aboutsummaryrefslogtreecommitdiff
path: root/doc/TPM
diff options
context:
space:
mode:
authorStefan Pluecken <stefan.pluecken@multimedia-labs.de>2010-04-09 15:21:13 +0200
committerStefan Pluecken <stefan.pluecken@multimedia-labs.de>2010-10-06 10:58:14 +0200
commit77dc369c56e6995d1aeda3c7b686ed675534ec90 (patch)
treea4d7e1e989804e03fb637baf204d93f8b1d78506 /doc/TPM
parentbe8ccc9f63c4cd79f8dba84087c7348c23657865 (diff)
downloadenigma2-77dc369c56e6995d1aeda3c7b686ed675534ec90.tar.gz
enigma2-77dc369c56e6995d1aeda3c7b686ed675534ec90.zip
fixes bug #467
add tpm interface to enigma 2 introduce a demo plugin for tpm usage in plugins to validate running on dream multimedia hardware to be used in plugins (see doc/TPM for further information)
Diffstat (limited to 'doc/TPM')
-rw-r--r--doc/TPM24
1 files changed, 24 insertions, 0 deletions
diff --git a/doc/TPM b/doc/TPM
new file mode 100644
index 00000000..2b2b2062
--- /dev/null
+++ b/doc/TPM
@@ -0,0 +1,24 @@
+If you'd like to write your own plugins and honor the efforts, Dream Multimedia
+puts into developing Enigma 2, you can protect your plugin against execution
+on Non-Dream Multimedia Hardware by implementing a TPM (Trusted Platform Module)
+check into your plugin.
+For ease of use we provide a demo plugin in lib/python/Plugins/DemoPlugins/TPMDemo.
+
+The main TPM check is implemented into the "main" function. You need to provide
+this code yourself in your plugin. So copy&paste the code into your own as well
+as the needed functions
+- bin2long
+- long2bin
+- rsa_pub1024
+- decrypt_block
+- validate_cert
+- read_random
+Importing the functions from somewhere else would spoil the security model. So
+you need to provide the code with your plugin.
+
+You can either use the given method using the main function (which will run the
+TPM check each time the plugin is called) or directly use it in the
+Plugins(**kwargs) function and not return the Plugins-list if the TPM check failes
+(which will prevent the plugin from showing up at all). You can also implement
+a warning message for all possible TPM failure scenarios.
+ \ No newline at end of file