Scroll to navigation

PGPAINLESS-CLI-DECRYPT(1) PGPainless-CLI Manual PGPAINLESS-CLI-DECRYPT(1)

NAME

pgpainless-cli-decrypt - Decrypt a message

SYNOPSIS

pgpainless-cli decrypt [--stacktrace] [--session-key-out=SESSIONKEY] [--verify-not-after=DATE] [--verify-not-before=DATE] [--verify-out=VERIFICATIONS] [--verify-with=CERT]... [--with-key-password=PASSWORD]... [--with-password=PASSWORD]... [--with-session-key=SESSIONKEY]... [KEY...]

DESCRIPTION

OPTIONS

--session-key-out=SESSIONKEY

Can be used to learn the session key on successful decryption

--stacktrace

Print stacktrace

--verify-not-after=DATE

ISO-8601 formatted UTC date (e.g. '2020-11-23T16:35Z)

Reject signatures with a creation date not in range.

Defaults to current system time ('now').

Accepts special value '-' for end of time.

--verify-not-before=DATE

ISO-8601 formatted UTC date (e.g. '2020-11-23T16:35Z)

Reject signatures with a creation date not in range.

Defaults to beginning of time ('-').

--verify-out, --verifications-out=VERIFICATIONS

Emits signature verification status to the designated output

--verify-with=CERT

Certificates for signature verification

--with-key-password=PASSWORD

Passphrase to unlock the secret key(s).

Is an INDIRECT data type (e.g. file, environment variable, file descriptor...).

--with-password=PASSWORD

Symmetric passphrase to decrypt the message with.

Enables decryption based on any "SKESK" packets in the "CIPHERTEXT".

Is an INDIRECT data type (e.g. file, environment variable, file descriptor...).

--with-session-key=SESSIONKEY

Symmetric message key (session key).

Enables decryption of the "CIPHERTEXT" using the session key directly against the "SEIPD" packet.

Is an INDIRECT data type (e.g. file, environment variable, file descriptor...).

ARGUMENTS

[KEY...]

Secret keys to attempt decryption with