TPM: Add an asymmetric key subtype for handling TPM-based keys
Add an asymmetric key subtype for handling keys that have to be loaded into
the TPM to be used.
A key can be created by something like:
keyctl add asymmetric "a" "tpm_create parent=40000000,095c2a76085f6aa9327c62f72a3d1348f62b99db keyauth=095c2a76085f6aa9327c62f72a3d1348f62b99db" @s
where "parent=<parent_key_handle>,<parent_key_secret>" and
"keyauth=<new_key_secret>".
The above will ask the TPM to create a key and return the TPM_KEY struct as a
blob with the private key encrypted by the parent key (in the above case, the
SRK).
Signed-off-by: David Howells <dhowells@redhat.com>
5 files changed
