CVE-2020-8918

The CVE-2020-8918 issue affects Google's go-tpm TPM1.2 library prior to 0.3.0, where a bug initializes migrationAuth, allowing a local attacker eavesdropping on TPM1.2 transport to compute usageAuth for keys created with CreateWrapKey by XOR’ing encUsageAuth and encMigrationAuth. TPM2.0 is not af...