TPM sniffing attacks and session encryption

[zaolin]

Hey people,

I think we should look into session encryption based on ECDH in order to mitigate TPM 2.0 sniffing attacks.
I think go-tpm has no real mutual auth session encryption yet.

https://twitter.com/XMPPwocky/status/1420527243172868097

Any thoughts about it?

[chrisfenner]

I'd sure love to see this added to go-tpm. The easiest way I can think of to do this is to create an io.Writer that wraps the TPM you get back from OpenTPM with a salted encryption session set up against the EKpub. Unfortunately, I don't have cycles to do this anytime soon.

@josephlr and I have some tentative plans to use Microsoft's TSSCodeGen tools to generate a complete Go TSS, with support for all of these types of features more natively, so you can just add a session to do whatever you want.