Yes, the problem with that is that you need the TPM to Seal as well as
Unseal. This works OK for local encryption but not if encrypt is done
remotely.

Hal

On Tue, Nov 23, 2010 at 11:03 AM, Frank Swiderski <[email protected]> wrote:
> The SRK is of type storage, which, according to section 32 of the TPM Main
> Specification, Part 1, can only TPM_Unseal.  You can in fact use it to
> "decrypt" using Seal/Unseal, but to Hal's point, creating a new key of type
> legacy is typically the right thing to do for what it sounds Evgeny's
> problem is.
> fes
>
>
> On Tue, Nov 23, 2010 at 9:44 AM, Arshad Noor <[email protected]>
> wrote:
>>
>> Could you clarify this, Hal?
>>
>> The TCG specifically discusses the TPM_UnBind command which "takes
>> the data blob that is the result of a Tspi_Data_Bind command and
>> decrypts it for export to the User" in its specification (Page 66,
>> TPM Main Part 3 Commands, Specifcation Version 1.2).
>>
>> Arshad Noor
>> StrongAuth, Inc.
>>
>> On 11/22/2010 11:31 PM, Hal Finney wrote:
>> > This won't work because the SRK cannot decrypt.
>> >
>>
>>
>> ------------------------------------------------------------------------------
>> Increase Visibility of Your 3D Game App & Earn a Chance To Win $500!
>> Tap into the largest installed PC base & get more eyes on your game by
>> optimizing for Intel(R) Graphics Technology. Get started today with the
>> Intel(R) Software Partner Program. Five $500 cash prizes are up for grabs.
>> http://p.sf.net/sfu/intelisp-dev2dev
>> _______________________________________________
>> TrouSerS-users mailing list
>> [email protected]
>> https://lists.sourceforge.net/lists/listinfo/trousers-users
>
>

------------------------------------------------------------------------------
Increase Visibility of Your 3D Game App & Earn a Chance To Win $500!
Tap into the largest installed PC base & get more eyes on your game by
optimizing for Intel(R) Graphics Technology. Get started today with the
Intel(R) Software Partner Program. Five $500 cash prizes are up for grabs.
http://p.sf.net/sfu/intelisp-dev2dev
_______________________________________________
TrouSerS-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/trousers-users

Reply via email to