PCPTool depends on the event digest rather than the actual data. This means that to calculate the Platform Configuration Registers, it replays the digests. While the data is useful for remote attestation, an attacker could easily modify it. Because PCPTool relies solely on the digest and does not verify that the digest matches the data, the same PCRs will be calculated regardless of any alterations to the data.