]> www.infradead.org Git - users/dwmw2/openconnect.git/commit
Encrypt digests being signed with IBM TSS2.
authorDavid Woodhouse <dwmw2@infradead.org>
Thu, 3 Jan 2019 21:39:08 +0000 (21:39 +0000)
committerDavid Woodhouse <dwmw2@infradead.org>
Thu, 3 Jan 2019 21:39:08 +0000 (21:39 +0000)
commitdb7054a5a1119b014b9311cfaa9d6cd79ecb1bbb
tree0110c5e3c878cf30d2422e48970a79792be1502b
parent04bcebbc0658fdf36aa9b6572fdc529b74d751f5
Encrypt digests being signed with IBM TSS2.

The digest itself will end up on the wire. But the computed hash including
the secrets should probably be obsecured. For the TPM that's an input
parameter, which it must decrypt. Hence TPMA_SESSION_DECRYPT.

Signed-off-by: David Woodhouse <dwmw2@infradead.org>
gnutls_tpm2_ibm.c