tpmtoken_protect(1)
π tpmtoken_protect(1) β TPM Management π
okay bestie, welcome to tpmtoken_protect π it lives in the General Commands Manual section and it's your girl for locking up (or unlocking!) your data with a key that the TPM itself is babysitting. no cap. π
β¨ NAME β¨
tpmtoken_protect β encrypt or decrypt data using a symmetric key stored in the user's TPM PKCS#11 data store π¦
πΈ SYNOPSIS πΈ
tpmtoken_protect [ OPTION ]
π DESCRIPTION π
so like, tpmtoken_protect will encrypt or decrypt</> your data using a symmetric key that's chillin' in the user's data store. the key doing all the protecting is a 256-bit AES key stored as a private Secret Key PKCS#11 object β¨
that object has the PKCS#11 label attribute of User Data Protection Key β that's its whole name, iconic, no notes π
the key is generated by the TPM PKCS#11 implementation when it is needed the first time. and because it's generated as a private object, it's protected by the TPM on the platform. main character security fr fr π₯
π¨ bestie listen β this command requires the-iand-ocommand options to be specified. both of them. you literally cannot skip them. periodt.
-h,--helpβ display command usage info π«-v,--versionβ display command version info π-l,--log [none|error|info|debug]β set logging level π-d,--decryptβ perform a decryption operation π-e,--encryptβ perform an encryption operation π-i,--infile FILEβ useFILEas the input to the specified operation π₯-k,--token STRINGβ useSTRINGto identify the label of the PKCS#11 token to be used π·οΈ-o,--outfile FILEβ useFILEas the output of the specified operation π€
π«Ά SEE ALSO π«Ά
tpmtoken_init(1), tpmtoken_import(1), tpmtoken_setpasswd(1), tpmtoken_objects(1) β go read those next, they're all part of the same friend group π
π REPORTING BUGS π
found a bug? spill it to <trousers-users@lists.sourceforge.net> β they wanna hear it, fr fr.
TPM Management Β· 2005-04-25 β and that's the whole page bestie, tysm for reading, go protect some data with your TPM π β¨π¦ slay π
π¦ where this page comes from
- debian bookworm: tpm-tools-pkcs11 1.3.9.2-0.1 Β· CPL
- debian trixie: tpm-tools-pkcs11 1.3.9.2-0.2 Β· CPL
- epel 10: tpm-tools-pkcs11 1.3.9-19.el10_0 Β· CPL-1.0
- epel 9: tpm-tools-pkcs11 1.3.9-13.el9 Β· CPL
- fedora 43: tpm-tools-pkcs11 1.3.9.2-5.fc43 Β· CPL-1.0
- fedora 44: tpm-tools-pkcs11 1.3.9.2-6.fc44 Β· CPL-1.0
- nixos 26.05: tpm-tools 1.3.9.2
- nixpkgs unstable: netbsd-source 11.0
- nixpkgs unstable: tpm-tools 1.3.9.2
- opensuse-leap 16.0: tpm-tools-pkcs11 1.3.9.2-160000.2.2 Β· IPL-1.0
- opensuse-leap 16.0: tpm-tools-pkcs11 1.3.9.2-160000.2.2 Β· IPL-1.0
- opensuse-leap 16.0: tpm-tools-pkcs11 1.3.9.2-160000.2.2 Β· IPL-1.0
- opensuse-leap 16.0: tpm-tools-pkcs11 1.3.9.2-160000.2.2 Β· IPL-1.0
- ubuntu jammy: tpm-tools-pkcs11 1.3.9.1-0.2ubuntu4
- ubuntu noble: tpm-tools-pkcs11 1.3.9.2-0.2build2 Β· CPL
- ubuntu questing: tpm-tools-pkcs11 1.3.9.2-0.2build2
- ubuntu resolute: tpm-tools-pkcs11 1.3.9.2-0.2build3 Β· CPL
- ubuntu stonking: tpm-tools-pkcs11 1.3.9.2-0.2build4 Β· CPL
- Copyright (C) 2005 International Business Machines Corporation
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash on : a language model's rewrite of the original, under its terms