New issue
Advanced search Search tips
Note: Color blocks (like █ or █) mean that a user may not be available. Tooltip shows the reason.

Issue 693827 link

Starred by 1 user
Status: Fixed
Owner:
apronin@chromium.org
Closed: Mar 2017
Cc:
█ dkrahn@chromium.org
bleung@chromium.org
█ vbendeb@chromium.org
EstimatedDays: ----
NextAction: ----
OS: ----
Pri: 1
Type: Bug



Sign in to add a comment

cryptohome: reset DA counter if necessary for tpm2

Project Member Reported by apronin@chromium.org, Feb 18 2017 
cryptohomed doesn't periodically reset the DA counter, if it is not 0, for tpm2, as it used to do for tpm1.2.

Comment 1 by apronin@chromium.org, Feb 18 2017

Status: Started (was: Assigned)
Currently AttestationGetDelegateCredentials() returns false for tpm2. And that prevents cryptohome from resetting the DA counter to 0, when necessary.

tpm_manager implements commands required for reading and resetting the counter and doesn't need a delegate from cryptohomed for executing them. So, AttestationGetDelegateCredentials() can just return true.

Comment 2 by apronin@chromium.org, Mar 1 2017

Status: Fixed (was: Started)
CL https://chromium-review.googlesource.com/c/444855/ has been merged to ToT.
►

Sign in to add a comment