Re: [TrouSerS-users] Sealing utilities

[Ken G. <kgo...@us...>]

On 4/24/2014 8:42 AM, Alexander Kjeldaas wrote:
>
> Before I waste time implementing this myself, I wonder if there are
> tools that:
>
> 1. Inspect a sealed blob to list the compound PCR hash it was created
> with, the compound PCR hash required to unseal, and selected PCRs.

The IBM SW TPM has an internal function to do this, used by unseal. 
It's not stand alone though.

> 3. Seal a blob to a specified set of PCR values which are not the
> current PCR values.

The SW TPM comes with a utility (sealfile2) to do this.  It does not use 
the TSS though.