1tpmtoken_protect(1)         General Commands Manual        tpmtoken_protect(1)
2
3
4
5                      TPM Management - tpmtoken_protect
6

NAME

8       tpmtoken_protect - encrypt or decrypt data using a symmetric key stored
9       in the user's TPM PKCS#11 data store
10

SYNOPSIS

12       tpmtoken_protect [ OPTION ]
13
14

DESCRIPTION

16       tpmtoken_protect will encrypt or decrypt data using a symmetric key
17       that is stored in the user's data store.  The key used to protect the
18       data is a 256-bit AES key stored as a private Secret Key PKCS#11
19       object.  The object has the PKCS#11 label attribute of ´User Data
20       Protection Key´.  The key is generated by the TPM PKCS#11
21       implementation when it is needed the first time.  Since it is generated
22       as a private object, it is protected by the TPM on the platform.
23
24       This command requires the ´-i´ and ´-o´ command options to be
25       specified.
26
27
28       -h, --help
29              Display command usage info.
30
31       -v, --version
32              Display command version info.
33
34       -l, --log [none|error|info|debug]
35              Set logging level.
36
37       -d, --decrypt
38              Perform a decryption operation
39
40       -e, --encrypt
41              Perform an encryption operation
42
43       -i, --infile FILE
44              Use FILE as the input to the specified operation
45
46       -k, --token STRING
47              Use STRING to identify the label of the PKCS#11 token to be used
48
49       -o, --outfile FILE
50              Use FILE as the output of the specified operation
51
52

SEE ALSO

54       tpmtoken_init(1), tpmtoken_import(1), tpmtoken_setpasswd(1),
55       tpmtoken_objects(1)
56
57

REPORTING BUGS

59       Report bugs to <trousers-users@lists.sourceforge.net>
60
61
62
63TPM Management                    2005-04-25               tpmtoken_protect(1)