From 5924eab96e14d72e10c83a8340925e8cb5da077f Mon Sep 17 00:00:00 2001
From: fuldeka <260289618+fuldeka@users.noreply.github.com>
Date: Sat, 4 Jul 2026 00:02:18 +0200
Subject: [PATCH] shell-completion: add new Argon2id TPM2 parameters for
 systemd-cryptenroll

---
 shell-completion/bash/systemd-cryptenroll | 6 +++++-
 shell-completion/zsh/_systemd-cryptenroll | 6 +++++-
 2 files changed, 10 insertions(+), 2 deletions(-)

diff --git a/shell-completion/bash/systemd-cryptenroll b/shell-completion/bash/systemd-cryptenroll
index a24d9978028..1c8bfee1026 100644
--- a/shell-completion/bash/systemd-cryptenroll
+++ b/shell-completion/bash/systemd-cryptenroll
@@ -62,6 +62,10 @@ _systemd_cryptenroll() {
                --tpm2-device
                --tpm2-device-key
                --tpm2-seal-key-handle
+               --tpm2-argon2id-memory
+               --tpm2-argon2id-iter-time
+               --tpm2-argon2id-iterations
+               --tpm2-argon2id-parallelism
                --tpm2-pcrs
                --tpm2-public-key
                --tpm2-public-key-pcrs
@@ -95,7 +99,7 @@ _systemd_cryptenroll() {
                 comps="auto list $(__get_fido2_devices)"
                 ;;
             --fido2-parameters-in-header|--fido2-with-client-pin|--fido2-with-user-presence|--fido2-with-user-verification|--tpm2-with-pin)
-                comps='yes no'
+                comps='yes no direct'
                 ;;
             --tpm2-device)
                 comps="auto list $(__get_tpm2_devices)"
diff --git a/shell-completion/zsh/_systemd-cryptenroll b/shell-completion/zsh/_systemd-cryptenroll
index e41b67ffdcc..87b701e2313 100644
--- a/shell-completion/zsh/_systemd-cryptenroll
+++ b/shell-completion/zsh/_systemd-cryptenroll
@@ -65,10 +65,14 @@ _arguments -s \
     "($enroll)--tpm2-device=[Enroll a TPM2 device or list them]:TPM2 device:_systemd-cryptenroll_tpm2_device auto list" \
     "($enroll)--tpm2-device-key=[Enroll a TPM2 device using its public key]:public key file:_files" \
     '--tpm2-seal-key-handle=[Specify handle of key to use for sealing]:handle:' \
+    '--tpm2-argon2id-memory=[Argon2id memory cost]:memory (bytes):' \
+    '--tpm2-argon2id-iter-time=[Target time for Argon2id benchmark]:time (s):' \
+    '--tpm2-argon2id-iterations=[Argon2id iterations]:iterations:' \
+    '--tpm2-argon2id-parallelism=[Argon2id parallelism]:threads:' \
     '--tpm2-pcrs=[Specify TPM2 PCRs to seal against]:PCRs:' \
     '--tpm2-public-key=[Enroll signed TPM2 PCR policy against PEM public key]:public key file:_files' \
     '--tpm2-public-key-pcrs=[Enroll signed TPM2 PCR policy for specified TPM2 PCRs]:PCRs:' \
     '--tpm2-signature=[Validate public key enrollment works with JSON signature file]:signature file:_files' \
     '--tpm2-pcrlock=[Specify pcrlock policy to lock against]:pcrlock file:_files' \
-    '--tpm2-with-pin=[Whether to require entering a PIN to unlock the volume]:boolean:(yes no)' \
+    '--tpm2-with-pin=[Whether to require entering a PIN to unlock the volume]:mode:(yes no direct)' \
     '*::block device:_systemd-cryptenroll_devices'
-- 
2.47.3