1JOSE-JWE-DEC(1) JOSE-JWE-DEC(1)
2
3
4
6 jose-jwe-dec - Decrypts a JWE using the supplied JWKs
7
9 jose jwe dec -i JWE [-I CT] -k JWK [-p] [-O PT]
10
12 The jose jwe dec command decrypts a JWE using one or more JWK (-k) or
13 password (-p). Decryption succeeds if any key is able to perform
14 decryption.
15
16 If the JWE is a detached JWE, meaning that the ciphertext is stored in
17 binary form external to the JWE itself, the ciphertext can be loaded
18 using the -I parameter.
19
20 Please note that, when specifying the -O option to output the plainā
21 text, plaintext output begins before ciphertext validation. Therefore,
22 you must check the return value of the command before using the data.
23
25 -i JSON, --input=JSON
26 Parse JWE from JSON
27
28 -i FILE, --input=FILE
29 Read JWE from FILE
30
31 -i -, --input=-
32 Read JWE from standard input
33
34 -I FILE, --detached=FILE
35 Read decoded ciphertext from FILE
36
37 -I -, --detached=-
38 Read decoded ciphertext from standard input
39
40 -p, --password
41 Prompt for a decryption password, if necessary
42
43 -k FILE, --key=FILE
44 Read JWK(Set) from FILE
45
46 -k -, --key=-
47 Read JWK(Set) from standard input
48
49 -O JSON, --detach=JSON
50 Parse JWE from JSON
51
52 -O FILE, --detach=FILE
53 Read JWE from FILE
54
55 -O -, --detach=-
56 Read JWE from standard input
57
59 Decrypt a JWE with a JWK:
60
61
62
63 $ jose jwe dec -i msg.jwe -k rsa.key -O msg.txt
64
65
66
67 Decrypt a JWE with a password:
68
69
70
71 $ jose jwe dec -i msg.jwe -p -O msg.txt
72 Please enter decryption password:
73
74
75
76 Decrypt a JWE with either of two JWKs:
77
78
79
80 $ jose jwe dec -i msg.jwe -k ec.jwk -k rsa.jwk -O msg.txt
81
82
83
85 Nathaniel McCallum <npmccallum@redhat.com>
86
88 jose-jwe-enc(1), jose-jwe-fmt(1)
89
90
91
92 May 2017 JOSE-JWE-DEC(1)