[tpm2] Re: System design question
David Challener <david.c.challener at gmail.com> Wed, 31 Aug 2022 17:21:17 -0400
| Newsgroups | dev.linux.lists.tpm2 |
|---|---|
| Message-ID | <CAAeabfaJSAHG_wAC98G6Md6JznZfQkM+O=uKt3VtfP6xTpvnbg@mail.gmail.com> |
Generally you use NV when you either have a problem with hash loops (which is solvable, by the way), or you don't have access to other storage that can be read when you need the value. On Mon, Aug 22, 2022, 9:09 AM Roberts, William C < william.c.roberts(a)intel.com> wrote: > On Sun, 2022-08-21 at 14:05 +0200, Felix Rubio Dalmau wrote: > > My apologies, I have not played with TPM for long time: I had > > forgotten I > > could tpm2_nvdefine, and then tpm2_nvwrite/nvread. > > > > The best rule of thumb is to do everything you can to not use NV > Indices. This is a very small and finite amount of space. I don't think > you need to use these if you just "hardcode" the hash values. > > > Regards! > > Felix > > > > _______________________________________________ > > tpm2 mailing list -- tpm2(a)lists.01.org > > To unsubscribe send an email to tpm2-leave(a)lists.01.org > > %(web_page_url)slistinfo%(cgiext)s/%(_internal_name)s > _______________________________________________ > tpm2 mailing list -- tpm2(a)lists.01.org > To unsubscribe send an email to tpm2-leave(a)lists.01.org > %(web_page_url)slistinfo%(cgiext)s/%(_internal_name)s >
attachment.htm
(text/html, 1.8 KB)
<div dir="ltr"><div>Generally you use NV when you either have a problem with hash loops (which is solvable, by the way), or you don't have access to other storage that can be read when you need the value. <br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Mon, Aug 22, 2022, 9:09 AM Roberts, William C <<a href="mailto:[email protected]" target="_blank">[email protected]</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">On Sun, 2022-08-21 at 14:05 +0200, Felix Rubio Dalmau wrote:<br> > My apologies, I have not played with TPM for long time: I had<br> > forgotten I <br> > could tpm2_nvdefine, and then tpm2_nvwrite/nvread.<br> > <br> <br> The best rule of thumb is to do everything you can to not use NV<br> Indices. This is a very small and finite amount of space. I don't think<br> you need to use these if you just "hardcode" the hash values.<br> <br> > Regards!<br> > Felix<br> > <br> > _______________________________________________<br> > tpm2 mailing list -- <a href="mailto:[email protected]" rel="noreferrer" target="_blank">[email protected]</a><br> > To unsubscribe send an email to <a href="mailto:[email protected]" rel="noreferrer" target="_blank">[email protected]</a><br> > %(web_page_url)slistinfo%(cgiext)s/%(_internal_name)s<br> _______________________________________________<br> tpm2 mailing list -- <a href="mailto:[email protected]" rel="noreferrer" target="_blank">[email protected]</a><br> To unsubscribe send an email to <a href="mailto:[email protected]" rel="noreferrer" target="_blank">[email protected]</a><br> %(web_page_url)slistinfo%(cgiext)s/%(_internal_name)s<br> </blockquote></div>