--app-dfnum, -anum
Specifies the DF to operate in
--create-key-filesarg, -carg
Creates new RSA key files for arg keys
--create-pin-filesid, -Pid
Creates new PIN file for CHVid--exponentexp, -eexp
Specifies the RSA exponent, exp, to use in key generation. The default value is 3.
--generate-key, -g
Generate a new RSA key pair
--key-numnum, -knum
Specifies the key number to operate on. The default is key number 1.
--list-keys, -l
Lists all keys stored in a public key file
--modulus-lengthlength, -mlength
Specifies the modulus length to use in key generation. The default value is 1024.
--prkey-fileid, -pid
Specifies the private key file id, id, to use
--pubkey-fileid, -uid
Specifies the public key file id, id, to use
--read-key, -R
Reads a public key from the card, allowing the user to extract and store or use the public key
--readerarg, -rarg
Number of the reader to use. By default, the first reader with a present card is used. If arg is an
ATR, the reader with a matching card will be chosen.
--verbose, -v
Causes cryptoflex-tool to be more verbose. Specify this flag several times to enable debug output in
the opensc library.
--verify-pin, -V
Verifies CHV1 before issuing commands
--wait, -w
Causes cryptoflex-tool to wait for a card insertion.