NAME skidecrypt - decrypt file SYNOPSIS skidecrypt [-s | -v] [-c cipher_file] [-i input_file] [-o output_file] AVAILABILITY SUNWski DESCRIPTION The skidecrypt utility decrypts data that was encrypted by an encryption utility such as skiencrypt(1). skidecrypt reads input from input_file and produces clear- text data which is stored in output_file. If no input_file is provided, the input data is read from stdin. If no output_file is given, the cleartext data is printed to stdout. The data provided in input_file must be formatted as a PKCS #7 message, and must be provided in the printable encoding format as defined in the Internet RFC1421 standard. If the PKCS #7 input has content type "enveloped-data", the content-encryption key under which the data was encrypted is recovered using the user's private key. The ciphertext is then decrypted using the recovered content-encryption key and the appropriate decryption algorithm. If the content type of the PKCS #7 input is "encrypted- data", the user is prompted for a password, from which the content-encryption key is derived. The ciphertext is then decrypted using the derived content- encryption key and the appropriate (password-based) decryption algorithm. The only supported password-based decryption algorithms are pbeWithMD2AndDES-CBC and pbeWithMD5AndDES-CBC, as defined in the PKCS #5 standard. If the skiencrypt -x option was used when encrypting the data (see skiencrypt(1)), the data provided in input_file will not contain the ciphertext. In this case, a separate file, cipher_file, containing the ciphertext may be pro- vided. If cipher_file is not provided, skidecrypt assumes the ciphertext is stored in a file named by input_file, suf- fixed by ".cipherdata". If the input data is read from stdin (no input_file is provided) then skidecrypt assumes the ciphertext is stored in a file named "cipherdata" in the current working directory. The ciphertext must be provided in printable (ASCII) encoding. skidecrypt requires that the user has registered his or her private key with the SKI keyserver (see skilogin(1)), unless password-based decryption is being used. OPTIONS The following options are supported: -s Run application silently (no status or error infor- mation displayed). -v Give verbose output. If both the -v and the -s options are specified, the -v option is ignored. -c cipher_file File containing the ciphertext (only required if ciphertext is not included in input_file). Defaults to input_file, suffixed by ".cipherdata", if input_file is provided, or to a file named "cipher- data" in the current working directory if input data is read from stdin ( input_file is not provided). The ciphertext must be provided in printable (ASCII) encoding, as defined by the Internet RFC1421 stan- dard. -i input_file File containing the decryption information (that is, the decryption mechanism and optionally the decryp- tion key) and optionally the ciphertext. -o output_file File where cleartext data is stored. EXAMPLES This example decrypts the file "encrypted" (which contains the ciphertext and the decryption key/algorithm), and stores the recovered cleartext in the file "cleartxt": example% skidecrypt -i encrypted -o cleartxt The following example obtains the decryption key/algorithm from the file "decrinfo", decrypts the ciphertext stored in "ciphertxt", and stores the recovered cleartext in "cleartxt": example% skidecrypt -i decrinfo -c ciphertxt -o cleartxt In the following example, the file "decrinfo" only contains the decryption key/algorithm information. skidecrypt reads this information from stdin and by default assumes that the ciphertext is stored in a file named "cipherdata" in the current working directory. The ciphertext from "cipherdata" is decrypted and the cleartext is stored in "cleartxt": example% skidecrypt -o cleartxt < decrinfo EXIT STATUS The skidecrypt command exits with 0 if successful and 1 oth- erwise. SEE ALSO skiencrypt(1), skisign(1), skiverify(1), skilogin(1)
Закладки на сайте Проследить за страницей |
Created 1996-2024 by Maxim Chirkov Добавить, Поддержать, Вебмастеру |