TPM2.0 support ?

[fmasi]

Hi I was wondering if simple-tpm-pk11 currently supports tpm 2.0.
I just started to play around with my tpm and really like this simple-tpm-pk11 love that my private ssh rsa 2048 is stored within the tpm but it would be really cool to be able to implement some ECC keys.

[ThomasHabets]

I have no hardware for this, but I agree that ECC keys would be sweet.

[irtimmer]

If people are interested. I've start working on a PKCS#11 library for TPM 2.0. As the API for the TPM 2.0 is completely different from the TPM 1.0 it seems more logical to start from scratch instead of extending simple-tpm-pk11. The code is available at https://github.com/irtimmer/tpm2-utils

[ThomasHabets]

@irtimmer very interested. Thank you for starting this!

[nicowilliams]

I have no hardware for this, but I agree that ECC keys would be sweet.

You don't need hardware. You can just use a software TPM for testing. Of course, if you don't have TPM 2.0 hardware (or firmware TPMs) then you probably have no need for TPM 2.0 support. Cheers!

[q2dg]

Well...this issue seems stalled, and TMP 1.x was deprecated long time ago...