_VERSION_COUNT];
    3188              :     spdm_version_number_t res_version_list[LIBSPDM_MAX_VERSION_COUNT];
    3189              :     size_t req_index;
    3190              :     size_t res_index;
    3191              : 
    3192           30 :     if (req_ver_num > LIBSPDM_MAX_VERSION_COUNT || res_ver_num > LIBSPDM_MAX_VERSION_COUNT) {
    3193            0 :         return false;
    3194              :     }
    3195              : 
    3196           30 :     if (req_ver_set == NULL || req_ver_num == 0 || res_ver_set == NULL || res_ver_num == 0) {
    3197            0 :         return false;
    3198              :     }
    3199              : 
    3200           30 :     libspdm_zero_mem(req_version_list, sizeof(spdm_version_number_t) * LIBSPDM_MAX_VERSION_COUNT);
    3201           30 :     libspdm_zero_mem(res_version_list, sizeof(spdm_version_number_t) * LIBSPDM_MAX_VERSION_COUNT);
    3202              : 
    3203           30 :     libspdm_copy_mem(req_version_list, sizeof(spdm_version_number_t) * LIBSPDM_MAX_VERSION_COUNT,
    3204              :                      req_ver_set, sizeof(spdm_version_number_t) * req_ver_num);
    3205           30 :     libspdm_copy_mem(res_version_list, sizeof(spdm_version_number_t) * LIBSPDM_MAX_VERSION_COUNT,
    3206              :                      res_ver_set, sizeof(spdm_version_number_t) * res_ver_num);
    3207              : 
    3208              :     /* Sort SPDMversion in descending order. */
    3209           30 :     libspdm_version_number_sort(req_version_list, req_ver_num);
    3210           30 :     libspdm_version_number_sort(res_version_list, res_ver_num);
    3211              : 
    3212              :     /**
    3213              :      * Find highest same version and make req_index point to it.
    3214              :      * If not found, return false.
    3215              :      **/
    3216           35 :     for (res_index = 0; res_index < res_ver_num; res_index++) {
    3217           67 :         for (req_index = 0; req_index < req_ver_num; req_index++) {
    3218          124 :             if (libspdm_get_version_from_version_number(req_version_list[req_index]) ==
    3219           62 :                 libspdm_get_version_from_version_number(res_version_list[res_index])) {
    3220           29 :                 *common_version = req_version_list[req_index];
    3221           29 :                 return true;
    3222              :             }
    3223              :         }
    3224              :     }
    3225            1 :     return false;
    3226              : }
    3227              : 
    3228              : #if LIBSPDM_EVENT_RECIPIENT_SUPPORT
    3229           20 : void libspdm_register_event_callback(void *context,
    3230              :                                      libspdm_process_event_func process_event_func)
    3231              : {
    3232              :     libspdm_context_t *spdm_context;
    3233              : 
    3234           20 :     spdm_context = context;
    3235           20 :     spdm_context->process_event = process_event_func;
    3236           20 : }
    3237              : #endif /* LIBSPDM_EVENT_RECIPIENT_SUPPORT */
        

Generated by: LCOV version 2.0-1