ATTEST-TOOL(1)

📦
version 0.6.1 · 2 versions
, in ubuntu stonking

💖 ATTEST-TOOL(1) 💖

okay bestie, welcome to the User Commands corner of the manual — this is attest-tool, and no cap, it's the little utility that does attestation-related TPM operations. 🦋

✨ NAME ✨

attest-tool — perform attestation-related TPM operations 👑

🌸 DESCRIPTION 🌸

Usage of attest-tool:

here's the vibe check on the flags, and yes you need all of them, don't skip:

  • -key string — the path to your key file, and it defaults to "ak.json" if you don't say otherwise 🔑
  • -nonce string — a hex string you wanna use as the nonce when quoting 🎀
  • -random-nonce — say sike to your own nonce and generate a random one instead ✨
  • -sha256 — use SHA256 for quote operations, periodt 💅

🌈 COMMANDS 🌈

attest-tool is a simple utility to exercise attestation-related operations on your system. lowkey iconic of it.

  • attest-tool info
  • attest-tool make-ak
  • attest-tool quote
  • attest-tool list-eks
  • attest-tool list-pcrs
  • attest-tool measurement-log
  • attest-tool dump
  • attest-tool self-test

🧚 TEST 🧚

the main character use-case of attest-tool is testing whether attestation even works on the local system, fr fr.

once attest-tool has been built, you can run it in self-test mode like this:

attest-tool self-test

after a few seconds it should print out a 'PASS' message, or a 'FAIL' message with a description of what went wrong. 😭 that FAIL better not be you.

⚠️ on Linux, attest-tool either needs to be run as root, or granted access to the TPM (/dev/tpmrm0) device & event log (/sys/kernel/security/tpm0/binary_bios_measurements). no shortcuts bestie, the TPM does not play. 💀

and that's the whole page, you ate it 🫶 — this was attest-tool version 0.6.1-5, dated August 2026. bye bestie, go run that self-test 💖✨🎀

📦 where this page comes from