[strongSwan] Strongswan and TPM

[Tobias Brunner]

Hi John,

> and I conclude from this example, that private key stored in TPM is
> loaded to program memory the same way as if it was stored in a file (log
> message: "...charon-systemd[21165]: loaded RSA private key from token").
> Am I correct?

No, that's only the generic log message that you'll see for any private
key loaded by the configuration backend, whether that private key is
actually loaded into memory or it's just a reference to a key (as is the
case here).  Private keys on PKCS#11 tokens or in a TPM can't be
accessed directly, so they never end up in memory.

Regards,
Tobias