| Previous | Next |
| TPM_20_E_PP | TPM_20_E_SIZE |
TPM_20_E_SCHEME
A TPM scheme is more than a label such as signing or encryption. It combines a scheme selector with scheme-specific parameters, often including a hash algorithm. The valid schemes depend on the public-key type and on the sign, decrypt and restricted object attributes.
Important compatibility rules
- RSA and ECC objects have different scheme families and permitted parameter branches.
- A signing key needs a valid signing scheme, while a decryption key needs a valid encryption or key-exchange context.
- When both signing and decryption attributes are set, the generic asymmetric scheme field has special constraints rather than allowing an arbitrary combination.
What to compare
Compare the requested command, public-key type, object attributes, scheme selector and its detail structure as one unit. Recreating the key with an arbitrary “default” scheme can change interoperability or security properties, so use a capability-supported choice that matches the protocol the application is implementing.
TCG: asymmetric scheme structures · tpm2-tools: RSA and ECC scheme syntax · tpm2_create: public template options
Looking for a different code? Search another status or error code.