-
Does the `ugrd` support TPM to unseal encrypted volumes?
If no, can it be implemented?
-
Just a quick question before digging further, Is it currently possible to seal objects created using the pkcs#11 abstractions to boot states using tpm2-pkcs11? or is there some other way being provide…
-
The version of tpm2-tss I am using is 3.2. x, and the application uses static linking to link tpm2-tss. The statically linked libraries include:
- libtss2-sys.a
- libtss2-esys.a
- libtss2-tctildr…
-
Hello together
I am stuck with OpenSSL at one point. We send a CSR from a TPM to the PKI and the PKI sends back a certificate. Unfortunately, the certificate verification fails.
The PKI has existe…
-
It would be useful to have an option for luks devices to enable TPM2 unlock (and maybe others like FIDO2 or PKCS11 too?).
This would be more convenient than running `sudo systemd-cryptenroll --tpm2…
-
- see https://github.com/opiproject/sztp/blob/main/doc/qemu_tpm_setup.md
- see https://pkg.go.dev/github.com/google/go-tpm/tpm2
- see https://pkg.go.dev/github.com/google/go-tpm/tpmutil
- see https…
-
This is issue to track progress regarding implementing abstraction over cryptographic primitives and TPM commands for Symmetric Cryptographic as described in chapter 15 of _Trusted Platform Module Lib…
-
We should implement encryption support (and even better, TPM2-backed encryption as an option) and an option to automatically generate a kmod CA for automatic Secure Boot signing
-
### Device
any
### RTE version
any
### OSFV version
1a5e1bdd3bdc34427c8e0c114eab13de5fc0ccb3
### Affected component(s) or functionality
[TPM Support test](https://github.com/Dasharo/open-source…
-
## Summary
There's a number of ways we could organize this crate, we should agree on what we want the final topology to look like. (Note: This has to do with the publicly visible modules, not the p…