search

Foxboron / age-plugin-tpm

:key: TPM 2.0 plugin for age
MIT License
82 stars 8 forks source link

Sealing keys with PCRs #21

Open stv0g opened 1 year ago

stv0g commented 1 year ago

It would be nice if we could also seal the keys given a set of PCR values.

Even nicer would be support for FAPI policies which could be provided in a JSON file. But I currently see no FAPI support in go-tpm. So its probably quite difficult to implement this without tpm2-tss's Fapi_Import()?

Foxboron commented 1 year ago

Yes, but for that I'd like a Reseal API to function. So I need to learn how this works in Go, along with probably implementing missing apis in go-tpm.

See https://github.com/Foxboron/ssh-tpm-agent/issues/15