blob: 2b4dad1bfaa5f8135232c2f8cee8e1e9f6133c1a (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
|
.\" Copyright (C) 2005 International Business Machines Corporation
.\"
.de Sh \" Subsection
.br
.if t .Sp
.ne 5
.PP
\fB\\$1\fR
.PP
..
.de Sp \" Vertical space (when we can't use .PP)
.if t .sp .5v
.if n .sp
..
.de Ip \" List item
.br
.ie \\n(.$>=3 .ne \\$3
.el .ne 3
.IP "\\$1" \\$2
..
.TH "tpmtoken_protect" 1 "2005-04-25" "TPM Management"
.ce 1
TPM Management - tpmtoken_protect
.SH NAME
tpmtoken_protect \- encrypt or decrypt data using a symmetric key stored
in the user's TPM PKCS#11 data store
.SH "SYNOPSIS"
.ad l
.hy 0
.B tpmtoken_protect
[ OPTION ]
.SH "DESCRIPTION"
.PP
\fBtpmtoken_protect\fR will encrypt or decrypt data using a symmetric key that
is stored in the user's data store. The key used to protect the data
is a 256-bit AES key stored as a private Secret Key PKCS#11 object. The object
has the PKCS#11 label attribute of \'User Data Protection Key\'.
The key is generated by the TPM PKCS#11 implementation when it is needed the
first time. Since it is generated as a private object, it is protected by the
TPM on the platform.
.PP
This command requires the \'-i\' and \'-o\' command options to be specified.
.TP
\fB\-h\fR, \fB\-\-help\fR
Display command usage info.
.TP
\fB-v\fR, \fB\-\-version\fR
Display command version info.
.TP
\fB-l\fR, \fB\-\-log\fR [none|error|info|debug]
Set logging level.
.TP
\fB-d\fR, \fB\-\-decrypt\fR
Perform a decryption operation
.TP
\fB-e\fR, \fB\-\-encrypt\fR
Perform an encryption operation
.TP
\fB-i\fR, \fB\-\-infile\fR FILE
Use FILE as the input to the specified operation
.TP
\fB-k\fR, \fB\-\-token\fR STRING
Use STRING to identify the label of the PKCS#11 token to
be used
.TP
\fB-o\fR, \fB\-\-outfile\fR FILE
Use FILE as the output of the specified operation
.SH "SEE ALSO"
.PP
\fBtpmtoken_init\fR(1),
\fBtpmtoken_import\fR(1),
\fBtpmtoken_setpasswd\fR(1),
\fBtpmtoken_objects\fR(1)
.SH "REPORTING BUGS"
Report bugs to <trousers-users@lists.sourceforge.net>
|
