Credential activation fails due to activating against EK with inconsistent template about go-attestation HOT 1 CLOSED

@@ -66,12 +68,35 @@ func (t *wrappedTPM20) info() (*TPMInfo, error) {
        return &tInfo, nil
 }
 
+func (t *wrappedTPM20) ekTemplate() (tpm2.Public, error) {
+       if t.tpmEkTemplate != nil {
+               return *t.tpmEkTemplate, nil
+       }
+
+        nonce, err := tpm2.NVReadEx(t.rwc, nvramEkNonceIndex, tpm2.HandleOwner, "", 0)
+       fmt.Println(nonce, err)
+
+        if err != nil {
+               t.tpmEkTemplate = &defaultEKTemplate // No nonce, use the default index
+        } else {
+               template := defaultEKTemplate
+               copy(template.RSAParameters.ModulusRaw, nonce)
+               t.tpmEkTemplate = &template
+       }
+
+       return *t.tpmEkTemplate, nil
+}
+