TSSECCENCRYPT(1)

💖 NAME 💖

tsseccencrypt — bestie, this one literally just Runs tsseccencrypt. That's the whole job description. Periodt. 💅

✨ DESCRIPTION ✨

okay so picture this: you've got secrets, you've got a TPM, and you've got tsseccencrypt. She's the icon, she's the moment, and what she does is Runs TPM2_ECC_Encrypt. 🦋

That's it, that's the vibe. ECC encryption, handled. Let's go through her little menu of flags, because you will be using them:

• -hk — key handle. This is the key you're working with, bestie. Give her the handle. 🔑
• [-halg (sha1, sha256, sha384, sha512) (default sha256)] — the hash algorithm, and no you don't have to pass it. Your options are sha1, sha256, sha384, or sha512, and if you just say nothing at all she defaults to sha256. Optional, chill, no pressure. 🌸
• -id — decrypt file name. Yeah she wants the name of the decrypt file. Hand it over. 🎀
• [-oc1 C1 ECC point file name (default do not save)] — optional! This is where the C1 ECC point would get saved, but by default she does not save it. Like, default is do not save, bestie, so if you want that file you gotta ask for it. 💫
• [-oc2 C2 data buffer file name (default do not save)] — same energy, this one's the C2 data buffer file name. Also defaults to do not save, so it's giving "optional for a reason." 🫶
• [-oc3 c3 integrity digest file name (default do not save)] — and the trio is complete: -oc3 is the c3 integrity digest file name, and yep, default do not save once again. Three optional file outputs, all of them shy until you explicitly invite them. 😭

no cap: all three of -oc1, -oc2, and -oc3 are optional, and their default behavior is to not save anything. If you skip them, nothing gets written. That's not me being dramatic, that's just literally what it says. 💀

and that's the whole page, bestie, she's short but she's iconic 👑

this was tsseccencrypt version 1.7, dated January 2022 — mwah, sending you off with love, go encrypt something 💖✨