SQ(1)

NAME
sq encrypt - Encrypts a message

SYNOPSIS
sq [GLOBAL OPTIONS] encrypt [OPTIONS] FILE

DESCRIPTION
Encrypts a message.

Encrypts a message for any number of recipients and with any number of passwords, optionally signing the message in the process.

The converse operation is "sq decrypt".

"sq encrypt" respects the reference time set by the top-level "--time" argument. It uses the reference time when selecting encryption keys, and it sets the signature's creation time to the reference time.

OPTIONS

  Global options

--cert-store=PATH
    Specifies the location of the certificate store

-f, --force=FORCE
    Overwrites existing files

--keyring=PATH
    Specifies the location of a keyring to use

--known-notation=NOTATION
    Adds NOTATION to the list of known notations

--no-cert-store=NO_CERT_STORE
    Disables the use of a certificate store

--output-format=FORMAT
    Produces output in FORMAT, if possible

--output-version=VERSION
    Produces output variant VERSION.

--pep-cert-store=PATH
    Specifies the location of a pEp certificate store

--time=TIME
    Sets the reference time as ISO 8601 formatted timestamp

--trust-root=FINGERPRINT|KEYID
    Considers the specified certificate to be a trust root

  Subcommand options

-B, --binary=BINARY
    Emits binary data

--compression=KIND
    Selects compression scheme to use

--mode=MODE
    Selects what kind of keys are considered for encryption.

-o, --output=FILE
    Writes to FILE or stdout if omitted

--private-key-store=KEY_STORE
    Provides parameters for private key store

--recipient-cert=FINGERPRINT|KEYID
    Encrypts to the named certificates

--recipient-email=EMAIL
    Encrypts to all certificates that can be authenticated for the specified email address

--recipient-file=CERT_RING_FILE
    Encrypts to all certificates in CERT_RING_FILE

--recipient-userid=USERID
    Encrypts to all certificates that can be authenticated for the specified User ID

-s, --symmetric=SYMMETRIC
    Adds a password to encrypt with

--signer-file=KEY_FILE
    Signs the message using the key in KEY_FILE

--use-expired-subkey=USE_EXPIRED_SUBKEY
    Falls back to expired encryption subkeys

EXAMPLES

Encrypt a file using a certificate

    sq encrypt --recipient-file romeo.pgp message.txt

Encrypt a file creating a signature in the process

    sq encrypt --recipient-file romeo.pgp --signer-file juliet.pgp message.txt

Encrypt a file using a password

    sq encrypt --symmetric message.txt

SEE ALSO
sq(1).

For the full documentation see <https://docs.sequoia-pgp.org/sq/>.

VERSION
0.31.0 (sequoia-openpgp 1.16.0, using Nettle 3.9 (Cv448: true))