On Thu, 2020-06-18 at 02:42 +0300, Jarkko Sakkinen wrote: > On Tue, Jun 16, 2020 at 09:02:28AM -0700, James Bottomley wrote: > > This patch adds a policy= argument to key creation. The policy is > > the standard tss policymaker format and each separate policy line > > must have a newline after it. > > Never heard of policymaker before and did not find TCG spec for it. It's not part of the spec. Both the IBM and Intel TSSs define a policymaker tool to help you build policy hashes. The format is simply a set of numbers that if hashed a line at a time produce the policy hash. James