ExternalVendorCode/go-attestation
1
0
Fork 0
mirror of https://github.com/google/go-attestation.git synced 2025-04-15 06:56:40 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

Set NoDa flag on the AK template (#280)

Browse Source 
Resolves an issue where a TPM in DA lockout mode cannot generate an AK.
This commit is contained in:
Brandon Weeks 2022-06-03 12:51:56 -07:00 committed by GitHub
parent cb976082a3
commit f5d560164e
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
attest/tpm.go
View File

@ -48,7 +48,7 @@ var (
akTemplate = tpm2.Public{
Type: tpm2.AlgRSA,
NameAlg: tpm2.AlgSHA256,
Attributes: tpm2.FlagSignerDefault,
Attributes: tpm2.FlagSignerDefault | tpm2.FlagNoDA,
RSAParameters: &tpm2.RSAParams{
Sign: &tpm2.SigScheme{
Alg: tpm2.AlgRSASSA,