home | help
tpmtoken_protect(1)	     General Commands Manual	     tpmtoken_protect(1)

		       TPM Management - tpmtoken_protect

NAME
     tpmtoken_protect  - encrypt or decrypt data using a symmetric key stored in
     the user's TPM PKCS#11 data store

SYNOPSIS
     tpmtoken_protect [ OPTION ]

DESCRIPTION
     tpmtoken_protect will encrypt or decrypt data using a symmetric key that is
     stored in the user's data store.  The key used to protect	the  data  is  a
     256-bit  AES key stored as a private Secret Key PKCS#11 object.  The object
     has the PKCS#11 label attribute of 'User Data Protection Key'.  The key  is
     generated	by  the  TPM  PKCS#11 implementation when it is needed the first
     time.  Since it is generated as a private object, it is  protected  by  the
     TPM on the platform.

     This command requires the '-i' and '-o' command options to be specified.

     -h, --help
	    Display command usage info.

     -v, --version
	    Display command version info.

     -l, --log [none|error|info|debug]
	    Set logging level.

     -d, --decrypt
	    Perform a decryption operation

     -e, --encrypt
	    Perform an encryption operation

     -i, --infile FILE
	    Use FILE as the input to the specified operation

     -k, --token STRING
	    Use STRING to identify the label of the PKCS#11 token to be used

     -o, --outfile FILE
	    Use FILE as the output of the specified operation

SEE ALSO
     tpmtoken_init(1),	tpmtoken_import(1),  tpmtoken_setpasswd(1), tpmtoken_ob-
     jects(1)

REPORTING BUGS
     Report bugs to <trousers-users@lists.sourceforge.net>

TPM Management			   2005-04-25		     tpmtoken_protect(1)

home | help