decrypt_pki..._session_key(9)

💅 decrypt_pki_encrypted_session_key — the kernel API manual, bestie edition 🎀

okay so you found yourself in the Kernel API Manual (section 9, kernel girlies rise) and the page is literally called decrypt_pki..._session_key(9) because apparently full names were too much to ask for. anyway!! it's the ecryptfs keystore lore and honestly it's giving "one job, does it well" energy ✨

---

✨ NAME ✨

decrypt_pki_encrypted_session_key — literally just decrypts the session key with the given auth_tok, no cap 🫶

---

🌸 SYNOPSIS 🌸

int decrypt_pki_encrypted_session_key (struct ecryptfs_auth_tok
*auth_tok , struct ecryptfs_crypt_stat *crypt_stat );

that's it, that's the whole vibe check 🔥

---

🦋 ARGUMENTS 🦋

• auth_tok — the key authentication token, bestie. it's the thing you use to decrypt the session key. main character of the operation, honestly 👑
• crypt_stat — the cryptographic context. it's giving "supporting cast but absolutely essential" 💜

---

💖 DESCRIPTION 💖

so what does it do? returns zero on success; non-zero error otherwise. that's the whole description fr fr 😭 zero = slay, non-zero = not slay. that's the entire report, periodt.

ngl the manpage is criminally short here. but we keep every word, so: zero on success, non-zero error otherwise. iconic brevity, tbh 💅

---

⭐ SEE ALSO ⭐

okay this section ate, it's a whole friend group of ecryptfs functions 🧚 all of them live in the kernel file ./fs/ecryptfs/keystore.c:

• ecryptfs_parse_packet_length(9)
• ecryptfs_write_packet_length(9)
• ecryptfs_verify_version(9)
• ecryptfs_verify_auth_tok_from_key(9)
• ecryptfs_find_auth_tok_for_sig(9)
• ecryptfs_parse_tag_70_packet(9)
• parse_tag_1_packet(9)
• parse_tag_3_packet(9)
• parse_tag_11_packet(9)
• decrypt_passphrase_encrypted_session_key(9)
• ecryptfs_parse_packet_set(9)
• write_tag_1_packet(9)
• write_tag_11_packet(9)
• write_tag_3_packet(9)
• ecryptfs_generate_key_packet_set(9)

go read them!! they're all in the same friend group, iykyk 🌈

---

and that's the page, bestie 🎀 brought to you by the fine people at ./fs/ecryptfs, dated October 2026 — same header, same footer, same title decrypt_pki..._session_key(9), all wrapped up in one cute sign-off 💖 mwah, bye! 🦋