gcloud beta kms decapsulate

NAME
gcloud beta kms decapsulate - decapsulate an input file using a key-encapsulation key version
SYNOPSIS
gcloud beta kms decapsulate--ciphertext-file=CIPHERTEXT_FILE--shared-secret-file=SHARED_SECRET_FILE[--key=KEY][--keyring=KEYRING][--location=LOCATION][--skip-integrity-verification][--version=VERSION][GCLOUD_WIDE_FLAG …]
DESCRIPTION
(BETA) Decapsulates the given ciphertext file using the providedkey-encapsulation key version and saves the decapsulated shared secret to theshared secret file.

By default, the command performs integrity verification on data sent to andreceived from Cloud KMS. Use--skip-integrity-verification todisable integrity verification.

EXAMPLES
The following command will read the file '/tmp/my/secret.file.enc', decapsulateit using the key encapsulation CryptoKeymy-key Version 3 and writethe shared secret to '/tmp/my/secret.file.dec'.
gcloudbetakmsdecapsulate--location=us-central1--keyring=my-keyring--key=my-key--version=3--ciphertext-file=/tmp/my/secret.file.enc--shared-secret-file=/tmp/my/secret.file.dec
REQUIRED FLAGS
--ciphertext-file=CIPHERTEXT_FILE
File path of the ciphertext file to decapsulate.
--shared-secret-file=SHARED_SECRET_FILE
File path of the shared secret file to output.
OPTIONAL FLAGS
--key=KEY
to use for decapsulation.
--keyring=KEYRING
Key ring of the key.
--location=LOCATION
Location of the keyring.
--skip-integrity-verification
Skip integrity verification on request and response API fields.
--version=VERSION
Version to use for decapsulation.
GCLOUD WIDE FLAGS
These flags are available to all commands:--access-token-file,--account,--billing-project,--configuration,--flags-file,--flatten,--format,--help,--impersonate-service-account,--log-http,--project,--quiet,--trace-token,--user-output-enabled,--verbosity.

Run$gcloud help for details.

NOTES
This command is currently in beta and might change without notice. Thesevariants are also available:
gcloudkmsdecapsulate
gcloudalphakmsdecapsulate

Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2025-09-16 UTC.