carta
tssencryptdecrypt(1)

tssencryptdecrypt1

Runs tpm2_encryptdecrypt

Overview

--version-string=v1045 is not a valid option

encryptdecrypt

Runs TPM2_EncryptDecrypt

-hk key handle

-pwdk password for key (default empty)

-d decrypt (default encrypt)

-if input file name

[-of output file name (default do not save)] [-2 use TPM2_EncryptDecrypt2]

-se[0-2] session handle / attributes (default PWAP)

01 continue

--version is not a valid option

encryptdecrypt

Runs TPM2_EncryptDecrypt

-hk key handle

-pwdk password for key (default empty)

-d decrypt (default encrypt)

-if input file name

[-of output file name (default do not save)] [-2 use TPM2_EncryptDecrypt2]

-se[0-2] session handle / attributes (default PWAP)

01 continue

From tss2 1045-2 in Debian 12 (Bookworm). Parsed by carta from the page's man source.