I would like to use my TPM chip to symmetrically encrypt some data, but sadly the
tpm2_getcap commands command states that symmetric encryption is not supported by my chip.
The thing I find unusual is that the
tpm2_getcap algorithms command states that there is
aes: value: 0x6 asymmetric: 0 symmetric: 1 hash: 0 object: 0 reserved: 0x0 signing: 0 encrypting: 0 method: 0
Why does my TPM chip (Infineon SLB9670) support
AES, while it does
not support symmetrically encrypting and decrypting?
In TPM-Rev-2.0-Part-1-Architecture-01.38 chapter 32.5 Symmetric Encryption the following is said:
Support for this command in a TPM may cause the TPM to be subject to different jurisdictions' legal import/export controls than would apply to a TPM without these commands.
Maybe this has something to do with
AES being available, but not being able to use it?