TSSECCDECRYPT(1)

✨ TSSECCDECRYPT ✨

aka the tsseccdecrypt girlie from the User Commands section of your manual, bestie 💅

🌸 NAME 🌸

tsseccdecrypt — literally just runs tsseccdecrypt. that's the whole vibe. no cap. 🫶

💖 DESCRIPTION 💖

okay so. tsseccdecrypt. it's giving tool. it's giving Runs TPM2_ECC_Decrypt ✨. she does the ECC decrypt thing through the TPM and she does it well.

here's the tea on her flags, bestie — every single one, no skips, no edits, i would never 🎀

• -hk — key handle. the main character of the whole operation 🔑👑
• [-pwdk password for key (default empty)[ — yeah the bracket situation is exactly how the page has it, i'm not touching it, it's iconic in its own chaotic way 😭. default is empty, so no password energy unless you bring one.
• [-ipwdk password file for key, nul terminated (default empty)] — same deal but it's a file, and it's nul terminated. default: empty 🍓
• [-halg (sha1, sha256, sha384, sha512) (default sha256)] — pick your hash algorithm bestie 🌈. she defaults to sha256 if you don't say anything, which is a very reasonable default and we love her for it.
• -od — decrypt file name. this is where the decrypted stuff lands 📁💖
• -ic1 — C1 ECC point file name. first ingredient, the C1 point 🧚
• -ic2 — C2 data buffer file name. second ingredient, the data buffer ✨
• -ic3 — c3 integrity digest file name. third ingredient, the integrity digest, lowercase c and all, we respect it 💜
• -se[0-2] — session handle / attributes (default PWAP). the numbers are the whole personality:
  • 01 — continue
  • 20 — command decrypt
  • 40 — response encrypt

lowkey important: these are the session handle / attribute values, exactly as listed, and PWAP is the default if you don't pass any -se at all. don't be out here guessing at other numbers, the page only promised you these three 💀

👑 sign-off 👑

that's the page, bestie. tsseccdecrypt 1.7, dated January 2022. periodt. 💅✨🦋

go decrypt something, you absolute legend 🎀💖