age-plugin-tpm

age-plugin-tpm copied to clipboard

quite

Sealing keys with PCRs

1

It would be nice if we could also seal the keys given a set of PCR values. Even nicer would be support for [FAPI policies](https://tpm2-software.github.io/fapipolicies/) which could be provided in...

stv0g

https://github.com/C2SP/C2SP/pull/31

Foxboron

Currently `age-plugin-tpm` makes ephemeral NIST P256 key in software when the someone encrypt something with the recipient. There is probably(?) nothing stopping us from creating an ephemeral key inside the...

Foxboron

Update README to fix bad paths and input/output

2

This pull request updates the README to fix some bad paths (the example didn't work) and aligns the input with the output. Additionally, rather than hinting that `AGE_TPM_PIN` is how...

dcousens

Move prompts to stderr

2

I think it would be better to print prompts like https://github.com/Foxboron/age-plugin-tpm/blob/5dedd8a6a240ef68851884fe850293e3cc954ac6/cmd/age-plugin-tpm/main.go#L90-L100 to `stderr`, ~as is common in POSIX applications~. This became problematic for me when I was trying the following:...

dcousens