SIGN(1)

💖 SIGN(1) 💖

okay bestie, welcome to the sign manual page — section 1, filed under User Commands. it's short, it's chaotic, and it says the same thing twice. we love that for us. 🫶

---

🌸 NAME 🌸

• sign — Runs TPM2_Sign

---

🎀 DESCRIPTION 🎀

so the very first thing this page hits you with, with zero context, is this:

--version-string=v1045 is not a valid option

that's it. that's the opening. no hello, no intro. iconic behaviour honestly. 💀

then it gets to the actual point:

sign

Runs TPM2_Sign

• -hk key handle
  • [-pwdk password for key (default empty)] — your key's password. defaults to empty, so if you set one, don't forget it 💅
  • [-halg (sha1, sha256, sha384) (default sha256)] — pick your hash algorithm: sha1, sha256 or sha384. defaults to sha256 ✨
  • [-rsa (RSASSA scheme)] — the RSASSA scheme option
  • [-ecc (ECDSA scheme)] — the ECDSA scheme option

Verify only supported for RSA now

• -if input message to hash and sign — this is the message you're hashing and signing, bestie
  • [-ipu public key file name to verify signature (default no verify)] — public key file to verify the signature with. default is no verify at all 🙈
  • [-os signature file name (default do not save)] — where to save the signature. default is to not save it, which, sure 🍓
  • [-tk ticket file name] — ticket file name
• -se[0-2] session handle / attributes (default PWAP)
  • 01 continue

and then, right after all that:

--version is not a valid option

---

🦋 and then it says the WHOLE THING again 🦋

no cap, the page just repeats itself. verbatim. here it is, again, because the original does it and I'm not skipping a single crumb:

sign

Runs TPM2_Sign

• -hk key handle
  • [-pwdk password for key (default empty)] — password for the key, empty by default
  • [-halg (sha1, sha256, sha384) (default sha256)] — sha1, sha256 or sha384, default sha256
  • [-rsa (RSASSA scheme)] — RSASSA scheme
  • [-ecc (ECDSA scheme)] — ECDSA scheme

Verify only supported for RSA now

• -if input message to hash and sign — the input message to hash and sign
  • [-ipu public key file name to verify signature (default no verify)] — public key file name to verify signature, default no verify
  • [-os signature file name (default do not save)] — signature file name, default do not save
  • [-tk ticket file name] — ticket file name
• -se[0-2] session handle / attributes (default PWAP)
  • 01 continue

periodt. 💅

---

🌈 SEE ALSO 🌈

The full documentation for sign is maintained as a Texinfo manual. If the info and sign programs are properly installed at your site, the command

info sign

should give you access to the complete manual. go read it, bestie, it's giving thorough. 📖✨

---

and that's the whole page! 🎀 this one came from the sign manual, dated July 2017, and the footer stamps it SIGN(1) — so if you ever need to cite it, that's your receipt. bye babes, go sign something responsibly 💜🦋