[tpm2] Re: Recommended way to encrypt a credential

Roberts, William C <william.c.roberts at intel.com> Tue, 19 Jul 2022 14:19:30 +0000
Newsgroups dev.linux.lists.tpm2
Message-ID <DM6PR11MB3434C6DDBA462B3079B918B3B88F9@DM6PR11MB3434.namprd11.prod.outlook.com>
No, all roads lead to Rome. Using gnupg or openssl are great alternatives to using raw tpm commands directly.
they often hide some of the complexities of dealing with the TPM as well.
________________________________
From: Tim K <tpm2(a)bitzap.e4ward.com>
Sent: Monday, July 18, 2022 9:44 PM
To: tpm2(a)lists.01.org <tpm2(a)lists.01.org>
Subject: [tpm2] Re: Recommended way to encrypt a credential

For method #3: any benefit to using tpm2_encryptdecrypt vs gpg --symmetric? just more streamlined in a single command?

Looks like newer GPG versions integrate with the TPM
https://gnupg.org/blog/20210315-using-tpm-with-gnupg-2.3.html
_______________________________________________
tpm2 mailing list -- tpm2(a)lists.01.org
To unsubscribe send an email to tpm2-leave(a)lists.01.org
%(web_page_url)slistinfo%(cgiext)s/%(_internal_name)s
attachment.htm (text/html, 1.7 KB)
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof">
No, all roads lead to Rome. Using gnupg or openssl are great alternatives to using raw tpm commands directly.</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof">
they often hide some of the complexities of dealing with the TPM as well.</div>
<div id="appendonsend"></div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> Tim K &lt;[email protected]&gt;<br>
<b>Sent:</b> Monday, July 18, 2022 9:44 PM<br>
<b>To:</b> [email protected] &lt;[email protected]&gt;<br>
<b>Subject:</b> [tpm2] Re: Recommended way to encrypt a credential</font>
<div>&nbsp;</div>
</div>
<div class="BodyFragment"><font size="2"><span style="font-size:11pt;">
<div class="PlainText">For method #3: any benefit to using tpm2_encryptdecrypt vs gpg --symmetric? just more streamlined in a single command?<br>
<br>
Looks like newer GPG versions integrate with the TPM<br>
<a href="https://gnupg.org/blog/20210315-using-tpm-with-gnupg-2.3.html">https://gnupg.org/blog/20210315-using-tpm-with-gnupg-2.3.html</a><br>
_______________________________________________<br>
tpm2 mailing list -- [email protected]<br>
To unsubscribe send an email to [email protected]<br>
%(web_page_url)slistinfo%(cgiext)s/%(_internal_name)s<br>
</div>
</span></font></div>
</body>
</html>