Are there any disk/file encryption methods that utilize the TPM2_EncryptDecrypt2 command? All TPM disk encryption tutorials I can find use the TPM to secure the disk encryption key, and not use the TPM to do the actual encryption. I can imagine that utilizing the command for this purpose would be useful since the key does not have to leave the TPM.
Is this functionality not used for this purpose because not all TPMs support the command? Or does symmetric encryption perform much worse on the TPM as on a CPU?
