software.md

layout	title	permalink
page	Software	/software/

<script> ((window.gitter = {}).chat = {}).options = { room: 'tpm2-software/community' }; </script> <script src="https://sidecar.gitter.im/dist/sidecar.v1.js" async defer></script>

Software with TPM 2.0 support

• tpm2-tss
• TPM2-Tools
• PKCS11
• OpenSSL
• OpenConnect Docs
• cryptsetup/LUKS (wip)
• StrongSwan
• Clevis (Howto)
• TPM2-TOTP
• LVFS / fwupd: Post1, Post2
• ESAPI Rust Wrapper Docs
• tpm2-pytss
• TPM-JS

Projects requiring TPM 2.0 support

• OpenVPN
• WireGuard
• Tinc
• NetworkManager/wpa_supplicant 802.1X
• gnome-keyring
• KDE wallet
• GNU-TLS
• certbot (to create Certs with PKCS11 support)
• WebCrypto (Firefox, WebKit, Chromium, epiphany)
• WebAuthn (Firefox, WebKit, Chromium)
• OpenSSH HostKey ((non-)PKCS11), ClientKey ((non-)PKCS11)
• Wireshark TPM Cmd/Rsp/Buffer with TCTI-PCAP module or /dev/tpmrm0 sniffing (partial, TPM-Headers only yet)
• mbed-crypto / mbed-tls
• OpenJDK keystore
• Firefox/Thunderbird/Chromium/epiphany password managers: Epiphany via gnome-keyring ?
• systemd-journald signing
• systemd-networkd 802.1x
• empathy/telepathy jabber (via PKCS11?)
• GnuPG (also leads to git tag and release signing)
• Telegram desktop
• GNOME Keyring

Please feel free to also add notes to this list wrt means of integration, e.g. if a project could be enabled using tpm2-pkcs11 and p11-kit because it already provides a pkcs11 interfaces for authentication.