TPM-backed config encryption
In progress, WishlistPublicFEATURE REQUEST
Actions

Assigned To

Authored By

	sdev
	Jan 6 2023, 7:44 PM

Description

Looking into viability of adding support for TPM-backed encryption of /config data

Various factors to consider:

Which PCRs to require to ensure hardware/software integrity (End user configurable?)
Handling failed config decryption on boot (Fallback config?)

sdev triaged this task as Wishlist priority.

sdev changed Difficulty level from Unknown (require assessment) to Hard (possibly days).

sdev changed Version from - to 1.4.

syncer changed the task status from Open to In progress.Jan 6 2023, 10:04 PM