commands.sh

gcloud kms decrypt

all

Decrypt a ciphertext file using a Cloud KMS key. See also: `gcloud`.

More info →

Examples (2)

Decrypt a file using a specified key, key ring, and location

gcloud kms decrypt --key=key_name --keyring=keyring_name --location=global --ciphertext-file=path/to/ciphertext --plaintext-file=path/to/plaintext

Decrypt a file with additional authenticated data (AAD) and write the decrypted plaintext to `stdout`

gcloud kms decrypt --key=key_name --keyring=keyring_name --location=global --additional-authenticated-data-file=path/to/file.aad --ciphertext-file=path/to/ciphertext --plaintext-file=-
made by @shridhargupta | data from tldr-pages