kanidm / hsm-crypto

A library for cryptographic operations backed by a HSM or TPM
Mozilla Public License 2.0
5 stars 5 forks source link

Progress on MS extension support #30

Closed Firstyear closed 8 months ago

Firstyear commented 9 months ago

Add support for MS OAPXBC key management in the soft-tpm, with a view to have this work with HW TPM's.

Checklist

dmulder commented 8 months ago

Lgtm

dmulder commented 8 months ago

@Firstyear I don't have rights to merge, so you'll need to push the button yourself.

dmulder commented 8 months ago

FYI, I'm using your sealing code to prevent the release of the PRT: https://github.com/himmelblau-idm/microsoft-authentication-library-for-rust/commit/dd548ed8c12dacfd64ad1cb70d9349a5e253f995 Technically a client with the TPM secrets could decrypt it, but I'm not enabling it. This way the PRT is a black box, that can be stashed in a database, then retrieved and passed to msal for authenticating later.

Firstyear commented 8 months ago

@dmulder I don't know how I overlooked that, I gave you maintainer access now.