tpm2_checkquote(1) General Commands Manual tpm2_checkquote(1) (NAME) tpm2_checkquote - (Quote) TPM (SYNOPSIS) tpm2_checkquote [] (DESCRIPTION) tpm2_checkquote(1) (Quote) TPM . (qualifying data) PCR . PCR TPML_PCR_SELECTION . PCR PCR tpm2_pcrread . PCR PCR PCR PCR -l . (OPTIONS) o -u, --public=FILE: . pem tss . o -g, --hash-algorithm=ALGORITHM: (digest) . o -m, --message=FILE: TPM . o -s, --signature=FILE: . o -f, --pcr=FILE: PCR PCR . o -l, --pcr-list=PCR: PCR PCR . o -q, --qualification=HEX_STRING_OR_PATH: (qualification data) . . (nonce) (replay attacks) . o -F, --pcrs_format=FORMAT: (binary blob) PCR. `values' PCR . `serialized' PCR (little-endian) . `marshaled' TSS2 . `marshaled' : TPML_PCR_SELECTION UINT32 ( TPML_DIGEST ) TPML_DIGEST [ TPML_DIGEST]. . -l `normalized' . `serialized' . (References) (Algorithm Specifiers) " (nice-names)" . : . TPM . (Simple specifiers) . . " " . (Asymmetric) o rsa o ecc (Symmetric) o aes o camellia o sm4 (Hashing Algorithms) o sha1 o sha256 o sha384 o sha512 o sm3_256 o sha3_256 o sha3_384 o sha3_512 (Keyed Hash) o hmac o xor (Signing Schemes) o rsassa o rsapss o ecdsa o ecdaa o ecschnorr o sm2 (Asymmetric Encryption Schemes) o oaep o rsaes o ecdh (Modes) o ctr o ofb o cbc o cfb o ecb (Misc) o null (Complex Specifiers) TPM . : :: (Type Specifiers) . . o aes - AES: aes128. o aes128 - AES (ctr|ofb|cbc|cfb|ecb). null . o aes192 - aes128 . o aes256 - aes128 . o sm4 - SM4: sm4128. o sm4128 sm4_128 - SM4 (ctr|ofb|cbc|cfb|ecb). null . o ecc - ecc256. o ecc192 ecc_nist_p192 - NIST ECC. o ecc224 ecc_nist_p224 - NIST ECC. o ecc256 ecc_nist_p256 - NIST ECC. o ecc384 ecc_nist_p384 - NIST ECC. o ecc521 ecc_nist_p521 - NIST ECC. o ecc_sm2 ecc_sm2_p256 - SM2. o rsa - RSA: rsa2048. o rsa1024 - RSA . o rsa2048 - RSA . o rsa3072 - RSA . o rsa4096 - RSA . (Scheme Specifiers) . (Signing Schemes) (Asymmetric Encryption Schemes) . . sha256 . . (Hash Optional Scheme Specifiers) : oaep-sha256. o oaep o ecdh o rsassa o rsapss o ecdsa o ecschnorr o sm2 (Multiple Option Scheme Specifiers) ( UINT16) (-) . * ecdaa ecdaa4-sha256. . (No Option Scheme Specifiers) . * rsaes (Symmetric Details Specifiers) (type) . . aes128cfb . (Examples) rsa2048 rsaes (Create an rsa2048 key with an rsaes asymmetric encryption scheme) tpm2_create -C parent.ctx -G rsa2048:rsaes -u key.pub -r key.priv ecc256 ecdaa sha384 (Create an ecc256 key with an ecdaa signing scheme with a count of 4 and sha384 hash) /tpm2_create -C parent.ctx -G ecc256:ecdaa4-sha384 -u key.pub -r key.priv ALGORITHM. (Signature Format Specifiers) . tss () (binary blob) TPM 2.0 (compiler padding) . plain . FORMAT. (COMMON OPTIONS) . o -h, --help=[man|no-man]: (manpage) . man (manpager) . "man" "man" man stderr . "no-man" man stdout . MANPATH man(1) . o -v, --version: TCTI . o -V, --verbose: . . o -Q, --quiet: stdout. o -Z, --enable-errata: (errata fixups). TPM . TPM2TOOLS_ENABLE_ERRATA . o -z, --pwd-session: HMAC . (clear text) TPM . (unsalted) OpenSSL FIPS . auth (salted) . o -R, --autoflush: (autoflush) . (context file) . TPM2TOOLS_AUTOFLUSH yes true . . TCTI (TCTI Configuration) TCTI " (Transmission Interface)" TPM . TCTI TPM . TCTI : 1. -T --tcti 2. : TPM2TOOLS_TCTI. : . TCTI : o tabrmd - tabrmd . tabrmd abrmd tcti . o mssim - TPM . o device - TPM . o none - TPM . TPM TCTI . TCTI . "none" . : : . TCTI (TCTI Defaults) TCTI TCTI dlopen(3) . TCTI tabrmd device mssim . -v TCTI . - "default-tcti" TCTI . TCTI (Custom TCTIs) TCTI TCTI . dlopen(3) tcti-name . dlopen(3) . TCTI (TCTI OPTIONS) TCTI : o device: TCTI device TPM . /dev/tpm0 . : -T device:/dev/tpm0 export TPM2TOOLS_TCTI="device:/dev/tpm0" o mssim: TCTI mssim IP . 127.0.0.1 2321 . : -T mssim:host=localhost,port=2321 export TPM2TOOLS_TCTI="mssim:host=localhost,port=2321" o abrmd: TCTI abrmd - <<,>> . <<=>> . o abrmd TCTI : 1. <> : tabrmd ( ). 2. <> : dbus ( ) <> <>. tabrmd tcti bus_name=com.example.FooBar: \--tcti=tabrmd:bus_name=com.example.FooBar tcti (abrmd) bus_type=session: \--tcti:bus_type=session : abrmd tabrmd . TCTI . (EXAMPLES) TPM (Generate a quote with a TPM, then verify it) tpm2_createek -c 0x81010001 -G rsa -u ekpub.pem -f pem tpm2_createak -C 0x81010001 -c ak.ctx -G rsa -s rsassa -g sha256 \ -u akpub.pem -f pem -n ak.name tpm2_quote -c ak.ctx -l sha256:15,16,22 -q abc123 -m quote.msg -s quote.sig \ -o quote.pcrs -g sha256 tpm2_checkquote -u akpub.pem -m quote.msg -s quote.sig -f quote.pcrs -g sha256 \ -q abc123 (RETURNS) : o 0 - . o 1 - . o 2 - . o 3 - . o 4 - TCTI. o 5 - . tpm2_testparams. (BUGS) (Github Issues) (HELP) (Mailing List) (LICENSE) . (CC BY 4.0) . tpm2-tools tpm2_checkquote(1)