Packages / openSUSE Leap 16.0 / Productivity/Security / tpm2-totp

Package: tpm2-totp (20240326.33e1986-bp160.1.3)

Create TOTP tokens using a TPM2

This is a reimplementation of Matthew Garrett's tpmtotp software for TPM 2.0 using the tpm2-tss software stack. Its purpose is to attest the trustworthiness of a device against a human using time-based one-time passwords (TOTP), facilitating the Trusted Platform Module (TPM) to bind the TOTP secret to the known trustworthy system state. In addition to the original tpmtotp, given the new capabilities of in-TPM HMAC calculation, the tpm2-totp's secret HMAC keys do not have to be exported from the TPM to the CPU's RAM on boot anymore. Another addition is the ability to rebind an old secret to the current PCRs in case a software component was changed on purpose, using a user-defined password.

Other Packages Related to tpm2-totp:

  • dep: ld-linux-aarch64.so.1()(64bit)

    Package not available

  • dep: ld-linux-aarch64.so.1(GLIBC_2.17)(64bit)

    Package not available

  • dep: libqrencode.so.4()(64bit)

    Package not available

  • dep: libtpm2-totp.so.0()(64bit)

    Package not available

  • dep: libtss2-rc.so.0()(64bit)

    Package not available

  • dep: libtss2-tctildr.so.0()(64bit)

    Package not available

  • dep: libc.so.6(GLIBC_2.38)(64bit)

    Package not available

Download tpm2-totp

ArchitecturePackage sizeInstalled sizeFilesPackage
aarch6422 KiB77 KiBlist of filesDownload
ppc64le22 KiB77 KiBlist of filesDownload
x86_6422 KiB37 KiBlist of filesDownload

Package file paths (7)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

  • /usr/bin/tpm2-totp
  • /usr/share/doc/packages/tpm2-totp
  • /usr/share/doc/packages/tpm2-totp/CHANGELOG.md
  • /usr/share/doc/packages/tpm2-totp/README.md
  • /usr/share/licenses/tpm2-totp
  • /usr/share/licenses/tpm2-totp/LICENSE
  • /usr/share/man/man1/tpm2-totp.1.gz

Field source: openSUSE Leap 16.0 OSS

Use this package

OpenFactory can boot this operating system in a browser VM, or start a build that includes the native package name from this record.

Versions, suites, and repositories

Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.

VersionReleaseArchitectureRepositoryPackage sizeInstalled sizePublisher repository artifact
20240326.33e1986-bp160.1.3leap-16.0 / ossaarch64openSUSE Leap 16.0 · OSS · multi-architecture22 KiB77 KiBaarch64/tpm2-totp-20240326.33e1986-bp160.1.3.aarch64.rpm
20240326.33e1986-bp160.1.3leap-16.0 / ossppc64leopenSUSE Leap 16.0 · OSS · multi-architecture22 KiB77 KiBppc64le/tpm2-totp-20240326.33e1986-bp160.1.3.ppc64le.rpm
20240326.33e1986-bp160.1.3leap-16.0 / ossx86_64openSUSE Leap 16.0 · OSS · multi-architecture22 KiB37 KiBx86_64/tpm2-totp-20240326.33e1986-bp160.1.3.x86_64.rpm

Field source: openSUSE Leap 16.0 OSS

Known vulnerabilities

No matching advisories in the tracked sources.

Last synced:

[CVE catalog]

Checksums

Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.

20240326.33e1986-bp160.1.3 / aarch64Observed Sep 1, 2026sha512 5db29ae33484…2f8676e2Source-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (sha512): 5db29ae334842851c56b7a73e1436a8324659d5ea62b8dc093269947a1ae852d79c6effdcdae24c53cd0fc7d9192512ba3c9d4dd296fdf36062516522f8676e2

Field source: openSUSE Leap 16.0 OSS

20240326.33e1986-bp160.1.3 / ppc64leObserved Sep 1, 2026sha512 1882fe49fe6a…817e1058Source-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (sha512): 1882fe49fe6aee2ae6feafe107a8ea0c1faef1cbfbc259fb8471f847427282bc72c38cebbbee2b9843748b742a986798db815458c8c94c6dc496c7ce817e1058

Field source: openSUSE Leap 16.0 OSS

20240326.33e1986-bp160.1.3 / x86_64Observed Sep 1, 2026sha512 0c0a7fd4a8a3…8dd3b40eSource-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (sha512): 0c0a7fd4a8a3fe5fdd5961fb869ecef66389e06e6c4da98709d930279ce7203cfef633d12dc721da37924c399ee6c2075254a3bedb050f3b83496d468dd3b40e

Field source: openSUSE Leap 16.0 OSS

Sources

  • Authoritative source; repository metadata signature verified

    Signature evidence

    leap-16-0-oss-multiarch:271b36d440253edf9871ac0c100319fc7443d8f2d54b6b449a72e9414c51577c

    Repository-signature verification record
    Signed-object SHA-256
    271b36d440253edf9871ac0c100319fc7443d8f2d54b6b449a72e9414c51577c
    Signer fingerprint
    AD485664E901B867051AB15F35A2F86E29B700A4
    Keyring revision
    opensuse-project-signing-key.asc
    SHA-256 b5745739ebfb95b25b8e810f9bcb847fe750ccda598bd85f02f0e974599a6d7e
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Result
    Recorded as verified; digest details unavailable