Re: [openssl-users] OpenSSL engine and TPM usage.

2017-10-26 Thread Freemon Johnson
Hi Jayalakshmi, Is your implementation OSS or intellectual property? If it is OSS can you please provide the URL? Regards, Freemon On Wed, Oct 25, 2017 at 1:06 PM, Jayalakshmi bhat < bhat.jayalaks...@gmail.com> wrote: > Hi All, > > Our device uses TPM to protect certificate private keys. We hav

Re: [openssl-users] OpenSSL engine and TPM usage.

2017-10-26 Thread Michael Wojcik
> From: openssl-users [mailto:openssl-users-boun...@openssl.org] On Behalf > Of Michael Richardson > Sent: Wednesday, October 25, 2017 18:37 > > Jakob Bohm wrote: > > > Please beware that many TPM chips were recently discovered to contain a > > broken RSA key generation algorithm, so publi

Re: [openssl-users] OpenSSL engine and TPM usage.

2017-10-26 Thread Ken Goldman
On 10/26/2017 3:33 AM, Michael Ströder wrote: Michael Richardson wrote: Jakob Bohm wrote: wow, further evidence that everything needs an upgrade path. From the viewpoint of hardware vendors the upgrade path is selling new hardware. It's simply like that. Not very sustainable... All the T

Re: [openssl-users] OpenSSL engine and TPM usage.

2017-10-26 Thread Richard Levitte
In message on Wed, 25 Oct 2017 22:36:45 +0530, Jayalakshmi bhat said: bhat.jayalakshmi> Our device uses TPM to protect certificate private bhat.jayalakshmi> keys. We have written engine interface to integrate bhat.jayalakshmi> TPM functionality into OpenSSL. Thus TPM gets loaded bhat.jayalaksh

Re: [openssl-users] OpenSSL engine and TPM usage.

2017-10-26 Thread Michael Ströder
Michael Richardson wrote: > > Jakob Bohm wrote: > >> I wanted to know when we use engine instance for encyrption/decryption > >> operation, can it be done selectively? > > > Please beware that many TPM chips were recently discovered to contain a > > broken RSA key generation algo

Re: [openssl-users] OpenSSL engine and TPM usage.

2017-10-25 Thread Michael Richardson
Jakob Bohm wrote: >> I wanted to know when we use engine instance for encyrption/decryption >> operation, can it be done selectively? > Please beware that many TPM chips were recently discovered to contain a > broken RSA key generation algorithm, so public/private key pairs keys

Re: [openssl-users] OpenSSL engine and TPM usage.

2017-10-25 Thread Jakob Bohm
On 25/10/2017 19:06, Jayalakshmi bhat wrote: Hi All, Our device uses TPM to protect certificate private keys. We have written engine interface to integrate TPM functionality into OpenSSL. Thus TPM gets loaded as an engine instance. Also we have mapped RSA operations to TPM APIS as  like encry

[openssl-users] OpenSSL engine and TPM usage.

2017-10-25 Thread Jayalakshmi bhat
Hi All, Our device uses TPM to protect certificate private keys. We have written engine interface to integrate TPM functionality into OpenSSL. Thus TPM gets loaded as an engine instance. Also we have mapped RSA operations to TPM APIS as like encryption/decryption etc. Now we are into few issues.