Tspi_Data_Seal(3)

💖 Tspi_Data_Seal(3) 💖

okay bestie, welcome to the TCG Software Stack Developer's Reference — this one's a classic, let's get into it 🫶

✨ NAME ✨

Tspi_Data_Seal — encrypts a data blob in a way that only Tspi_Data_Unseal can decrypt it, and only on the same system. no cap, it's locked to that machine 💅

🌸 SYNOPSIS 🌸

#include <tss/platform.h>
#include <tss/tcpa_defines.h>
#include <tss/tcpa_typedef.h>
#include <tss/tcpa_struct.h>
#include <tss/tss_typedef.h>
#include <tss/tss_structs.h>
#include <tss/tspi.h>

TSS_RESULT Tspi_Data_Seal(TSS_HENCDATA hEncData,     TSS_HKEY hEncKey,
                          UINT32       ulDataLength, BYTE*    rgbDataToSeal,
                          TSS_HPCRS    hPcrComposite);

🦋 DESCRIPTION 🦋

Tspi_Data_Seal takes a data blob and encrypts it in a way that it can only be decrypted by Tspi_Data_Unseal, and only on the same system. literally tied to the machine, it's giving exclusive 💀

The way it works? The blob gets encrypted with a public key operation</>, using the nonmigratable key that the given encryption key object points at. that key is not going anywhere, bestie, and neither is your data 🔥

🎀 PARAMETERS 🎀

hEncData

The handle of the data object — and guess what, on successful completion of the command this is where your sealed data lives 👑 so yeah, kind of a big deal.

hEncKey

The handle to the key object that addresses the nonmigratable key used to encrypt the data. 🔐

ulDataLength

The length, in bytes, of the rgbDataToSeal parameter. numbers matter, periodt.

rgbDataToSeal

A pointer to the memory holding the data you wanna encrypt. 🍓

hPcrComposite

The handle of the PCR Composite object that specifies which PCRs are part of the sealed data blob. ✨

set this to NULL if you want the encrypted data to only be bound to the system and PCRs are just not it for you 🙈

⭐ RETURN CODES ⭐

Tspi_Data_Seal returns TSS_SUCCESS when everything slays, otherwise one of these little guys shows up:

• TSS_E_INVALID_HANDLE — one of the following parameters is invalid: hEncData, hEncKey, rgbDataToSeal. 💀
• TSS_E_INTERNAL_ERROR — something went wrong internal to the TSS. not our fault, it's giving mystery 😭

💜 CONFORMING TO 💜

Tspi_Data_Seal conforms to the Trusted Computing Group Software Specification version 1.1 Golden. iconic behavior, honestly.

🌈 SEE ALSO 🌈

• Tspi_Data_Unseal(3) — the other half of this situationship, go read it 💖

and that's the whole page, bestie!! this one's from TSS 1.1, dated 2004-05-26 — vintage but still ate 🎀✨ bye ilysm 🫶