Skip to content

QorCap v0.3.30: TPM device key on Intel PTT

Choose a tag to compare

@github-actions github-actions released this 22 Oct 20:19
7529621

qorcap device-key init now creates the TPM-backed key in the Microsoft Platform Crypto Provider. receipt.v0.json is unchanged and the software-key fallback is kept.

  • PR #62: NCryptIsAlgSupported was called with NCRYPT_SILENT_FLAG, which the Platform Crypto Provider rejects with NTE_BAD_FLAGS (0x80090009). Neither ECDSA P-256 nor RSA-2048 was tried and init fell back to the software key. The algorithm check and NCryptDeleteKey now pass flags 0, so a failed create no longer leaves a key behind, and the fallback message records each call's HRESULT. Run qorcap device-key init again on a PC that fell back to replace the software key record with the TPM key QorCap-Device-Attest-v0.

qorcap.exe sha256 609c3440f5b58ede5c8f6d5cee413c6eda6ee72ce6588dd6d4f844396a16e690