The text b379fd99e098, as Debian 10 (Buster) shipped it.
Encrypts using a TPM2.0 chip binding policy
clevis-encrypt-tpm2(1) on Linux now