yhsm-decrypt-aead(1)

yhsm-decrypt-aead1

Decrypt aeads (with secrets for yubikeys)

Usage

yhsm-decrypt-aead [options] --aes-key KEY file-or-dir []

Overview

Decrypt AEADs generated using a YubiHSM. NOTE that this requires knowledge of the AES key used in the YubiHSM.

After a number of YubiKey secrets have been generated using yhsm-generate-keys(1) , this tool can decrypt them and produce a CSV file usable to personalize corresponding YubiKeys.

Options

-v, --verbose

Enable verbose operation.

--debug

Enable debug printout.

--format str

Select output format (raw or yubikey-csv).

--print-filename

Prefix any output with the input filename.

--key-handle kh

Key handle used when generated AEADs, if not stored in the AEAD file (AEAD generated with python-pyhsm 1.0.3 or lower).

--aes-key hexstr

AES key used to generate the AEADs.

Exit status

0

OK

1

Fail

Releases

4 releases since Debian 7 (Wheezy); the text changed 1 time.

  1. 7
  2. 8–10

Bugs

Report python-pyhsm/yhsm-decrypt-aead bugs in the issue tracker ⟨URL: https://github.com/Yubico/python-pyhsm/issues/ ⟩

From yhsm-tools 1.2.1-1 in Debian 10 (Buster). Parsed by carta from the page's man source.