diff --git a/src/main.rs b/src/main.rs index 8f7d050..e177125 100644 --- a/src/main.rs +++ b/src/main.rs @@ -227,15 +227,16 @@ fn print_summary() { fn print_help() { eprintln!( " -Usage: clevis encrypt tpm2 CONFIG < PLAINTEXT > JWE +Usage (encryption): clevis encrypt tpm2 CONFIG < PLAINTEXT > JWE +Usage (decryption): clevis decrypt tpm2 CONFIG < JWE > PLAINTEXT -Encrypts using a TPM2.0 chip binding policy +Encrypts or decrypts using a TPM2.0 chip binding policy This command uses the following configuration properties: hash: Hash algorithm used in the computation of the object name (default: sha256) - key: Algorithm type for the generated key (options: eecc, rsa; default: ecc) + key: Algorithm type for the generated key (options: ecc, rsa; default: ecc) pcr_bank: PCR algorithm bank to use for policy (default: sha256)