Why Go
- Case Studies
  
  Common problems companies solve with Go
- Use Cases
  
  Stories about how and why companies use Go
- Security Policy
  
  How Go can help keep you secure by default
Learn
Docs
- Effective Go
  
  Tips for writing clear, performant, and idiomatic Go code
- Go User Manual
  
  A complete introduction to building software with Go
- Standard library
  
  Reference documentation for Go's standard library
- Release Notes
  
  Learn what's new in each Go release
Packages
Community
- Recorded Talks
  
  Videos from prior events
- Meetups
  
  Meet other local Go developers
- Conferences
  
  Learn and network with Go developers from around the world
- Go blog
  
  The Go project's official blog.
- Go project
  
  Get help and stay informed from Go
- Get connected

tpm2tools

package

Go to main page

Versions in this module

v0

v0.2.1

Dec 11, 2020

Changes in this version

type Key

+ func (k *Key) SignData(data []byte) ([]byte, error)

v0.2.0

Oct 2, 2020

Changes in this version

+ const DefaultAIKECCHandle

+ const DefaultAIKRSAHandle

+ const EKECCReservedHandle

+ const SRKECCReservedHandle

+ func AIKTemplateECC() tpm2.Public

type Key

+ func AttestationIdentityKeyECC(rw io.ReadWriter) (*Key, error)

+ func (k *Key) ImportSigningKey(blob *tpmpb.ImportBlob) (key *Key, err error)

v0.1.2

Dec 21, 2019

Changes in this version

+ const CertifyHashAlgTpm

+ const NumPCRs

+ func ComputePCRSessionAuth(pcrs *tpmpb.Pcrs) []byte

+ func FullPcrSel(hash tpm2.Algorithm) tpm2.PCRSelection

+ func HasSamePCRSelection(pcrs *tpmpb.Pcrs, pcrSel tpm2.PCRSelection) bool

+ func PCRSelection(pcrs *tpmpb.Pcrs) tpm2.PCRSelection

+ func ReadPCRs(rw io.ReadWriter, sel tpm2.PCRSelection) (*tpmpb.Pcrs, error)

+ type CertifyCurrent struct

+ func (p CertifyCurrent) CertifyPCRs(rw io.ReadWriter, pcrs *tpmpb.Pcrs) error

+ type CertifyExpected struct

+ Pcrs *tpmpb.Pcrs

+ func (p CertifyExpected) CertifyPCRs(_ io.ReadWriter, pcrs *tpmpb.Pcrs) error

+ type CertifyOpt interface

+ CertifyPCRs func(rw io.ReadWriter, certified *tpmpb.Pcrs) error

type Key

+ func AttestationIdentityKeyRSA(rw io.ReadWriter, nonces []byte) (*Key, error)

+ func (k *Key) GetSigner() (crypto.Signer, error)

+ type SealCurrent struct

+ func (p SealCurrent) PCRsForSealing(rw io.ReadWriter) (*tpmpb.Pcrs, error)

+ type SealOpt interface

+ PCRsForSealing func(rw io.ReadWriter) (*tpmpb.Pcrs, error)

+ type SealTarget struct

+ Pcrs *tpmpb.Pcrs

+ func (p SealTarget) PCRsForSealing(_ io.ReadWriter) (*tpmpb.Pcrs, error)

v0.1.1

Sep 19, 2019

Changes in this version

+ const EKReservedHandle

+ const SRKReservedHandle

+ func AIKTemplateRSA(nonce [256]byte) tpm2.Public

+ func CheckedClose(tb testing.TB, rwc io.ReadWriteCloser)

+ func DefaultEKTemplateECC() tpm2.Public

+ func DefaultEKTemplateRSA() tpm2.Public

+ func Handles(rw io.ReadWriter, handleType tpm2.HandleType) ([]tpmutil.Handle, error)

+ func SRKTemplateECC() tpm2.Public

+ func SRKTemplateRSA() tpm2.Public

+ type Key struct

+ func EndorsementKeyECC(rw io.ReadWriter) (*Key, error)

+ func EndorsementKeyFromNvIndex(rw io.ReadWriter, idx uint32) (*Key, error)

+ func EndorsementKeyRSA(rw io.ReadWriter) (*Key, error)

+ func KeyFromNvIndex(rw io.ReadWriter, parent tpmutil.Handle, idx uint32) (*Key, error)

+ func NewCachedKey(rw io.ReadWriter, parent tpmutil.Handle, template tpm2.Public, ...) (k *Key, err error)

+ func NewKey(rw io.ReadWriter, parent tpmutil.Handle, template tpm2.Public) (k *Key, err error)

+ func StorageRootKeyECC(rw io.ReadWriter) (*Key, error)

+ func StorageRootKeyRSA(rw io.ReadWriter) (*Key, error)

+ func (ek *Key) Import(rw io.ReadWriter, blob *proto.ImportBlob) ([]byte, error)

+ func (k *Key) Close()

+ func (k *Key) Handle() tpmutil.Handle

+ func (k *Key) Name() tpm2.Name

+ func (k *Key) PublicKey() crypto.PublicKey

+ func (k *Key) Reseal(pcrs map[int][]byte, in *proto.SealedBytes) (*proto.SealedBytes, error)

+ func (k *Key) Seal(pcrs []int, sensitive []byte) (*proto.SealedBytes, error)

+ func (k *Key) Unseal(in *proto.SealedBytes) ([]byte, error)