Re: [openssl-users] openssl-1.1.0b : Getting keys from TPM

2016-11-28 Thread Ken Goldman
To read a public key, use the TPM2_ReadPublic command. I have an open source utility (tpm2pem) that converts that TPM format key to PEM. If you need the private key, you will have to "duplicate" it to a key you know and then use that key to decrypt it. It's possible. However, it defeats the

Re: [openssl-users] openssl-1.1.0b : Getting keys from TPM

2016-11-03 Thread Zvi Vered
Hi Ken, 1. I mean: read from TPM 2. In order to create an SSL session with the server, should I need also the private key ? 3. I want to use TPM 2.0 Thank you for your help, Z.V On Thu, Nov 3, 2016 at 5:21 PM, Ken Goldman wrote: > A few comments: > > 1 - Does "take ... keys" mean read then o

Re: [openssl-users] openssl-1.1.0b : Getting keys from TPM

2016-11-03 Thread Ken Goldman
A few comments: 1 - Does "take ... keys" mean read then out of the TPM. 2 - Getting a public key from the TPM is easy. Getting the private key is harder. In addition, some keys can be created so that the private part never leaves the TPM. 3 - You have to specify whether this is TPM 1.2 or

[openssl-users] openssl-1.1.0b : Getting keys from TPM

2016-11-02 Thread Zvi Vered
Hello, I want to use openssl in order to send\receive encrypted messages to a server. My Target has TPM. Can you please explain how to configure the openssl library to take public+private keys from TPM ? Should I use a specific TPM library ? Thank you, Z.V -- openssl-users mailing list