NAME

encrypt - Encrypts a message

SYNOPSIS

Encrypts a message

Encrypts a message for any number of recipients and with any number of passwords, optionally signing the message in the process.

The converse operation is "sq decrypt".

-o, --output=FILE: Writes to FILE or stdout if omitted
-B, --binary: Emits binary data
--recipient-cert=CERT-RING: Encrypts for all recipients in CERT-RING
--signer-key=KEY: Signs the message with KEY
--private-key-store=KEY_STORE: Provides parameters for private key store
-s, --symmetric: Adds a password to encrypt with. The message can be decrypted with either one of the recipient's keys, or any password.
--mode=MODE [default: all] [possible values: transport, rest, all]: Selects what kind of keys are considered for encryption. Transport select subkeys marked as suitable for transport encryption, rest selects those for encrypting data at rest, and all selects all encryption-capable subkeys.
--compression=KIND [default: pad] [possible values: none, pad, zip, zlib, bzip2]: Selects compression scheme to use
-t, --time=TIME: Chooses keys valid at the specified time and sets the signature's creation time
--use-expired-subkey: If a certificate has only expired encryption-capable subkeys, falls back to using the one that expired last
-h, --help: Print help information
[FILE]: Reads from FILE or stdin if omitted

Encrypt a file using a certificate



 sq encrypt --recipient-cert romeo.pgp message.txt

Encrypt a file creating a signature in the process



 sq encrypt --recipient-cert romeo.pgp --signer-key juliet.pgp message.txt

Encrypt a file using a password



 sq encrypt --symmetric message.txt