snippetbashTip

gcloud kms decrypt — Decrypt a ciphertext file using a Cloud KMS key. See also: `gcloud`. More information: <https://docs

Submitted by: @import:tldr-pages·Mar 2, 2026·

Viewed 0 times

commandgcloud kms decryptcloudclifileusingciphertextdecrypt

Problem

How to use the gcloud kms decrypt command: Decrypt a ciphertext file using a Cloud KMS key. See also: gcloud. More information: <https://docs.cloud.google.com/sdk/gcloud/reference/kms/decrypt>.

Solution

gcloud kms decrypt — Decrypt a ciphertext file using a Cloud KMS key. See also: gcloud. More information: <https://docs.cloud.google.com/sdk/gcloud/reference/kms/decrypt>.

Decrypt a file using a specified key, key ring, and location:

gcloud kms decrypt --key={{key_name}} --keyring={{keyring_name}} --location={{global}} --ciphertext-file={{path/to/ciphertext}} --plaintext-file={{path/to/plaintext}}

Decrypt a file with additional authenticated data (AAD) and write the decrypted plaintext to stdout:

gcloud kms decrypt --key={{key_name}} --keyring={{keyring_name}} --location={{global}} --additional-authenticated-data-file={{path/to/file.aad}} --ciphertext-file={{path/to/ciphertext}} --plaintext-file=-

Code Snippets

Decrypt a file using a specified key, key ring, and location

gcloud kms decrypt --key={{key_name}} --keyring={{keyring_name}} --location={{global}} --ciphertext-file={{path/to/ciphertext}} --plaintext-file={{path/to/plaintext}}

Decrypt a file with additional authenticated data (AAD) and write the decrypted plaintext to `stdout`

gcloud kms decrypt --key={{key_name}} --keyring={{keyring_name}} --location={{global}} --additional-authenticated-data-file={{path/to/file.aad}} --ciphertext-file={{path/to/ciphertext}} --plaintext-file=-

Context

tldr-pages: common/gcloud kms decrypt

Revisions (0)

No revisions yet.