Table of Contents

About

vault decrypt is a tabul command of the Vault Module that supports the decryption of a cipher that was encrypted with the encrypt command or automatically.

Example

Every ciphertext (text encrypted) starts with the vault prefix. This cipher comes from the vault encrypt example 

tabul --passphrase hardToGuess vault decrypt tvaultQVE9PT5sSWtUZDY3ZE1zYTlGb3ordFAwYTVRPT0+MUtrMXJZdGxLdTRXT25aZXhua2xFajNCWnd5Y1RlQ1RzWW5ZR012VXJTTT0+VWx0am1vZ0xXcWJQT3BSL3oxajdWUT09

The cipher decryption:
plaintext   ciphertext
---------   ------------------------------------------------------------------------------------------------------------------------------------------
secret      tvaultQVE9PT5sSWtUZDY3ZE1zYTlGb3ordFAwYTVRPT0+MUtrMXJZdGxLdTRXT25aZXhua2xFajNCWnd5Y1RlQ1RzWW5ZR012VXJTTT0+VWx0am1vZ0xXcWJQT3BSL3oxajdWUT09

Syntax

tabul vault decrypt -h

Tabul vault decrypt
===================

Decrypt ciphertext into plaintext



Example
-------

 1 - To decrypt, you would execute


    tabul vault decrypt --passphrase difficultToGuessPassPhrase! "vaultQVE9PT5KeU1OK1RXNWNSVDJCcVRq"




Syntax
------


    tabul vault decrypt <ciphertext...>


where:


  Arguments:

    <ciphertext...>                                         One or more ciphertext to decrypt


  Global Options:

    -ah,--app-home <path>                                   The app home directory (default to the .tabul.yml file directory)

    -vf,--conf <path>                                       The path to a configuration file

    -ee,--exec-env <name>                                   The execution environment (prod or dev)

    -h,--help                                               Print this help

    -l,--log-level <error|warning|tip|info|fine>            Set the log level

    -ns,--not-strict                                        A minor error will not stop the process.

    -odu,--output-data-uri <outputDataUri>                  defines the output data uri for the feedback data (default: console)

    -oo,--output-operation <dataOperation>                  defines the data operations (replace, truncate) on an existing output resource before transfer.

    -oop,--output-transfer-operation <transferOperation>    defines the output transfer operation (insert, update, merge, copy). Default to `copy` for a file system and `insert` for a database.

    -pp,--passphrase <passphrase>                           A passphrase (master password) to decrypt the encrypted vault values (Env: TABUL_PASSPHRASE)

    --pipe-mode                                             Use pipe mode if you want to pipe the output in a shell. Pipe mode will not print the headers (ie column name) and will not make the control character visible

    -v,--version                                            Print version information