google / google/go-tpm-tools

Support seal/unseal operation with a password

Open
#34 7 comments 0 reactions 0 assignees View on GitHub
Dominant language
C
Stars
309
Forks
118
Avg merge
1d 16h
Merged PRs (30d)
33

Description

Current seal/unseal operations in tpm2tools only check PCRs. We should support the operation with a user specified password. So users can seal the secret to not only PCRs but also a password.

Contributor guide

Open the contributing guide

Research direction

The issue names tpm2tools' seal/unseal operations but no files, tests, or entry points. Start by locating those operations and understanding how PCR-only protection is represented; done means users can specify a password as an additional sealing and unsealing condition, with coverage for the resulting behavior.

Written by the indexing model from the issue text.

Assessment

Tech stack
go
Domain
security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.