I am using TPM to to encrypt and sign my data. But since I am not security expert, I need to come to you guys :D

I am developing this app to verify file content. I already has this part sorted out with TPM. But now comes the tricky part. I have multiple people using this pc but only I have root access. How to store signature in file that only my app/me can access it? The file has to be on same pc as my app, this is pure offline.

So is there any better/cleaner solution than just altering rights to folder/file with chmod command? I don't know the best practices with storing signature files.

  • Why is it important that only you have access? If other people modify it, it will be invalid.
    – vidarlo
    Apr 1 at 19:26
  • @vidario potentially because the signature file is used to sign things that should only be signed by the OP. And if that is the case, this is an XY problem with another solution rather than restricting access.
    – schroeder
    Apr 1 at 22:04
  • Wait wait wait, how does the TPM and its keys relate to your problem, OP? Apr 2 at 19:46
  • TPM and keys are used to sign the docs. But TPM does not store signature file within itself so I had to come up with another solution. But for now I just altered the access to file only for my user.
    – Croksie
    Apr 5 at 12:47


You must log in to answer this question.

Browse other questions tagged .