Currently, various tpm-related daemons, send ReadPublic to get the public area for the loaded object to calculate its name.
That's one extra command to the TPM (so, 20-30 ms roundtrip for this daemon, plus potentially delaying other commands from parallel daemons).
Plus, by using the area of the currently loaded object we don't actually double-check that the loaded object is what we expect to be there (we do that separately for the places it matters, like bootlockbox, though).
Avoid sending this command and calculate the object name based on the expected object attributes/policies, handle etc.
Comment 1 by benhenry@chromium.org
, Aug 3