---
name: "pgpainless-cli-decrypt"
section: "1"
platform: "linux"
package: "pgpainless-cli"
version: "1.6.9-1"
release: "Debian 13 (Trixie)"
platforms: ["linux"]
url: "https://new.carta.tech/pgpainless-cli-decrypt"
---

# pgpainless-cli-decrypt(1)

Decrypt a message

## NAME

pgpainless-cli-decrypt - Decrypt a message

## SYNOPSIS

**pgpainless-cli decrypt** \[**--stacktrace**\] \[**--session-key-out**=*SESSIONKEY*\] \[**--verify-not-after**=*DATE*\] \[**--verify-not-before**=*DATE*\] \[**--verify-out**=*VERIFICATIONS*\] \[**--verify-with**=*CERT*\]... \[**--with-key-password**=*PASSWORD*\]... \[**--with-password**=*PASSWORD*\]... \[**--with-session-key**=*SESSIONKEY*\]... \[*KEY*...\]

## DESCRIPTION

## OPTIONS

- **--session-key-out**=*SESSIONKEY*

  Can be used to learn the session key on successful decryption

- **--stacktrace**

  Print stacktrace

- **--verify-not-after**=*DATE*

  ISO-8601 formatted UTC date (e.g. '2020-11-23T16:35Z)

  Reject signatures with a creation date not in range.

  Defaults to current system time ('now').

  Accepts special value '-' for end of time.

- **--verify-not-before**=*DATE*

  ISO-8601 formatted UTC date (e.g. '2020-11-23T16:35Z)

  Reject signatures with a creation date not in range.

  Defaults to beginning of time ('-').

- **--verify-out, --verifications-out**=*VERIFICATIONS*

  Emits signature verification status to the designated output

- **--verify-with**=*CERT*

  Certificates for signature verification

- **--with-key-password**=*PASSWORD*

  Passphrase to unlock the secret key(s).

  Is an INDIRECT data type (e.g. file, environment variable, file descriptor...).

- **--with-password**=*PASSWORD*

  Symmetric passphrase to decrypt the message with.

  Enables decryption based on any "SKESK" packets in the "CIPHERTEXT".

  Is an INDIRECT data type (e.g. file, environment variable, file descriptor...).

- **--with-session-key**=*SESSIONKEY*

  Symmetric message key (session key).

  Enables decryption of the "CIPHERTEXT" using the session key directly against the "SEIPD" packet.

  Is an INDIRECT data type (e.g. file, environment variable, file descriptor...).

## ARGUMENTS

\[*KEY*...\]

Secret keys to attempt decryption with