FreeBSD Manual Pages
JOSE-JWE-DEC(1) JOSE-JWE-DEC(1) NAME jose-jwe-dec - Decrypts a JWE using the supplied JWKs SYNOPSIS jose jwe dec -i JWE [-I CT] -k JWK [-p] [-O PT] OVERVIEW The jose jwe dec command decrypts a JWE using one or more JWK (-k) or pass- word (-p). Decryption succeeds if any key is able to perform decryption. If the JWE is a detached JWE, meaning that the ciphertext is stored in bi- nary form external to the JWE itself, the ciphertext can be loaded using the -I parameter. Please note that, when specifying the -O option to output the plaintext, plaintext output begins before ciphertext validation. Therefore, you must check the return value of the command before using the data. OPTIONS * -i JSON, --input=JSON : Parse JWE from JSON * -i FILE, --input=FILE : Read JWE from FILE * -i -, --input=- : Read JWE from standard input * -I FILE, --detached=FILE : Read decoded ciphertext from FILE * -I -, --detached=- : Read decoded ciphertext from standard input * -p, --password : Prompt for a decryption password, if necessary * -k FILE, --key=FILE : Read JWK(Set) from FILE * -k -, --key=- : Read JWK(Set) from standard input * -O JSON, --detach=JSON : Parse JWE from JSON * -O FILE, --detach=FILE : Read JWE from FILE * -O -, --detach=- : Read JWE from standard input EXAMPLES Decrypt a JWE with a JWK: $ jose jwe dec -i msg.jwe -k rsa.key -O msg.txt Decrypt a JWE with a password: $ jose jwe dec -i msg.jwe -p -O msg.txt Please enter decryption password: Decrypt a JWE with either of two JWKs: $ jose jwe dec -i msg.jwe -k ec.jwk -k rsa.jwk -O msg.txt AUTHOR Nathaniel McCallum <npmccallum@redhat.com> SEE ALSO jose-jwe-enc(1), jose-jwe-fmt(1) 07/30/2026 JOSE-JWE-DEC(1)
NAME | SYNOPSIS | OVERVIEW | OPTIONS | EXAMPLES | AUTHOR | SEE ALSO
Want to link to this manual page? Use this URL:
<https://man.freebsd.org/cgi/man.cgi?query=jose-jwe-dec&sektion=1&manpath=FreeBSD+Ports+15.1.quarterly>