yogurt

Thx a lot for that, I'll try.

Thx for your reply, and sorry not to express my application clearly No security things, I just want to use ibm's swtpm to encrypt a binary file, and then decrypt it on another device using the same ibm's swtpm, and get the same result on both devices.Very simple.

I want to get same decryption products on different devices through TSS AES encryptdecrypt, but I found that on different devices the decryption product will be different. That confused me ,then I changed the tsscrypto.c from AES CBC to AES-ECB, but it is still not the same. There must be some random seed or something working between devices, how to make them the same, please? The final result I want to get is to send an encrypted binary file to another device, and decrypt at another device, and...

Excuse me, last question. Where's the manual, please?I've seen this appeared in some topics but i cannot find it.

Finally I found the solution at "Policy Signed" part Just attatch the 0000016a and the name of key shown at loadexternal -ns, then policymaker. Hope this help others, thank you again.

First, thank you for any help, happy new year! the regression test scripts about how to gen policyauthorizesha256 is like below Name for 80000001 0004 4234 c24f c1b9 de66 93a6 2453 417d 2734 d753 8f6f policyauthorizesha256.txt 0000016a000b64ac921a035c72b3aa55ba7db8b599f1726f52ec2f682042fc0e0d29fae81799 (need blank line for policyRef) policymaker -if policies/policyauthorizesha256.txt -of policies/policyauthorizesha256.bin -pr eb a3 f9 8c 5e af 1e a8 f9 4f 51 9b 4d 2a 31 83 ee 79 87 66 72 39 8e 23...

I want to seal a key into SWTPM, and I referenced the regression test testpolicy.sh part Policy Authorize but I can only succeed with provided key which is located in policies/rsaprivkey.pem and policies/rsapubkey.pem, failed with my own key created with openssl. ./createprimary -hi p ./create -hp 80000000 -bl -kt f -kt p -opr pr.bin -opu pu.bin -pol policies/policyauthorizesha256.bin -if key.bin ./loadexternal -hi p -halg sha256 -nalg sha256 -ipem policies/rsapubkey.pem ./load -hp 80000000 -ipr...