NAME¶
yhsm-decrypt-aead ‐ Decrypt AEADs (with secrets for YubiKeys)
SYNOPSIS¶
yhsm-decrypt-aead [options] --aes-key KEY file-or-dir [...]
DESCRIPTION¶
Decrypt AEADs generated using a YubiHSM.
NOTE that this requires
knowledge of the AES key used in the YubiHSM.
After a number of YubiKey secrets have been generated using
yhsm-generate-keys(1) , this tool can decrypt them and produce a CSV
file usable to personalize corresponding YubiKeys.
OPTIONS¶
- -v, --verbose
- Enable verbose operation.
- --debug
- Enable debug printout.
- --format str
- Select output format (raw or yubikey-csv).
- --print-filename
- Prefix any output with the input filename.
- --key-handle kh
- Key handle used when generated AEADs, if not stored in the AEAD file (AEAD
generated with python-pyhsm 1.0.3 or lower).
- --aes-key hexstr
- AES key used to generate the AEADs.
EXIT STATUS¶
- 0
- OK
- 1
- Fail
BUGS¶
Report python-pyhsm/yhsm-decrypt-aead bugs in the issue tracker ⟨URL:
https://github.com/Yubico/python-pyhsm/issues/ ⟩
SEE ALSO¶
The home page ⟨URL:
https://developers.yubico.com/python-pyhsm/ ⟩
YubiHSMs and YubiKeys can be obtained from Yubico ⟨URL:
http://www.yubico.com/ ⟩.
