unsealfile.1

IBM开发的TPM的驱动, 有少量的例子可以供参考

.\" Copyright 2004 IBM (Jeff Kravitz)
.\"
.\" Written Feb 24 2004, Jeff Kravitz
.\"
.TH unsealfile 1  2004-04-14 "IBM" "TPM Utilities"
.SH NAME
unsealfile \- unseals a data file
.SH SYNOPSIS

unsealfile [<options>] <key handle> <input file> <outputfile>

.SH DESCRIPTION
This command will unseal (decrypt) a file.
.SH ARGUMENTS
.TP 5
key handle
is an 8-hex-digit number that specifies the TPM handle assigned to the
key that is to be used for unsealing.
It is
usually obtained from the \fBloadkey\fP utility
when the key was loaded into the TPM.
.TP 5
input file
is the name of the file containing the sealed data.
.TP 5
output file
This specifies the name of the output file, which contains the unsealed data.
.SH OPTIONS
The following command line options are supported...
.TP 5                
-k <keypass>
specifies the key usage password,
which is any character string, up to 256 bytes long.
It specifies the password needed to use the key unsealing the file.
The actual "Authorization Data"
passed to the TPM is the 20 byte SHA1 hash of the user-specified password.
.TP 5                
-d <datapass>
which is any character string, up to 256 bytes long.
It specifies the password required to unseal the file.
The actual "Authorization Data"
passed to the TPM is the 20 byte SHA1 hash of the user-specified password.
.SH "SEE ALSO"
loadkey(1), sealfile(1)
.SH AUTHOR
Jeff Kravitz , IBM T. J. Watson Research Center