The tool could support challenge–response operations, such as HMAC-SHA. See the following references: - https://www.reddit.com/r/KeePass/comments/10pa73i/is_there_any_way_to_get_a_motherboards_tpm_to/ - https://security.stackexchange.com/questions/91469/how-yubikey-challenge-response-works-locally - https://github.com/matejsmycka/linux-id/issues/9