NAME¶

encrypt - Encrypts a message

SYNOPSIS¶

encrypt [-o|--output] [-B|--binary] [--recipient-cert] [--signer-key] [--private-key-store] [-s|--symmetric] [--mode] [--compression] [-t|--time] [--use-expired-subkey] [-h|--help] [FILE]

DESCRIPTION¶

Encrypts a message

Encrypts a message for any number of recipients and with any number of passwords, optionally signing the message in the process.

The converse operation is "sq decrypt".

OPTIONS¶

-o, --output=FILE

Writes to FILE or stdout if omitted

-B, --binary

Emits binary data

--recipient-cert=CERT-RING

Encrypts for all recipients in CERT-RING

--signer-key=KEY

Signs the message with KEY

--private-key-store=KEY_STORE

Provides parameters for private key store

-s, --symmetric

Adds a password to encrypt with. The message can be decrypted with either one of the recipient's keys, or any password.

--mode=MODE [default: all] [possible values: transport, rest, all]

Selects what kind of keys are considered for encryption. Transport select subkeys marked as suitable for transport encryption, rest selects those for encrypting data at rest, and all selects all encryption-capable subkeys.

--compression=KIND [default: pad] [possible values: none, pad, zip, zlib, bzip2]

Selects compression scheme to use

-t, --time=TIME

Chooses keys valid at the specified time and sets the signature's creation time

--use-expired-subkey

If a certificate has only expired encryption-capable subkeys, falls back to using the one that expired last

-h, --help

Print help information

[FILE]

Reads from FILE or stdin if omitted

EXAMPLES¶

Encrypt a file using a certificate

 sq encrypt --recipient-cert romeo.pgp message.txt

Encrypt a file creating a signature in the process

 sq encrypt --recipient-cert romeo.pgp --signer-key juliet.pgp message.txt

Encrypt a file using a password

 sq encrypt --symmetric message.txt

SEE ALSO¶

For the full documentation see <https://docs.sequoia-pgp.org/sq/>.

sq(1) sq-armor(1) sq-autocrypt(1) sq-certify(1) sq-dearmor(1) sq-decrypt(1) sq-inspect(1) sq-key(1) sq-keyring(1) sq-keyserver(1) sq-packet(1) sq-revoke(1) sq-sign(1) sq-verify(1) sq-wkd(1)