pgp-decrypt1

Synopsys

pgp-decrypt [debug] <input-file >output-file

Overview

pgp-decrypt is a filter which interprets an armoured PGP message and does something appropriate with it (by invoking pgp) as follows:

If the message is encrypted the plaintext is sent to standard output preceded by a list of the recipients (or their key IDs if their keys are not available to be looked up).

If the message is both signed and encrypted a clearsig version is sent to standard output, again preceded by the list of recipients.

If the message is a signed or clearsig message the signature is checked.

Informative progress messages from pgp which are not particularly important are preceded by a space on each line. Messages whose meaning was not understood by the scripts are preceded by ??? - this often indicates some kind of failure.

Informational and progress messages are always written to standard error. Any message text is always written to standard output, preceded by the message

Enclosed message text (n bytes):

This will be the last message written to standard error. This scheme is designed to make it easer for Emacs to parse the output of pgp-decrypt.

If the message is not of one of the structures above an error is signaled.

Errors are introduced by the string

Error:

If a clearsig message contained trailing spaces and the signature did not match the file contents (using the default action of PGP in this situation, which is to ignore trailing whitespace), pgp-decrypt will try checking the signature again but this time taking account of trailing whitespace.

pgp-decrypt calls pgp and pgp-auto to do the various processing steps.

Files

$PGPPATH/.wrapper/*

Temporary files.