1tss2_verifyquote(1)         General Commands Manual        tss2_verifyquote(1)
2
3
4

NAME

6       tss2_verifyquote(1) -
7

SYNOPSIS

9       tss2_verifyquote [OPTIONS]
10

DESCRIPTION

12       tss2_verifyquote(1) - This command verifies that the data returned by a
13       quote is valid.  This includes
14
15       · Reconstructing the quoteInfo’s PCR values from the  eventLog  (if  an
16         eventLog was provided)
17
18       · Verifying the quoteInfo using the signature and the publicKeyPath
19
20       An application using tss2_verifyquote() will further have to
21
22       · Assess the publicKey’s trustworthiness
23
24       · Assess the eventLog entries’ trustworthiness
25

OPTIONS

27       These are the available options:
28
29       · -Q, --qualifyingData FILENAME or - (for stdin):
30
31         A  nonce provided by the caller to ensure freshness of the signature.
32         Optional parameter.
33
34       · -l, --pcrLog FILENAME or - (for stdin):
35
36         Returns the PCR event log for the chosen PCR.  Optional parameter.
37
38         PCR event logs are a list (arbitrary length JSON array)  of  log  en‐
39         tries with the following content.
40
41                - recnum: Unique record number
42                - pcr: PCR index
43                - digest: The digests
44                - type: The type of event. At the moment the only possible value is: "LINUX_IMA" (legacy IMA)
45                - eventDigest: Digest of the event; e.g. the digest of the measured file
46                - eventName: Name of the event; e.g. the name of the measured file.
47
48       · -q, --quoteInfo FILENAME or - (for stdin):
49
50         The JSON-encoded structure holding the inputs to the quote operation.
51         This includes the digest value and PCR values.
52
53       · -k, --publicKeyPath STRING:
54
55         Identifies the signing key.  MAY be a path to the public key  hierar‐
56         chy /ext.
57
58       · -i, --signature FILENAME or - (for stdin):
59
60         The signature over the quoted material.
61

COMMON OPTIONS

63       This  collection of options are common to all tss2 programs and provide
64       information that many users may expect.
65
66       · -h, --help [man|no-man]: Display the tools manpage.  By  default,  it
67         attempts  to  invoke  the  manpager for the tool, however, on failure
68         will output a short tool summary.  This is the same behavior  if  the
69         “man”  option argument is specified, however if explicit “man” is re‐
70         quested, the tool will provide errors from man  on  stderr.   If  the
71         “no-man”  option  if  specified, or the manpager fails, the short op‐
72         tions will be output to stdout.
73
74         To successfully use the manpages feature requires the manpages to  be
75         installed or on MANPATH, See man(1) for more details.
76
77       · -v,  --version:  Display version information for this tool, supported
78         tctis and exit.
79

EXAMPLE

81                  tss2_verifyquote --publicKeyPath "ext/myNewParent" --qualifyingData qualifyingData.file --quoteInfo quoteInfo.file --signature signature.file --pcrLog pcrLog.file
82

RETURNS

84       0 on success or 1 on failure.
85

BUGS

87       Github Issues (https://github.com/tpm2-software/tpm2-tools/issues)
88

HELP

90       See the Mailing List (https://lists.01.org/mailman/listinfo/tpm2)
91
92
93
94tpm2-tools                        APRIL 2019               tss2_verifyquote(1)