PGPAINLESS-CLI-DECRYPT(1)

NAME
pgpainless-cli-decrypt - Decrypt a message

SYNOPSIS

pgpainless-cli decrypt [--stacktrace] [--session-key-out=SESSIONKEY] [--verify-not-after=DATE] [--verify-not-before=DATE] [--verify-out=VERIFICATIONS] [--verify-with=CERT]... [--with-key-password=PASSWORD]... [--with-password=PASSWORD]... [--with-session-key=SESSIONKEY]... [KEY...]

DESCRIPTION

OPTIONS

--session-key-out=SESSIONKEY
    Can be used to learn the session key on successful decryption

--stacktrace
    Print stacktrace

--verify-not-after=DATE
    ISO-8601 formatted UTC date (e.g. '2020-11-23T16:35Z)

    Reject signatures with a creation date not in range.

    Defaults to current system time ('now').

    Accepts special value '-' for end of time.

--verify-not-before=DATE
    ISO-8601 formatted UTC date (e.g. '2020-11-23T16:35Z)

    Reject signatures with a creation date not in range.

    Defaults to beginning of time ('-').

--verify-out, --verifications-out=VERIFICATIONS
    Emits signature verification status to the designated output

--verify-with=CERT
    Certificates for signature verification

--with-key-password=PASSWORD
    Passphrase to unlock the secret key(s).

    Is an INDIRECT data type (e.g. file, environment variable, file descriptor...).

--with-password=PASSWORD
    Symmetric passphrase to decrypt the message with.

    Enables decryption based on any "SKESK" packets in the "CIPHERTEXT".

    Is an INDIRECT data type (e.g. file, environment variable, file descriptor...).

--with-session-key=SESSIONKEY
    Symmetric message key (session key).

    Enables decryption of the "CIPHERTEXT" using the session key directly against the "SEIPD" packet.

    Is an INDIRECT data type (e.g. file, environment variable, file descriptor...).

ARGUMENTS

[KEY...]
    Secret keys to attempt decryption with