
TPM Keyring - A key manager for TPM based eCryptfs keys

  TPM Keyring generates software RSA keys using OpenSSL, then wraps them using
the Storage Root Key (SRK) in your TPM.  Each key is assigned a name and
becomes an identifier for a group, which you can add any number of other people
to by wrapping the key using their TPM's SRK.

  eCryptfs is a VFS layer cryptographic file system for Linux. When a file is
created in an eCryptfs mount, a randomly generated symmetric key is used to
transparently encrypt the file. That key is then encrypted either by a
passphrase or an asymmetric key and then stored inside the file itself. Using
TPM Keyring, you can create a key and share it amongst a group of people, all
using it to wrap the keys encrypting your eCryptfs files. You can then share
the files with the people in the group securely using any means you'd like.

BUILD REQUIREMENTS

swig - http://www.swig.org
python-devel
openssl-devel
trousers - http://trousers.sf.net

BUILD

$ make

INSTALL

# make install
# cp sandoval.ttf /somewhere/where/fonts/go

DOCS

http://trousers.sf.net/tpm_keyring2/quickstart.html

BUGS

Kent Yoder <kyoder@users.sf.net>

AUTHOR

Kent Yoder <kyoder@users.sf.net>

