% tpm2_zgen2phase(1) tpm2-tools | General Commands Manual
tpm2_zgen2phase(1) - Command to enable the TPM to combine data from the other party with the ephemeral key generated in the first phase of two-phase key exchange protocols.
tpm2_zgen2phase [OPTIONS]
tpm2_zgen2phase(1) - Command to enable the TPM to combine data from the other party with the ephemeral key generated in the first phase of two-phase key exchange protocols.
-c, --key-context=FILE:
Context object pointing to ECC key. Either a file or a handle number. See section "Context Object Format".
-p, --key-auth=AUTH:
The authorization value for the ECC key object.
-s, --scheme=ALGORITHM:
The key exchange scheme. Optional. Valid options are ecdh or sm2.
-t, --counter=NATURALNUMBER:
The commit count to determine the key index to use.
--static-public=FILE:
The static public key input of the other party.
--ephemeral-public=FILE:
The ephemeral public key input of the other party.
--output-Z1=FILE
Specify file path to save the calculated ecdh secret Z1 point.
--output-Z2=FILE
Specify file path to save the calculated ecdh secret Z2 point.
algorithm specifiers details the options for specifying cryptographic algorithms ALGORITHM.
common options collection of common options that provide information many users may expect.
common tcti options collection of options used to configure the various known TCTI modules.
tpm2_createprimary -C o -c prim.ctx -Q
tpm2_create -C prim.ctx -c key.ctx -u key.pub -r key.priv -G ecc256:ecdh -Q
tpm2_ecephemeral -u ecc.q -t ecc.ctr ecc256
tpm2_ecdhkeygen -u ecdh.pub -o ecdh.priv -c key.ctx
tpm2_zgen2phase -c key.ctx --static-public ecdh.pub --ephemeral-public ecc.q \
-t 0 --output-Z1 z1.bin --output-Z2 z2.bin