New issue
Advanced search Search tips

Issue 900458 link

Starred by 0 users

Issue metadata

Status: Started
Owner:
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Chrome
Pri: 1
Type: Feature

Blocked on: View detail
issue 909050
issue 910485
issue 910495
issue 910633
issue 377609
issue 910490
issue 910519

Blocking:
issue 777688
issue 801748
issue 583784



Sign in to add a comment

ECC: ECC with curve P-256 support in TPM daemons

Project Member Reported by menghuan@chromium.org, Oct 31

Issue description

This is an umbrella bug that track all ECC works and issue here.

* Support using ECC in attestation flow (bug 910519)
  * fix cr50 EK generation (b/80207339)
  * generate, store EK public key in attestation
  * request ECC AIK and stored ECC EK for further use.
  * support verify ECC EK at PCA side (bug 377609)
* Chaps (PKCS#11) (bug 910633)
  * Software support all ECC PKCS#11 functionality
  * Utilize TPM as hardware ECC key storage/generater when TPM is present. (reference the RSA implementation)
* trunks
  * ECC key operations support in tpm_utility (bug 910485)
  * ECC EK operations support in tpm_utility (bug 910491)
* Replace internally use of RSA for share secret (Session/Duplication/Sharing for Credentials)
  * Session salt key (bug 910495)
  * etc.
* cryptohome (TODO: add root bug)
  * Use ECC or remove for cryptohome key (bug 909050)
  * etc.

 
Blocking: 583784
Blockedon: 377609
Here's some TODOs after scoping the ECC support works.

* Support using ECC in attestation flow
  * fix cr50 EK generation, b/80207339
  * generate, store EK public key in attestation
  * request ECC AIK and stored ECC EK for further use.
  * support verify ECC EK at PCA side, https://crbug.com/377609
* Chaps (PKCS#11)
  * Software support ECC in libchaps
  * Hardware support ECC when TPM is available
* cryptohome
  * Use ECC in DecryptVaultKeyset
  * may be more?
* Replace internally use of RSA for share secret (Session/Duplication/Sharing for Credentials)
  * TPM2_StartAuthSession
  * etc.

Summary: ECC support for all TPM related daemons (was: ECC support)
Summary: ECC: ECC support (was: ECC support for all TPM related daemons)
Blockedon: 910485
Add bug 910485 to track ECC key operation works in trunks
Blockedon: 910490
Add  bug 910490  for ECC SRK changing.
Blockedon: 910495
Add changing of salt key
Blockedon: 910519
Summary: ECC: ECC support in TPM daemons (was: ECC: ECC support)
Labels: OS-Chrome
Blockedon: 910633
Add bug 910633 for tracking ECC support in chaps

Comment 11 Deleted

Update the overview

* Support using ECC in attestation flow (bug 910519)
  * fix cr50 EK generation (b/80207339)
  * generate, store EK public key in attestation
  * request ECC AIK and stored ECC EK for further use.
  * support verify ECC EK at PCA side (bug 377609)
* Chaps (PKCS#11) (bug 910633)
  * Software support all ECC PKCS#11 functionality
  * Utilize TPM as hardware ECC key storage/generater when TPM is present. (reference the RSA implementation)
* trunks
  * ECC key operations support in tpm_utility (bug 910485)
  * ECC EK operations support in tpm_utility (bug 910491)
* Replace internally use of RSA for share secret (Session/Duplication/Sharing for Credentials)
  * Session salt key (bug 910495)
  * etc.
* cryptohome (TODO: add root bug)
  * Use ECC or remove for cryptohome key (bug 909050)
  * etc.
Summary: ECC: ECC with curve P-256 support in TPM daemons (was: ECC: ECC support in TPM daemons)
Blocking: 777688
Blocking: 801748
Description: Show this description

Sign in to add a comment