2026-06-15 Alignment Meeting

[josephlr]

Date: June 15th, 2026
Time: 9am PDT (5pm BST, 6pm CEST, 16:00 UTC)
Google Meet Link: https://meet.google.com/cor-ywyi-kof

Google Calendar Link
TPMWG Calendar Link

[josephlr]

Meeting Notes

Attendees: @josephlr (Google), @arthurus-rex (Red Hat), @TRJensen (Huawai), @nnooney (Google)

Agenda

• @josephlr: Validated reorganization works
  • They pass all the https://github.com/google/go-tpm tests
  • v184 differential testing also working, will send for review
  • Initial command abstractions:
    • Will just have plain u32s for handles
    • Will add authorization abstractions in follow-up PR.
• @josephlr: The Limits idea from tpm2: rework of base library crate #200 does not work
  • The main problem is that something like:

    #[repr(u16)]
    pub enum TpmtHa<'a> {
        Sha1(&'a [u8; Alg::Sha1.digest_size()]) = Alg::Sha1.0,
        Sha256(&'a [u8; Alg::Sha256.digest_size()]) = Alg::Sha256.0,
        Sha384(&'a [u8; Alg::Sha384.digest_size()]) = Alg::Sha384.0,
        Sha512(&'a [u8; Alg::Sha512.digest_size()]) = Alg::Sha512.0,
    }

    is not optimized to a smaller representation, even if we have using a Limits which only supports Sha256
• @josephlr: Org progress on Google's side:
  • @wenyuzhao starting work on TPM-RS (helped with the validation above)
  • Contractors starting in July (hopefully)
• @nnooney: Showed their tpm-test-vectors project
  • Raw bytes based validation of TPM command sequences
  • Uses https://github.com/ron-rs/ron to express structural tests
  • Example: https://github.com/nnooney/tpm-test-vectors/blob/main/test-vectors/data/0104-startup-reset.ron
• @arthurus-rex: OpenSSL + Crypto Backend
  • https://docs.rs/openssl/latest/openssl/ is great!
  • Works for Red Hat's uses, mature library
  • We could save some size by writing our own bindings, but this is almost certainly not worth the effort.