TPM-protected TLS client keys in Go
An article dated September 7, 2026 explains how to use a client certificate in Go whose private key remains in a TPM, and discusses the per-handshake performance cost.
Source: Assinando handshakes TLS dentro de um TPM em Go (bschaatsbergen.com). Text prepared with AI from this source.
What happened and what to do
The article, dated September 7, 2026, demonstrates using a client certificate in Go while keeping its private key in a TPM. It also covers the requirements of Go's crypto/tls package and the performance cost per handshake, both relevant to client-authenticated TLS connections.
A company can assess this approach in its Go services, measure latency and capacity at different connection rates, and determine how to provision and monitor TPMs. A practical response is an assessment of the TLS architecture and a controlled pilot, with performance and operational criteria set before broader adoption.
How the consultancy can help
Wendelmaques can assess key exposure and performance requirements, scope an implementation for Go services using TPM-protected keys, and support the solution's operation and monitoring.
Next step
Send a short description of your Go services, TLS usage, and key-protection requirements to receive a scoped proposal.
Let's assess your project
I reply with scope and a proposal.