TPM_GETPCRHASH(8)

💖 NAME 💖

tpm_getpcrhash — it gives you back the signed data that a TPM quote produced. that's it, that's the gig. also hi bestie, you're on the GET TPM PCR HASH(8) page, welcome, come in, sit down. 🎀

🌸 SYNOPSIS 🌸

tpm_getpcrhash [-r HOST] [-hv] UUID-FILE HASH-FILE PCR-VALUE-FILE PCRS

✨ DESCRIPTION ✨

okay so picture this. you run this program and it hands you two things. first, the signed data produced by a TPM quote goes into the file HASH-FILE. second, the actual list of Platform Configuration Register values goes into the file PCR-VALUE-FILE. two files from one command?? we love a multitasker. 🫶

PCRS is a sequence of integers — literally just a row of numbers — and those numbers specify which Platform Configuration Registers were used to produce that signed data. the key used for the whole operation is the one registered under the UUID in UUID-FILE. iykyk, key registration is the moment. 🔑

the nonce used while quoting is unpredictable. not a glitch, not a bug, that's the design bestie. 💅

real talk though: the nonce field in the signed data gets ignored when you use that signed data to verify a quote. it's just vibing in there, mind your business, leave it alone. 🙈

the flags ✨

• -r HOST — perform the operation on a remote HOST. long-distance relationship with your TPM, it's giving network energy. 🌈
• -h — display command usage info. when you're lost, ask for directions, it's not embarrassing. 🧚
• -v — display command version info. know your era. ⭐

🌟 SEE ALSO 🌟

the whole friend group, go say hi to all of them:

• tpm_quote_tools(8)
• tpm_loadkey(8)
• tpm_getquote(8)
• tpm_verifyquote(8)
• tpm_updateprchash(8)

and that's the page, bestie 💜 this one is dated Oct 2010 and it lives in the GET TPM PCR HASH(8) manual — she's an elder icon and we respect her. slay, go hash some PCRs, drink water, ily. 👑🌸