Jarkko Sakkinen
Posts
4729Following
319Followers
489OpenPGP: 3AB05486C7752FE1
Jarkko Sakkinen
jarkko
Edited 29 days ago
The design that I'm aiming with this cli interface is that it would be usable for TPM2 interaction for application written shell (bash, fish etc.) scripting languages (i.e. password managers and similar).
When it starts to be easy to combine the subcommands in script this should be in fairly good state.
Import and load support keys in ASN.1 format, which is used by kernel for loading trusted keys. Software crypto for now is with libssl bindings as it is sort for safe-play for crypto (CVEs, security hotfixes, auditing) and also it is what I'm most used to in kernel development (and that is what I ultimately care about).
When it starts to be easy to combine the subcommands in script this should be in fairly good state.
Import and load support keys in ASN.1 format, which is used by kernel for loading trusted keys. Software crypto for now is with libssl bindings as it is sort for safe-play for crypto (CVEs, security hotfixes, auditing) and also it is what I'm most used to in kernel development (and that is what I ultimately care about).
0
0
1
Jarkko Sakkinen
jarkko
Edited 1 month ago
Regex filtered search for algorithms in the TPM chip and the format used for algorithms in tpm2-cli.
Some other idioms are context: and nvram: as sinks for output.
Some other idioms are context: and nvram: as sinks for output.
0
0
0
Jarkko Sakkinen
jarkko
I'm making sure the cli works nicely before pushing to Gitlab for some days. It is at least much saner looking already (IMHO) than tpm2-tools.
0
0
1
Jarkko Sakkinen
jarkko
great now the deps are in the reasonable level for this type of tool :-) (and meson replaced with plain make).
using cjson was not a great idea in the first place as when doing json output for small and trivial low-level tools like this instead of dumping big continuous json string is also really the best option (vs pretty printing).
maybe i soon tag a release and put this debian packaging pipeline :-)
using cjson was not a great idea in the first place as when doing json output for small and trivial low-level tools like this instead of dumping big continuous json string is also really the best option (vs pretty printing).
maybe i soon tag a release and put this debian packaging pipeline :-)
0
0
0
Jarkko Sakkinen
jarkko
Edited 1 month ago
awesome, almost ready to ship :-)
this came out pretty nice and clean
❯ git ls-files
.tokeignore
CHANGELOG.md
LICENSE
Makefile
README.md
down.c
down.h
iommu.c
iommu.h
log.c
log.h
lsiommu.1
main.c
main.h
meson.build
meson.options
strbuf.c
strbuf.h
util.h
#linux #iommu
this came out pretty nice and clean
❯ git ls-files
.tokeignore
CHANGELOG.md
LICENSE
Makefile
README.md
down.c
down.h
iommu.c
iommu.h
log.c
log.h
lsiommu.1
main.c
main.h
meson.build
meson.options
strbuf.c
strbuf.h
util.h
#linux #iommu
2
1
1
Jarkko Sakkinen
jarkko
Edited 4 months ago
When I was a kid, we did not spend time as a family watching Ron Jeremy films 🤷 Not really part of my growth story ...
My "growth story" was more like watching pieces from my friends big brothers German VHS movie collection :---) They were actually quite scary stuff tbh.
My "growth story" was more like watching pieces from my friends big brothers German VHS movie collection :---) They were actually quite scary stuff tbh.
1
0
0
Jarkko Sakkinen
jarkko
the only thing related to world news i've knowingly spotted during last three weeks is this Easter pic with a creepiest ever bunny :-)
0
0
0
