Repository navigation
QorCap v0.3.30: TPM device key on Intel PTT
qorcap device-key init now creates the TPM-backed key in the Microsoft Platform Crypto Provider. receipt.v0.json is unchanged and the software-key fallback is kept.
- PR #62:
NCryptIsAlgSupportedwas called withNCRYPT_SILENT_FLAG, which the Platform Crypto Provider rejects withNTE_BAD_FLAGS(0x80090009). Neither ECDSA P-256 nor RSA-2048 was tried and init fell back to the software key. The algorithm check andNCryptDeleteKeynow pass flags 0, so a failed create no longer leaves a key behind, and the fallback message records each call's HRESULT. Runqorcap device-key initagain on a PC that fell back to replace the software key record with the TPM keyQorCap-Device-Attest-v0.
qorcap.exe sha256 609c3440f5b58ede5c8f6d5cee413c6eda6ee72ce6588dd6d4f844396a16e690