From fd27ca2d2061b5f77516068cd815cd23a20b74c2 Mon Sep 17 00:00:00 2001 From: Sergio Arroutbi Date: Wed, 14 Sep 2022 16:23:43 +0200 Subject: [PATCH] Include correct usage and show decrypt option Signed-off-by: Sergio Arroutbi --- src/main.rs | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/src/main.rs b/src/main.rs index 8f7d050..e177125 100644 --- a/src/main.rs +++ b/src/main.rs @@ -227,15 +227,16 @@ fn print_summary() { fn print_help() { eprintln!( " -Usage: clevis encrypt tpm2 CONFIG < PLAINTEXT > JWE +Usage (encryption): clevis encrypt tpm2 CONFIG < PLAINTEXT > JWE +Usage (decryption): clevis decrypt tpm2 CONFIG < JWE > PLAINTEXT -Encrypts using a TPM2.0 chip binding policy +Encrypts or decrypts using a TPM2.0 chip binding policy This command uses the following configuration properties: hash: Hash algorithm used in the computation of the object name (default: sha256) - key: Algorithm type for the generated key (options: eecc, rsa; default: ecc) + key: Algorithm type for the generated key (options: ecc, rsa; default: ecc) pcr_bank: PCR algorithm bank to use for policy (default: sha256)