5.4

5.4 - 2022-12-05

Added:

• tpm2_policyrestart:

  • Added option --cphash to output the cpHash for the command
    TPM2_CC_PolicyRestart.

• tpm2_policynvwritten:

  • Added option --cphash to output the cpHash for the command
    TPM2_CC_PolicyNvWritten.

• tpm2_policylocality:

  • Added option --cphash to output the cpHash for the command
    TPM2_CC_PolicyLocality.

• tpm2_policycountertimer:

  • Added option --cphash to output the cpHash for the command
    TPM2_CC_PolicyCounterTimer.

• tpm2_policycommandcode:

  • Added option --cphash to output the cpHash for the command
    TPM2_CC_PolicyCommandCode.

• tpm2_policypassword:

  • Added option --cphash to output the cpHash for the command
    TPM2_CC_PolicyPassword.

• tpm2_policyauthvalue:

  • Added option --cphash to output the cpHash for the command
    TPM2_CC_PolicyAuthValue.

• tpm2_policyauthorize:

  • Added option --cphash to output the cpHash for the command
    TPM2_CC_PolicyAuthorize.

• tpm2_print:

  • Support printing serialized ESYS_TR's

• tpm2_create:

  • Add a clarifying message to usage of -c when TPM2_CreateLoaded
    is not supported.

• tpm2_getcap:

  • Add support for vendor agnostic capabilites. Requires tpm2-tss version 4.0
    and higher to enable.

• Add a script, check_endorsement_cert.sh, to validate the endorsement
  certificate chain. It takes two inputs - A TPM2B_PUBLIC format EKpublic and
  a PEM format EKcertificate specified in that order as arguments.