ESAPI ossl crypto libraries need to add support for SM algorithms.

[idesai]

No description provided.

[williamcroberts]

What about FAPI when it does software verification with public keys?

[JuergenReppSIT]

OpenSSL does support the SM algorithms. But it seems to be difficult to test the implementation with a simulator supporting these algorithms. I think the announced switching to the EVP interface in the TPM reference implementation was not implemented:
microsoft/ms-tpm-20-ref#50

[williamcroberts]

SWTPM has an OpenSSL backend. I think it's configured by default IIRC.

[JuergenReppSIT]

@williamcroberts I tried to compile libtpms (./configure --with-openssl) with SM3 and SM4 activated but got errors. For "#if SM4_128" there are even syntax errors in the source code.

[JerryDevis]

@williamcroberts I tried to compile libtpms (./configure --with-openssl) with SM3 and SM4 activated but got errors. For "#if SM4_128" there are even syntax errors in the source code.

Libtpms already supports SM4.
If you want to test SM3 and SM4 with libtpms, then this patch might be helpful.
I tried to get tpm2-tss to support sm3 and sm4 as well, but I found that the current CI environment (freebsd-12-2) does not support SM3 and SM4, so the main test failed. you can see this PR #2174.

[JerryDevis]

@AndreasFuchsSIT I tried to get tpm2-tss to support sm3 and sm4 in #2174. Please help me review this PR for me. Thanks very much.