SymbX/systemd
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

creds-util: implement TPM2 SRK pinning

Browse Source 
Stores the TPM2 SRK within the credential header, allowing for parameter decryption to be utilized when decrypting the credential.
A new dimension is added to the credential ID matrix to encode this capability.

This also allows for usage of TPM2-bound credentials when a TPM owner password is set since `Esys_CreatePrimary` is no longer used for sealing credentials.
This commit is contained in:
Popax21
2026-07-11 15:37:46 +01:00
committed by Luca Boccassi
parent 8877f63ee1
commit 70cfb11d4b
7 changed files with 192 additions and 71 deletions
Download Patch File Download Diff File Expand all files Collapse all files
mime/io.systemd.xml
+6
View File
@@ -48,6 +48,12 @@
<match type="string" value="70rBNnmpSA6n22iJf58WX" offset="0"/>
<match type="string" value="r0lQqEkTTrGnOEYwT/MMB" offset="0"/>
<match type="string" value="rbxMo++2QgG6iBtvLkCV6" offset="0"/>
<match type="string" value="1AYt+3GtTIaAS0DvEYDx/" offset="0"/>
<match type="string" value="Xi1cdgNyTq+EPG+19kCY9" offset="0"/>
<match type="string" value="FBQliBiiQM2QC86GLbXHu" offset="0"/>
<match type="string" value="Kh+HekJ1Qxqz+e0fXY9mA" offset="0"/>
<match type="string" value="r7/qrOtqSjeVQZ0TXEfze" offset="0"/>
<match type="string" value="FuSSlJ+UQAKGdY+Ut8Urx" offset="0"/>
<match type="string" value="BYRp2vb1QySABUnaD46i+" offset="0"/>
</magic>
</mime-type>