Hi there,
I am using Esys_TR_FromTPMPublic() in an application to get a Esys TR handle for an
NV-index, it works well when I use no sessions but the ESYS spec recommends to use a
salted HMAC session when reading NV-index with this command.
But when I use a salted HMAC session I get an "attribute mismatch" error on the
session from the TPM. Looking through the library specification I understand that the
NV_ReadPublic command, which is used by Esys_TR_FromTPMPublic(), only accepts audit and
encrypting sessions, but not simple salted HMAC sessions.
So how should I go about using Esys_TR_FromTPMPublic() with salted HMAC sessions? Or how
should I go about ensuring the data I get from the TPM (e.g., name) for the NV-index can
be trusted?
BTW, the tpm2-tss version installed on my test system is 2.3.2
Thanks,
Diego
--
Diego Santa Cruz, PhD
Technology Architect
spinetix.com