Showing with 145 additions and 145 deletions.
  1. +4 −4 man/tpm2_activatecredential.1.md
  2. +6 −6 man/tpm2_certify.1.md
  3. +3 −3 man/tpm2_create.1.md
  4. +3 −3 man/tpm2_encryptdecrypt.1.md
  5. +3 −3 man/tpm2_getmanufec.1.md
  6. +6 −6 man/tpm2_getpubak.1.md
  7. +2 −2 man/tpm2_getpubek.1.md
  8. +2 −2 man/tpm2_hmac.1.md
  9. +1 −1 man/tpm2_load.1.md
  10. +1 −1 man/tpm2_makecredential.1.md
  11. +3 −3 man/tpm2_nvdefine.1.md
  12. +2 −2 man/tpm2_nvread.1.md
  13. +2 −2 man/tpm2_nvreadlock.1.md
  14. +2 −2 man/tpm2_nvrelease.1.md
  15. +2 −2 man/tpm2_nvwrite.1.md
  16. +1 −1 man/tpm2_pcrlist.1.md
  17. +7 −7 man/tpm2_quote.1.md
  18. +1 −1 man/tpm2_readpublic.1.md
  19. +4 −4 man/tpm2_rsadecrypt.1.md
  20. +4 −4 man/tpm2_rsaencrypt.1.md
  21. +1 −1 man/tpm2_send_command.1.md
  22. +2 −2 man/tpm2_sign.1.md
  23. +6 −6 man/tpm2_takeownership.1.md
  24. +1 −1 man/tpm2_unseal.1.md
  25. +2 −2 man/tpm2_verifysignature.1.md
  26. +5 −5 tools/tpm2_activatecredential.c
  27. +1 −1 tools/tpm2_akparse.c
  28. +6 −6 tools/tpm2_certify.c
  29. +3 −3 tools/tpm2_create.c
  30. +4 −4 tools/tpm2_encryptdecrypt.c
  31. +3 −3 tools/tpm2_getmanufec.c
  32. +8 −8 tools/tpm2_getpubak.c
  33. +3 −3 tools/tpm2_getpubek.c
  34. +2 −2 tools/tpm2_hmac.c
  35. +1 −1 tools/tpm2_load.c
  36. +2 −2 tools/tpm2_makecredential.c
  37. +3 −3 tools/tpm2_nvdefine.c
  38. +2 −2 tools/tpm2_nvread.c
  39. +2 −2 tools/tpm2_nvreadlock.c
  40. +2 −2 tools/tpm2_nvrelease.c
  41. +2 −2 tools/tpm2_nvwrite.c
  42. +1 −1 tools/tpm2_pcrlist.c
  43. +7 −7 tools/tpm2_quote.c
  44. +1 −1 tools/tpm2_readpublic.c
  45. +4 −4 tools/tpm2_rsadecrypt.c
  46. +4 −4 tools/tpm2_rsaencrypt.c
  47. +2 −2 tools/tpm2_sign.c
  48. +3 −3 tools/tpm2_takeownership.c
  49. +1 −1 tools/tpm2_unseal.c
  50. +2 −2 tools/tpm2_verifysignature.c
8 changes: 4 additions & 4 deletions man/tpm2_activatecredential.1.md
View file
Expand Up @@ -28,21 +28,21 @@ These options control the object verification:
* **-k**, **--key-handle**=_KEY\_HANDLE_:
The _KEY\_HANDLE_ of Loaded key used to decrypt the the random seed.

* **-C**, **--keyContext**=_KEY\_CONTEXT\_FILE_:
* **-C**, **--key-context**=_KEY\_CONTEXT\_FILE_:
_KEY\_CONTEXT\_FILE_ is the path to a context file.

* **-P**, **--password**=_PASSWORD_:
Use _PASSWORD_ for providing an authorization value for the _KEY\_HANDLE_.
Passwords should follow the "password formatting standards, see section "Password Formatting".

* **-e**, **--endorsePassword**=_ENDORSE\_PASSWORD_:
* **-e**, **--endorse-password**=_ENDORSE\_PASSWORD_:
The endorsement password, optional. Follows the same formating guidelines as the handle password option -P.

* **-f**, **--inFile**=_INPUT\_FILE_:
* **-f**, **--in-file**=_INPUT\_FILE_:
Input file path, containing the two structures needed by tpm2_activatecredential function. This is created
via the tpm2_makecredential(1) command.

* **-o**, **--outFile**=_OUTPUT\_FILE_:
* **-o**, **--out-file**=_OUTPUT\_FILE_:
Output file path, record the secret to decrypt the certificate.

[common options](common/options.md)
Expand Down
12 changes: 6 additions & 6 deletions man/tpm2_certify.1.md
View file
Expand Up @@ -24,16 +24,16 @@ An object that only has its public area loaded cannot be certified.

These options control the ceritifcation:

* **-H**, **--objHandle**=_OBJECT\_HANDLE_:
* **-H**, **--obj-handle**=_OBJECT\_HANDLE_:
The handle of the object to be certified.

* **-C**, **--objContext**=_FILE_:
* **-C**, **--obj-context**=_FILE_:
Use _FILE_ for providing the object context.

* **-k**, **--keyHandle**=_KEY\_HANDLE_:
* **-k**, **--key-handle**=_KEY\_HANDLE_:
Handle of the key used to sign the attestation structure.

* **-c**, **--keyContext**=_KEY\_CONTEXT_:
* **-c**, **--key-context**=_KEY\_CONTEXT_:
Filename of the key context used to sign the attestation structure.

* **-P**, **--pwdo**=_OBJECT\_PASSWORD_:
Expand All @@ -48,10 +48,10 @@ These options control the ceritifcation:
Follows the same formatting guidelines as the object handle password or
-P option.

* **-a**, **--attestFile**=_ATTEST\_FILE_:
* **-a**, **--attest-file**=_ATTEST\_FILE_:
Output file name for the attestation data.

* **-s**, **--sigFile**=_SIG\_FILE_:
* **-s**, **--sig-file**=_SIG\_FILE_:
Output file name for the signature data.

[common options](common/options.md)
Expand Down
6 changes: 3 additions & 3 deletions man/tpm2_create.1.md
View file
Expand Up @@ -23,7 +23,7 @@ These options for creating the tpm entity:
* **-H**, **--pparent**=_PARENT\_HANDLE_:
The handle of the parent object to create this object under.

* **-c**, **--contextParent**=_PARENT\_CONTEXT\_FILE_:
* **-c**, **--context-parent**=_PARENT\_CONTEXT\_FILE_:
The filename for parent context.

* **-P**, **--pwdp**=_PARENT\_KEY\_PASSWORD_:
Expand All @@ -45,10 +45,10 @@ These options for creating the tpm entity:
like -g option. See section "Supported Public Object Algorithms" for a list
of supported object algorithms.

* **-A**, **--objectAttributes**=_ATTRIBUTES_:
* **-A**, **--object-attributes**=_ATTRIBUTES_:
The object attributes, optional.

* **-I**, **--inFile**=_FILE_:
* **-I**, **--in-file**=_FILE_:
The data file to be sealed, optional. If file is -, read from stdin.
When sealing data only the TPM_ALG_KEYEDHASH algorithm is allowed.

Expand Down
6 changes: 3 additions & 3 deletions man/tpm2_encryptdecrypt.1.md
View file
Expand Up @@ -17,10 +17,10 @@ specified symmetric key.

# OPTIONS

* **-k**, **--keyHandle**=_KEY\_HANDLE_:
* **-k**, **--key-handle**=_KEY\_HANDLE_:
the symmetric key used for the operation (encryption/decryption).

* **-c**, **--keyContext**=_KEY\_CONTEXT\_FILE_:
* **-c**, **--key-context**=_KEY\_CONTEXT\_FILE_:
filename of the key context used for the operation.

* **-P**, **--pwdk**=_KEY\_PASSWORD_:
Expand All @@ -31,7 +31,7 @@ specified symmetric key.
* **-D**, **--decrypt**:
Perform a decrypt operation. Default is encryption.

* **-I**, **--inFile**=_INPUT\_FILE_:
* **-I**, **--in-file**=_INPUT\_FILE_:
Input file path containing data for decrypt or encrypt operation.

* **-S**, **--input-session-handle**=_SESSION\_HANDLE_:
Expand Down
6 changes: 3 additions & 3 deletions man/tpm2_getmanufec.1.md
View file
Expand Up @@ -20,13 +20,13 @@ server.

# OPTIONS

* **-e**, **--endorsePasswd**=_ENDORSE\_PASSWORD_:
* **-e**, **--endorse-passwd**=_ENDORSE\_PASSWORD_:
specifies current endorse password (string, optional,default:NULL).

* **-o**, **--ownerPasswd**=_OWNER\_PASSWORD_:
* **-o**, **--owner-passwd**=_OWNER\_PASSWORD_:
specifies current owner password (string, optional,default:NULL).

* **-P**, **--ekPasswd**=_EK\_PASSWORD_:
* **-P**, **--ek-passwd**=_EK\_PASSWORD_:
specifies the EK password when created (string,optional,default:NULL).

Passwords should follow the password formatting standards, see
Expand Down
12 changes: 6 additions & 6 deletions man/tpm2_getpubak.1.md
View file
Expand Up @@ -19,23 +19,23 @@ return pub AK and AK name. If any passwd option is missing, assume NULL.

# OPTIONS

* **-e**, **--endorsePasswd**=_ENDORSE\_PASSWORD_:
* **-e**, **--endorse-passwd**=_ENDORSE\_PASSWORD_:
Specifies current endorsement password, defaults to NULL.
Passwords should follow the "password formatting standards, see section
"Password Formatting".

* **-P**, **--akPasswd**=_AK\_PASSWORD_
* **-P**, **--ak-passwd**=_AK\_PASSWORD_
Specifies the AK password when created, defaults to NULL.
Same formatting as the endorse password value or -e option.

* **-o**, **--ownerPasswd**=_OWNER\_PASSWORD_
* **-o**, **--owner-passwd**=_OWNER\_PASSWORD_
Specifies the current owner password, defaults to NULL.
Same formatting as the endorse password value or -e option.

* **-E**, **--ekHandle**=_EK\_HANDLE_:
* **-E**, **--ek-handle**=_EK\_HANDLE_:
Specifies the handle used to make EK persistent.

* **-k**, **--akHandle**=_AK\_HANDLE_:
* **-k**, **--ak-handle**=_AK\_HANDLE_:
Specifies the handle used to make AK persistent.

* **-g**, **--alg**=_ALGORITHM_:
Expand All @@ -53,7 +53,7 @@ return pub AK and AK name. If any passwd option is missing, assume NULL.
binary data structure corresponding to the TPM2B_PUBLIC struct in the
specification.

* **-n**, **--akName**=_NAME_:
* **-n**, **--ak-name**=_NAME_:
Specifies the file used to save the ak name.

[common options](common/options.md)
Expand Down
4 changes: 2 additions & 2 deletions man/tpm2_getpubek.1.md
View file
Expand Up @@ -21,12 +21,12 @@ Refer to:

# OPTIONS

* **-e**, **--endorsePasswd**=_ENDORSE\_PASSWORD_:
* **-e**, **--endorse-passwd**=_ENDORSE\_PASSWORD_:
Specifies current endorsement password, defaults to NULL.
Passwords should follow the "password formatting standards, see section
"Password Formatting".

* **-o**, **--ownerPasswd**=_OWNER\_PASSWORD_
* **-o**, **--owner-passwd**=_OWNER\_PASSWORD_
Specifies the current owner password, defaults to NULL.
Same formatting as the endorse password value or -e option.

Expand Down
4 changes: 2 additions & 2 deletions man/tpm2_hmac.1.md
View file
Expand Up @@ -17,10 +17,10 @@ _FILE_ is not specified, then data is read from stdin.

# OPTIONS

* **-k**, **--keyHandle**=_KEY\_CONTEXT\_FILE_:
* **-k**, **--key-handle**=_KEY\_CONTEXT\_FILE_:
The key handle for the symmetric signing key providing the HMAC key.

* **-c**, **--keyContext**=_KEY\_CONTEXT\_FILE_:
* **-c**, **--key-context**=_KEY\_CONTEXT\_FILE_:
The filename of the key context used for the operation.

* **-P**, **--pwdk**=_KEY\_PASSWORD_:
Expand Down
2 changes: 1 addition & 1 deletion man/tpm2_load.1.md
View file
Expand Up @@ -20,7 +20,7 @@ into the TPM.
* **-H**, **--parent**=_PARENT\_HANDLE_:
The handle of the parent object. Either this option or **-c** must be used.

* **-c**, **--contextParent**=_PARENT\_CONTEXT\_FILE_:
* **-c**, **--context-parent**=_PARENT\_CONTEXT\_FILE_:
The filename for parent context.

* **-P**, **--pwdp**=_PARENT\_KEY\_PASSWORD_:
Expand Down
2 changes: 1 addition & 1 deletion man/tpm2_makecredential.1.md
View file
Expand Up @@ -27,7 +27,7 @@ to encrypt the AK certififcate.
* **-n**, **--name**=_NAME_
The name of the key for which certificate is to be created.

* **-o**, **--outFile**=_OUT\_FILE_
* **-o**, **--out-file**=_OUT\_FILE_
The output file path, recording the two structures output by
tpm2_makecredential function.

Expand Down
6 changes: 3 additions & 3 deletions man/tpm2_nvdefine.1.md
View file
Expand Up @@ -19,7 +19,7 @@
* **-x**, **--index**=_NV\_INDEX_:
Specifies the index to define the space at.

* **-a**, **--authHandle**=_SECRET\_DATA\_FILE_:
* **-a**, **--auth-handle**=_SECRET\_DATA\_FILE_:
specifies the handle used to authorize:
* **0x40000001** for **TPM_RH_OWNER**
* **0x4000000C** for **TPM_RH_PLATFORM**
Expand All @@ -32,11 +32,11 @@
entitiy. Either the raw bitfield mask or "nice-names" may be used. See
section "NV Attributes" for more details.

* **-P**, **--handlePasswd**=_HANDLE\_PASSWORD_:
* **-P**, **--handle-passwd**=_HANDLE\_PASSWORD_:
specifies the password of authHandle. Passwords should follow the
"password formatting standards, see section "Password Formatting".

* **-I**, **--indexPasswd**=_INDEX\_PASSWORD_:
* **-I**, **--index-passwd**=_INDEX\_PASSWORD_:
specifies the password of NV Index when created. Follows the same formatting
guidelines as the handle password or -P option.

Expand Down
4 changes: 2 additions & 2 deletions man/tpm2_nvread.1.md
View file
Expand Up @@ -19,15 +19,15 @@
* **-x**, **--index**=_NV\_INDEX_:
Specifies the index to define the space at.

* **-a**, **--authHandle**=_SECRET\_DATA\_FILE_:
* **-a**, **--auth-handle**=_SECRET\_DATA\_FILE_:
specifies the handle used to authorize:
* **0x40000001** for **TPM_RH_OWNER**
* **0x4000000C** for **TPM_RH_PLATFORM**

* **-f**, **--output**=_FILE_:
file to write data

* **-P**, **--handlePasswd**=_HANDLE\_PASSWORD_:
* **-P**, **--handle-passwd**=_HANDLE\_PASSWORD_:
specifies the password of authHandle. Passwords should follow the
"password formatting standards, see section "Password Formatting".

Expand Down
4 changes: 2 additions & 2 deletions man/tpm2_nvreadlock.1.md
View file
Expand Up @@ -20,12 +20,12 @@ is released on subsequent restart of the machine.
* **-x**, **--index**=_NV\_INDEX_:
Specifies the index to define the space at.

* **-a**, **--authHandle**=_SECRET\_DATA\_FILE_:
* **-a**, **--auth-handle**=_SECRET\_DATA\_FILE_:
specifies the handle used to authorize:
* **0x40000001** for **TPM_RH_OWNER**
* **0x4000000C** for **TPM_RH_PLATFORM**

* **-P**, **--handlePasswd**=_HANDLE\_PASSWORD_:
* **-P**, **--handle-passwd**=_HANDLE\_PASSWORD_:
specifies the password of authHandle. Passwords should follow the
"password formatting standards, see section "Password Formatting".

Expand Down
4 changes: 2 additions & 2 deletions man/tpm2_nvrelease.1.md
View file
Expand Up @@ -20,15 +20,15 @@ defined with tpm2_nvdefine(1).
* **-x**, **--index**=_NV\_INDEX_:
Specifies the index to release.

* **-a**, **--authHandle**=_SECRET\_DATA\_FILE_:
* **-a**, **--auth-handle**=_SECRET\_DATA\_FILE_:
specifies the handle used to authorize:
* **0x40000001** for **TPM_RH_OWNER**
* **0x4000000C** for **TPM_RH_PLATFORM**

* **-s**, **--size**=_SIZE_:
specifies the size of data area in bytes.

* **-P**, **--handlePasswd**=_HANDLE\_PASSWORD_:
* **-P**, **--handle-passwd**=_HANDLE\_PASSWORD_:
specifies the password of authHandle. Passwords should follow the
"password formatting standards, see section "Password Formatting".

Expand Down
4 changes: 2 additions & 2 deletions man/tpm2_nvwrite.1.md
View file
Expand Up @@ -19,12 +19,12 @@
* **-x**, **--index**=_NV\_INDEX_:
Specifies the index to define the space at.

* **-a**, **--authHandle**=_SECRET\_DATA\_FILE_:
* **-a**, **--auth-handle**=_SECRET\_DATA\_FILE_:
specifies the handle used to authorize:
* **0x40000001** for **TPM_RH_OWNER**
* **0x4000000C** for **TPM_RH_PLATFORM**

* **-P**, **--handlePasswd**=_HANDLE\_PASSWORD_:
* **-P**, **--handle-passwd**=_HANDLE\_PASSWORD_:
specifies the password of authHandle. Passwords should follow the
"password formatting standards, see section "Password Formatting".

Expand Down
2 changes: 1 addition & 1 deletion man/tpm2_pcrlist.1.md
View file
Expand Up @@ -23,7 +23,7 @@
Also, see section "Supported Hash Algorithms" for a list of supported hash
algorithms.

* **-L**, **--selList**=_PCR\_SELECTION\_LIST_:
* **-L**, **--sel-list**=_PCR\_SELECTION\_LIST_:

The list of pcr banks and selected PCRs' ids for each bank to display.
_PCR\_SELECTION\_LIST_ values should follow the
Expand Down
14 changes: 7 additions & 7 deletions man/tpm2_quote.1.md
View file
Expand Up @@ -16,30 +16,30 @@

# OPTIONS

* **-k**, **--akHandle**=_AK\_HANDLE_:
* **-k**, **--ak-handle**=_AK\_HANDLE_:

Handle of existing AK.

* **-c**, **--akContext**=_AK\_CONTEXT\_FILE_:
* **-c**, **--ak-context**=_AK\_CONTEXT\_FILE_:

Filename for the existing AK's context.

* **-P**, **--akPassword**=_AK\_PASSWORD_:
* **-P**, **--ak-password**=_AK\_PASSWORD_:

specifies the password of _AK\_HANDLE_. Passwords should follow the
password formatting standards, see section "Password Formatting".

* **-l**, **--idList**=_PCR\_ID\_LIST_
* **-l**, **--id-list**=_PCR\_ID\_LIST_

The comma separated list of selected PCRs' ids, 0~23 e.g. "4,5,6".

* **-L**, **--selList**=_PCR\_SELECTION\_LIST_:
* **-L**, **--sel-list**=_PCR\_SELECTION\_LIST_:

The list of pcr banks and selected PCRs' ids for each bank.
_PCR\_SELECTION\_LIST_ values should follow the
pcr bank specifiers standards, see section "PCR Bank Specfiers".

* **-o**, **--outFile**:
* **-o**, **--out-file**:

Output file path, recording the two structures output by tpm2_quote function.

Expand All @@ -50,7 +50,7 @@

[signature options](common/signature.md)

* **-q**, **--qualifyData**:
* **-q**, **--qualify-data**:

Data given as a Hex string to qualify the quote, optional. This is typically
used to add a nonce against replay attacks.
Expand Down
2 changes: 1 addition & 1 deletion man/tpm2_readpublic.1.md
View file
Expand Up @@ -20,7 +20,7 @@

The loaded object handle to read the public data of.

* **-c**, **--akContext**=_OBJECT\_CONTEXT\_FILE_:
* **-c**, **--ak-context**=_OBJECT\_CONTEXT\_FILE_:

Filename for object context.

Expand Down
8 changes: 4 additions & 4 deletions man/tpm2_rsadecrypt.1.md
View file
Expand Up @@ -22,11 +22,11 @@ The key referenced by keyHandle is **required** to be:

# OPTIONS

* **-k**, **--keyHandle**=_KEY\_HANDLE_:
* **-k**, **--key-handle**=_KEY\_HANDLE_:

the public portion of RSA key to use for decryption.

* **-c**, **--keyContext**=_KEY\_CONTEXT\_FILE_:
* **-c**, **--key-context**=_KEY\_CONTEXT\_FILE_:

filename of the key context used for the operation.

Expand All @@ -35,11 +35,11 @@ The key referenced by keyHandle is **required** to be:
specifies the password of _KEY\_HANDLE_. Passwords should follow the
password formatting standards, see section "Password Formatting".

* **-I**, **--inFile**=_INPUT\FILE_:
* **-I**, **--in-file**=_INPUT\FILE_:

Input file path, containing the data to be decrypted.

* **-o**, **--outFile**=_OUTPUT\_FILE_:
* **-o**, **--out-file**=_OUTPUT\_FILE_:

Output file path, record the decrypted data.

Expand Down