TPM2 sign

sign

#!/bin/sh

tpm2_createprimary -c primary.ctx
tpm2_create -C primary.ctx -G ecc -u key.pub -r key.priv
tpm2_load  -C primary.ctx -u key.pub -r key.priv -c key.ctx
tpm2_readpublic -f pem -o key.pem -c key.ctx
echo "my message" > message.dat
sha256sum message.dat | awk '{ print "000000 " $1 }' | xxd -r -c 32 > message.dat.digest
tpm2_sign -c key.ctx -g sha256 -d -f plain -o message.dat.sig message.dat.digest
openssl dgst -verify key.pem -keyform pem -sha256 -signature message.dat.sig message.dat