tpm2-software.github.io - Enabling the TPM2.0 Ecosystem in Linux
Talkat Open Source Summit Europe + Embedded Linux Conference Europe 2019 · on Wednesday, 2019-10-30· at 14:25· Forum 2·
summary
Explains how the tpm2-software stack turns the kernel's /dev/tpm0 into usable primitives: eSAPI and FAPI provide higher‑level calls, a keystore and JSON policy format let apps reference keys by path, and an OpenSSL engine plus a PKCS#11 provider offload crypto to the chip. Demonstrates a working cryptsetup integration (disk unlock via TPM, aiming for cryptsetup 2.3), a virtual smart‑card prototype, CI across multiple distros, and more than 100 contributors driving adoption and tooling.
AI-written summary · about
chapters (19)
- 0:00Intro
- 0:25Who am I?
- 1:00Putting TPMs into things
- 1:58Introduction to TPMS
- 3:56The TPM Software Stack 2.0
- 5:20The TSS APIS
- 8:48Projects overview
- 9:36The tpm2-software core projects
- 11:03People and community
- 12:24Tags tags tags
- 13:49Existing TSS things
- 15:21UC: Shielded key storage and usage
- 18:14UC: Disk encryption
- 22:00UC: (VPN) user authentication
- 23:08What's new ? libtss2-fapi.so!
- 27:29API Code comparison (Signing)
- 28:15Policy Comparison
- 29:08UC: (General) user authentication
- 31:26What's missing?
related talks
36mTPM Software Stack - Enabling the TPM2.0 Ecosystem in Linux
51mApplications of TPM 2.0
28mThe TPM as an everyday security tool
23mTPM
40mGetting Started with the TPM2 Software Stack (TSS2)
43mTPMs and the Linux Kernel: unlocking a better path to hardware security
51mSecuring Embedded Linux Systems with TPM 2.0
45mTPMs & The Linux Kernel: Unlocking A Better Path To Hardware Security