Allow creation of EK and SRK for TPM 2

[SeaBIOS] [PATCH 0/2] Allow creation of EK and SRK for TPM 2

Stefan Berger posted 2 patches 6 years, 4 months ago

Download series mbox

Patches applied successfully (tree, apply log)
git fetch https://github.com/patchew-project/seabios tags/patchew/1513188032-1373-1-git-send-email-stefanb@linux.vnet.ibm.com

src/std/tcg.h |  63 +++++++++++
src/tcgbios.c | 341 +++++++++++++++++++++++++++++++++++++++++++++++++++++++---
2 files changed, 388 insertions(+), 16 deletions(-)

Expand all Fold all

[SeaBIOS] [PATCH 0/2] Allow creation of EK and SRK for TPM 2

Posted by Stefan Berger 6 years, 4 months ago

The following two patches add functionality to create EK and SRK
keys to the TPM 2 menu. We follow TCG specifications for how to
create those as RSA keys.

Regards,
   Stefan

Stefan Berger (2):
  tcbios: Add menu item to create an EK for TPM 2
  tcbios: Add menu item to create a primary storage key for TPM 2

 src/std/tcg.h |  63 +++++++++++
 src/tcgbios.c | 341 +++++++++++++++++++++++++++++++++++++++++++++++++++++++---
 2 files changed, 388 insertions(+), 16 deletions(-)

-- 
2.5.5


_______________________________________________
SeaBIOS mailing list
SeaBIOS@seabios.org
https://mail.coreboot.org/mailman/listinfo/seabios

Re: [SeaBIOS] [PATCH 0/2] Allow creation of EK and SRK for TPM 2

Posted by Kevin O'Connor 6 years, 3 months ago

On Wed, Dec 13, 2017 at 01:00:30PM -0500, Stefan Berger wrote:
> The following two patches add functionality to create EK and SRK
> keys to the TPM 2 menu. We follow TCG specifications for how to
> create those as RSA keys.

Thanks Stefan.  The patches look fine to me.  However, so I can better
understand the impact, can you provide a descrption of what real-world
features this enables users to accomplish?

-Kevin

_______________________________________________
SeaBIOS mailing list
SeaBIOS@seabios.org
https://mail.coreboot.org/mailman/listinfo/seabios

Re: [SeaBIOS] [PATCH 0/2] Allow creation of EK and SRK for TPM 2

Posted by Stefan Berger 6 years, 3 months ago

On 12/20/2017 11:32 AM, Kevin O'Connor wrote:
> On Wed, Dec 13, 2017 at 01:00:30PM -0500, Stefan Berger wrote:
>> The following two patches add functionality to create EK and SRK
>> keys to the TPM 2 menu. We follow TCG specifications for how to
>> create those as RSA keys.
> Thanks Stefan.  The patches look fine to me.  However, so I can better
> understand the impact, can you provide a descrption of what real-world
> features this enables users to accomplish?

Please don't apply these patches for now. These two patches seemed to 
help Win 10 accept the TPM 2 but now it looks like it generates the 
missing keys itself.

    Stefan

>
> -Kevin
>


_______________________________________________
SeaBIOS mailing list
SeaBIOS@seabios.org
https://mail.coreboot.org/mailman/listinfo/seabios