Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

tpm2tss-genkey - add support for tpm2-tools serialized handle files. #179

Open
rowanmoul opened this issue May 25, 2020 · 1 comment
Open
Labels
enhancement New feature or request help wanted Extra attention is needed

Comments

@rowanmoul
Copy link

rowanmoul commented May 25, 2020

When using tpm2tss-genkey the parent object in the TPM (such as a Primary Key) can only be specified with a hex handle (eg 0x81000003).
It would be good to add support for handle files produced by the -o option of tpm2_evictcontrol. The man page for that tool specifically mentions these being safer to use than a raw handles. Since it is a binary format I am not sure why without digging into the code but I assume these files also include the object's name to allow for verification that the handle actually points to the expected object (assuming no tampering with the serialized handle file)

@AndreasFuchsTPM
Copy link
Member

AndreasFuchsTPM commented May 26, 2020

Yes, nice idea. For anyone interested in implementing this, the file can be parsed using Esys_TR_Deserialize()

But be aware that this would also need an extension of the PEM format file.

@AndreasFuchsTPM AndreasFuchsTPM added enhancement New feature or request help wanted Extra attention is needed labels May 26, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request help wanted Extra attention is needed
Projects
None yet
Development

No branches or pull requests

2 participants