ECC: ECC with curve P-256 support in TPM daemons |
|||||||||||||
Issue descriptionThis is an umbrella bug that track all ECC works and issue here. * Support using ECC in attestation flow (bug 910519) * fix cr50 EK generation (b/80207339) * generate, store EK public key in attestation * request ECC AIK and stored ECC EK for further use. * support verify ECC EK at PCA side (bug 377609) * Chaps (PKCS#11) (bug 910633) * Software support all ECC PKCS#11 functionality * Utilize TPM as hardware ECC key storage/generater when TPM is present. (reference the RSA implementation) * trunks * ECC key operations support in tpm_utility (bug 910485) * ECC EK operations support in tpm_utility (bug 910491) * Replace internally use of RSA for share secret (Session/Duplication/Sharing for Credentials) * Session salt key (bug 910495) * etc. * cryptohome (TODO: add root bug) * Use ECC or remove for cryptohome key (bug 909050) * etc. ⛆ |
|
|
,
Nov 20
Here's some TODOs after scoping the ECC support works. * Support using ECC in attestation flow * fix cr50 EK generation, b/80207339 * generate, store EK public key in attestation * request ECC AIK and stored ECC EK for further use. * support verify ECC EK at PCA side, https://crbug.com/377609 * Chaps (PKCS#11) * Software support ECC in libchaps * Hardware support ECC when TPM is available * cryptohome * Use ECC in DecryptVaultKeyset * may be more? * Replace internally use of RSA for share secret (Session/Duplication/Sharing for Credentials) * TPM2_StartAuthSession * etc.
,
Nov 30
,
Nov 30
,
Nov 30
,
Nov 30
,
Nov 30
,
Nov 30
,
Nov 30
,
Nov 30
,
Dec 3
Update the overview * Support using ECC in attestation flow (bug 910519) * fix cr50 EK generation (b/80207339) * generate, store EK public key in attestation * request ECC AIK and stored ECC EK for further use. * support verify ECC EK at PCA side (bug 377609) * Chaps (PKCS#11) (bug 910633) * Software support all ECC PKCS#11 functionality * Utilize TPM as hardware ECC key storage/generater when TPM is present. (reference the RSA implementation) * trunks * ECC key operations support in tpm_utility (bug 910485) * ECC EK operations support in tpm_utility (bug 910491) * Replace internally use of RSA for share secret (Session/Duplication/Sharing for Credentials) * Session salt key (bug 910495) * etc. * cryptohome (TODO: add root bug) * Use ECC or remove for cryptohome key (bug 909050) * etc.
,
Dec 14
,
Dec 14
,
Dec 14
,
Jan 7
|
||||||||||
►
Sign in to add a comment |
|||||||||||||
Comment 1 by menghuan@chromium.org
, Oct 31