stpm-verify(1)

📦 version 0.07, in debian bookworm, debian trixie, nixos 26.05, nixpkgs unstable, ubuntu jammy, ubuntu noble, ubuntu questing, ubuntu resolute, ubuntu stonking

💖 stpm-verify — the manual page, but make it cute 💖

okay bestie, welcome to stpm-verify(1) 🎀 — yes that's the section number, we're fancy here. this is the little tool that goes "hmm let me check that signature real quick" using your TPM chip. she's giving ✨verification✨ and honestly? iconic.

🌸 NAME 🌸

stpm-verify — verify data using the TPM chip 💅

no cap, that's literally the whole job. she verifies. she slays. periodt.

🦋 SYNOPSIS 🦋

stpm-verify [ -hq ] -f data -s sig file -k <key file>

that's the whole vibe right there. flags in, files in, truth comes out. 🫶

✨ DESCRIPTION ✨

so stpm-verify verifies data that was signed by stpm-sign. that's it. that's the tea. ☕

ngl, this program is mostly made for debugging — like, its whole main character moment is making sure that your TPM is set up correctly and that a valid key was actually generated. it's the friend who double-checks that you locked the door. lowkey essential, highkey underappreciated. 🔥

👑 OPTIONS 👑

  • -h — show usage info. the classic "help me bestie" flag. 🙈
  • -f data file — file containing the data to be verified. this is the thing you're checking up on. 💜
  • -s sig file — file containing the signature from stpm-sign. the receipt, basically. 🧾
  • -k key file — file containing the encrypted key blob. the key. the blorbo. the whole reason any of this works. 🔑
also yes, there's a -q in the synopsis up there — it's in the usage line, so we're keeping it exactly as written, no edits, no guessing. 💅

🌈 EXAMPLES 🌈

here's the whole little love story in three commands — generate random data, sign it, verify it:

dd if=/dev/urandom of=to-sign bs=1 count=35
stpm-sign -k ~/.simple-tpm-pk11/my.key -f to-sign -r > to-sign.sig
stpm-verify -f to-sign -k ~/.simple-tpm-pk11/my.key -s to-sign.sig

look at her go. 🥹 generate, sign, verify. a full circle moment. ate and left no crumbs.

💀 DIAGNOSTICS 💀

bestie, if something goes wrong, it's probably the TPM chip. most errors are gonna be about interacting with that little guy. 😭

the fix? reset the TPM chip and take ownership — that should take care of most of them. seriously, that's the move like 90% of the time.

for the full rundown, go read the TPM-TROUBLESHOOTING section of simple-tpm-pk11(7). it's giving "support group for TPM owners". 🫂

🎀 SEE ALSO 🎀

the whole friend group. iykyk. 💖

💜 AUTHOR 💜

Simple-TPM-PK11 was written by Thomas Habets <habets@google.com> / <thomas@habets.se>.

and if you wanna peek at the source, go clone it:

git clone https://github.com/ThomasHabets/simple-tpm-pk11.git

and that's the page, bestie 🫶 — brought to you by simple-tpm-pk11, dated 1th December, 2013 (yes, "1th", we don't question the legend 💅). go verify something. you got this. ✨🌸

📦 where this page comes from