Hello,

I am learning about encryption / decryption using Fapi.

For that purpose, I create a key using tss2_createkey and use tss2_encrypt / tss2_decrypt (and their Fapi equivalents).

tss2_ createkey has the argument -a, --authValue to set up a decryption password.

With tss2_encrypt I generate the cipher text.

The problem is with the decryption process. When I decrypt with tss2_decrypt I got asked for that authValue. If it is given correctly it decrypts the cipher text. However, Fapi_Decrypt will fail throwing an authorization error.

I was wondering how to programmatically enter the authValue? Fapi_Decrypt has no arguments to pass it. Maybe through the FAPI_CONTEXT?

Using TPM2-TSS v. 2.4.x

TPM2-TOOLS v. 4.X

Thank you for any possible help.

Best,

Anthony Arrascue

--------------------------------------
neuroloop GmbH
Breisacher Str. 86, 79110 Freiburg, Germany

aarrascue@neuroloop.de

neuroloop.de