Is matrix ? about age-plugin-tpm HOT 8 CLOSED

Go-TPM is a Go library that communicates directly with a TPM device on Linux or Windows machines.

So I need to try on Darwin as I think the api is radically different on Darwin

from age-plugin-tpm.

OSX does not use TPMs, they use "Secure Enclave" so that needs this https://github.com/remko/age-plugin-se

I can't guarantee any functionality at this moment as the Google TPM library is getting a new API soon'ish and I'm in the progress of figuring it out.

from age-plugin-tpm.

and fwiw, I'm in the process of rewriting the identity handling so we can have TPM keys sealed outside of the TPMs to mitigate the generally small storage space the TPMs has for internal keys.

from age-plugin-tpm.

Hey

thanks for quickly responding.

right - yep apple goes their own way..

you know way more about it than me.

so when can I dog food it - I can help test and code it

from age-plugin-tpm.

You can play around with the tooling using the --swtpm flag or AGE_PLUGIN_TPM_SWTPM=1 environment variable to utilize a software TPM (depends on swtpm), which would allow you to use it outside of your actual TPM.

But keep in mind I don't make any stability guarantees until an eventual 1.0 release.

from age-plugin-tpm.

No sweat - it’s beta beta .

I will yt it out with the mocking layer you suggested.

I use age currently btw and mkcert. My intent is to make it easy peasy for non techies to run self hosted with good secret practices for the config and days 2 ops.

Also for people to run their own password and passkey software and not need a third party. Either syncing between all their devices independent of OS. Currently passkeys are trapped / synced per OS which reinforces the incumbent OS gateways . It’s possible to instead setup sync cross OS using setup QR codes and other mechanisms .

from age-plugin-tpm.

I had a play..

https://github.com/remko/age-plugin-se
does not work on my old intel mac :) Will try new mac

But i noticed that this code can easily be turned into golang code so users don't need the brew aspects:
https://github.com/remko/age-plugin-se/tree/main/Sources

so i raised an Issue here : Foxboron/swtpm_test#1
so then it wont be a plugin and all that hassle.

from age-plugin-tpm.

As explained over email, this plugin won't support Microsoft Windows and Apple.

from age-plugin-tpm.