carta
tssverifysignature(1)

tssverifysignature1

Runs tpm2_verifysignature

Overview

--version-string=v1045 is not a valid option

verifysignature

Runs TPM2_VerifySignature and/or verifies using the PEM public key

[-hk key handle] [-ipem public key PEM format file name to verify signature]

One of -hk, -ipem must be specified

[-halg (sha1, sha256, sha384) (default sha256)] [asymmetric key algorithm]

[-rsa (default)] [-ecc curve (P256)]

-if input message file name

-ih input hash file name

-is signature file name

[-raw (flag) signature specified by -is is in raw format]

(default TPMT_SIGNATURE)

[-tk ticket file name (requires -ha)]

--version is not a valid option

verifysignature

Runs TPM2_VerifySignature and/or verifies using the PEM public key

[-hk key handle] [-ipem public key PEM format file name to verify signature]

One of -hk, -ipem must be specified

[-halg (sha1, sha256, sha384) (default sha256)] [asymmetric key algorithm]

[-rsa (default)] [-ecc curve (P256)]

-if input message file name

-ih input hash file name

-is signature file name

[-raw (flag) signature specified by -is is in raw format]

(default TPMT_SIGNATURE)

[-tk ticket file name (requires -ha)]

From tss2 1045-2 in Debian 12 (Bookworm). Parsed by carta from the page's man source.