parallaxsecond / parallaxsecond/rust-tss-esapi

Save VerifiedTicket

Open
#623 1 comment 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
Rust
Stars
135
Forks
80
Avg merge
1d 17h
Merged PRs (30d)
5

Description

TPM policy authorization (policy_authorize) can be optimized by caching the VerifiedTicket (so it does not need to be reverified). I am imagining a solution similar to SavedTpmContext with marshall/unmarshall or serde. If somebody can suggest how it should be organized in the file structure, I would be happy to implement it myself and make a PR.

I think I have a pretty simple implementation that converts the tag and hierarchy to integers, and to deserialize takes the SavedVerifiedTicket to a TPMT_TK_VERIFIED. I'm not sure this is the cleanest implementation.

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by locating policy_authorize, VerifiedTicket, and the existing SavedTpmContext implementation in the repository. Compare its marshall/unmarshall or serde organization with the proposed SavedVerifiedTicket conversion to TPMT_TK_VERIFIED; done means a clean cached representation can be serialized, deserialized, and reused without reverifying the ticket.

Written by the indexing model from the issue text.

Assessment

Tech stack
rust
Domain
security
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.