<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p> </p>
<div class="moz-text-html" lang="x-unicode">
<pre class="message flowed">Package: wnpp
X-Debbugs-CC: <a class="moz-txt-link-abbreviated" href="mailto:whonix-devel@whonix.org">whonix-devel@whonix.org</a>
* Package name: tpm2-pk11
Version : ?
Upstream Author : <span class="pl-c">Iwan Timmer</span>
* URL : <a class="moz-txt-link-freetext" href="https://github.com/irtimmer/tpm2-pk11">https://github.com/irtimmer/tpm2-pk11</a>
* License : BSD 2-Clause "Simplified" License
Programming Lang: C
Description : PKCS#11 Module for TPM 2.0
TPM2-PK11 provide a PKCS#11 backend for TPM 2.0 chips.
This allows you to use your TPM keys in every application which support the PKCS #11 standard.
For more information about howto setup keys, certificates and applications see the <a href="https://github.com/irtimmer/tpm2-pk11/wiki">wiki</a>.[0]
Features
Sign and decrypt using private RSA key stored in TPM
Provide on disk stored certificate in DER format to applications using PKCS #11
Supported applications
OpenSSH Client (SSH key in TPM)
Firefox (Private key of Client certificate in TPM)
GnuPG using gnupg-pkcs11-scd (PGP key in TPM) [1]
[0] <a class="moz-txt-link-freetext" href="https://github.com/irtimmer/tpm2-pk11/wiki">https://github.com/irtimmer/tpm2-pk11/wiki</a>
[1] gnupg-pkcs11-scd is already packaged for Debian
In plain English: This package has the awesome benefit of turning a TPM device into a universal smartcard
for all different kinds of keys.
For our (Whonix) virtualized privacy distro this means that users can be sure their keys are safe
even if the VM is infected.
</pre>
</div>
</body>
</html>