2 ms·
Nice! I spent some time a few years ago working with TPM 1.2, but I haven’t caught up on the massive changes in 2.0. (I was not impressed by the state of the
by amluto 4y ago
Nice!
I spent some time a few years ago working with TPM 1.2, but I haven’t caught up on the massive changes in 2.0.
(I was not impressed by the state of the 1.2 ecosystem. I may have had some choice words for the TSPI APIs and the trousers stack. The C APIs were trying to give gets a run for its money.)
- cryptonector 4y agoThanks for taking a look! TPM 1.2 is not very good. TPM 2.0 is pretty impressive. I'm also not impressed with the tpm2-tools project. But there's a fair bit of code out there. The neatest thing about TPM 2.0 is its extended access policies, and how blockchains (before they were called that), and encrypted state cookies (and key derivation templates) all adds up to letting one make do with the very limited memory resources that a TPM has. I'd really like a high-performance, HSM-like, TPM. Or a high-performance HSM with a TPM 2.0 interface.