From: Ronald T. <ron...@ia...> - 2012-11-06 14:20:18
|
Hi Federico, You're right, the TPM spec does allow binding and unbinding with legacy keys. Yet, the JSR321 API specification does not. Actually the functionality did not occur to the JSR321 expert group at the time of writing the spec.. :-/ Feel free to add the functionality to your Binder implementation. Ronald On 11/06/2012 01:17 PM, Fed...@ff... wrote: > Hei, > According to the JSR321 documentation, Legacy keys are the only one that can perform both signing and encryption. I can see that the Signer object also has a method that accepts legacy keys, but what about encryption? Should I use an external library to do that? And if so, how do I decrypt the data with the private key, if only the TPM has access to it? I thought of the Binder and RemoteBinder objects, which are the only ones that have to do with encryption, but they do not accept Legacy keys. > Any tips? > > Thanks! > > Federico > > ------------------------------------------------------------------------------ > LogMeIn Central: Instant, anywhere, Remote PC access and management. > Stay in control, update software, and manage PCs from one command center > Diagnose problems and improve visibility into emerging IT issues > Automate, monitor and manage. Do more in less time with Central > http://p.sf.net/sfu/logmein12331_d2d > _______________________________________________ > Trustedjava-support mailing list > Tru...@li... > https://lists.sourceforge.net/lists/listinfo/trustedjava-support -- Dipl.-Ing. Ronald Tögl phone +43 316/873-5502 Secure and Correct Systems fax +43 316/873-5520 IAIK ron...@ia... Graz University of Technology http://www.iaik.tugraz.at |