keylimectl: A replacement for `keylime_tenant` in rust#1068

Draft

ansasaki wants to merge 46 commits into

keylime:masterfrom

ansasaki:keylimectl

Commits on Feb 27, 2026

keylimectl: Initial implementation of all commands

ansasaki
and
claude
committed
keylimectl: Replace insecure LCG nonce generator with CSPRNG

ansasaki
and
claude
committed
crypto: Make pkey_pub_from_pem and rsa_oaep_encrypt public

ansasaki
and
claude
committed
keylimectl: Use the RSA-OAEP encryption from the crypto module

ansasaki
and
claude
committed
keylimectl: Add optional TPM quote validation behind feature flag

ansasaki
and
claude
committed
keylimectl: Zeroize secret key material on drop

ansasaki
and
claude
committed
keylimectl: Make TLS hostname verification configurable and enforce TLS 1.2

ansasaki
and
claude
committed
keylimectl: add api-v2/api-v3 feature flags and gate v2-only modules

ansasaki
and
claude
committed

Commits on Mar 4, 2026

Commits on Mar 9, 2026