1JOSE-JWE-DEC(1) JOSE-JWE-DEC(1)
2
3
4
6 jose-jwe-dec - Decrypts a JWE using the supplied JWKs
7
9 jose jwe dec -i JWE [-I CT] -k JWK [-p] [-O PT]
10
12 The jose jwe dec command decrypts a JWE using one or more JWK (-k) or
13 password (-p). Decryption succeeds if any key is able to perform
14 decryption.
15
16 If the JWE is a detached JWE, meaning that the ciphertext is stored in
17 binary form external to the JWE itself, the ciphertext can be loaded
18 using the -I parameter.
19
20 Please note that, when specifying the -O option to output the
21 plaintext, plaintext output begins before ciphertext validation.
22 Therefore, you must check the return value of the command before using
23 the data.
24
26 • -i JSON, --input=JSON : Parse JWE from JSON
27
28 • -i FILE, --input=FILE : Read JWE from FILE
29
30 • -i -, --input=- : Read JWE from standard input
31
32 • -I FILE, --detached=FILE : Read decoded ciphertext from FILE
33
34 • -I -, --detached=- : Read decoded ciphertext from standard input
35
36 • -p, --password : Prompt for a decryption password, if necessary
37
38 • -k FILE, --key=FILE : Read JWK(Set) from FILE
39
40 • -k -, --key=- : Read JWK(Set) from standard input
41
42 • -O JSON, --detach=JSON : Parse JWE from JSON
43
44 • -O FILE, --detach=FILE : Read JWE from FILE
45
46 • -O -, --detach=- : Read JWE from standard input
47
49 Decrypt a JWE with a JWK:
50
51 $ jose jwe dec -i msg.jwe -k rsa.key -O msg.txt
52
53 Decrypt a JWE with a password:
54
55 $ jose jwe dec -i msg.jwe -p -O msg.txt
56 Please enter decryption password:
57
58 Decrypt a JWE with either of two JWKs:
59
60 $ jose jwe dec -i msg.jwe -k ec.jwk -k rsa.jwk -O msg.txt
61
63 Nathaniel McCallum <npmccallum@redhat.com>
64
66 jose-jwe-enc(1), jose-jwe-fmt(1)
67
68
69
70 07/20/2023 JOSE-JWE-DEC(1)