You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/feature/tpm
Andrew Lytvynov 26f9b50247
feature/tpm: disable dictionary attack protection on sealing key (#17952)
DA protection is not super helpful because we don't set an authorization
password on the key. But if authorization fails for other reasons (like
TPM being reset), we will eventually cause DA lockout with tailscaled
trying to load the key. DA lockout then leads to (1) issues for other
processes using the TPM and (2) the underlying authorization error being
masked in logs.

Updates #17654

Signed-off-by: Andrew Lytvynov <awly@tailscale.com>
2 weeks ago
..
attestation.go feature/tpm: disable dictionary attack protection on sealing key (#17952) 2 weeks ago
attestation_test.go feature/tpm: protect all TPM handle operations with a mutex (#17708) 1 month ago
tpm.go feature/tpm: disable dictionary attack protection on sealing key (#17952) 2 weeks ago
tpm_linux.go feature/tpm: try opening /dev/tpmrm0 before /tmp/tpm0 on Linux (#16600) 5 months ago
tpm_other.go feature/tpm: implement ipn.StateStore using TPM sealing (#16030) 6 months ago
tpm_test.go feature/tpm: use withSRK to probe TPM availability (#17627) 1 month ago
tpm_windows.go feature/tpm: implement ipn.StateStore using TPM sealing (#16030) 6 months ago