tpm2-tools

The source repository for the Trusted Platform Module (TPM2.0) tools

Security & Privacy

Explore on GitHub Read Hacker News discussions

4Distinct people

4Mentions

0Explicit recommenders

886GitHub stars

REPOSITORY AT A GLANCE

What to know before exploring

What it is

The source repository for the Trusted Platform Module (TPM2.0) tools

GitHub

Where it is used

No documented product use has been verified yet.

What people are saying

No recommendation phrase was found in the indexed comments.

No classified warning is attached to this page. Read the discussions before treating silence as approval.

Also in these discussions

No other repository is repeatedly linked in the same discussions.

This week on Hacker News

Nov 7–Nov 14 UTC · Direct repository links and separately labeled related project stories. Indexed through 11/14/2026, 3:03:16 PM UTC.

No direct repository links were found in the indexed HN discussions over the past seven days. Older discussions are available below.

Mentions over time

HN mentions by year4 dated mentions

Observed mentions: 2020-11-23 23:11:03 UTC to 2025-01-17 08:01:57 UTC.

Counts come from the repository’s dated source evidence. Index cutoff: 2026-11-02 08:16:59 UTC.

View mention counts and date ranges

UTC ranges include their start and exclude their end. Select a period to filter the source evidence.
Period	Start (UTC)	End (exclusive, UTC)	Mentions	Comments
2020	2020-01-01 00:00:00 UTC	2021-01-01 00:00:00 UTC	1	1
2021	2021-01-01 00:00:00 UTC	2022-01-01 00:00:00 UTC	2	2
2022	2022-01-01 00:00:00 UTC	2023-01-01 00:00:00 UTC	0	0
2023	2023-01-01 00:00:00 UTC	2024-01-01 00:00:00 UTC	0	0
2024	2024-01-01 00:00:00 UTC	2025-01-01 00:00:00 UTC	0	0
2025	2025-01-01 00:00:00 UTC	2026-01-01 00:00:00 UTC	1	1

What Hacker News says

4 sources

jansommer·Jan 17, 2025

You can use tpm2_policyauthorize and allow the PCR to change without having to manually unlock. This was not supported in TPM 1.2. You can use it with Systemd. https://github.com/tpm2-software/tpm2-tools/blob/master/man/...

In Bypassing disk encryption on systems with automatic TPM2 unlock

psanford·Sep 24, 2021

If you are looking for some references besides my linked code, this comment[0] on the tpm2-tools repo will probably be useful. FWIW, I've moved my workflow over to having long lived aws keys protected by my TPM and then I generate session credentials from that for normal aws cli usage. [0]: https://github.com/tpm2-software/tpm2-tools/issues/1597#issu...

In AWS SIGv4 and SIGv4A – How AWS signs and verifies API requests

als0·Jul 1, 2021

TPM keys are protected by policies. A policy can be based on the system state (hashes), a password, or both. There are also complex policies using the Extended Authorization feature. If you don't care about platform state or configuration, then you can just set a key policy with just a password. The TPM will lock you out if you make too many incorrect guesses. You can in fact put passwords on most TPM internal objects. See this example https://github.com/tpm2-software/tpm2-tools/blob/master/man/...

In British right to repair law excludes smartphones and computers

gruez·Nov 23, 2020

>It'll be built into the CPU, instead of having a separate chip so are the trusted execution environments used by fTPMs? >seems to have secret-management functionality for user-specified keys AFAIK TPMs already have that functionality. random search: https://github.com/tpm2-software/tpm2-tools/blob/master/man/... >biometrics, etc. AFAIK some fingerprint readers already use trusted execution environments to handle authentication, so from a feature point of view there isn't really anything new here.

In “Microsoft Pluton Hardware Security Coming to Our CPUs”: AMD, Intel, Qualcomm