On 3/24/2016 3:14 AM, eye two are wrote:
> Yes the TPM created the key. I can make it migratable or non-migratable,
> depending on which one is required for it to work. I want to use the
> private key with openSSL.

Migrate the key to a software TPM.  Then extract the private key and 
create the RSA structure as posted.

Or, a bit more coding but maybe less maintenance, migrate the key to an 
openssl key pair you generate, then decrypt the private key.

A TPM non-migratable key, by design, keeps the private key hidden.

~~

Of course, I wonder about the high level design.  If you want the 
private key outside the TPM, why not just generate it outside the TPM? 
You can always import it into the TPM - but again, why?


------------------------------------------------------------------------------
Transform Data into Opportunity.
Accelerate data analysis in your applications with
Intel Data Analytics Acceleration Library.
Click to learn more.
http://pubads.g.doubleclick.net/gampad/clk?id=278785351&iu=/4140
_______________________________________________
TrouSerS-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/trousers-users

Reply via email to