jjanku/MultiSchnorrTPM

MultiSchnorrTPM

This is a small project that explores several ideas for construction of Schnorr multi-signatures for TPMs.

Setup

Required dependencies: TPM2-TSS, TPM2-PyTSS, SWTPM, and SageMath.

On Fedora, all dependencies are available from the package manager, see the setup in the CI workflow file.

Test

Start the TPM emulator using the provided script run-swtpm.sh:

sh run-swtpm.sh

In a separate window, run the tests in playground.sage:

sage playground.sage

Warning: When a test fails, it may not clean up after itself properly. Subsequent tests are likely to raise an "out of memory for object contexts" exception. In that case, restart the emulator by terminating the scipt and launching it again.

Useful Links

• TPM 2.0 Library Specification (Part 1: Architecture and Part 3: Commands)
• TPM2-PyTSS API documentation
• TPM2-PyTSS tests: example usage of the API
• tss2_tpm2_types.h: helpful reference for constructing nested structures required by the API

Relevant Literature

• A Practical Guide to TPM 2.0
• A TPM Diffie-Hellman Oracle
• Efficient and Secure Implementation of BLS Multisignature Scheme on TPM
• One TPM to Bind Them All: Fixing TPM 2.0 for Provably Secure Anonymous Attestation