gpg-sq(1)

NAME
gpg-sq - This is a re-implementation and drop-in replacement of gpg using the Sequoia OpenPGP implementation. gpg-sq is not feature-complete. It currently implements a commonly used subset of the signature creation and verification commands, the encryption and decryption commands, the key listing commands, and some miscellaneous commands. Support for trust models is limited. Currently, the Web-of-Trust ("pgp") and always trust ("always") are implemented.

SYNOPSIS
gpg-sq [-s|--sign] [--clear-sign] [--clearsign] [-b|--detach-sign] [-e|--encrypt] [--encrypt-files] [-c|--symmetric] [--store] [-d|--decrypt] [--decrypt-files] [--verify] [--verify-files] [-k|--list-keys] [--list-public-keys] [--list-signatures] [--list-sigs] [--check-signatures] [--check-sigs] [--fingerprint] [-K|--list-secret-keys] [--generate-key] [--gen-key] [--quick-generate-key] [--quick-gen-key] [--quick-add-uid] [--quick-adduid] [--quick-add-key] [--quick-addkey] [--quick-revoke-uid] [--quick-revuid] [--quick-set-expire] [--quick-set-primary-uid] [--full-generate-key] [--full-gen-key] [--generate-revocation] [--gen-revoke] [--delete-keys] [--delete-secret-keys] [--quick-sign-key] [--quick-lsign-key] [--quick-revoke-sig] [--sign-key] [--lsign-key] [--edit-key] [--key-edit] [--change-passphrase] [--passwd] [--generate-designated-revocation] [--desig-revoke] [--export] [--send-keys] [--receive-keys] [--recv-keys] [--search-keys] [--refresh-keys] [--locate-keys] [--locate-external-keys] [--fetch-keys] [--show-keys] [--export-secret-keys] [--export-secret-subkeys] [--export-ssh-key] [--import] [--fast-import] [--list-config] [--list-gcrypt-config] [--gpgconf-list] [--gpgconf-test] [--list-packets] [--export-ownertrust] [--import-ownertrust] [--update-trustdb] [--check-trustdb] [--fix-trustdb] [--list-trustdb] [--dearmor] [--dearmour] [--enarmor] [--enarmour] [--print-md] [--print-mds] [--gen-prime] [--gen-random] [--server] [--tofu-policy] [--delete-secret-and-public-keys] [--rebuild-keydb-caches] [--list-key] [--list-sig] [--check-sig] [--show-key] [--Monitor] [-v|--verbose] [--no-verbose] [-q|--quiet] [--no-tty] [--no-greeting] [--debug] [--debug-level] [--debug-all] [--debug-iolbf] [--display-charset] [--charset] [--options] [--no-options] [--logger-fd] [--log-file] [--logger-file] [--debug-quick-random] [--Configuration] [--homedir] [--faked-system-time] [--default-key] [--encrypt-to] [--no-encrypt-to] [--hidden-encrypt-to] [--encrypt-to-default-key] [--default-recipient] [--default-recipient-self] [--no-default-recipient] [--group] [--ungroup] [--no-groups] [--compliance] [--gnupg] [--no-pgp2] [--no-pgp6] [--no-pgp7] [--no-pgp8] [--rfc2440] [--rfc4880] [--rfc4880bis] [--openpgp] [--pgp6] [--pgp7] [--pgp8] [--default-new-key-algo] [--min-rsa-length] [--always-trust] [--trust-model] [--photo-viewer] [--known-notation] [--agent-program] [--dirmngr-program] [--exit-on-status-write-error] [--limit-card-insert-tries] [--enable-progress-filter] [--temp-directory] [--exec-path] [--expert] [--no-expert] [--no-secmem-warning] [--require-secmem] [--no-require-secmem] [--no-permission-warning] [-n|--dry-run] [-i|--interactive] [--default-sig-expire] [--ask-sig-expire] [--no-ask-sig-expire] [--default-cert-expire] [--ask-cert-expire] [--no-ask-cert-expire] [--default-cert-level] [--min-cert-level] [--ask-cert-level] [--no-ask-cert-level] [--only-sign-text-ids] [--enable-large-rsa] [--disable-large-rsa] [--enable-dsa2] [--disable-dsa2] [--personal-cipher-preferences] [--personal-digest-preferences] [--personal-compress-preferences] [--default-preference-list] [--default-keyserver-url] [--no-expensive-trust-checks] [--allow-non-selfsigned-uid] [--no-allow-non-selfsigned-uid] [--allow-freeform-uid] [--no-allow-freeform-uid] [--preserve-permissions] [--default-cert-check-level] [--tofu-default-policy] [--lock-once] [--lock-multiple] [--lock-never] [--compress-algo] [--compression-algo] [--bzip2-decompress-lowmem] [--completes-needed] [--marginals-needed] [--max-cert-depth] [--trustdb-name] [--auto-check-trustdb] [--no-auto-check-trustdb] [--force-ownertrust] [--Input] [--multifile] [--input-size-hint] [--utf8-strings] [--no-utf8-strings] [--set-filesize] [--no-literal] [--set-notation] [--sig-notation] [--cert-notation] [--set-policy-url] [--sig-policy-url] [--cert-policy-url] [--sig-keyserver-url] [--Output] [-a|--armor] [--armour] [--no-armor] [--no-armour] [-o|--output] [--max-output] [--comment] [--default-comment] [--no-comments] [--emit-version] [--no-emit-version] [--no-version] [--not-dash-escaped] [--escape-from-lines] [--no-escape-from-lines] [--mimemode] [--textmode] [--no-textmode] [--set-filename] [--for-your-eyes-only] [--no-for-your-eyes-only] [--show-notation] [--no-show-notation] [--show-session-key] [--use-embedded-filename] [--no-use-embedded-filename] [--unwrap] [--mangle-dos-filenames] [--no-mangle-dos-filenames] [--no-symkey-cache] [--skip-verify] [--list-only] [-z ] [--compress-level] [--bzip2-compress-level] [--disable-signer-uid] [--ImportExport] [--auto-key-locate] [--no-auto-key-locate] [--auto-key-import] [--no-auto-key-import] [--auto-key-retrieve] [--no-auto-key-retrieve] [--include-key-block] [--no-include-key-block] [--disable-dirmngr] [--keyserver] [--keyserver-options] [--key-origin] [--import-options] [--import-filter] [--export-options] [--export-filter] [--merge-only] [--allow-secret-key-import] [--Keylist] [--list-options] [--show-photos] [--no-show-photos] [--show-policy-url] [--no-show-policy-url] [--with-colons] [--with-tofu-info] [--with-key-data] [--with-sig-list] [--with-sig-check] [--with-fingerprint] [--with-subkey-fingerprint] [--with-subkey-fingerprints] [--with-icao-spelling] [--with-keygrip] [--with-secret] [--with-wkd-hash] [--with-key-origin] [--fast-list-mode] [--fixed-list-mode] [--legacy-list-mode] [--print-pka-records] [--print-dane-records] [--keyid-format] [--show-keyring] [-r|--recipient] [--hidden-recipient] [--recipient-file] [--hidden-recipient-file] [--remote-user] [--throw-keyids] [--no-throw-keyids] [-u|--local-user] [--trusted-key] [--sender] [--try-secret-key] [--try-all-secrets] [--no-default-keyring] [--no-keyring] [--keyring] [--primary-keyring] [--secret-keyring] [--skip-hidden-recipients] [--no-skip-hidden-recipients] [--override-session-key] [--override-session-key-fd] [--Security] [--s2k-mode] [--s2k-digest-algo] [--s2k-cipher-algo] [--s2k-count] [--require-backsigs] [--require-cross-certification] [--no-require-backsigs] [--no-require-cross-certification] [--verify-options] [--enable-special-filenames] [--no-random-seed-file] [--no-sig-cache] [--ignore-time-conflict] [--ignore-valid-from] [--ignore-crc-error] [--ignore-mdc-error] [--disable-cipher-algo] [--disable-pubkey-algo] [--cipher-algo] [--digest-algo] [--cert-digest-algo] [--override-compliance-check] [--allow-weak-key-signatures] [--allow-weak-digest-algos] [--weak-digest] [--allow-multisig-verification] [--allow-multiple-messages] [--no-allow-multiple-messages] [--batch] [--no-batch] [--yes] [--no] [--status-fd] [--status-file] [--attribute-fd] [--attribute-file] [--command-fd] [--command-file] [--passphrase] [--passphrase-fd] [--passphrase-file] [--passphrase-repeat] [--pinentry-mode] [--force-sign-key] [--request-origin] [--display] [--ttyname] [--ttytype] [--lc-ctype] [--lc-messages] [--xauthority] [--no-autostart] [--forbid-gen-key] [--require-compliance] [--use-only-openpgp-card] [--rfc2440-text] [--no-rfc2440-text] [--personal-cipher-prefs] [--personal-digest-prefs] [--personal-compress-prefs] [--sign-with] [--user] [--use-agent] [--no-use-agent] [--gpg-agent-info] [--reader-port] [--ctapi-driver] [--pcsc-driver] [--disable-ccid] [--honor-http-proxy] [--tofu-db-format] [--strict] [--no-strict] [--load-extension] [--sk-comments] [--no-sk-comments] [--compress-keys] [--compress-sigs] [--force-v3-sigs] [--no-force-v3-sigs] [--force-v4-certs] [--no-force-v4-certs] [--no-mdc-warning] [--force-mdc] [--no-force-mdc] [--disable-mdc] [--no-disable-mdc] [--x-sequoia-parcimonie] [--x-sequoia-autostart-parcimonie] [--x-sequoia-parcimonie-daemonize] [--warranty] [--dump-option-table] [--dump-options] [-h|--help]

DESCRIPTION
This is a re-implementation and drop-in replacement of gpg using the Sequoia OpenPGP implementation.

gpg-sq is not feature-complete. It currently implements a commonly used subset of the signature creation and verification commands, the encryption and decryption commands, the key listing commands, and some miscellaneous commands.

Support for trust models is limited. Currently, the Web-of-Trust ("pgp") and always trust ("always") are implemented.

OPTIONS

-s, --sign
    make a signature

--clear-sign
    make a clear text signature

--clearsign
    @

-b, --detach-sign
    make a detached signature

-e, --encrypt
    encrypt data

--encrypt-files
    @

-c, --symmetric
    encryption only with symmetric cipher

--store
    @

-d, --decrypt
    decrypt data (default)

--decrypt-files
    @

--verify
    verify a signature

--verify-files
    @

-k, --list-keys
    list keys

--list-public-keys
    @

--list-signatures
    list keys and signatures

--list-sigs
    @

--check-signatures
    list and check key signatures

--check-sigs
    @

--fingerprint
    list keys and fingerprints

-K, --list-secret-keys
    list secret keys

--generate-key
    generate a new key pair

--gen-key
    @

--quick-generate-key
    quickly generate a new key pair

--quick-gen-key
    @

--quick-add-uid
    quickly add a new user-id

--quick-adduid
    @

--quick-add-key
    @

--quick-addkey
    @

--quick-revoke-uid
    quickly revoke a user-id

--quick-revuid
    @

--quick-set-expire
    quickly set a new expiration date

--quick-set-primary-uid
    @

--full-generate-key
    full featured key pair generation

--full-gen-key
    @

--generate-revocation
    generate a revocation certificate

--gen-revoke
    @

--delete-keys
    remove keys from the public keyring

--delete-secret-keys
    remove keys from the secret keyring

--quick-sign-key
    quickly sign a key

--quick-lsign-key
    quickly sign a key locally

--quick-revoke-sig
    quickly revoke a key signature

--sign-key
    sign a key

--lsign-key
    sign a key locally

--edit-key
    sign or edit a key

--key-edit
    @

--change-passphrase
    change a passphrase

--passwd
    @

--generate-designated-revocation
    @

--desig-revoke
    @

--export
    export keys

--send-keys
    export keys to a keyserver

--receive-keys
    import keys from a keyserver

--recv-keys
    @

--search-keys
    search for keys on a keyserver

--refresh-keys
    update all keys from a keyserver

--locate-keys
    @

--locate-external-keys
    @

--fetch-keys
    @

--show-keys
    @

--export-secret-keys
    @

--export-secret-subkeys
    @

--export-ssh-key
    @

--import
    import/merge keys

--fast-import
    @

--list-config
    @

--list-gcrypt-config
    @

--gpgconf-list
    @

--gpgconf-test
    @

--list-packets
    @

--export-ownertrust
    @

--import-ownertrust
    @

--update-trustdb
    update the trust database

--check-trustdb
    @

--fix-trustdb
    @

--list-trustdb
    @

--dearmor
    @

--dearmour
    @

--enarmor
    @

--enarmour
    @

--print-md
    print message digests

--print-mds
    @

--gen-prime
    @

--gen-random
    @

--server
    run in server mode

--tofu-policy=VALUE
    set the TOFU policy for a key

--delete-secret-and-public-keys
    @

--rebuild-keydb-caches
    @

--list-key
    @

--list-sig
    @

--check-sig
    @

--show-key
    @

--Monitor
    Options controlling the diagnostic output

-v, --verbose
    verbose

--no-verbose
    @

-q, --quiet
    be somewhat more quiet

--no-tty
    @

--no-greeting
    @

--debug
    @

--debug-level
    @

--debug-all
    @

--debug-iolbf
    @

--display-charset
    @

--charset
    @

--options=FILE
    read options from FILE

--no-options
    @

--logger-fd
    @

--log-file=FILE
    write server mode logs to FILE

--logger-file
    @

--debug-quick-random
    @

--Configuration
    Options controlling the configuration

--homedir
    @

--faked-system-time
    @

--default-key=NAME
    use NAME as default secret key

--encrypt-to=NAME
    encrypt to user ID NAME as well

--no-encrypt-to
    @

--hidden-encrypt-to
    @

--encrypt-to-default-key
    @

--default-recipient
    @

--default-recipient-self
    @

--no-default-recipient
    @

--group=SPEC
    set up email aliases

--ungroup
    @

--no-groups
    @

--compliance
    @

--gnupg
    @

--no-pgp2
    @

--no-pgp6
    @

--no-pgp7
    @

--no-pgp8
    @

--rfc2440
    @

--rfc4880
    @

--rfc4880bis
    @

--openpgp
    use strict OpenPGP behavior

--pgp6
    @

--pgp7
    @

--pgp8
    @

--default-new-key-algo
    @

--min-rsa-length
    @

--always-trust
    @

--trust-model
    @

--photo-viewer
    @

--known-notation
    @

--agent-program
    @

--dirmngr-program
    @

--exit-on-status-write-error
    @

--limit-card-insert-tries
    @

--enable-progress-filter
    @

--temp-directory
    @

--exec-path
    @

--expert
    @

--no-expert
    @

--no-secmem-warning
    @

--require-secmem
    @

--no-require-secmem
    @

--no-permission-warning
    @

-n, --dry-run
    do not make any changes

-i, --interactive
    prompt before overwriting

--default-sig-expire
    @

--ask-sig-expire
    @

--no-ask-sig-expire
    @

--default-cert-expire
    @

--ask-cert-expire
    @

--no-ask-cert-expire
    @

--default-cert-level
    @

--min-cert-level
    @

--ask-cert-level
    @

--no-ask-cert-level
    @

--only-sign-text-ids
    @

--enable-large-rsa
    @

--disable-large-rsa
    @

--enable-dsa2
    @

--disable-dsa2
    @

--personal-cipher-preferences
    @

--personal-digest-preferences
    @

--personal-compress-preferences
    @

--default-preference-list
    @

--default-keyserver-url
    @

--no-expensive-trust-checks
    @

--allow-non-selfsigned-uid
    @

--no-allow-non-selfsigned-uid
    @

--allow-freeform-uid
    @

--no-allow-freeform-uid
    @

--preserve-permissions
    @

--default-cert-check-level
    @

--tofu-default-policy
    @

--lock-once
    @

--lock-multiple
    @

--lock-never
    @

--compress-algo
    @

--compression-algo
    @

--bzip2-decompress-lowmem
    @

--completes-needed
    @

--marginals-needed
    @

--max-cert-depth
    @

--trustdb-name
    @

--auto-check-trustdb
    @

--no-auto-check-trustdb
    @

--force-ownertrust
    @

--Input
    Options controlling the input

--multifile
    @

--input-size-hint
    @

--utf8-strings
    @

--no-utf8-strings
    @

--set-filesize
    @

--no-literal
    @

--set-notation
    @

--sig-notation
    @

--cert-notation
    @

--set-policy-url
    @

--sig-policy-url
    @

--cert-policy-url
    @

--sig-keyserver-url
    @

--Output
    Options controlling the output

-a, --armor
    create ascii armored output

--armour
    @

--no-armor
    @

--no-armour
    @

-o, --output=FILE
    write output to FILE

--max-output
    @

--comment
    @

--default-comment
    @

--no-comments
    @

--emit-version
    @

--no-emit-version
    @

--no-version
    @

--not-dash-escaped
    @

--escape-from-lines
    @

--no-escape-from-lines
    @

--mimemode
    @

--textmode
    use canonical text mode

--no-textmode
    @

--set-filename
    @

--for-your-eyes-only
    @

--no-for-your-eyes-only
    @

--show-notation
    @

--no-show-notation
    @

--show-session-key
    @

--use-embedded-filename
    @

--no-use-embedded-filename
    @

--unwrap
    @

--mangle-dos-filenames
    @

--no-mangle-dos-filenames
    @

--no-symkey-cache
    @

--skip-verify
    @

--list-only
    @

-z=N
    set compress level to N (0 disables)

--compress-level
    @

--bzip2-compress-level
    @

--disable-signer-uid
    @

--ImportExport
    Options controlling key import and export

--auto-key-locate=MECHANISMS
    use MECHANISMS to locate keys by mail address

--no-auto-key-locate
    @

--auto-key-import
    import missing key from a signature

--no-auto-key-import
    @

--auto-key-retrieve
    @

--no-auto-key-retrieve
    @

--include-key-block
    include the public key in signatures

--no-include-key-block
    @

--disable-dirmngr
    disable all access to the dirmngr

--keyserver
    @

--keyserver-options
    @

--key-origin
    @

--import-options
    @

--import-filter
    @

--export-options
    @

--export-filter
    @

--merge-only
    @

--allow-secret-key-import
    @

--Keylist
    Options controlling key listings

--list-options
    @

--show-photos
    @

--no-show-photos
    @

--show-policy-url
    @

--no-show-policy-url
    @

--with-colons
    @

--with-tofu-info
    @

--with-key-data
    @

--with-sig-list
    @

--with-sig-check
    @

--with-fingerprint
    @

--with-subkey-fingerprint
    @

--with-subkey-fingerprints
    @

--with-icao-spelling
    @

--with-keygrip
    @

--with-secret
    @

--with-wkd-hash
    @

--with-key-origin
    @

--fast-list-mode
    @

--fixed-list-mode
    @

--legacy-list-mode
    @

--print-pka-records
    @

--print-dane-records
    @

--keyid-format
    @

--show-keyring
    @

-r, --recipient=USERID
    encrypt for USERID

--hidden-recipient
    @

--recipient-file
    @

--hidden-recipient-file
    @

--remote-user
    @

--throw-keyids
    @

--no-throw-keyids
    @

-u, --local-user=USERID
    use USERID to sign or decrypt

--trusted-key
    @

--sender
    @

--try-secret-key
    @

--try-all-secrets
    @

--no-default-keyring
    @

--no-keyring
    @

--keyring
    @

--primary-keyring
    @

--secret-keyring
    @

--skip-hidden-recipients
    @

--no-skip-hidden-recipients
    @

--override-session-key
    @

--override-session-key-fd
    @

--Security
    Options controlling the security

--s2k-mode
    @

--s2k-digest-algo
    @

--s2k-cipher-algo
    @

--s2k-count
    @

--require-backsigs
    @

--require-cross-certification
    @

--no-require-backsigs
    @

--no-require-cross-certification
    @

--verify-options
    @

--enable-special-filenames
    @

--no-random-seed-file
    @

--no-sig-cache
    @

--ignore-time-conflict
    @

--ignore-valid-from
    @

--ignore-crc-error
    @

--ignore-mdc-error
    @

--disable-cipher-algo
    @

--disable-pubkey-algo
    @

--cipher-algo
    @

--digest-algo
    @

--cert-digest-algo
    @

--override-compliance-check
    @

--allow-weak-key-signatures
    @

--allow-weak-digest-algos
    @

--weak-digest
    @

--allow-multisig-verification
    @

--allow-multiple-messages
    @

--no-allow-multiple-messages
    @

--batch
    @

--no-batch
    @

--yes
    @

--no
    @

--status-fd
    @

--status-file
    @

--attribute-fd
    @

--attribute-file
    @

--command-fd
    @

--command-file
    @

--passphrase
    @

--passphrase-fd
    @

--passphrase-file
    @

--passphrase-repeat
    @

--pinentry-mode
    @

--force-sign-key
    @

--request-origin
    @

--display
    @

--ttyname
    @

--ttytype
    @

--lc-ctype
    @

--lc-messages
    @

--xauthority
    @

--no-autostart
    @

--forbid-gen-key
    @

--require-compliance
    @

--use-only-openpgp-card
    @

--rfc2440-text
    @

--no-rfc2440-text
    @

--personal-cipher-prefs
    @

--personal-digest-prefs
    @

--personal-compress-prefs
    @

--sign-with
    @

--user
    @

--use-agent
    @

--no-use-agent
    @

--gpg-agent-info
    @

--reader-port
    @

--ctapi-driver
    @

--pcsc-driver
    @

--disable-ccid
    @

--honor-http-proxy
    @

--tofu-db-format
    @

--strict
    @

--no-strict
    @

--load-extension
    @

--sk-comments
    @

--no-sk-comments
    @

--compress-keys
    @

--compress-sigs
    @

--force-v3-sigs
    @

--no-force-v3-sigs
    @

--force-v4-certs
    @

--no-force-v4-certs
    @

--no-mdc-warning
    @

--force-mdc
    @

--no-force-mdc
    @

--disable-mdc
    @

--no-disable-mdc
    @

--x-sequoia-parcimonie
    continuously update certificates

--x-sequoia-autostart-parcimonie
    automatically start daemon to update certs

--x-sequoia-parcimonie-daemonize
    @

--warranty
    @

--dump-option-table
    @

--dump-options
    @

-h, --help
    Print help

VERSION
v0.5.1