-c, --cipher --cipher | The NAME argument specifies the symmetric cipher to be used. | help + man |
-e, --encrypt --encrypt | Perform an encryption operation on the input data. | help + man |
-d, --decrypt --decrypt | Perform a decryption operation on the input data. | help + man |
-i, --infile --infile | Use the file referenced with FILE as the input data. | help + man |
-o, --outfile --outfile | Use the file referenced with FILE as the destination for the output of the cryptographic operation. | help + man |
--iv IV | Use the IV data as initialization vector for the cryptographic operation. | help + man |
--aad AAD | For AEAD ciphers like CCM, GCM or the authenc ciphers of the Linux kernel crypto API, the additional authentication data can be provided with the AAD parameter. | help + man |
--tag TAG | The AEAD tag value required for the decryption operation is provided with the TAG parameter. | help + man |
--taglen BYTES | During encryption operation of AEAD ciphers, the tag is generated. | help + man |
--ccm-nonce NONCE | Use the NONCE data as CCM nonce as defined in SP800-38C Appendix A.2. | help + man |
--key-len LENGTH | LENGTH specifies length of the key passed to the cipher algorithm. | help + man |
-s --salt | Salt for PBKDF2 | help |
-p, --passwd --passwd | The PASSWORD parameter provides the password from which the symmetric key is derived used to encrypt or decrypt the data. | help + man |
--passwdfd FD | Instead of providing the password via command line, it can be injected into kcapi-enc using a file descriptor. | help + man |
--pbkdfiter NUM | Perform NUM iterations of the PBKDF2 operation to derive the symmetric key. | help + man |
--pbkdfmac MAC | Use the keyed message digest referenced with MAC for the PBKDF2 operation. | help + man |
--keyfd FD | To provide a symmetric key that is directly used for the cryptographic operation, the file descriptor referenced with FD must be used. | help + man |
--nounpad | During decryption and when the input data is provided via a file as well as the output is written to a file, kcapi-enc automatically tries to detect a padding and removes the padding data. | help + man |
-h, --help --help | Display the help text. | help + man |
--version | Display the version number of the kcapi-enc application. | help + man |
-v, --verbose --verbose | Verbose logging, multiple options increase verbosity | help + man |
-q, --quiet --quiet | No informational output - quiet operation | help + man |
--salt SALT | When performing the PBKDF2 operation to obtain the symmetric key from the password, the SALT value is used as one input parameter. (in the manual page but not in --help) | man |