Re: OpenSSL Engine for TPM

Jan Just Keijser <janjust@xxxxxxxxx> · Fri, 7 Jul 2017 16:39:53 +0200



    Hi,

      
      On 06/07/17 06:39, Christian Hohnstädt wrote:

    
      The trousers project has one.

      https://sourceforge.net/projects/trousers/files/OpenSSL%20TPM%20Engine/

      
    agreed, but this engine  does not really put the keys inside the TPM
    - instead it sets up a local repository that is encrypted using a
    key from the TPM. If you look at the way it is designed, it is not
    really secure (as it's not impossible to find the password that was
    used to encrypt the keys with).

    
      Am 5. Juli 2017 06:47:24 MESZ schrieb
        Devang Kubavat <devang.kubavat@xxxxxxxxxx>:
        
          
            Hi All,

              
                1.  Is there any built-in OpenSSL Engine to access the
              TPM ?

                2.  Is there any other OpenSSL Engine to access the TPM
              ? If Yes, How can we configure in OpenSSL libraries to use
              that engine ?

              
              Please guide me. Thanks.

              
-- 
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users