tpm

README

tpm

Package tpm provides TPM 2.0 credential-related functionality.

Documentation

Overview

Package tpm provides TPM 2.0 credential-related functionality.

Index

• func ExtractCredential(key interface{}, blob, encSeed, ekPublic, akPublic []byte) ([]byte, error)
• func KDFa(h func() hash.Hash, key []byte, label string, context []byte, numbytes int) ([]byte, error)
• func MakeCredential(cred, ekPublic, akPublic []byte) ([]byte, []byte, error)

Functions

func ExtractCredential

func ExtractCredential(key interface{}, blob, encSeed, ekPublic, akPublic []byte) ([]byte, error)

ExtractCredential extracts a credential from a credential blob and encrypted seed created by MakeCredential. This function is primarily for testing and demonstration purposes, since in practice the private key corresponding to the TPM endorsement key public area will not be available.

func KDFa

func KDFa(h func() hash.Hash, key []byte, label string, context []byte, numbytes int) ([]byte, error)

KDFa implements the KDFa function per the TPM2.0 specification.

func MakeCredential

func MakeCredential(cred, ekPublic, akPublic []byte) ([]byte, []byte, error)

MakeCredential makes a credential for the object with the public area akPublic, to be activated by the object with the public area ekPublic. The credential blob and the encrypted seed are returned.