Re: TPM2_Sign vs TPM2_RSA_Decrypt

On Thu May 16, 2024 at 5:14 PM EEST,  wrote:
> TPM2_EncryptDecrypt2 is for Symmetric encryption (i.e. AES) only.
>
> I'd still recommend to go for TPM2_Sign().
> Note also that switching may be hard later down the road, since the key u=
sage flags are define during creation.
> So backwards compatibility is nasty here.
>
> Feel free to CC me.
> I'll do what I can.

Great I get that but I'd still start with the existing code because it
was how it was done. I'm strong believer of "change only by stimulus"
and it is rare for feature patch set anyway land in the first round.

BR, Jarkko