[tpm2] Re: Lifecycle of handles and contexts

It depends.  

Windows seems to have a large keystore, so you probably don't have to ever
flush.

Linux in kernel RM manages keys across processes but not within processes,
so you still have to flush.

Why not seal (create) against the primary storage key.

> -----Original Message-----
> From: Tim K <tpm2(a)bitzap.e4ward.com>
> Sent: Monday, July 18, 2022 1:03 PM
> To: tpm2(a)lists.01.org
> Subject: [EXTERNAL] [tpm2] Re: Lifecycle of handles and contexts
> 
> > flushcontext
> 
> But when using a resource manager the context gets fushed automatically.
Or I
> can flush it manually. But still, after a flushcontext, I can just
tpm2_unseal
> without loading the key again -- why does that work?
> _______________________________________________
> tpm2 mailing list -- tpm2(a)lists.01.org
> To unsubscribe send an email to tpm2-leave(a)lists.01.org
> %(web_page_url)slistinfo%(cgiext)s/%(_internal_name)s