| Previous | Next |
| TPM_20_E_AUTH_FAIL | TPM_20_E_PP |
TPM_20_E_NONCE
TPM_20_E_NONCE maps to TPM_RC_NONCE. A nonce can fail because its encoded size is invalid or because the value does not match the value expected for the active session. It is therefore a session-state error, not proof that an object authorization value is wrong.
What to preserve during diagnosis
- Do not reuse a captured authorization area after a session has advanced, been flushed, or been restored differently.
- Verify that caller and TPM use the same session context and that nonce sizes match the selected hash algorithm.
- Separate this error from
TPM_20_E_AUTH_FAIL, which reports an authorization-HMAC failure and has dictionary-attack implications.
TCG TPM 2.0 Part 2: TPM_RC_NONCE · TCG TPM 2.0 Part 3: command authorization notation
Looking for a different code? Search another status or error code.