[tpm2] Re: tpm2_createprimary command

[tpm2] Re: tpm2_createprimary command

[Tadeusz Struk]

[-- Attachment #1: Type: text/plain, Size: 446 bytes --]

On 10/11/19 11:56 AM, mohammed.aitbendaoud(a)gmail.com wrote:
> i am using tpm2-tools for testing my tpm.
> 
> Before starting the tests i am doing : tpm2_createprimary -H o -g sha256 -G ecc
> 
> why we need a hash to create a primary key ?

It is used to calculate the object's qualified name. See "27.2.3 nameAlg" in
https://trustedcomputinggroup.org/wp-content/uploads/TPM-Rev-2.0-Part-1-Architecture-01.38.pdf

Thanks,
-- 
Tadeusz

[tpm2] Re: tpm2_createprimary command

[mohammed.aitbendaoud]

[-- Attachment #1: Type: text/plain, Size: 614 bytes --]

Thank you for your reply.
It's clear.

I have another somes questions in this regard, at the tpm2_create level this time :

     tpm2_create -H 0x80000000 -g sha256 -G symcipher -u key.pub -r AESkey.priv 

 1- I need to create a symmetric private key AES, why in the function we have to specify -u and -r ? if no it does not work !

     tpm2_create -H 0x80000000 -g sha256 -G aes -u key.pub -r AESkey.priv 

when I put aes in parameter it returns me an error : type algorithm not support 0x6

 2- Why the tpm2-tools does not support aes while the hardware chip of the TPM supports it ?


Thank you

[tpm2] Re: tpm2_createprimary command

[Tadeusz Struk]

[-- Attachment #1: Type: text/plain, Size: 566 bytes --]

On 10/14/19 2:05 AM, mohammed.aitbendaoud(a)gmail.com wrote:
>      tpm2_create -H 0x80000000 -g sha256 -G aes -u key.pub -r AESkey.priv 
> 
> when I put aes in parameter it returns me an error : type algorithm not support 0x6
> 
>  2- Why the tpm2-tools does not support aes while the hardware chip of the TPM supports it ?

The create tool does support aes algorithm. The error code doesn't look right.
To create a symmetric aes key please follow the example on:

https://github.com/tpm2-software/tpm2-tools/wiki/Creating-Objects

Thanks,
-- 
Tadeusz

[tpm2] Re: tpm2_createprimary command

[mohammed.aitbendaoud]

[-- Attachment #1: Type: text/plain, Size: 329 bytes --]

Thank you for ur reply.
I have already followed this tutorial but the commands do not work.
I am under embedded linux and i installed the tpm2-tools.

For exmaple : 
tpm2_createprimary -o primary.ctx 
give me error like ---> tpm2_createprimary : invalide option -- 'o' 

I just want to understand what's going on.
Thanks

[tpm2] Re: tpm2_createprimary command

[Tadeusz Struk]

[-- Attachment #1: Type: text/plain, Size: 520 bytes --]

On 10/15/19 1:03 AM, mohammed.aitbendaoud(a)gmail.com wrote:
> Thank you for ur reply.
> I have already followed this tutorial but the commands do not work.
> I am under embedded linux and i installed the tpm2-tools.
> 
> For exmaple : 
> tpm2_createprimary -o primary.ctx 
> give me error like ---> tpm2_createprimary : invalide option -- 'o' 

Because -o is indeed an invalid option. What you want is -c. See:
https://github.com/tpm2-software/tpm2-tools/blob/master/man/tpm2_createprimary.1.md

--
Tadeusz