cryptsetup luksDump <LUKS device>


tangd-update.path
tangd.socket


# jose gen -t '{"alg":"ES256"}' -o /var/db/tang/sig.jwk
# jose gen -t '{"kty":"EC","crv":"P-256", "key_ops":["deriveKey"]}' -o /var/db/tang/exc.jwk