Since the digest-sign operations perform the hash on the TPM and TPMs in general do not support SHA512, this can lead to errors. Depending on the use case, it might be preferable to not support restricted keys (via digest+sign) but to rely on ordinary keys only.
Since the digest-sign operations perform the hash on the TPM and TPMs in general do not support SHA512, this can lead to errors. Depending on the use case, it might be preferable to not support restricted keys (via digest+sign) but to rely on ordinary keys only.