tpm2-tss-engine

tpm2-tss-engine copied to clipboard

If an existing key or the new key is not intended to be stored in a file, the current implementation requires the creation of temporary files with all its odds (cleanup, symlink attack, mktemp)

This change allows to provide the key in many different ways:

A filename of "-" translates to for reading and for writing.

If the file named by "filename" does not exist, check whether it contains a "-----BEGIN" and try interpreting the filename itself as key.

Extend documentation in README.md

@chris2511 This is really useful and we were also thinking in the same way. I was using /tmp folder for key creation while using tpm2tss-genkey but our static code analyzer Sonar was warning about this security hotspot. This functionality definitely must be on this library.