NAME
skidecrypt - decrypt file
SYNOPSIS
skidecrypt [-s | -v] [-c cipher_file] [-i input_file]
[-o output_file]
AVAILABILITY
SUNWski
DESCRIPTION
The skidecrypt utility decrypts data that was encrypted by
an encryption utility such as skiencrypt(1).
skidecrypt reads input from input_file and produces clear-
text data which is stored in output_file. If no input_file
is provided, the input data is read from stdin. If no
output_file is given, the cleartext data is printed to
stdout.
The data provided in input_file must be formatted as a PKCS
#7 message, and must be provided in the printable encoding
format as defined in the Internet RFC1421 standard.
If the PKCS #7 input has content type "enveloped-data", the
content-encryption key under which the data was encrypted is
recovered using the user's private key. The ciphertext is
then decrypted using the recovered content-encryption key
and the appropriate decryption algorithm.
If the content type of the PKCS #7 input is "encrypted-
data", the user is prompted for a password, from which the
content-encryption key is derived. The ciphertext is then
decrypted using the derived content- encryption key and the
appropriate (password-based) decryption algorithm. The only
supported password-based decryption algorithms are
pbeWithMD2AndDES-CBC and pbeWithMD5AndDES-CBC, as defined in
the PKCS #5 standard.
If the skiencrypt -x option was used when encrypting the
data (see skiencrypt(1)), the data provided in input_file
will not contain the ciphertext. In this case, a separate
file, cipher_file, containing the ciphertext may be pro-
vided. If cipher_file is not provided, skidecrypt assumes
the ciphertext is stored in a file named by input_file, suf-
fixed by ".cipherdata". If the input data is read from
stdin (no input_file is provided) then skidecrypt assumes
the ciphertext is stored in a file named "cipherdata" in the
current working directory. The ciphertext must be provided
in printable (ASCII) encoding.
skidecrypt requires that the user has registered his or her
private key with the SKI keyserver (see skilogin(1)), unless
password-based decryption is being used.
OPTIONS
The following options are supported:
-s Run application silently (no status or error infor-
mation displayed).
-v Give verbose output. If both the -v and the -s
options are specified, the -v option is ignored.
-c cipher_file
File containing the ciphertext (only required if
ciphertext is not included in input_file). Defaults
to input_file, suffixed by ".cipherdata", if
input_file is provided, or to a file named "cipher-
data" in the current working directory if input data
is read from stdin ( input_file is not provided).
The ciphertext must be provided in printable (ASCII)
encoding, as defined by the Internet RFC1421 stan-
dard.
-i input_file
File containing the decryption information (that is,
the decryption mechanism and optionally the decryp-
tion key) and optionally the ciphertext.
-o output_file
File where cleartext data is stored.
EXAMPLES
This example decrypts the file "encrypted" (which contains
the ciphertext and the decryption key/algorithm), and stores
the recovered cleartext in the file "cleartxt":
example% skidecrypt -i encrypted -o cleartxt
The following example obtains the decryption key/algorithm
from the file "decrinfo", decrypts the ciphertext stored in
"ciphertxt", and stores the recovered cleartext in
"cleartxt":
example% skidecrypt -i decrinfo -c ciphertxt -o
cleartxt
In the following example, the file "decrinfo" only contains
the decryption key/algorithm information. skidecrypt reads
this information from stdin and by default assumes that the
ciphertext is stored in a file named "cipherdata" in the
current working directory. The ciphertext from "cipherdata"
is decrypted and the cleartext is stored in "cleartxt":
example% skidecrypt -o cleartxt < decrinfo
EXIT STATUS
The skidecrypt command exits with 0 if successful and 1 oth-
erwise.
SEE ALSO
skiencrypt(1), skisign(1), skiverify(1), skilogin(1)
|
Закладки на сайте Проследить за страницей |
Created 1996-2025 by Maxim Chirkov Добавить, Поддержать, Вебмастеру |