tpmtoken_protect(1)

πŸ’– tpmtoken_protect(1) β€” TPM Management πŸ’–

okay bestie, welcome to tpmtoken_protect πŸ’… it lives in the General Commands Manual section and it's your girl for locking up (or unlocking!) your data with a key that the TPM itself is babysitting. no cap. πŸ”


✨ NAME ✨

tpmtoken_protect β€” encrypt or decrypt data using a symmetric key stored in the user's TPM PKCS#11 data store πŸ¦‹


🌸 SYNOPSIS 🌸

tpmtoken_protect [ OPTION ]

πŸ‘‘ DESCRIPTION πŸ‘‘

so like, tpmtoken_protect will encrypt or decrypt</> your data using a symmetric key that's chillin' in the user's data store. the key doing all the protecting is a 256-bit AES key stored as a private Secret Key PKCS#11 object ✨

that object has the PKCS#11 label attribute of User Data Protection Key β€” that's its whole name, iconic, no notes πŸ’–

the key is generated by the TPM PKCS#11 implementation when it is needed the first time. and because it's generated as a private object, it's protected by the TPM on the platform. main character security fr fr πŸ”₯

🚨 bestie listen β€” this command requires the -i and -o command options to be specified. both of them. you literally cannot skip them. periodt.
  • -h, --help β€” display command usage info πŸ’«
  • -v, --version β€” display command version info πŸŽ€
  • -l, --log [none|error|info|debug] β€” set logging level 🌈
  • -d, --decrypt β€” perform a decryption operation πŸ”“
  • -e, --encrypt β€” perform an encryption operation πŸ”’
  • -i, --infile FILE β€” use FILE as the input to the specified operation πŸ“₯
  • -k, --token STRING β€” use STRING to identify the label of the PKCS#11 token to be used 🏷️
  • -o, --outfile FILE β€” use FILE as the output of the specified operation πŸ“€

🫢 SEE ALSO 🫢

tpmtoken_init(1), tpmtoken_import(1), tpmtoken_setpasswd(1), tpmtoken_objects(1) β€” go read those next, they're all part of the same friend group πŸ’œ


😭 REPORTING BUGS 😭

found a bug? spill it to <trousers-users@lists.sourceforge.net> β€” they wanna hear it, fr fr.


TPM Management Β· 2005-04-25 β€” and that's the whole page bestie, tysm for reading, go protect some data with your TPM πŸ’…βœ¨πŸ¦‹ slay πŸŽ€