1yhsm-decrypt-aead(1) General Commands Manual yhsm-decrypt-aead(1)
2
3
4
6 yhsm-decrypt-aead ‐ Decrypt AEADs (with secrets for YubiKeys)
7
8
10 yhsm-decrypt-aead [options] --aes-key KEY file-or-dir [...]
11
12
14 Decrypt AEADs generated using a YubiHSM. NOTE that this requires
15 knowledge of the AES key used in the YubiHSM.
16
17 After a number of YubiKey secrets have been generated using yhsm-gener‐
18 ate-keys(1) , this tool can decrypt them and produce a CSV file usable
19 to personalize corresponding YubiKeys.
20
21
23 -v, --verbose
24 Enable verbose operation.
25
26 --debug
27 Enable debug printout.
28
29 --format str
30 Select output format (raw or yubikey-csv).
31
32 --print-filename
33 Prefix any output with the input filename.
34
35 --key-handle kh
36 Key handle used when generated AEADs, if not stored in the AEAD
37 file (AEAD generated with python-pyhsm 1.0.3 or lower).
38
39 --aes-key hexstr
40 AES key used to generate the AEADs.
41
42
44 0 OK
45
46 1 Fail
47
48
50 Report python-pyhsm/yhsm-decrypt-aead bugs in the issue tracker
51 ⟨https://github.com/Yubico/python-pyhsm/issues/⟩
52
53
55 The home page ⟨https://developers.yubico.com/python-pyhsm/⟩
56
57 YubiHSMs and YubiKeys can be obtained from Yubico ⟨http://
58 www.yubico.com/⟩.
59
60
61
62python-pyhsm June 2012 yhsm-decrypt-aead(1)