Supporting Apple Secure Enclave (T2 Chip)

[Dentrax]

Supporting Apple Secure Enclave (T2 Chip)

[josephlr]

This project (in general) is just for talking to devices, simulators, and other programs which use the TPM1.2 and TPM2 protocol. I don't think adding a third, proprietary protocol would be a good fit for this project. Ideally, there would be a separate library for talking the Mac Secure Enclave (if such a thing is even possible). Then, a higher-level library or user application could provide an abstraction over these two protocols.

[Dentrax]

Thanks for clarifications, @josephlr!

if such a thing is even possible

So how do we know if it's possible? Do you know any related work or project on this? So maybe we can build a library on top of that.

[josephlr]

I'm not aware if Apple allows third-party software to talk to the T2, it might just be limited to macOS itself.

Some links: https://github.com/duo-labs/apple-t2-xpc

[gedw99]

This shows it working on apple devices

https://github.com/remko/age-plugin-se/tree/main/Sources

• its swift talking to Apple Secure enclave

we write this in golang. can use cgo or no cgo approach.

no cgo style:
https://github.com/ebitengine/purego/blob/main/examples/objc/main_darwin.go

CGO style: https://github.com/gioui/gio-x/blob/main/notify/macos/notify_macos.go

Issue raised here: Foxboron/swtpm_test#1