sealfile2 will not seal a file larger than 128 bytes

[osresearch]

Spec says 256 bytes should be sealable.

[zaolin]

@osresearch Makes sense the most tpm keys are only 2048bit and sealing is a RSA-OAEP operation only ... ;)

[zaolin]

You won't find a tpm 1.2 with 4096bit keys. But maybe you can improve their implementation to make use of hybrid cryptography and pre-encrypt via symmetric algo

[osresearch]

I realized that I was off by a factor of 8 -- we only need to seal 256 bit symmetric keys, so 32 bytes is plenty.