CmdID / aws / aws payment-cryptography-data

aws payment-cryptography-data decrypt-data

Decrypts ciphertext data to plaintext using a symmetric (TDES, AES), asymmetric (RSA), or derived (DUKPT or EMV) encryption key scheme. AWS CLI reference

1 example 4 options Its page in the AWS CLI reference

Examples

from aws-cli, each command read by CmdID

To decrypt ciphertext

The following decrypt-data example decrypts ciphertext data using a symmetric key. For this operation, the key must have KeyModesOfUse set to Decrypt and KeyUsage set to TR31_D0_SYMMETRIC_DATA_ENCRYPTION_KEY.

aws payment-cryptography-data decrypt-data --key-identifier arn:aws:payment-cryptography:us-west-2:123456789012:key/kwapwa6qaifllw2h --cipher-text 33612AB9D6929C3A828EB6030082B2BD --decryption-attributes 'Symmetric={Mode=CBC}'

Identify

--key-identifierThe keyARN of the encryption key that Amazon Web Services Payment Cryptography uses for ciphertext decryption.

--cipher-textThe ciphertext to decrypt.

--decryption-attributesThe encryption key type and attributes for ciphertext decryption.

Its output

{
    "KeyArn": "arn:aws:payment-cryptography:us-west-2:123456789012:key/kwapwa6qaifllw2h",
    "KeyCheckValue": "71D7AE",
    "PlainText": "31323334313233343132333431323334"
}

For more information, see Decrypt data in the AWS Payment Cryptography User Guide.

Options

4 in the AWS CLI reference

--cipher-textThe ciphertext to decrypt.

--decryption-attributesThe encryption key type and attributes for ciphertext decryption.

--key-identifierThe keyARN of the encryption key that Amazon Web Services Payment Cryptography uses for ciphertext decryption.

--wrapped-keyThe WrappedKeyBlock containing the encryption key for ciphertext decryption.