libtpms

libtpms copied to clipboard

Can't compile since latest git pull

3

make all-recursive make[1]: Entering directory '/home/mike/build/swtpm' Making all in include make[2]: Entering directory '/home/mike/build/swtpm/include' Making all in swtpm make[3]: Entering directory '/home/mike/build/swtpm/include/swtpm' make[3]: Nothing to be done for 'all'. make[3]:...

mijk84

Add support for setting of profiles for a TPM 2

4

This PR adds support for setting of a profile for a TPM 2 that restricts what algorithms and commands are available to the TPM 2. With profiles it will be...

stefanberger

Support CC_ECC_Encrypt and CC_ECC_Decrypt

2

Hi, stefan. rev164 has support CC_ECC_Encrypt and CC_ECC_Decrypt commands, and the code PR #292 are from [Trusted Platform Module Library Part 3: Commands](https://trustedcomputinggroup.org/wp-content/uploads/TCG_TPM2_r1p64_Part3_Commands_code_15may2021.pdf) and [Trusted Platform Module Library Part 4:...

JerryDevis

Remove #define printf

5

Mass replace printf() occurences with TPMLIB_LogPrintf(). Fixes: #317 Related to: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46483

elmarco

Future trouble: OpenSSL 3.x may require host admin to enable legacy mode to support SHA1 signatures

10

**Describe the bug** OpenSSL 3.x builds may require that a host admin enable legacy mode on the host so that applications can use SHA1 in relation to signatures. It's not...

stefanberger

Future of libtpms: Downgrading (of state for support of migration)

1

I think this is an important discussion to have since downgrading of state has come up in some discussions and it's not quite clear how to go about. First, downgrading...

stefanberger

Enablement of other TPM 2 algorithms: Assess which Distros' OpenSSL supports 'what'

11

Assess the support of encryption and hash algorithms that libtpms could still enable and in which distros they are supported.

stefanberger

FIPS compliance

93

There are some concerns regarding implementation of crypto functions in libtpms in order to get FIPS compliancy. Most of the crypto functions in libtpms come from the specification https://trustedcomputinggroup.org/specifications-public-review/ and...

elmarco

This PR adds the new commands that were added without enabling them. They will only be enabled once profiles support has been added. !!! Some patches in this series are...

stefanberger

This PR syncs the RSA prime number generation algorithm with rev180. Since it now uses a different random number generation function the usage of the new algorithm has to be...

stefanberger