On Tue, 2024-01-16 at 17:20 +0800, Gary Lin via Grub-devel wrote: [...] > (*1) https://www.hansenpartnership.com/draft-bottomley-tpm2-keys.html > (*2) https://github.com/okirch/pcr-oracle
Just a curiosity question, but have you tested the interoperability of pcr-oracle keys? It looks like you got the ASN header straight from openssl_tpm2_engine, so it should all just work, but verifying that the seal/unseal and sign_tpm2_policy commands from openssl_tpm2_engine: https://build.opensuse.org/package/show/security:tls/openssl_tpm2_engine can be used to create sealed keys for this code would nicely verify that. James _______________________________________________ Grub-devel mailing list Grub-devel@gnu.org https://lists.gnu.org/mailman/listinfo/grub-devel
