Nowadays Trusted Platform Module is present in most computers, and it is making its way into embedded platforms as well. In this talk I will explain how to use the (firmware)TPM2.0 available on the Minnowboard MAX/Turbot (see also https://fb.me/MinnowBoardMax and https://fb.me/MinnowBoardTurbot) for everyday's encryption (https://fb.me/tpm2-openssl)

Even though TPMs are cryptographic processors, it is surprisingly hard to use them for common cryptographic operations like signatures and decryption.

Moreover, as opposed to its predecessor TPM1.2, TPM2.0 gets a very little support in Linux and the TGC Software Stack has no support for the most common encoding formats (e.g. PEM and DER).