I would like to use my TPM chip to symmetrically encrypt some data, but sadly the tpm2_getcap commands
command states that symmetric encryption is not supported by my chip.
The thing I find unusual is that the tpm2_getcap algorithms
command states that there is AES
support:
aes:
value: 0x6
asymmetric: 0
symmetric: 1
hash: 0
object: 0
reserved: 0x0
signing: 0
encrypting: 0
method: 0
Why does my TPM chip (Infineon SLB9670) support AES
, while it does
not support symmetrically encrypting and decrypting?
In TPM-Rev-2.0-Part-1-Architecture-01.38 chapter 32.5 Symmetric Encryption the following is said:
Support for this command in a TPM may cause the TPM to be subject to different jurisdictions' legal import/export controls than would apply to a TPM without these commands.
Maybe this has something to do with AES
being available, but not being able to use it?