carta
tssrsadecrypt(1)

tssrsadecrypt1

Runs tpm2_rsadecrypt

Overview

--version-string=v1045 is not a valid option

rsadecrypt

Runs TPM2_RSA_Decrypt

-hk key handle

-pwdk password for key (default empty)

-ie encrypt file name

-od decrypt file name (default do not save)

[-oid (sha1, sha256, sha384) optionally add OID and PKCS1 padding

to the encrypt data (demo of signing with arbitrary OID)

-se[0-2] session handle / attributes (default PWAP)

01 continue

--version is not a valid option

rsadecrypt

Runs TPM2_RSA_Decrypt

-hk key handle

-pwdk password for key (default empty)

-ie encrypt file name

-od decrypt file name (default do not save)

[-oid (sha1, sha256, sha384) optionally add OID and PKCS1 padding

to the encrypt data (demo of signing with arbitrary OID)

-se[0-2] session handle / attributes (default PWAP)

01 continue

From tss2 1045-2 in Debian 12 (Bookworm). Parsed by carta from the page's man source.