tpm2-totp | human using time-based one
kandi X-RAY | tpm2-totp Summary
kandi X-RAY | tpm2-totp Summary
tpm2-totp is a C library. tpm2-totp has no bugs, it has no vulnerabilities, it has a Permissive License and it has low support. You can download it from GitHub.
This is a reimplementation of Matthew Garrett's tpmtotp software for TPM 2.0 using the tpm2-tss software stack. Its purpose is to attest the trustworthiness of a device against a human using time-based one-time passwords (TOTP), facilitating the Trusted Platform Module (TPM) to bind the TOTP secret to the known trustworthy system state. In addition to the original tpmtotp, given the new capabilities of in-TPM HMAC calculation, the tpm2-totp's secret HMAC keys do not have to be exported from the TPM to the CPU's RAM on boot anymore. Another addition is the ability to rebind an old secret to the current PCRs in case a software component was changed on purpose, using a user-defined password.
This is a reimplementation of Matthew Garrett's tpmtotp software for TPM 2.0 using the tpm2-tss software stack. Its purpose is to attest the trustworthiness of a device against a human using time-based one-time passwords (TOTP), facilitating the Trusted Platform Module (TPM) to bind the TOTP secret to the known trustworthy system state. In addition to the original tpmtotp, given the new capabilities of in-TPM HMAC calculation, the tpm2-totp's secret HMAC keys do not have to be exported from the TPM to the CPU's RAM on boot anymore. Another addition is the ability to rebind an old secret to the current PCRs in case a software component was changed on purpose, using a user-defined password.
Support
Quality
Security
License
Reuse
Support
tpm2-totp has a low active ecosystem.
It has 50 star(s) with 19 fork(s). There are 9 watchers for this library.
It had no major release in the last 12 months.
There are 2 open issues and 13 have been closed. On average issues are closed in 51 days. There are no pull requests.
It has a neutral sentiment in the developer community.
The latest version of tpm2-totp is v0.3.0
Quality
tpm2-totp has 0 bugs and 0 code smells.
Security
tpm2-totp has no vulnerabilities reported, and its dependent libraries have no vulnerabilities reported.
tpm2-totp code analysis shows 0 unresolved vulnerabilities.
There are 0 security hotspots that need review.
License
tpm2-totp is licensed under the BSD-3-Clause License. This license is Permissive.
Permissive licenses have the least restrictions, and you can use them in most projects.
Reuse
tpm2-totp releases are available to install and integrate.
Installation instructions, examples and code snippets are available.
Top functions reviewed by kandi - BETA
kandi's functional review helps you automatically verify the functionalities of the libraries and avoid rework.
Currently covering the most popular Java, JavaScript and Python libraries. See a Sample of tpm2-totp
Currently covering the most popular Java, JavaScript and Python libraries. See a Sample of tpm2-totp
tpm2-totp Key Features
No Key Features are available at this moment for tpm2-totp.
tpm2-totp Examples and Code Snippets
Copy
tpm2-totp -N 0x01800001 -P verysecret generate
tpm2-totp -N 0x01800001 calculate
tpm2-totp -N 0x01800001 -P verysecret recover
tpm2-totp -N 0x01800001 -P verysecret reseal
Copy
tpm2-totp generate
tpm2-totp -P verysecret generate
tpm2-totp -P verysecret -p 0,1,2,3,4,5,6 generate
tpm2-totp -p 0,1,2,3,4,5,6 -b SHA1,SHA256 generate
Community Discussions
No Community Discussions are available at this moment for tpm2-totp.Refer to stack overflow page for discussions.
Community Discussions, Code Snippets contain sources that include Stack Exchange Network
Vulnerabilities
No vulnerabilities reported
Install tpm2-totp
When the platform is in a known trustworthy state, the user will generate a tpm2-totp secret that is sealed to the current PCR values of the TPM. The secret is also exported (e.g. via QR-Code) so it can be recorded in a TOTP application (e.g. freeotp on Android phones). The secret is also stored inside the TPM's NV space.
Followed by setting up the initrd, see below. Instructions on packages needed to build and install tpm2-totp and different build options are available in the INSTALL file.
The TOTP secret can be generated with and without password. It is recommended to set a password -Pin order to enable recovery options. Also the PCRs and PCR banks can be selected -p and -b. Default values are PCRs 0,2,4 and banks SHA1, SHA256.
Followed by setting up the initrd, see below. Instructions on packages needed to build and install tpm2-totp and different build options are available in the INSTALL file.
The TOTP secret can be generated with and without password. It is recommended to set a password -Pin order to enable recovery options. Also the PCRs and PCR banks can be selected -p and -b. Default values are PCRs 0,2,4 and banks SHA1, SHA256.
Support
For any new features, suggestions and bugs create an issue on GitHub.
If you have any questions check and ask questions on community page Stack Overflow .
Find more information at:
Reuse Trending Solutions
Find, review, and download reusable Libraries, Code Snippets, Cloud APIs from over 650 million Knowledge Items
Find more librariesStay Updated
Subscribe to our newsletter for trending solutions and developer bootcamps
Share this Page