Diff of the two buildlogs:

--
--- b1/build.log	2025-01-20 15:46:09.062307292 +0000
+++ b2/build.log	2025-01-20 15:53:53.165561175 +0000
@@ -1,6 +1,6 @@
 I: pbuilder: network access will be disabled during build
-I: Current time: Mon Jan 20 03:42:11 -12 2025
-I: pbuilder-time-stamp: 1737387731
+I: Current time: Tue Jan 21 05:46:25 +14 2025
+I: pbuilder-time-stamp: 1737387985
 I: Building the build Environment
 I: extracting base tarball [/var/cache/pbuilder/trixie-reproducible-base.tgz]
 I: copying local configuration
@@ -29,52 +29,84 @@
 dpkg-source: info: applying 0006-Answer-CKA_LABEL-attribute-request-with-dummy-value.patch
 I: Not using root during the build.
 I: Installing the build-deps
-I: user script /srv/workspace/pbuilder/30780/tmp/hooks/D02_print_environment starting
+I: user script /srv/workspace/pbuilder/10233/tmp/hooks/D01_modify_environment starting
+debug: Running on virt64a.
+I: Changing host+domainname to test build reproducibility
+I: Adding a custom variable just for the fun of it...
+I: Changing /bin/sh to bash
+'/bin/sh' -> '/bin/bash'
+lrwxrwxrwx 1 root root 9 Jan 20 15:46 /bin/sh -> /bin/bash
+I: Setting pbuilder2's login shell to /bin/bash
+I: Setting pbuilder2's GECOS to second user,second room,second work-phone,second home-phone,second other
+I: user script /srv/workspace/pbuilder/10233/tmp/hooks/D01_modify_environment finished
+I: user script /srv/workspace/pbuilder/10233/tmp/hooks/D02_print_environment starting
 I: set
-  BUILDDIR='/build/reproducible-path'
-  BUILDUSERGECOS='first user,first room,first work-phone,first home-phone,first other'
-  BUILDUSERNAME='pbuilder1'
-  BUILD_ARCH='armhf'
-  DEBIAN_FRONTEND='noninteractive'
-  DEB_BUILD_OPTIONS='buildinfo=+all reproducible=+all parallel=3 '
-  DISTRIBUTION='trixie'
-  HOME='/root'
-  HOST_ARCH='armhf'
+  BASH=/bin/sh
+  BASHOPTS=checkwinsize:cmdhist:complete_fullquote:extquote:force_fignore:globasciiranges:globskipdots:hostcomplete:interactive_comments:patsub_replacement:progcomp:promptvars:sourcepath
+  BASH_ALIASES=()
+  BASH_ARGC=()
+  BASH_ARGV=()
+  BASH_CMDS=()
+  BASH_LINENO=([0]="12" [1]="0")
+  BASH_LOADABLES_PATH=/usr/local/lib/bash:/usr/lib/bash:/opt/local/lib/bash:/usr/pkg/lib/bash:/opt/pkg/lib/bash:.
+  BASH_SOURCE=([0]="/tmp/hooks/D02_print_environment" [1]="/tmp/hooks/D02_print_environment")
+  BASH_VERSINFO=([0]="5" [1]="2" [2]="37" [3]="1" [4]="release" [5]="arm-unknown-linux-gnueabihf")
+  BASH_VERSION='5.2.37(1)-release'
+  BUILDDIR=/build/reproducible-path
+  BUILDUSERGECOS='second user,second room,second work-phone,second home-phone,second other'
+  BUILDUSERNAME=pbuilder2
+  BUILD_ARCH=armhf
+  DEBIAN_FRONTEND=noninteractive
+  DEB_BUILD_OPTIONS='buildinfo=+all reproducible=+all parallel=4 '
+  DIRSTACK=()
+  DISTRIBUTION=trixie
+  EUID=0
+  FUNCNAME=([0]="Echo" [1]="main")
+  GROUPS=()
+  HOME=/root
+  HOSTNAME=i-capture-the-hostname
+  HOSTTYPE=arm
+  HOST_ARCH=armhf
   IFS=' 	
   '
-  INVOCATION_ID='764d9c4407f343f5ac507c81864975b3'
-  LANG='C'
-  LANGUAGE='en_US:en'
-  LC_ALL='C'
-  MAIL='/var/mail/root'
-  OPTIND='1'
-  PATH='/usr/sbin:/usr/bin:/sbin:/bin:/usr/games'
-  PBCURRENTCOMMANDLINEOPERATION='build'
-  PBUILDER_OPERATION='build'
-  PBUILDER_PKGDATADIR='/usr/share/pbuilder'
-  PBUILDER_PKGLIBDIR='/usr/lib/pbuilder'
-  PBUILDER_SYSCONFDIR='/etc'
-  PPID='30780'
-  PS1='# '
-  PS2='> '
+  INVOCATION_ID=4bc581e376a54b1684d0f9c230b6c703
+  LANG=C
+  LANGUAGE=it_CH:it
+  LC_ALL=C
+  MACHTYPE=arm-unknown-linux-gnueabihf
+  MAIL=/var/mail/root
+  OPTERR=1
+  OPTIND=1
+  OSTYPE=linux-gnueabihf
+  PATH=/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path
+  PBCURRENTCOMMANDLINEOPERATION=build
+  PBUILDER_OPERATION=build
+  PBUILDER_PKGDATADIR=/usr/share/pbuilder
+  PBUILDER_PKGLIBDIR=/usr/lib/pbuilder
+  PBUILDER_SYSCONFDIR=/etc
+  PIPESTATUS=([0]="0")
+  POSIXLY_CORRECT=y
+  PPID=10233
   PS4='+ '
-  PWD='/'
-  SHELL='/bin/bash'
-  SHLVL='2'
-  SUDO_COMMAND='/usr/bin/timeout -k 18.1h 18h /usr/bin/ionice -c 3 /usr/bin/nice /usr/sbin/pbuilder --build --configfile /srv/reproducible-results/rbuild-debian/r-b-build.deEwsfQh/pbuilderrc_XOdQ --distribution trixie --hookdir /etc/pbuilder/first-build-hooks --debbuildopts -b --basetgz /var/cache/pbuilder/trixie-reproducible-base.tgz --buildresult /srv/reproducible-results/rbuild-debian/r-b-build.deEwsfQh/b1 --logfile b1/build.log simple-tpm-pk11_0.06-5.dsc'
-  SUDO_GID='110'
-  SUDO_UID='103'
-  SUDO_USER='jenkins'
-  TERM='unknown'
-  TZ='/usr/share/zoneinfo/Etc/GMT+12'
-  USER='root'
-  _='/usr/bin/systemd-run'
-  http_proxy='http://10.0.0.15:3142/'
+  PWD=/
+  SHELL=/bin/bash
+  SHELLOPTS=braceexpand:errexit:hashall:interactive-comments:posix
+  SHLVL=3
+  SUDO_COMMAND='/usr/bin/timeout -k 24.1h 24h /usr/bin/ionice -c 3 /usr/bin/nice -n 11 /usr/bin/unshare --uts -- /usr/sbin/pbuilder --build --configfile /srv/reproducible-results/rbuild-debian/r-b-build.deEwsfQh/pbuilderrc_apPn --distribution trixie --hookdir /etc/pbuilder/rebuild-hooks --debbuildopts -b --basetgz /var/cache/pbuilder/trixie-reproducible-base.tgz --buildresult /srv/reproducible-results/rbuild-debian/r-b-build.deEwsfQh/b2 --logfile b2/build.log simple-tpm-pk11_0.06-5.dsc'
+  SUDO_GID=114
+  SUDO_UID=108
+  SUDO_USER=jenkins
+  TERM=unknown
+  TZ=/usr/share/zoneinfo/Etc/GMT-14
+  UID=0
+  USER=root
+  _='I: set'
+  http_proxy=http://10.0.0.15:3142/
 I: uname -a
-  Linux virt32z 6.1.0-30-armmp-lpae #1 SMP Debian 6.1.124-1 (2025-01-12) armv7l GNU/Linux
+  Linux i-capture-the-hostname 6.1.0-30-arm64 #1 SMP Debian 6.1.124-1 (2025-01-12) aarch64 GNU/Linux
 I: ls -l /bin
   lrwxrwxrwx 1 root root 7 Nov 22 14:40 /bin -> usr/bin
-I: user script /srv/workspace/pbuilder/30780/tmp/hooks/D02_print_environment finished
+I: user script /srv/workspace/pbuilder/10233/tmp/hooks/D02_print_environment finished
  -> Attempting to satisfy build-dependencies
  -> Creating pbuilder-satisfydepends-dummy package
 Package: pbuilder-satisfydepends-dummy
@@ -158,7 +190,7 @@
 Get: 38 http://deb.debian.org/debian trixie/main armhf libopencryptoki-dev armhf 3.23.0+dfsg-0.3+b2 [33.5 kB]
 Get: 39 http://deb.debian.org/debian trixie/main armhf libssl-dev armhf 3.4.0-2 [2431 kB]
 Get: 40 http://deb.debian.org/debian trixie/main armhf libtspi-dev armhf 0.3.15-0.4 [630 kB]
-Fetched 24.4 MB in 5s (4746 kB/s)
+Fetched 24.4 MB in 1s (22.6 MB/s)
 Preconfiguring packages ...
 Selecting previously unselected package sensible-utils.
 (Reading database ... 
(Reading database ... 5%
(Reading database ... 10%
(Reading database ... 15%
(Reading database ... 20%
(Reading database ... 25%
(Reading database ... 30%
(Reading database ... 35%
(Reading database ... 40%
(Reading database ... 45%
(Reading database ... 50%
(Reading database ... 55%
(Reading database ... 60%
(Reading database ... 65%
(Reading database ... 70%
(Reading database ... 75%
(Reading database ... 80%
(Reading database ... 85%
(Reading database ... 90%
(Reading database ... 95%
(Reading database ... 100%
(Reading database ... 19569 files and directories currently installed.)
@@ -333,7 +365,11 @@
 Building tag database...
  -> Finished parsing the build-deps
 I: Building the package
-I: Running cd /build/reproducible-path/simple-tpm-pk11-0.06/ && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games" HOME="/nonexistent/first-build" dpkg-buildpackage -us -uc -b && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games" HOME="/nonexistent/first-build" dpkg-genchanges -S  > ../simple-tpm-pk11_0.06-5_source.changes
+I: user script /srv/workspace/pbuilder/10233/tmp/hooks/A99_set_merged_usr starting
+Not re-configuring usrmerge for trixie
+I: user script /srv/workspace/pbuilder/10233/tmp/hooks/A99_set_merged_usr finished
+hostname: Name or service not known
+I: Running cd /build/reproducible-path/simple-tpm-pk11-0.06/ && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path" HOME="/nonexistent/second-build" dpkg-buildpackage -us -uc -b && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path" HOME="/nonexistent/second-build" dpkg-genchanges -S  > ../simple-tpm-pk11_0.06-5_source.changes
 dpkg-buildpackage: info: source package simple-tpm-pk11
 dpkg-buildpackage: info: source version 0.06-5
 dpkg-buildpackage: info: source distribution unstable
@@ -497,7 +533,7 @@
   Linker.........: /usr/bin/ld -Wl,-z,relro -Wl,-z,now -lcrypto -ltspi 
 
    dh_auto_build
-	make -j3
+	make -j4
 make[1]: Entering directory '/build/reproducible-path/simple-tpm-pk11-0.06'
 make  all-recursive
 make[2]: Entering directory '/build/reproducible-path/simple-tpm-pk11-0.06'
@@ -510,6 +546,7 @@
 g++ -DHAVE_CONFIG_H -I.   -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -D_TIME_BITS=64 -Wdate-time -D_FORTIFY_SOURCE=2  -std=gnu++0x -Wall -g -O2 -ffile-prefix-map=/build/reproducible-path/simple-tpm-pk11-0.06=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -std=gnu++14 -c -o src/common.o src/common.cc
 g++ -DHAVE_CONFIG_H -I.   -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -D_TIME_BITS=64 -Wdate-time -D_FORTIFY_SOURCE=2  -std=gnu++0x -Wall -g -O2 -ffile-prefix-map=/build/reproducible-path/simple-tpm-pk11-0.06=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -std=gnu++14 -c -o src/tspiwrap.o src/tspiwrap.cc
 g++ -DHAVE_CONFIG_H -I.   -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -D_TIME_BITS=64 -Wdate-time -D_FORTIFY_SOURCE=2  -std=gnu++0x -Wall -g -O2 -ffile-prefix-map=/build/reproducible-path/simple-tpm-pk11-0.06=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -std=gnu++14 -c -o src/wrap_main.o src/wrap_main.cc
+g++ -DHAVE_CONFIG_H -I.   -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -D_TIME_BITS=64 -Wdate-time -D_FORTIFY_SOURCE=2  -std=gnu++0x -Wall -g -O2 -ffile-prefix-map=/build/reproducible-path/simple-tpm-pk11-0.06=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -std=gnu++14 -c -o src/sign.o src/sign.cc
 src/common.cc:158:40: warning: 'RSA* RSA_new()' is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
   158 | typedef AutoFree<RSA, RSA_new, RSA_free> RSAWrap;
       |                                        ^
@@ -523,6 +560,7 @@
 /usr/include/openssl/rsa.h:304:28: note: declared here
   304 | OSSL_DEPRECATEDIN_3_0 void RSA_free(RSA *r);
       |                            ^~~~~~~~
+g++ -DHAVE_CONFIG_H -I.   -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -D_TIME_BITS=64 -Wdate-time -D_FORTIFY_SOURCE=2  -std=gnu++0x -Wall -g -O2 -ffile-prefix-map=/build/reproducible-path/simple-tpm-pk11-0.06=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -std=gnu++14 -c -o src/exfiltrate.o src/exfiltrate.cc
 src/common.cc: In function 'stpm::SoftwareKey stpm::generate_software_key(int)':
 src/common.cc:381:27: warning: 'int RSA_generate_key_ex(RSA*, int, BIGNUM*, BN_GENCB*)' is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
   381 |   if (!RSA_generate_key_ex(rsa.get(), bits, f4.get(), NULL)) {
@@ -589,23 +627,17 @@
   137 |       throw;
       |       ^~~~~
 src/common.cc:137:7: note: in C++11 destructors default to 'noexcept'
-g++ -DHAVE_CONFIG_H -I.   -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -D_TIME_BITS=64 -Wdate-time -D_FORTIFY_SOURCE=2  -std=gnu++0x -Wall -g -O2 -ffile-prefix-map=/build/reproducible-path/simple-tpm-pk11-0.06=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -std=gnu++14 -c -o src/sign.o src/sign.cc
-g++ -DHAVE_CONFIG_H -I.   -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -D_TIME_BITS=64 -Wdate-time -D_FORTIFY_SOURCE=2  -std=gnu++0x -Wall -g -O2 -ffile-prefix-map=/build/reproducible-path/simple-tpm-pk11-0.06=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -std=gnu++14 -c -o src/exfiltrate.o src/exfiltrate.cc
 g++ -DHAVE_CONFIG_H -I.   -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -D_TIME_BITS=64 -Wdate-time -D_FORTIFY_SOURCE=2  -std=gnu++0x -Wall -g -O2 -ffile-prefix-map=/build/reproducible-path/simple-tpm-pk11-0.06=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -std=gnu++14 -c -o src/verify.o src/verify.cc
-/bin/bash ./libtool  --tag=CXX   --mode=compile g++ -DHAVE_CONFIG_H -I.   -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -D_TIME_BITS=64 -Wdate-time -D_FORTIFY_SOURCE=2  -std=gnu++0x -Wall -g -O2 -ffile-prefix-map=/build/reproducible-path/simple-tpm-pk11-0.06=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -std=gnu++14 -c -o src/libsimple_tpm_pk11_la-pk11.lo `test -f 'src/pk11.cc' || echo './'`src/pk11.cc
+/bin/sh ./libtool  --tag=CXX   --mode=compile g++ -DHAVE_CONFIG_H -I.   -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -D_TIME_BITS=64 -Wdate-time -D_FORTIFY_SOURCE=2  -std=gnu++0x -Wall -g -O2 -ffile-prefix-map=/build/reproducible-path/simple-tpm-pk11-0.06=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -std=gnu++14 -c -o src/libsimple_tpm_pk11_la-pk11.lo `test -f 'src/pk11.cc' || echo './'`src/pk11.cc
+/bin/sh ./libtool  --tag=CXX   --mode=compile g++ -DHAVE_CONFIG_H -I.   -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -D_TIME_BITS=64 -Wdate-time -D_FORTIFY_SOURCE=2  -std=gnu++0x -Wall -g -O2 -ffile-prefix-map=/build/reproducible-path/simple-tpm-pk11-0.06=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -std=gnu++14 -c -o src/libsimple_tpm_pk11_la-session.lo `test -f 'src/session.cc' || echo './'`src/session.cc
 libtool: compile:  g++ -DHAVE_CONFIG_H -I. -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -D_TIME_BITS=64 -Wdate-time -D_FORTIFY_SOURCE=2 -std=gnu++0x -Wall -g -O2 -ffile-prefix-map=/build/reproducible-path/simple-tpm-pk11-0.06=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -std=gnu++14 -c src/pk11.cc  -fPIC -DPIC -o src/.libs/libsimple_tpm_pk11_la-pk11.o
-/bin/bash ./libtool  --tag=CXX   --mode=compile g++ -DHAVE_CONFIG_H -I.   -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -D_TIME_BITS=64 -Wdate-time -D_FORTIFY_SOURCE=2  -std=gnu++0x -Wall -g -O2 -ffile-prefix-map=/build/reproducible-path/simple-tpm-pk11-0.06=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -std=gnu++14 -c -o src/libsimple_tpm_pk11_la-session.lo `test -f 'src/session.cc' || echo './'`src/session.cc
 libtool: compile:  g++ -DHAVE_CONFIG_H -I. -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -D_TIME_BITS=64 -Wdate-time -D_FORTIFY_SOURCE=2 -std=gnu++0x -Wall -g -O2 -ffile-prefix-map=/build/reproducible-path/simple-tpm-pk11-0.06=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -std=gnu++14 -c src/session.cc  -fPIC -DPIC -o src/.libs/libsimple_tpm_pk11_la-session.o
-/bin/bash ./libtool  --tag=CXX   --mode=compile g++ -DHAVE_CONFIG_H -I.   -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -D_TIME_BITS=64 -Wdate-time -D_FORTIFY_SOURCE=2  -std=gnu++0x -Wall -g -O2 -ffile-prefix-map=/build/reproducible-path/simple-tpm-pk11-0.06=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -std=gnu++14 -c -o src/libsimple_tpm_pk11_la-tspiwrap.lo `test -f 'src/tspiwrap.cc' || echo './'`src/tspiwrap.cc
-libtool: compile:  g++ -DHAVE_CONFIG_H -I. -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -D_TIME_BITS=64 -Wdate-time -D_FORTIFY_SOURCE=2 -std=gnu++0x -Wall -g -O2 -ffile-prefix-map=/build/reproducible-path/simple-tpm-pk11-0.06=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -std=gnu++14 -c src/pk11.cc -o src/libsimple_tpm_pk11_la-pk11.o >/dev/null 2>&1
+/bin/sh ./libtool  --tag=CXX   --mode=compile g++ -DHAVE_CONFIG_H -I.   -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -D_TIME_BITS=64 -Wdate-time -D_FORTIFY_SOURCE=2  -std=gnu++0x -Wall -g -O2 -ffile-prefix-map=/build/reproducible-path/simple-tpm-pk11-0.06=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -std=gnu++14 -c -o src/libsimple_tpm_pk11_la-tspiwrap.lo `test -f 'src/tspiwrap.cc' || echo './'`src/tspiwrap.cc
 libtool: compile:  g++ -DHAVE_CONFIG_H -I. -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -D_TIME_BITS=64 -Wdate-time -D_FORTIFY_SOURCE=2 -std=gnu++0x -Wall -g -O2 -ffile-prefix-map=/build/reproducible-path/simple-tpm-pk11-0.06=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -std=gnu++14 -c src/tspiwrap.cc  -fPIC -DPIC -o src/.libs/libsimple_tpm_pk11_la-tspiwrap.o
-libtool: compile:  g++ -DHAVE_CONFIG_H -I. -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -D_TIME_BITS=64 -Wdate-time -D_FORTIFY_SOURCE=2 -std=gnu++0x -Wall -g -O2 -ffile-prefix-map=/build/reproducible-path/simple-tpm-pk11-0.06=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -std=gnu++14 -c src/session.cc -o src/libsimple_tpm_pk11_la-session.o >/dev/null 2>&1
 libtool: compile:  g++ -DHAVE_CONFIG_H -I. -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -D_TIME_BITS=64 -Wdate-time -D_FORTIFY_SOURCE=2 -std=gnu++0x -Wall -g -O2 -ffile-prefix-map=/build/reproducible-path/simple-tpm-pk11-0.06=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -std=gnu++14 -c src/tspiwrap.cc -o src/libsimple_tpm_pk11_la-tspiwrap.o >/dev/null 2>&1
-/bin/bash ./libtool  --tag=CXX   --mode=compile g++ -DHAVE_CONFIG_H -I.   -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -D_TIME_BITS=64 -Wdate-time -D_FORTIFY_SOURCE=2  -std=gnu++0x -Wall -g -O2 -ffile-prefix-map=/build/reproducible-path/simple-tpm-pk11-0.06=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -std=gnu++14 -c -o src/libsimple_tpm_pk11_la-common.lo `test -f 'src/common.cc' || echo './'`src/common.cc
+/bin/sh ./libtool  --tag=CXX   --mode=compile g++ -DHAVE_CONFIG_H -I.   -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -D_TIME_BITS=64 -Wdate-time -D_FORTIFY_SOURCE=2  -std=gnu++0x -Wall -g -O2 -ffile-prefix-map=/build/reproducible-path/simple-tpm-pk11-0.06=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -std=gnu++14 -c -o src/libsimple_tpm_pk11_la-common.lo `test -f 'src/common.cc' || echo './'`src/common.cc
 libtool: compile:  g++ -DHAVE_CONFIG_H -I. -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -D_TIME_BITS=64 -Wdate-time -D_FORTIFY_SOURCE=2 -std=gnu++0x -Wall -g -O2 -ffile-prefix-map=/build/reproducible-path/simple-tpm-pk11-0.06=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -std=gnu++14 -c src/common.cc  -fPIC -DPIC -o src/.libs/libsimple_tpm_pk11_la-common.o
-/bin/bash ./libtool  --tag=CXX   --mode=link g++  -std=gnu++0x -Wall -g -O2 -ffile-prefix-map=/build/reproducible-path/simple-tpm-pk11-0.06=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -std=gnu++14  -Wl,-z,relro -Wl,-z,now -o stpm-keygen src/keygen.o src/common.o src/tspiwrap.o src/wrap_main.o  -lcrypto -ltspi 
-/bin/bash ./libtool  --tag=CXX   --mode=link g++  -std=gnu++0x -Wall -g -O2 -ffile-prefix-map=/build/reproducible-path/simple-tpm-pk11-0.06=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -std=gnu++14  -Wl,-z,relro -Wl,-z,now -o stpm-sign src/wrap_main.o src/common.o src/tspiwrap.o src/sign.o  -lcrypto -ltspi 
-libtool: link: g++ -std=gnu++0x -Wall -g -O2 -ffile-prefix-map=/build/reproducible-path/simple-tpm-pk11-0.06=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -std=gnu++14 -Wl,-z -Wl,relro -Wl,-z -Wl,now -o stpm-keygen src/keygen.o src/common.o src/tspiwrap.o src/wrap_main.o  -lcrypto -ltspi
+libtool: compile:  g++ -DHAVE_CONFIG_H -I. -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -D_TIME_BITS=64 -Wdate-time -D_FORTIFY_SOURCE=2 -std=gnu++0x -Wall -g -O2 -ffile-prefix-map=/build/reproducible-path/simple-tpm-pk11-0.06=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -std=gnu++14 -c src/session.cc -o src/libsimple_tpm_pk11_la-session.o >/dev/null 2>&1
 src/common.cc:158:40: warning: 'RSA* RSA_new()' is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
   158 | typedef AutoFree<RSA, RSA_new, RSA_free> RSAWrap;
       |                                        ^
@@ -638,8 +670,6 @@
 /usr/include/openssl/rsa.h:231:28: note: declared here
   231 | OSSL_DEPRECATEDIN_3_0 void RSA_get0_factors(const RSA *r,
       |                            ^~~~~~~~~~~~~~~~
-libtool: link: g++ -std=gnu++0x -Wall -g -O2 -ffile-prefix-map=/build/reproducible-path/simple-tpm-pk11-0.06=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -std=gnu++14 -Wl,-z -Wl,relro -Wl,-z -Wl,now -o stpm-sign src/wrap_main.o src/common.o src/tspiwrap.o src/sign.o  -lcrypto -ltspi
-/bin/bash ./libtool  --tag=CXX   --mode=link g++  -std=gnu++0x -Wall -g -O2 -ffile-prefix-map=/build/reproducible-path/simple-tpm-pk11-0.06=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -std=gnu++14  -Wl,-z,relro -Wl,-z,now -o stpm-exfiltrate src/wrap_main.o src/common.o src/tspiwrap.o src/exfiltrate.o  -lcrypto -ltspi 
 src/common.cc: In function 'std::string stpm::public_decrypt(const Key&, const std::string&)':
 src/common.cc:806:20: warning: 'int RSA_set0_key(RSA*, BIGNUM*, BIGNUM*, BIGNUM*)' is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
   806 |   if (!RSA_set0_key(rsa.get(), string2bn(key.modulus), string2bn(key.exponent),
@@ -687,11 +717,17 @@
   137 |       throw;
       |       ^~~~~
 src/common.cc:137:7: note: in C++11 destructors default to 'noexcept'
-/bin/bash ./libtool  --tag=CXX   --mode=link g++  -std=gnu++0x -Wall -g -O2 -ffile-prefix-map=/build/reproducible-path/simple-tpm-pk11-0.06=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -std=gnu++14  -Wl,-z,relro -Wl,-z,now -o stpm-verify src/wrap_main.o src/common.o src/tspiwrap.o src/verify.o  -lcrypto -ltspi 
+libtool: compile:  g++ -DHAVE_CONFIG_H -I. -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -D_TIME_BITS=64 -Wdate-time -D_FORTIFY_SOURCE=2 -std=gnu++0x -Wall -g -O2 -ffile-prefix-map=/build/reproducible-path/simple-tpm-pk11-0.06=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -std=gnu++14 -c src/pk11.cc -o src/libsimple_tpm_pk11_la-pk11.o >/dev/null 2>&1
+/bin/sh ./libtool  --tag=CXX   --mode=link g++  -std=gnu++0x -Wall -g -O2 -ffile-prefix-map=/build/reproducible-path/simple-tpm-pk11-0.06=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -std=gnu++14  -Wl,-z,relro -Wl,-z,now -o stpm-keygen src/keygen.o src/common.o src/tspiwrap.o src/wrap_main.o  -lcrypto -ltspi 
+libtool: link: g++ -std=gnu++0x -Wall -g -O2 -ffile-prefix-map=/build/reproducible-path/simple-tpm-pk11-0.06=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -std=gnu++14 -Wl,-z -Wl,relro -Wl,-z -Wl,now -o stpm-keygen src/keygen.o src/common.o src/tspiwrap.o src/wrap_main.o  -lcrypto -ltspi
+/bin/sh ./libtool  --tag=CXX   --mode=link g++  -std=gnu++0x -Wall -g -O2 -ffile-prefix-map=/build/reproducible-path/simple-tpm-pk11-0.06=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -std=gnu++14  -Wl,-z,relro -Wl,-z,now -o stpm-sign src/wrap_main.o src/common.o src/tspiwrap.o src/sign.o  -lcrypto -ltspi 
+/bin/sh ./libtool  --tag=CXX   --mode=link g++  -std=gnu++0x -Wall -g -O2 -ffile-prefix-map=/build/reproducible-path/simple-tpm-pk11-0.06=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -std=gnu++14  -Wl,-z,relro -Wl,-z,now -o stpm-exfiltrate src/wrap_main.o src/common.o src/tspiwrap.o src/exfiltrate.o  -lcrypto -ltspi 
+libtool: link: g++ -std=gnu++0x -Wall -g -O2 -ffile-prefix-map=/build/reproducible-path/simple-tpm-pk11-0.06=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -std=gnu++14 -Wl,-z -Wl,relro -Wl,-z -Wl,now -o stpm-sign src/wrap_main.o src/common.o src/tspiwrap.o src/sign.o  -lcrypto -ltspi
+/bin/sh ./libtool  --tag=CXX   --mode=link g++  -std=gnu++0x -Wall -g -O2 -ffile-prefix-map=/build/reproducible-path/simple-tpm-pk11-0.06=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -std=gnu++14  -Wl,-z,relro -Wl,-z,now -o stpm-verify src/wrap_main.o src/common.o src/tspiwrap.o src/verify.o  -lcrypto -ltspi 
 libtool: link: g++ -std=gnu++0x -Wall -g -O2 -ffile-prefix-map=/build/reproducible-path/simple-tpm-pk11-0.06=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -std=gnu++14 -Wl,-z -Wl,relro -Wl,-z -Wl,now -o stpm-exfiltrate src/wrap_main.o src/common.o src/tspiwrap.o src/exfiltrate.o  -lcrypto -ltspi
 libtool: link: g++ -std=gnu++0x -Wall -g -O2 -ffile-prefix-map=/build/reproducible-path/simple-tpm-pk11-0.06=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -std=gnu++14 -Wl,-z -Wl,relro -Wl,-z -Wl,now -o stpm-verify src/wrap_main.o src/common.o src/tspiwrap.o src/verify.o  -lcrypto -ltspi
 libtool: compile:  g++ -DHAVE_CONFIG_H -I. -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -D_TIME_BITS=64 -Wdate-time -D_FORTIFY_SOURCE=2 -std=gnu++0x -Wall -g -O2 -ffile-prefix-map=/build/reproducible-path/simple-tpm-pk11-0.06=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -std=gnu++14 -c src/common.cc -o src/libsimple_tpm_pk11_la-common.o >/dev/null 2>&1
-/bin/bash ./libtool  --tag=CXX   --mode=link g++  -std=gnu++0x -Wall -g -O2 -ffile-prefix-map=/build/reproducible-path/simple-tpm-pk11-0.06=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -std=gnu++14 -version-info 0:0:0 -Wl,-z,relro -Wl,-z,now -o libsimple-tpm-pk11.la -rpath /usr/lib/arm-linux-gnueabihf src/libsimple_tpm_pk11_la-pk11.lo src/libsimple_tpm_pk11_la-session.lo src/libsimple_tpm_pk11_la-tspiwrap.lo src/libsimple_tpm_pk11_la-common.lo  -lcrypto -ltspi 
+/bin/sh ./libtool  --tag=CXX   --mode=link g++  -std=gnu++0x -Wall -g -O2 -ffile-prefix-map=/build/reproducible-path/simple-tpm-pk11-0.06=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -std=gnu++14 -version-info 0:0:0 -Wl,-z,relro -Wl,-z,now -o libsimple-tpm-pk11.la -rpath /usr/lib/arm-linux-gnueabihf src/libsimple_tpm_pk11_la-pk11.lo src/libsimple_tpm_pk11_la-session.lo src/libsimple_tpm_pk11_la-tspiwrap.lo src/libsimple_tpm_pk11_la-common.lo  -lcrypto -ltspi 
 libtool: link: g++  -fPIC -DPIC -shared -nostdlib /usr/lib/gcc/arm-linux-gnueabihf/14/../../../arm-linux-gnueabihf/crti.o /usr/lib/gcc/arm-linux-gnueabihf/14/crtbeginS.o  src/.libs/libsimple_tpm_pk11_la-pk11.o src/.libs/libsimple_tpm_pk11_la-session.o src/.libs/libsimple_tpm_pk11_la-tspiwrap.o src/.libs/libsimple_tpm_pk11_la-common.o   -lcrypto -ltspi -L/usr/lib/gcc/arm-linux-gnueabihf/14 -L/usr/lib/gcc/arm-linux-gnueabihf/14/../../../arm-linux-gnueabihf -L/usr/lib/gcc/arm-linux-gnueabihf/14/../../.. -L/lib/arm-linux-gnueabihf -L/usr/lib/arm-linux-gnueabihf -lstdc++ -lm -lc -lgcc_s /usr/lib/gcc/arm-linux-gnueabihf/14/crtendS.o /usr/lib/gcc/arm-linux-gnueabihf/14/../../../arm-linux-gnueabihf/crtn.o  -g -O2 -ffile-prefix-map=/build/reproducible-path/simple-tpm-pk11-0.06=. -fstack-protector-strong -Werror=format-security -Wl,-z -Wl,relro -Wl,-z -Wl,now   -Wl,-soname -Wl,libsimple-tpm-pk11.so.0 -o .libs/libsimple-tpm-pk11.so.0.0.0
 libtool: link: (cd ".libs" && rm -f "libsimple-tpm-pk11.so.0" && ln -s "libsimple-tpm-pk11.so.0.0.0" "libsimple-tpm-pk11.so.0")
 libtool: link: (cd ".libs" && rm -f "libsimple-tpm-pk11.so" && ln -s "libsimple-tpm-pk11.so.0.0.0" "libsimple-tpm-pk11.so")
@@ -702,7 +738,7 @@
 make[2]: Leaving directory '/build/reproducible-path/simple-tpm-pk11-0.06'
 make[1]: Leaving directory '/build/reproducible-path/simple-tpm-pk11-0.06'
    dh_auto_test
-	make -j3 check "TESTSUITEFLAGS=-j3 --verbose" VERBOSE=1
+	make -j4 check "TESTSUITEFLAGS=-j4 --verbose" VERBOSE=1
 make[1]: Entering directory '/build/reproducible-path/simple-tpm-pk11-0.06'
 Making check in doc
 make[2]: Entering directory '/build/reproducible-path/simple-tpm-pk11-0.06/doc'
@@ -714,6 +750,7 @@
 g++ -DHAVE_CONFIG_H -I.   -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -D_TIME_BITS=64 -Wdate-time -D_FORTIFY_SOURCE=2 -I/usr/src/gtest -std=gnu++0x -Wall -g -O2 -ffile-prefix-map=/build/reproducible-path/simple-tpm-pk11-0.06=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -std=gnu++14 -c -o src/stpm_keygen_test-keygen.o `test -f 'src/keygen.cc' || echo './'`src/keygen.cc
 g++ -DHAVE_CONFIG_H -I.   -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -D_TIME_BITS=64 -Wdate-time -D_FORTIFY_SOURCE=2 -I/usr/src/gtest -std=gnu++0x -Wall -g -O2 -ffile-prefix-map=/build/reproducible-path/simple-tpm-pk11-0.06=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -std=gnu++14 -c -o src/stpm_keygen_test-keygen_test.o `test -f 'src/keygen_test.cc' || echo './'`src/keygen_test.cc
 g++ -DHAVE_CONFIG_H -I.   -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -D_TIME_BITS=64 -Wdate-time -D_FORTIFY_SOURCE=2 -I/usr/src/gtest -std=gnu++0x -Wall -g -O2 -ffile-prefix-map=/build/reproducible-path/simple-tpm-pk11-0.06=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -std=gnu++14 -c -o src/stpm_keygen_test-common.o `test -f 'src/common.cc' || echo './'`src/common.cc
+g++ -DHAVE_CONFIG_H -I.   -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -D_TIME_BITS=64 -Wdate-time -D_FORTIFY_SOURCE=2 -I/usr/src/gtest -std=gnu++0x -Wall -g -O2 -ffile-prefix-map=/build/reproducible-path/simple-tpm-pk11-0.06=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -std=gnu++14 -c -o src/stpm_keygen_test-tspiwrap.o `test -f 'src/tspiwrap.cc' || echo './'`src/tspiwrap.cc
 src/common.cc:158:40: warning: 'RSA* RSA_new()' is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
   158 | typedef AutoFree<RSA, RSA_new, RSA_free> RSAWrap;
       |                                        ^
@@ -793,7 +830,6 @@
   137 |       throw;
       |       ^~~~~
 src/common.cc:137:7: note: in C++11 destructors default to 'noexcept'
-g++ -DHAVE_CONFIG_H -I.   -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -D_TIME_BITS=64 -Wdate-time -D_FORTIFY_SOURCE=2 -I/usr/src/gtest -std=gnu++0x -Wall -g -O2 -ffile-prefix-map=/build/reproducible-path/simple-tpm-pk11-0.06=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -std=gnu++14 -c -o src/stpm_keygen_test-tspiwrap.o `test -f 'src/tspiwrap.cc' || echo './'`src/tspiwrap.cc
 g++ -DHAVE_CONFIG_H -I.   -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -D_TIME_BITS=64 -Wdate-time -D_FORTIFY_SOURCE=2 -I/usr/src/gtest -std=gnu++0x -Wall -g -O2 -ffile-prefix-map=/build/reproducible-path/simple-tpm-pk11-0.06=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -std=gnu++14 -c -o src/stpm_keygen_test-fake_tspi.o `test -f 'src/fake_tspi.cc' || echo './'`src/fake_tspi.cc
 g++ -DHAVE_CONFIG_H -I.   -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -D_TIME_BITS=64 -Wdate-time -D_FORTIFY_SOURCE=2 -I/usr/src/gtest -std=gnu++0x -Wall -g -O2 -ffile-prefix-map=/build/reproducible-path/simple-tpm-pk11-0.06=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -std=gnu++14 -c -o src/stpm_keygen_test-libgtest.o `test -f 'src/libgtest.cc' || echo './'`src/libgtest.cc
 g++ -DHAVE_CONFIG_H -I.   -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -D_TIME_BITS=64 -Wdate-time -D_FORTIFY_SOURCE=2 -I/usr/src/gtest -std=gnu++0x -Wall -g -O2 -ffile-prefix-map=/build/reproducible-path/simple-tpm-pk11-0.06=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -std=gnu++14 -c -o src/stpm_sign_test-sign.o `test -f 'src/sign.cc' || echo './'`src/sign.cc
@@ -883,6 +919,7 @@
 g++ -DHAVE_CONFIG_H -I.   -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -D_TIME_BITS=64 -Wdate-time -D_FORTIFY_SOURCE=2 -I/usr/src/gtest -std=gnu++0x -Wall -g -O2 -ffile-prefix-map=/build/reproducible-path/simple-tpm-pk11-0.06=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -std=gnu++14 -c -o src/stpm_sign_test-libgtest.o `test -f 'src/libgtest.cc' || echo './'`src/libgtest.cc
 g++ -DHAVE_CONFIG_H -I.   -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -D_TIME_BITS=64 -Wdate-time -D_FORTIFY_SOURCE=2 -I/usr/src/gtest -std=gnu++0x -Wall -g -O2 -ffile-prefix-map=/build/reproducible-path/simple-tpm-pk11-0.06=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -std=gnu++14 -c -o src/common_test-common_test.o `test -f 'src/common_test.cc' || echo './'`src/common_test.cc
 g++ -DHAVE_CONFIG_H -I.   -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -D_TIME_BITS=64 -Wdate-time -D_FORTIFY_SOURCE=2 -I/usr/src/gtest -std=gnu++0x -Wall -g -O2 -ffile-prefix-map=/build/reproducible-path/simple-tpm-pk11-0.06=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -std=gnu++14 -c -o src/common_test-common.o `test -f 'src/common.cc' || echo './'`src/common.cc
+g++ -DHAVE_CONFIG_H -I.   -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -D_TIME_BITS=64 -Wdate-time -D_FORTIFY_SOURCE=2 -I/usr/src/gtest -std=gnu++0x -Wall -g -O2 -ffile-prefix-map=/build/reproducible-path/simple-tpm-pk11-0.06=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -std=gnu++14 -c -o src/common_test-tspiwrap.o `test -f 'src/tspiwrap.cc' || echo './'`src/tspiwrap.cc
 src/common.cc:158:40: warning: 'RSA* RSA_new()' is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
   158 | typedef AutoFree<RSA, RSA_new, RSA_free> RSAWrap;
       |                                        ^
@@ -962,7 +999,6 @@
   137 |       throw;
       |       ^~~~~
 src/common.cc:137:7: note: in C++11 destructors default to 'noexcept'
-g++ -DHAVE_CONFIG_H -I.   -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -D_TIME_BITS=64 -Wdate-time -D_FORTIFY_SOURCE=2 -I/usr/src/gtest -std=gnu++0x -Wall -g -O2 -ffile-prefix-map=/build/reproducible-path/simple-tpm-pk11-0.06=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -std=gnu++14 -c -o src/common_test-tspiwrap.o `test -f 'src/tspiwrap.cc' || echo './'`src/tspiwrap.cc
 g++ -DHAVE_CONFIG_H -I.   -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -D_TIME_BITS=64 -Wdate-time -D_FORTIFY_SOURCE=2 -I/usr/src/gtest -std=gnu++0x -Wall -g -O2 -ffile-prefix-map=/build/reproducible-path/simple-tpm-pk11-0.06=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -std=gnu++14 -c -o src/common_test-fake_tspi.o `test -f 'src/fake_tspi.cc' || echo './'`src/fake_tspi.cc
 g++ -DHAVE_CONFIG_H -I.   -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -D_TIME_BITS=64 -Wdate-time -D_FORTIFY_SOURCE=2 -I/usr/src/gtest -std=gnu++0x -Wall -g -O2 -ffile-prefix-map=/build/reproducible-path/simple-tpm-pk11-0.06=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -std=gnu++14 -c -o src/common_test-libgtest.o `test -f 'src/libgtest.cc' || echo './'`src/libgtest.cc
 g++ -DHAVE_CONFIG_H -I.   -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -D_TIME_BITS=64 -Wdate-time -D_FORTIFY_SOURCE=2 -I/usr/src/gtest -std=gnu++0x -Wall -g -O2 -ffile-prefix-map=/build/reproducible-path/simple-tpm-pk11-0.06=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -std=gnu++14 -c -o src/pk11_test-pk11_test.o `test -f 'src/pk11_test.cc' || echo './'`src/pk11_test.cc
@@ -1054,7 +1090,6 @@
 g++ -DHAVE_CONFIG_H -I.   -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -D_TIME_BITS=64 -Wdate-time -D_FORTIFY_SOURCE=2 -I/usr/src/gtest -std=gnu++0x -Wall -g -O2 -ffile-prefix-map=/build/reproducible-path/simple-tpm-pk11-0.06=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -std=gnu++14 -c -o src/stpm_verify_test-verify.o `test -f 'src/verify.cc' || echo './'`src/verify.cc
 g++ -DHAVE_CONFIG_H -I.   -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -D_TIME_BITS=64 -Wdate-time -D_FORTIFY_SOURCE=2 -I/usr/src/gtest -std=gnu++0x -Wall -g -O2 -ffile-prefix-map=/build/reproducible-path/simple-tpm-pk11-0.06=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -std=gnu++14 -c -o src/stpm_verify_test-verify_test.o `test -f 'src/verify_test.cc' || echo './'`src/verify_test.cc
 g++ -DHAVE_CONFIG_H -I.   -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -D_TIME_BITS=64 -Wdate-time -D_FORTIFY_SOURCE=2 -I/usr/src/gtest -std=gnu++0x -Wall -g -O2 -ffile-prefix-map=/build/reproducible-path/simple-tpm-pk11-0.06=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -std=gnu++14 -c -o src/stpm_verify_test-common.o `test -f 'src/common.cc' || echo './'`src/common.cc
-g++ -DHAVE_CONFIG_H -I.   -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -D_TIME_BITS=64 -Wdate-time -D_FORTIFY_SOURCE=2 -I/usr/src/gtest -std=gnu++0x -Wall -g -O2 -ffile-prefix-map=/build/reproducible-path/simple-tpm-pk11-0.06=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -std=gnu++14 -c -o src/stpm_verify_test-tspiwrap.o `test -f 'src/tspiwrap.cc' || echo './'`src/tspiwrap.cc
 src/common.cc:158:40: warning: 'RSA* RSA_new()' is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
   158 | typedef AutoFree<RSA, RSA_new, RSA_free> RSAWrap;
       |                                        ^
@@ -1134,17 +1169,18 @@
   137 |       throw;
       |       ^~~~~
 src/common.cc:137:7: note: in C++11 destructors default to 'noexcept'
+g++ -DHAVE_CONFIG_H -I.   -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -D_TIME_BITS=64 -Wdate-time -D_FORTIFY_SOURCE=2 -I/usr/src/gtest -std=gnu++0x -Wall -g -O2 -ffile-prefix-map=/build/reproducible-path/simple-tpm-pk11-0.06=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -std=gnu++14 -c -o src/stpm_verify_test-tspiwrap.o `test -f 'src/tspiwrap.cc' || echo './'`src/tspiwrap.cc
 g++ -DHAVE_CONFIG_H -I.   -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -D_TIME_BITS=64 -Wdate-time -D_FORTIFY_SOURCE=2 -I/usr/src/gtest -std=gnu++0x -Wall -g -O2 -ffile-prefix-map=/build/reproducible-path/simple-tpm-pk11-0.06=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -std=gnu++14 -c -o src/stpm_verify_test-fake_tspi.o `test -f 'src/fake_tspi.cc' || echo './'`src/fake_tspi.cc
 g++ -DHAVE_CONFIG_H -I.   -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -D_TIME_BITS=64 -Wdate-time -D_FORTIFY_SOURCE=2 -I/usr/src/gtest -std=gnu++0x -Wall -g -O2 -ffile-prefix-map=/build/reproducible-path/simple-tpm-pk11-0.06=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -std=gnu++14 -c -o src/stpm_verify_test-libgtest.o `test -f 'src/libgtest.cc' || echo './'`src/libgtest.cc
-/bin/bash ./libtool  --tag=CXX   --mode=link g++ -I/usr/src/gtest -std=gnu++0x -Wall -g -O2 -ffile-prefix-map=/build/reproducible-path/simple-tpm-pk11-0.06=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -std=gnu++14  -Wl,-z,relro -Wl,-z,now -o stpm-keygen_test src/stpm_keygen_test-keygen.o src/stpm_keygen_test-keygen_test.o src/stpm_keygen_test-common.o src/stpm_keygen_test-tspiwrap.o src/stpm_keygen_test-fake_tspi.o src/stpm_keygen_test-libgtest.o -lpthread  -lcrypto -ltspi 
+/bin/sh ./libtool  --tag=CXX   --mode=link g++ -I/usr/src/gtest -std=gnu++0x -Wall -g -O2 -ffile-prefix-map=/build/reproducible-path/simple-tpm-pk11-0.06=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -std=gnu++14  -Wl,-z,relro -Wl,-z,now -o stpm-keygen_test src/stpm_keygen_test-keygen.o src/stpm_keygen_test-keygen_test.o src/stpm_keygen_test-common.o src/stpm_keygen_test-tspiwrap.o src/stpm_keygen_test-fake_tspi.o src/stpm_keygen_test-libgtest.o -lpthread  -lcrypto -ltspi 
 libtool: link: g++ -I/usr/src/gtest -std=gnu++0x -Wall -g -O2 -ffile-prefix-map=/build/reproducible-path/simple-tpm-pk11-0.06=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -std=gnu++14 -Wl,-z -Wl,relro -Wl,-z -Wl,now -o stpm-keygen_test src/stpm_keygen_test-keygen.o src/stpm_keygen_test-keygen_test.o src/stpm_keygen_test-common.o src/stpm_keygen_test-tspiwrap.o src/stpm_keygen_test-fake_tspi.o src/stpm_keygen_test-libgtest.o  -lpthread -lcrypto -ltspi
-/bin/bash ./libtool  --tag=CXX   --mode=link g++ -I/usr/src/gtest -std=gnu++0x -Wall -g -O2 -ffile-prefix-map=/build/reproducible-path/simple-tpm-pk11-0.06=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -std=gnu++14  -Wl,-z,relro -Wl,-z,now -o stpm-sign_test src/stpm_sign_test-sign.o src/stpm_sign_test-sign_test.o src/stpm_sign_test-common.o src/stpm_sign_test-tspiwrap.o src/stpm_sign_test-fake_tspi.o src/stpm_sign_test-libgtest.o -lpthread  -lcrypto -ltspi 
+/bin/sh ./libtool  --tag=CXX   --mode=link g++ -I/usr/src/gtest -std=gnu++0x -Wall -g -O2 -ffile-prefix-map=/build/reproducible-path/simple-tpm-pk11-0.06=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -std=gnu++14  -Wl,-z,relro -Wl,-z,now -o stpm-sign_test src/stpm_sign_test-sign.o src/stpm_sign_test-sign_test.o src/stpm_sign_test-common.o src/stpm_sign_test-tspiwrap.o src/stpm_sign_test-fake_tspi.o src/stpm_sign_test-libgtest.o -lpthread  -lcrypto -ltspi 
+/bin/sh ./libtool  --tag=CXX   --mode=link g++ -I/usr/src/gtest -std=gnu++0x -Wall -g -O2 -ffile-prefix-map=/build/reproducible-path/simple-tpm-pk11-0.06=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -std=gnu++14  -Wl,-z,relro -Wl,-z,now -o common_test src/common_test-common_test.o src/common_test-common.o src/common_test-tspiwrap.o src/common_test-fake_tspi.o src/common_test-libgtest.o -lpthread  -lcrypto -ltspi 
 libtool: link: g++ -I/usr/src/gtest -std=gnu++0x -Wall -g -O2 -ffile-prefix-map=/build/reproducible-path/simple-tpm-pk11-0.06=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -std=gnu++14 -Wl,-z -Wl,relro -Wl,-z -Wl,now -o stpm-sign_test src/stpm_sign_test-sign.o src/stpm_sign_test-sign_test.o src/stpm_sign_test-common.o src/stpm_sign_test-tspiwrap.o src/stpm_sign_test-fake_tspi.o src/stpm_sign_test-libgtest.o  -lpthread -lcrypto -ltspi
-/bin/bash ./libtool  --tag=CXX   --mode=link g++ -I/usr/src/gtest -std=gnu++0x -Wall -g -O2 -ffile-prefix-map=/build/reproducible-path/simple-tpm-pk11-0.06=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -std=gnu++14  -Wl,-z,relro -Wl,-z,now -o common_test src/common_test-common_test.o src/common_test-common.o src/common_test-tspiwrap.o src/common_test-fake_tspi.o src/common_test-libgtest.o -lpthread  -lcrypto -ltspi 
 libtool: link: g++ -I/usr/src/gtest -std=gnu++0x -Wall -g -O2 -ffile-prefix-map=/build/reproducible-path/simple-tpm-pk11-0.06=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -std=gnu++14 -Wl,-z -Wl,relro -Wl,-z -Wl,now -o common_test src/common_test-common_test.o src/common_test-common.o src/common_test-tspiwrap.o src/common_test-fake_tspi.o src/common_test-libgtest.o  -lpthread -lcrypto -ltspi
-/bin/bash ./libtool  --tag=CXX   --mode=link g++ -I/usr/src/gtest -std=gnu++0x -Wall -g -O2 -ffile-prefix-map=/build/reproducible-path/simple-tpm-pk11-0.06=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -std=gnu++14  -Wl,-z,relro -Wl,-z,now -o pk11_test src/pk11_test-pk11_test.o src/pk11_test-pk11.o src/pk11_test-common.o src/pk11_test-session.o src/pk11_test-tspiwrap.o src/pk11_test-fake_tspi.o src/pk11_test-libgtest.o -lpthread  -lcrypto -ltspi 
+/bin/sh ./libtool  --tag=CXX   --mode=link g++ -I/usr/src/gtest -std=gnu++0x -Wall -g -O2 -ffile-prefix-map=/build/reproducible-path/simple-tpm-pk11-0.06=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -std=gnu++14  -Wl,-z,relro -Wl,-z,now -o pk11_test src/pk11_test-pk11_test.o src/pk11_test-pk11.o src/pk11_test-common.o src/pk11_test-session.o src/pk11_test-tspiwrap.o src/pk11_test-fake_tspi.o src/pk11_test-libgtest.o -lpthread  -lcrypto -ltspi 
 libtool: link: g++ -I/usr/src/gtest -std=gnu++0x -Wall -g -O2 -ffile-prefix-map=/build/reproducible-path/simple-tpm-pk11-0.06=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -std=gnu++14 -Wl,-z -Wl,relro -Wl,-z -Wl,now -o pk11_test src/pk11_test-pk11_test.o src/pk11_test-pk11.o src/pk11_test-common.o src/pk11_test-session.o src/pk11_test-tspiwrap.o src/pk11_test-fake_tspi.o src/pk11_test-libgtest.o  -lpthread -lcrypto -ltspi
-/bin/bash ./libtool  --tag=CXX   --mode=link g++ -I/usr/src/gtest -std=gnu++0x -Wall -g -O2 -ffile-prefix-map=/build/reproducible-path/simple-tpm-pk11-0.06=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -std=gnu++14  -Wl,-z,relro -Wl,-z,now -o stpm-verify_test src/stpm_verify_test-verify.o src/stpm_verify_test-verify_test.o src/stpm_verify_test-common.o src/stpm_verify_test-tspiwrap.o src/stpm_verify_test-fake_tspi.o src/stpm_verify_test-libgtest.o -lpthread  -lcrypto -ltspi 
+/bin/sh ./libtool  --tag=CXX   --mode=link g++ -I/usr/src/gtest -std=gnu++0x -Wall -g -O2 -ffile-prefix-map=/build/reproducible-path/simple-tpm-pk11-0.06=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -std=gnu++14  -Wl,-z,relro -Wl,-z,now -o stpm-verify_test src/stpm_verify_test-verify.o src/stpm_verify_test-verify_test.o src/stpm_verify_test-common.o src/stpm_verify_test-tspiwrap.o src/stpm_verify_test-fake_tspi.o src/stpm_verify_test-libgtest.o -lpthread  -lcrypto -ltspi 
 libtool: link: g++ -I/usr/src/gtest -std=gnu++0x -Wall -g -O2 -ffile-prefix-map=/build/reproducible-path/simple-tpm-pk11-0.06=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -std=gnu++14 -Wl,-z -Wl,relro -Wl,-z -Wl,now -o stpm-verify_test src/stpm_verify_test-verify.o src/stpm_verify_test-verify_test.o src/stpm_verify_test-common.o src/stpm_verify_test-tspiwrap.o src/stpm_verify_test-fake_tspi.o src/stpm_verify_test-libgtest.o  -lpthread -lcrypto -ltspi
 make[3]: Leaving directory '/build/reproducible-path/simple-tpm-pk11-0.06'
 make  check-TESTS
@@ -1152,8 +1188,8 @@
 make[4]: Entering directory '/build/reproducible-path/simple-tpm-pk11-0.06'
 PASS: stpm-sign_test
 PASS: common_test
-PASS: stpm-verify_test
 PASS: pk11_test
+PASS: stpm-verify_test
 PASS: stpm-keygen_test
 ============================================================================
 Testsuite summary for simple-tpm-pk11 0.06
@@ -1190,7 +1226,7 @@
 make[3]: Entering directory '/build/reproducible-path/simple-tpm-pk11-0.06'
 make[4]: Entering directory '/build/reproducible-path/simple-tpm-pk11-0.06'
  /usr/bin/mkdir -p '/build/reproducible-path/simple-tpm-pk11-0.06/debian/simple-tpm-pk11/usr/lib/arm-linux-gnueabihf'
- /bin/bash ./libtool   --mode=install /usr/bin/install -c   libsimple-tpm-pk11.la '/build/reproducible-path/simple-tpm-pk11-0.06/debian/simple-tpm-pk11/usr/lib/arm-linux-gnueabihf'
+ /bin/sh ./libtool   --mode=install /usr/bin/install -c   libsimple-tpm-pk11.la '/build/reproducible-path/simple-tpm-pk11-0.06/debian/simple-tpm-pk11/usr/lib/arm-linux-gnueabihf'
 libtool: install: /usr/bin/install -c .libs/libsimple-tpm-pk11.so.0.0.0 /build/reproducible-path/simple-tpm-pk11-0.06/debian/simple-tpm-pk11/usr/lib/arm-linux-gnueabihf/libsimple-tpm-pk11.so.0.0.0
 libtool: install: (cd /build/reproducible-path/simple-tpm-pk11-0.06/debian/simple-tpm-pk11/usr/lib/arm-linux-gnueabihf && { ln -s -f libsimple-tpm-pk11.so.0.0.0 libsimple-tpm-pk11.so.0 || { rm -f libsimple-tpm-pk11.so.0 && ln -s libsimple-tpm-pk11.so.0.0.0 libsimple-tpm-pk11.so.0; }; })
 libtool: install: (cd /build/reproducible-path/simple-tpm-pk11-0.06/debian/simple-tpm-pk11/usr/lib/arm-linux-gnueabihf && { ln -s -f libsimple-tpm-pk11.so.0.0.0 libsimple-tpm-pk11.so || { rm -f libsimple-tpm-pk11.so && ln -s libsimple-tpm-pk11.so.0.0.0 libsimple-tpm-pk11.so; }; })
@@ -1200,7 +1236,7 @@
 libtool: install: ranlib /build/reproducible-path/simple-tpm-pk11-0.06/debian/simple-tpm-pk11/usr/lib/arm-linux-gnueabihf/libsimple-tpm-pk11.a
 libtool: warning: remember to run 'libtool --finish /usr/lib/arm-linux-gnueabihf'
  /usr/bin/mkdir -p '/build/reproducible-path/simple-tpm-pk11-0.06/debian/simple-tpm-pk11/usr/bin'
-  /bin/bash ./libtool   --mode=install /usr/bin/install -c stpm-keygen stpm-sign stpm-exfiltrate stpm-verify '/build/reproducible-path/simple-tpm-pk11-0.06/debian/simple-tpm-pk11/usr/bin'
+  /bin/sh ./libtool   --mode=install /usr/bin/install -c stpm-keygen stpm-sign stpm-exfiltrate stpm-verify '/build/reproducible-path/simple-tpm-pk11-0.06/debian/simple-tpm-pk11/usr/bin'
 libtool: install: /usr/bin/install -c stpm-keygen /build/reproducible-path/simple-tpm-pk11-0.06/debian/simple-tpm-pk11/usr/bin/stpm-keygen
 libtool: install: /usr/bin/install -c stpm-sign /build/reproducible-path/simple-tpm-pk11-0.06/debian/simple-tpm-pk11/usr/bin/stpm-sign
 libtool: install: /usr/bin/install -c stpm-exfiltrate /build/reproducible-path/simple-tpm-pk11-0.06/debian/simple-tpm-pk11/usr/bin/stpm-exfiltrate
@@ -1230,11 +1266,11 @@
  diversion by libc6 from: /lib/ld-linux-armhf.so.3
 dpkg-shlibdeps: warning: diversions involved - output may be incorrect
  diversion by libc6 to: /lib/ld-linux-armhf.so.3.usr-is-merged
-dpkg-shlibdeps: warning: symbol __aeabi_atexit@CXXABI_ARM_1.3.3 used by debian/simple-tpm-pk11/usr/lib/arm-linux-gnueabihf/libsimple-tpm-pk11.so.0.0.0 found in none of the libraries
+dpkg-shlibdeps: warning: debian/simple-tpm-pk11/usr/bin/stpm-sign contains an unresolvable reference to symbol __aeabi_atexit@CXXABI_ARM_1.3.3: it's probably a plugin
+dpkg-shlibdeps: warning: debian/simple-tpm-pk11/usr/bin/stpm-keygen contains an unresolvable reference to symbol __aeabi_atexit@CXXABI_ARM_1.3.3: it's probably a plugin
 dpkg-shlibdeps: warning: debian/simple-tpm-pk11/usr/bin/stpm-verify contains an unresolvable reference to symbol __aeabi_atexit@CXXABI_ARM_1.3.3: it's probably a plugin
+dpkg-shlibdeps: warning: symbol __aeabi_atexit@CXXABI_ARM_1.3.3 used by debian/simple-tpm-pk11/usr/lib/arm-linux-gnueabihf/libsimple-tpm-pk11.so.0.0.0 found in none of the libraries
 dpkg-shlibdeps: warning: debian/simple-tpm-pk11/usr/bin/stpm-exfiltrate contains an unresolvable reference to symbol __aeabi_atexit@CXXABI_ARM_1.3.3: it's probably a plugin
-dpkg-shlibdeps: warning: debian/simple-tpm-pk11/usr/bin/stpm-keygen contains an unresolvable reference to symbol __aeabi_atexit@CXXABI_ARM_1.3.3: it's probably a plugin
-dpkg-shlibdeps: warning: debian/simple-tpm-pk11/usr/bin/stpm-sign contains an unresolvable reference to symbol __aeabi_atexit@CXXABI_ARM_1.3.3: it's probably a plugin
    dh_installdeb
    dh_gencontrol
    dh_md5sums
@@ -1248,12 +1284,14 @@
 dpkg-buildpackage: info: binary-only upload (no source included)
 dpkg-genchanges: info: not including original source code in upload
 I: copying local configuration
+I: user script /srv/workspace/pbuilder/10233/tmp/hooks/B01_cleanup starting
+I: user script /srv/workspace/pbuilder/10233/tmp/hooks/B01_cleanup finished
 I: unmounting dev/ptmx filesystem
 I: unmounting dev/pts filesystem
 I: unmounting dev/shm filesystem
 I: unmounting proc filesystem
 I: unmounting sys filesystem
 I: cleaning the build env 
-I: removing directory /srv/workspace/pbuilder/30780 and its subdirectories
-I: Current time: Mon Jan 20 03:46:05 -12 2025
-I: pbuilder-time-stamp: 1737387965
+I: removing directory /srv/workspace/pbuilder/10233 and its subdirectories
+I: Current time: Tue Jan 21 05:53:39 +14 2025
+I: pbuilder-time-stamp: 1737388419