Skip to content

Commit 09bc7f5

Browse files
authored
Update README.md
1 parent fd4aa1e commit 09bc7f5

File tree

1 file changed

+7
-1
lines changed

1 file changed

+7
-1
lines changed

README.md

Lines changed: 7 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -37,7 +37,13 @@ If you want to transfer an external `RSA|ECC|AES|HMAC` key _from_ `TPM-A` to `
3737
5. On `TPM-B` use the imported key to sign,encrypt,decrypt,hmac
3838

3939

40-
It is critical to note the key that is transferred carries specific TPM policies which must be fulfilled upon use. These policies ensure the key cannot get duplicated beyond the target TPM or that a password is required when used (`tpm2_policyor(tpm2_policypcr | tpm2_policyduplicateselect` and `tpm2_policyor(tpm2_policyauthvalue | tpm2_policyduplicateselct`). For more details, see the section below on [Bound Key Policy](#bound-key-policy)
40+
It is critical to note the key that is transferred carries specific TPM policies which must be fulfilled upon use.
41+
These policies ensure the key cannot get duplicated beyond the target TPM. Specifically, the keys carry:
42+
43+
* PCR: `tpm2_policyor(tpm2_policypcr | tpm2_policyduplicateselect`
44+
* Password: `tpm2_policyor(tpm2_policyauthvalue | tpm2_policyduplicateselct)`.
45+
46+
For more details, see the section below on [Bound Key Policy](#bound-key-policy)
4147

4248

4349
---

0 commit comments

Comments
 (0)