tpm

Documentation

Overview

Package tpm implements a provider that derives a 32-byte secret using a TPM 2.0 HMAC key. During enrollment a new HMAC key is created under the Storage Root Key (SRK); the key's public and private blobs are stored in the profile. Because the blobs are wrapped by the SRK, the key can only be loaded on the same TPM, binding the secret to the hardware.

Index

• type TPM
  • func (t *TPM) Derive(ctx context.Context, params map[string]string) ([]byte, error)
  • func (t *TPM) Description() string
  • func (t *TPM) Enroll(ctx context.Context, id string) (*provider.EnrollResult, error)
  • func (t *TPM) EnrollWarning(_ map[string]string) string
  • func (t *TPM) InteractiveDerive() bool
  • func (t *TPM) Type() string

Types

type TPM

type TPM struct{}

TPM is the TPM 2.0 provider.

func (*TPM) Derive

func (t *TPM) Derive(ctx context.Context, params map[string]string) ([]byte, error)

func (*TPM) Description

func (t *TPM) Description() string

func (*TPM) Enroll

func (t *TPM) Enroll(ctx context.Context, id string) (*provider.EnrollResult, error)

func (*TPM) EnrollWarning

func (t *TPM) EnrollWarning(_ map[string]string) string

func (*TPM) InteractiveDerive

func (t *TPM) InteractiveDerive() bool

func (*TPM) Type

func (t *TPM) Type() string