On Sun Sep 15, 2024 at 12:43 PM EEST, Jarkko Sakkinen wrote: > When it comes to boot we should aim for one single start_auth_session > during boot, i.e. different phases would leave that session open so > that we don't have to load the context every single time. I think it > should be doable. The best possible idea how to improve performance here would be to transfer the cost from time to space. This can be achieved by keeping null key permanently in the TPM memory during power cycle. It would give about 80% increase given Roberto's benchmark to all in-kernel callers. There's no really other possible solution for this to make any major improvements. So after opt-in kernel command line option I might look into this. This is already done locally in tpm2_get_random(), which uses continueSession to keep session open for all calls. BR, Jarkko
