tpm2-tools icon indicating copy to clipboard operation
tpm2-tools copied to clipboard

How to choose bn_p256 curve in function tpm2_create?

Open tsunaley opened this issue 3 years ago • 3 comments

hallo, Ecdaa signature requires BN_P256 curve, but function tpm2_create can not choose bn_p256 curve, I want to kwon How to choose bn_p256 curve in function tpm2_create. Thanks!

tsunaley avatar Apr 23 '22 13:04 tsunaley

Those must be specified with algorithms specifiers https://tpm2-tools.readthedocs.io/en/latest/man/common/alg/.

Are you using FAPI tools? Can you show what you tried and failed in your script?

idesai avatar Apr 25 '22 13:04 idesai

@idesai Thank you! I tried using tpm2-tools for ecdaa signatures, but the ecdaa algorithm should be based on a pairing-friendly curve like bn-p256. I can not verify the signature by using the curve in the algorithms specifiers https://tpm2-tools.readthedocs.io/en/latest/man/common/alg/, because they are not pairing-friendly. Would you consider adding bn-p256 curve in tpm2-tools for ecdaa signatures?

tsunaley avatar Apr 25 '22 14:04 tsunaley

@idesai Thank you! I tried using tpm2-tools for ecdaa signatures, but the ecdaa algorithm should be based on a pairing-friendly curve like bn-p256. I can not verify the signature by using the curve in the algorithms specifiers https://tpm2-tools.readthedocs.io/en/latest/man/common/alg/, because they are not pairing-friendly. Would you consider adding bn-p256 curve in tpm2-tools for ecdaa signatures?

Sounds good. Can you please share what you tried and failed in a script. I want to make sure when the support is added there is an integration test that captures your use case.

idesai avatar Apr 26 '22 15:04 idesai