initial commit

1 files changed, 239 insertions, 0 deletions

diff --git a/px/packages/tpm.scm b/px/packages/tpm.scm
new file mode 100644
index 0000000..76f9859
--- /dev/null
+++ b/px/packages/tpm.scm
@@ -0,0 +1,239 @@
+(define-module (px packages tpm)
+  #:use-module (gnu packages)
+  #:use-module ((guix licenses) #:prefix license:)
+  #:use-module (guix packages)
+  #:use-module (guix download)
+  #:use-module (guix gexp)
+  #:use-module (guix git-download)
+  #:use-module (guix build-system gnu)
+  #:use-module (guix build-system glib-or-gtk)
+  #:use-module (guix build-system python)
+  #:use-module (gnu packages autotools)
+  #:use-module (gnu packages base)
+  #:use-module (gnu packages bash)
+  #:use-module (gnu packages curl)
+  #:use-module (gnu packages check)
+  #:use-module (gnu packages docbook)
+  #:use-module (gnu packages documentation)
+  #:use-module (gnu packages dns)
+  #:use-module (gnu packages elf)
+  #:use-module (gnu packages flex)
+  #:use-module (gnu packages gettext)
+  #:use-module (gnu packages glib)
+  #:use-module (gnu packages gnupg)
+  #:use-module (gnu packages graphviz)
+  #:use-module (gnu packages gtk)
+  #:use-module (gnu packages hardware)
+  #:use-module (gnu packages libusb)
+  #:use-module (gnu packages linux)
+  #:use-module (gnu packages m4)
+  #:use-module (gnu packages man)
+  #:use-module (gnu packages networking)
+  #:use-module (gnu packages cyrus-sasl)
+  #:use-module (gnu packages popt)
+  #:use-module (gnu packages readline)
+  #:use-module (gnu packages serialization)
+  #:use-module (gnu packages statistics)
+  #:use-module (gnu packages sqlite)
+  #:use-module (gnu packages tls)
+  #:use-module (gnu packages tex)
+  #:use-module (gnu packages perl)
+  #:use-module (gnu packages pkg-config)
+  #:use-module (gnu packages python)
+  #:use-module (gnu packages python-crypto)
+  #:use-module (gnu packages python-xyz)
+  #:use-module (gnu packages security-token)
+  #:use-module (gnu packages swig)
+  #:use-module (gnu packages version-control)
+  #:use-module (gnu packages web)
+  #:use-module (gnu packages xml))
+
+
+(define-public tpm2-tss-openssl-1.1
+  (package
+    (name "tpm2-tss")
+    (version "3.0.3")
+    (source
+     (origin
+       (method url-fetch)
+       (uri (string-append "https://github.com/tpm2-software/tpm2-tss"
+                           "/releases/download/" version "/tpm2-tss-" version
+                           ".tar.gz"))
+       (sha256
+        (base32 "05xynpwq851fp8f5fy7ac0blvz8mr5m5cbqj3gslgbwv63kjnfbq"))))
+    (build-system gnu-build-system)
+    (native-inputs
+     (list pkg-config))
+    (inputs
+     (list curl json-c openssl-1.1))
+    (home-page "https://tpm2-software.github.io/")
+    (synopsis "OSS Implementation of the TCG TPM2 Software Stack (TSS2)")
+    (description
+     "This package provides the @acronym{TCG, Trusted Computing Group}
+@acronym{TSS2, TPM2 Software Stack}.  The stack contains libtss2-fapi,
+libtss2-esys, libtss2-sys, libtss2-mu, libtss2-tcti-device, libtss2-tcti-swtpm
+and libtss2-tcti-mssim.")
+    (license license:bsd-2)))
+
+(define-public tpm2-tss-engine
+  (package
+    (name "tpm2-tss-engine")
+    (version "1.1.0")
+    (source (origin
+              (method url-fetch)
+              (uri (string-append "https://github.com/tpm2-software/tpm2-tss-engine/archive/v" version ".tar.gz"))
+              (sha256
+               (base32
+                "0xby0jhdpp9jlwd84dp97y7fx7swww1b1k5srr9k64akbnrgwpz0"))))
+    (build-system gnu-build-system)
+    (arguments
+     `(#:tests? #f                      ; only manual test scripts
+       #:configure-flags (list (string-append "--with-enginesdir=" (assoc-ref %outputs "out") "/lib/engines-1.1/"))
+       #:phases
+        (modify-phases %standard-phases
+         (add-after 'install 'setting-env-vars-install-openssl-conf
+           (lambda* (#:key outputs #:allow-other-keys)
+             (let ((out              (assoc-ref outputs "out"))
+                   (tpm2-tss         (assoc-ref %build-inputs "tpm2-tss"))
+                   (engine-path      (string-append (assoc-ref %outputs "out") "/lib/engines-1.1/"))
+                   (opensslconf-file "openssl.conf.sample")
+                   (opensslconf-path (string-append (assoc-ref %outputs "out") "/etc/")))
+                        (wrap-program (string-append out "/bin/tpm2tss-genkey") 
+                          `("OPENSSL_ENGINES" ":" prefix (,engine-path)))
+                        ;;(wrap-program (string-append out "/bin/tpm2tss-genkey") 
+                        ;;  `("TPM2TSSENGINE_TCTI" ":" prefix (,(string-append tpm2-tss "/lib/libtss2-tcti-device.so:/dev/tpm0"))))
+                        ;;(wrap-program (string-append out "/bin/tpm2tss-genkey") 
+                        ;;  `("TPM2TOOLS_TCTI" ":" prefix (,(string-append tpm2-tss "/lib/libtss2-tcti-device.so:/dev/tpm0"))))
+                        (mkdir-p opensslconf-path)
+                        (substitute* opensslconf-file (("/usr") out))
+                        (substitute* opensslconf-file (("default_algorithms") "#default_algorithms"))
+                        (copy-file opensslconf-file (string-append opensslconf-path "openssl-tss2.conf"))
+               #t))))))
+    (native-inputs
+     `(("autoconf" ,autoconf)
+       ("autoconf-archive" ,autoconf-archive)
+       ("automake" ,automake)
+       ("bash" ,bash)
+       ("curl" ,curl)
+       ("doxygen" ,doxygen)
+       ("json-c" ,json-c)
+       ("libgcrypt" ,libgcrypt)
+       ("libtool" ,libtool)
+       ("m4" ,m4)
+       ("pkg-config" ,pkg-config)
+       ("openssl" ,openssl-1.1)
+       ("patchelf" ,patchelf)))
+    (inputs
+     `(("tpm2-tss" ,tpm2-tss-openssl-1.1)
+      ("bash-minimal" ,bash-minimal)))
+    (home-page "https://github.com/tpm2-software/tpm2-tss-engine")
+    (synopsis "The tpm2-tss-engine project implements a cryptographic engine for OpenSSL for Trusted Platform Module (TPM 2.0) using the tpm2-tss software stack that follows the Trusted Computing Groups (TCG) TPM Software Stack (TSS 2.0).")
+    (description
+     "The tpm2-tss-engine project implements a cryptographic engine for OpenSSL for Trusted Platform Module (TPM 2.0) using the tpm2-tss software stack that follows the Trusted Computing Groups (TCG) TPM Software Stack (TSS 2.0).")
+    (license license:bsd-2)))
+
+(define-public tpm2-tools
+  (package
+    (name "tpm2-tools")
+    (version "4.3.1")
+    (source (origin
+              (method url-fetch)
+              (uri (string-append "https://github.com/tpm2-software/tpm2-tools/archive/" version ".tar.gz"))
+              (sha256
+               (base32
+                "1sfrgzwhpbilk29lh233k0wncd0b5v12w2bz4h8n7nclcdlhw449"))))
+    (build-system gnu-build-system)
+    (arguments
+     `(#:tests? #f                      ; only manual test scripts
+       #:configure-flags (list "--enable-tctienvvar")
+       ))
+    (native-inputs
+     `(("autoconf" ,autoconf)
+       ("autoconf-archive" ,autoconf-archive)
+       ("automake" ,automake)
+       ("bash" ,bash)
+       ("curl" ,curl)
+       ("doxygen" ,doxygen)
+       ("json-c" ,json-c)
+       ("libgcrypt" ,libgcrypt)
+       ("libtool" ,libtool)
+       ("m4" ,m4)
+       ("pkg-config" ,pkg-config)
+       ("openssl" ,openssl-1.1)
+       ("libuuid" ,util-linux "lib")
+       ("tpm2-tss" ,tpm2-tss-openssl-1.1)))
+    (home-page "https://github.com/tpm2-software/tpm2-tools")
+    (synopsis "The source repository for the Trusted Platform Module (TPM2.0) tools ")
+    (description
+     "The source repository for the Trusted Platform Module (TPM2.0) tools ")
+    (license license:lgpl2.1+)))
+
+(define-public tpm2-abrmd
+  (package
+    (name "tpm2-abrmd")
+    (version "2.4.0")
+    (source (origin
+              (method url-fetch)
+              (uri (string-append "https://github.com/tpm2-software/tpm2-abrmd/archive/refs/tags/" version ".tar.gz"))
+              (sha256
+               (base32
+                "14sj4cbw7myx1fkzz9ya4gc06rzm6x7hy9jd9im8wc2a1r3141k2"))))
+    (build-system gnu-build-system)
+    (native-inputs
+     `(("autoconf" ,autoconf)
+       ("autoconf-archive" ,autoconf-archive)
+       ("automake" ,automake)
+       ("glib" ,glib "bin")
+       ("glib" ,glib)
+       ("git" ,git)
+       ("libtool" ,libtool)
+       ("pkg-config" ,pkg-config)
+       ("tpm2-tss" ,tpm2-tss)
+       ("which" ,which)))
+    (home-page "https://github.com/tpm2-software/tpm2-abrmd")
+    (synopsis "TPM2 Access Broker & Resource Manager")
+    (description
+     "This is a system daemon implementing the TPM2 access broker (TAB) 
+     & Resource Manager (RM) spec from the TCG. The daemon (tpm2-abrmd) is 
+     implemented using Glib and the GObject system. In this documentation and in the code 
+     we use tpm2-abrmd and tabrmd interchangeably.")
+    (license license:bsd-2)))
+
+(define-public tpm2-pkcs11
+  (package
+    (name "tpm2-pkcs11")
+    (version "1.7.0")
+    (source (origin
+              (method url-fetch)
+              (uri (string-append "https://github.com/tpm2-software/tpm2-pkcs11/archive/refs/tags/" version ".tar.gz"))
+              (sha256
+               (base32
+                "0kkzzdxiz1389jl4rabh739m99x1jh42xagq4sycn5s8kvik1sa5"))))
+    (build-system gnu-build-system)
+    (arguments
+     `(#:tests? #f                      ; only manual test scripts
+      ;  #:configure-flags (list "--enable-tctienvvar")
+       ))
+    (native-inputs
+     `(
+       ("autoconf" ,autoconf)
+       ("autoconf-archive" ,autoconf-archive)
+       ("automake" ,automake)
+       ("libtool" ,libtool)
+       ("m4" ,m4)
+       ("pkg-config" ,pkg-config)))
+    (inputs
+     `(("libyaml" ,libyaml)
+       ("sqlite" ,sqlite)
+       ("openssl" ,openssl)
+       ("tpm2-abrmd" ,tpm2-abrmd)
+       ("tpm2-tools" ,tpm2-tools)
+       ("tpm2-tss" ,tpm2-tss)
+       ))
+    (home-page "https://github.com/tpm2-software/tpm2-pkcs11")
+    (synopsis "A PKCS#11 interface for TPM2 hardware")
+    (description
+     "PKCS #11 is a Public-Key Cryptography Standard that defines a standard method 
+     to access cryptographic services from tokens/ devices such as hardware security modules (HSM), 
+     smart cards, etc. In this project we intend to use a TPM2 device as the cryptographic token.")
+    (license license:bsd-2)))