FYI:
The 0.3 release of JTpmTools contains an issue in AikCreate.java. If you
examine the code you will notice that the command line options -e and -n
are not used for determining the encoding of the AIK secret.
If you only use JTpmTools this is not a problem.
However, this may cause password incompatibilities when sharing
local AIK keys with other local applications (e.g. tpm_tools), be
careful of the encoding.
The following fix will be incorporated in the next JTpmTools release:
===================================================================
--- AikCreate.java (revision old)
+++ AikCreate.java (revision new)
// aik password (required)
- TcBlobData aikSecret = TcBlobData.newString(params_.getValue(PARAM_AIK_SECRET), false);
+ TcBlobData aikSecret = TcBlobData.newString(params_.getValue(PARAM_AIK_SECRET), appendNullTerm, encoding);
|