[Trustedjava-support] JTT 0.3 AikCreate password issue

[Martin P. <Mar...@ia...>]

FYI:

The 0.3 release of JTpmTools contains an issue in AikCreate.java. If you
examine the code you will notice that the command line options -e and -n
are not used for determining the encoding of the AIK secret.

If you only use JTpmTools this is not a problem.

However, this may cause password incompatibilities when sharing
local AIK keys with other local applications (e.g. tpm_tools), be
careful of the encoding.


The following fix will be incorporated in the next JTpmTools release:

===================================================================
--- AikCreate.java      (revision old)
+++ AikCreate.java      (revision new)

                // aik password (required)
-               TcBlobData aikSecret = TcBlobData.newString(params_.getValue(PARAM_AIK_SECRET), false);
+               TcBlobData aikSecret = TcBlobData.newString(params_.getValue(PARAM_AIK_SECRET), appendNullTerm, encoding);