How to encrypt/decrypt using the TPM

[Justin Hentz]

I am creating a WPF application, and I need a secure way to handle encryption and decryption of data. I would like to use the TPM (if the device has one available) to generate and handle keys.

Here is a list of the action I would like to preform:

1. Generate a public/private key pair using the TPM

2. Decrypt data using the private key in the TPM

3. Sign the data and send back a result


I have tried using the Windows Hello/Passport, but I had a few issues with that. I need to be able to support older versions of Windows, and I would like a bit more control than Hello provided, so I would like to know if any other tools exited for me to use the TPM.

Any advice or pointers to a way to preform these actions are very appreciated!

Continue reading...