The text d612b3ce090b, as Debian 13 (Trixie) shipped it.
Encrypts using a TPM2.0 chip binding policy
clevis-encrypt-tpm2(1) on Linux now