1SQ-DECRYPT(1) USER COMMANDS SQ-DECRYPT(1)
2
3
4
6 sq-decrypt - Decrypts a message
7
8 Decrypts a message using either supplied keys, or by prompting for a
9 password. If message tampering is detected, an error is returned. See
10 below for details.
11
12 If certificates are supplied using the "--signer-cert" option, any sig‐
13 natures that are found are checked using these certificates. Verifica‐
14 tion is only successful if there is no bad signature, and the number of
15 successfully verified signatures reaches the threshold configured with
16 the "--signatures" parameter.
17
18 If the signature verification fails, or if message tampering is de‐
19 tected, the program terminates with an exit status indicating failure.
20 In addition to that, the last 25 MiB of the message are withheld, i.e.
21 if the message is smaller than 25 MiB, no output is produced, and if it
22 is larger, then the output will be truncated.
23
24 The converse operation is "sq encrypt".
25
26
28 sq decrypt [FLAGS] [OPTIONS] [--] [FILE]
29
31 -h, --help
32 Prints help information
33
34
35 --dump-session-key
36 Prints the session key to stderr
37
38
39 --dump Prints a packet dump to stderr
40
41
42 -x, --hex
43 Prints a hexdump (implies --dump)
44
46 -o, --output FILE
47 Writes to FILE or stdout if omitted
48
49
50 -n, --signatures N
51 Sets the threshold of valid signatures to N. The message will
52 only be considered verified if this threshold is reached. [de‐
53 fault: 1 if at least one signer cert file is given, 0 otherwise]
54
55
56 --signer-cert CERT
57 Verifies signatures with CERT
58
59
60 --recipient-key KEY
61 Decrypts with KEY
62
64 FILE Reads from FILE or stdin if omitted
65
67 # Decrypt a file using a secret key
68 $ sq decrypt --recipient-key juliet.pgp ciphertext.pgp
69
70 # Decrypt a file verifying signatures
71 $ sq decrypt --recipient-key juliet.pgp --signer-cert romeo.pgp
72 ciphertext.pgp
73
74 # Decrypt a file using a password
75 $ sq decrypt ciphertext.pgp
76
77
79 For the full documentation see <https://docs.sequoia-pgp.org/sq/>.
80
81 sq(1), sq-armor(1), sq-autocrypt(1), sq-certify(1), sq-dearmor(1),
82 sq-decrypt(1), sq-encrypt(1), sq-inspect(1), sq-key(1), sq-keyring(1),
83 sq-keyserver(1), sq-packet(1), sq-sign(1), sq-verify(1), sq-wkd(1)
84
85
86
88 Azul <azul@sequoia-pgp.org>
89 Igor Matuszewski <igor@sequoia-pgp.org>
90 Justus Winter <justus@sequoia-pgp.org>
91 Kai Michaelis <kai@sequoia-pgp.org>
92 Neal H. Walfield <neal@sequoia-pgp.org>
93 Nora Widdecke <nora@sequoia-pgp.org>
94 Wiktor Kwapisiewicz <wiktor@sequoia-pgp.org>
95
96
97
980.24.0 (SEQUOIA-OPENPGP 1.0.0) MARCH 2021 SQ-DECRYPT(1)