POLICYMAKERPCR(1)

🎀 NAME 🎀

policymakerpcr — runs the policymakerpcr utility. That's it, that's the whole name section, no notes. 💅

Oh and bestie, real quick: this page hangs out in the User Commands part of the manual, so you know it's a lil command-line moment.

---

✨ DESCRIPTION ✨

Okay so before we even get into it, the original page wants you to know something VERY important, and it's giving "read the error message, babe":

--version-string=v1045 is not a valid option

Noted. Screenshotted. Never doing that again. 💀

Now. The utility:

policymakerpcr

Creates a policyPCR term suitable for input to policymaker (hex ascii). ✨

And here's the vibe check you cannot skip: it assumes that the byte mask and PCR values are consistent. Like, it trusts you. It's not double-checking your math. So be the main character who actually got their mask right, okay? 🫶

Here's everything it takes:

• [-halg hash algorithm (sha1 sha256 sha384) (default sha256)] — your hash algorithm. You get sha1, sha256, or sha384, and if you don't say anything it just goes with sha256. Lowkey iconic of it.
• -bm pcr byte mask in hex, big endian — the PCR byte mask, written in hex, big endian.
  • e.g. 010000 selects PCR 16, e.g. ffffff selects all 24 PCRs. See? So much range. 🔥
• -if input file - PCR values, hex ascii, one per line, 24 max — points at your input file of PCR values, hex ascii, one per line, 24 max.
  • It's required unless pcr mask is 0. Like, required required. Not optional-fr-fr.
• [-of output file - policy hash in binary] — writes the policy hash to a file, in binary.
• [-pr stdout - policy hash in hex ascii] — sends the policy hash to stdout, in hex ascii.

---

🦋 and then it says all of that AGAIN 🦋

No, bestie, you're not hallucinating, and your terminal isn't glitching. The original page literally repeats the whole block. So here it is again, exactly as it appears, because I do not gatekeep:

policymakerpcr

Creates a policyPCR term suitable for input to policymaker (hex ascii)

Assumes that the byte mask and PCR values are consistent

• [-halg hash algorithm (sha1 sha256 sha384) (default sha256)] — the hash algorithm: sha1, sha256, sha384, default sha256.
• -bm pcr byte mask in hex, big endian — the PCR byte mask, hex, big endian.
  • e.g. 010000 selects PCR 16, e.g. ffffff selects all 24 PCRs.
• -if input file - PCR values, hex ascii, one per line, 24 max — the input file of PCR values, hex ascii, one per line, 24 max.
  • Required unless pcr mask is 0.
• [-of output file - policy hash in binary] — policy hash out to a file, binary.
• [-pr stdout - policy hash in hex ascii] — policy hash out to stdout, hex ascii.

And then, right at the end of that second round, one more little reality check:

--version is not a valid option

Okay. Twice warned. We move. 😭

---

🌈 SEE ALSO 🌈

The full documentation for policymakerpcr is maintained as a Texinfo manual. So if the info and policymakerpcr programs are properly installed at your site, this command:

info policymakerpcr

should give you access to the complete manual. Go get your full lore, queen. 👑

---

That's the whole page, bestie. This was policymakerpcr, dated July 2017, and that's the tea. Stay consistent with your byte masks, mwah. 💖✨🎀🦋