diff --git a/zkey/zkey.1 b/zkey/zkey.1 index 8c1da735..c9ca0b4d 100644 --- a/zkey/zkey.1 +++ b/zkey/zkey.1 @@ -137,7 +137,7 @@ to be installed. .SH OPTIONS .SS "Options for the generate command" .TP -.BR \-k ", " \-\-keybits \fIsize\fP +.BR \-k ", " \-\-keybits\~\fIsize\fP Specifies the size of the AES key to be generated in bits. Valid sizes are 128, 192, and 256 bits. Secure keys for use with the XTS cipher mode can only use keys of 128 or 256 bits. @@ -147,7 +147,7 @@ The default is 256 bits. Generates a secure AES key for the XTS cipher mode. A secure AES key for the XTS cipher mode consist of two concatenated secure keys. .TP -.BR \-c ", " \-\-clearkey \fIclear\-key\-file\fP +.BR \-c ", " \-\-clearkey\~\fIclear\-key\-file\fP Specifies a file path that contains the clear AES key in binary form. If option \fB\-\-keybits\fP is omitted, the size of the specified file determines the size of the AES key. If option \fB\-\-keybits\fP @@ -165,7 +165,7 @@ master key in the CURRENT register with the master key in the NEW register. Re-enciphers a secure AES key that is currently enciphered with the master key in the OLD register with the master key in the CURRENT register. .TP -.BR \-f ", " \-\-output \fIoutput\-file\fP +.BR \-f ", " \-\-output\~\fIoutput\-file\fP Specifies the name of the output file to which the re-enciphered secure key is written. If this option is omitted, the re-enciphered secure key is replaced in the file that currently contains the secure key.