Re: [Trustedjava-support] validate a certified key

[Martin P. <Mar...@ia...>]

On 2012-10-17 22:29, Ronald Tögl wrote:
> I recall that some not so old Infineon TPMs needed a Firmware Update (to 3.17) to certify keys correctly...

IFX TPMs up to FW 3.16 are calculating the hash over the entire
TPM_STORE_PUBKEY struct instead of just the key modulus as
described in the TPM specification.
This was fixed in FW 3.17.

FYI, test code to check for this TPM bug and sample outputs attached.

HTH,
Martin