Struct Unseal 

pub struct Unseal {
    pub input: String,
    pub auth: Option<String>,
    pub hmac_auth: Option<String>,
}

Retrieves data from a sealed data object.

Fields

input: String

input: ‘tpm://’ or ‘key://’

auth: Option<String>

auth for the sealed object: ‘password://’ or ‘session://’ Uses TPM2SH_AUTH environment variable if not set.

hmac_auth: Option<String>

hmac auth: ‘password://’ or ‘session://’ Uses TPM2SH_HMAC_AUTH environment variable if not set.

Trait Implementations

impl Debug for Unseal

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl FromArgs for Unseal

fn from_args(__cmd_name: &[&str], __args: &[&str]) -> Result<Self, EarlyExit>

Construct the type from an input set of arguments.

fn redact_arg_values( __cmd_name: &[&str], __args: &[&str], ) -> Result<Vec<String>, EarlyExit>

Get a String with just the argument names, e.g., options, flags, subcommands, etc, but without the values of the options and arguments. This can be useful as a means to capture anonymous usage statistics without revealing the content entered by the end user.

impl SubCommand for Unseal

const COMMAND: &'static CommandInfo

Information about the subcommand.

impl SubCommand for Unseal

fn run( &self, device: Option<Rc<RefCell<Device>>>, context: &mut ContextCache<'_>, _plain: bool, ) -> Result<(), CommandError>

unseal requires authorization for the sealed object itself.

1. The sealed object’s context is loaded into the TPM if it is not already active. This step does not require authorization.
2. The data is retrieved using TPM2_Unseal. This command must be authorized by the sealed object’s own authorization policy. The session provided via --auth is used for this step.

fn is_local(&self) -> bool

Returns true if the command can be run without a TPM device.