Getting Started with the TPM2 Software Stack (TSS2)
summary
Project implements the TCG TSS2 APIs, ships a layered C stack with a low-level system API, a convenience ESYS layer and pluggable TCTI transport modules, plus an OpenSSL engine and PKCS#11 work in progress. Release 2.0 matches TPM2 spec, CI and tests target >80% coverage, distros and users include Facebook, Red Hat, Infineon and Fraunhofer, and StrongSwan integration exists. Command-line tools demo creating a primary key, loading a subkey, signing and verifying via OpenSSL; a UEFI TCTI prototype runs and the resource manager is migrating toward the kernel.
AI-written summary · about
chapters (16)
- 0:00Introduction
- 0:45Overview
- 3:17Background
- 4:32Design
- 8:14Device Driver
- 11:31System API
- 12:55Crypto Libraries
- 13:55Resource Management
- 15:17Open Source Implementation
- 20:41GitHub
- 23:30Packaging
- 28:09Use Cases
- 29:34TPM Tools
- 32:52OpenSSL Engine
- 33:55System API Implementation
- 36:27Questions
related talks
36mTPM Software Stack - Enabling the TPM2.0 Ecosystem in Linux
37mtpm2-software.github.io - Enabling the TPM2.0 Ecosystem in Linux
11mSubsystem Update: tpm2-Software Update and Highlights
51mApplications of TPM 2.0
46mTPM in TEE
51mSecuring Embedded Linux Systems with TPM 2.0
25mOverview and Recent Developments: TPM
15mUsability and Security of Trusted Platform Module (TPM) Library APIs