carta
tsssign(1)

tsssign1

Runs tpm2_sign

Overview

--version-string=v1045 is not a valid option

sign

Runs TPM2_Sign

-hk key handle

[-pwdk password for key (default empty)] [-halg (sha1, sha256, sha384) (default sha256)] [-rsa (RSASSA scheme)] [-ecc (ECDSA scheme)]

Verify only supported for RSA now

-if input message to hash and sign

[-ipu public key file name to verify signature (default no verify)] [-os signature file name (default do not save)] [-tk ticket file name]

-se[0-2] session handle / attributes (default PWAP)

01 continue

--version is not a valid option

sign

Runs TPM2_Sign

-hk key handle

[-pwdk password for key (default empty)] [-halg (sha1, sha256, sha384) (default sha256)] [-rsa (RSASSA scheme)] [-ecc (ECDSA scheme)]

Verify only supported for RSA now

-if input message to hash and sign

[-ipu public key file name to verify signature (default no verify)] [-os signature file name (default do not save)] [-tk ticket file name]

-se[0-2] session handle / attributes (default PWAP)

01 continue

From tss2 1045-2 in Debian 12 (Bookworm). Parsed by carta from the page's man source.