Timeline for TPM: signing key or Attestation Identity Key?
Current License: CC BY-SA 3.0
6 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| May 2, 2016 at 23:37 | comment | added | Wilbur Whateley | Yes, my comment should amended to read "if you are doing TPM based platform identity operations...use the AIK." Didn't mean "identity in any situation". | |
| Apr 29, 2016 at 12:41 | comment | added | Justin King-Lacroix | Yes, ish: because you can't use an AIK to sign arbitrary data, it's not possible to use it as an SSL identity. You instead need to do a TPM_CertifyKey on a signing key, and use that as your SSL identity. | |
| Apr 14, 2016 at 0:40 | comment | added | Wilbur Whateley | "...If you are doing remote attestation, use an AIK." More generally, if you are doing identity based operations (of which remote attestation is one), use the AIK. Indeed, the 'I' stands for Identity. | |
| Nov 28, 2015 at 18:19 | vote | accept | onb | ||
| Apr 10, 2015 at 15:55 | review | First posts | |||
| Apr 10, 2015 at 15:55 | |||||
| Apr 10, 2015 at 15:52 | history | answered | Justin King-Lacroix | CC BY-SA 3.0 |