PGPAINLESS-CLI-DECRYPT(1)

💅 PGPAINLESS-CLI-DECRYPT 💅

okay so bestie, welcome to pgpainless-cli-decrypt — yeah yeah, it lives inside the PGPainless-CLI Manual, and it does exactly what it says on the tin: it decrypts a message. that's it. that's the gig. 🎀

---

✨ NAME ✨

pgpainless-cli-decrypt — Decrypt a message 🦋

---

🌸 SYNOPSIS 🌸

pgpainless-cli decrypt [--stacktrace] [--session-key-out=SESSIONKEY]
[--verify-not-after=DATE] [--verify-not-before=DATE]
[--verify-out=VERIFICATIONS] [--verify-with=CERT]...
[--with-key-password=PASSWORD]... [--with-password=PASSWORD]...
[--with-session-key=SESSIONKEY]... [KEY...]

---

💜 DESCRIPTION 💜

bestie… the original page literally leaves this section blank. no lore, no backstory, nothing. it's giving mysterious main character energy and honestly? we respect it. 🙈 the options below do all the talking anyway. 💅

---

🔥 OPTIONS 🔥

• --session-key-out=SESSIONKEY — wanna know the secret? 👀 this one lets you learn the session key when decryption succeeds. like, you get handed the key to the group chat. 🔑
• --stacktrace — print stacktrace. when something goes wrong and you NEED the receipts. 💀
• --verify-not-after=DATE — ISO-8601 formatted UTC date (e.g. '2020-11-23T16:35Z)

Reject signatures with a creation date not in range. 🚫

Defaults to current system time (now). ⏰

Accepts special value - for end of time. ♾️

• --verify-not-before=DATE — ISO-8601 formatted UTC date (e.g. '2020-11-23T16:35Z)

Reject signatures with a creation date not in range. 🚫

Defaults to beginning of time (-). 🌅

• --verify-out, --verifications-out=VERIFICATIONS — Emits signature verification status to the designated output. 📤✨
• --verify-with=CERT — Certificates for signature verification. 📜
• --with-key-password=PASSWORD — Passphrase to unlock the secret key(s). 🔓

Is an INDIRECT data type (e.g. file, environment variable, file descriptor...). 📁

• --with-password=PASSWORD — Symmetric passphrase to decrypt the message with. 🤝

Enables decryption based on any "SKESK" packets in the "CIPHERTEXT". 📨

Is an INDIRECT data type (e.g. file, environment variable, file descriptor...). 📁

• --with-session-key=SESSIONKEY — Symmetric message key (session key). 🗝️

Enables decryption of the "CIPHERTEXT" using the session key directly against the "SEIPD" packet. 🎯

Is an INDIRECT data type (e.g. file, environment variable, file descriptor...). 📁

---

🫶 ARGUMENTS 🫶

• [KEY...] — Secret keys to attempt decryption with. 🗝️🗝️🗝️ the more the merrier, no cap.

---

ngl, three of these options are INDIRECT data types (file, environment variable, file descriptor…) so you never have to paste a raw secret straight onto the command line. we love a privacy queen. 👑

---

and that's the whole page, bestie — brought to you by the PGPainless-CLI Manual, filed under PGPAINLESS-CLI-DECRYPT(1). go decrypt something iconic. periodt. 💅✨🌈