cryptsetup luksDump tangd-update.path tangd.socket # jose gen -t '{"alg":"ES256"}' -o /var/db/tang/sig.jwk # jose gen -t '{"kty":"EC","crv":"P-256", "key_ops":["deriveKey"]}' -o /var/db/tang/exc.jwk