On Sat, Dec 7, 2019 at 9:08 PM James Bottomley <James.Bottomley@xxxxxxxxxxxxxxxxxxxxx> wrote: > > We have a need in the TPM trusted keys to return the ASN.1 form of the > TPM key blob so it can be operated on by tools outside of the kernel. > To do that, we have to be able to read and write the key format. The > current ASN.1 decoder does fine for reading, but we need pieces of an > ASN.1 encoder to return the key blob. Is there a reason the kernel needs to do this encoding, rather than having something in userland do the translation?