tpm2 software

This page provides an overview of the tpm2-software eco system.

Currently supported

• TPM2-Tools: https://github.com/tpm2-software/tpm2-tools
• PKCS11: https://github.com/tpm2-software/tpm2-pkcs11 (in development)
• OpenSSL: https://github.com/tpm2-software/tpm2-tss-engine (in development)
• OpenConnect: http://git.infradead.org/users/dwmw2/openconnect.git/blob/tpm2:/gnutls_tpm2_esys.c (in development)
• cryptsetup/LUKS: https://gitlab.com/cryptsetup/cryptsetup/merge_requests/51 (in development)
• StrongSwan: https://wiki.strongswan.org/projects/strongswan/wiki/TPMPlugin
• Clevis: https://github.com/latchset/clevis Howto: https://blog.dowhile0.org/2017/10/18/automatic-luks-volumes-unlocking-using-a-tpm2-chip/
• Wireshark TPM Cmd/Rsp/Buffer with TCTI-PCAP module or /dev/tpmrm0 sniffing (partial, TPM-Headers only yet)

Projects to add support to

• OpenVPN
• WireGuard
• Tinc
• NetworkManager/wpa_supplicant 802.1X
• gnome-keyring
• KDE wallet
• GNU-TLS
• WebCrypto (Firefox, WebKit, Chromium)
• OpenSSH HostKey ((non-)PKCS11), ClientKey ((non-)PKCS11)