libtpms v0.8.2 and libtpms v0.7.7 release

8 views
Skip to first unread message

Stefan Berger

unread,
Mar 8, 2021, 9:09:06 AM3/8/21
to libtpms-...@googlegroups.com
Hi!

  After some quick fixes of some serious issues I released libtpms
v0.8.2 and v0.7.7 last week. Thanks to Jonas Wietschel for reporting the
bug related to loaded public keys [1] and to William Roberts for
reporting the bug related to symmetric encryption and the bad IV
returned to the caller [2].

Here are the changes:


version 0.8.2 and 0.7.7:

    CryptSym: fix AES output IV
A CVE has been filed for this bugfix. Unfortunately multi-step
encrypted data won't decrypt anymore but are now compatible with
other TPM 2 devices.


version 0.8.1 and 0.7.6:

    tpm2: Fix public key context save due to ANY_OBJECT_Marshal usage
    This also fixed a context save and suspend/resume problem when
public keys are loaded (issue #195)


Regards,
Stefan


1) https://github.com/stefanberger/libtpms/issues/195

2) https://github.com/stefanberger/libtpms/issues/207


Reply all
Reply to author
Forward
0 new messages