文档

Decryption

The aiguard decrypt [options] command is used to decrypt datasets and model scripts.

In the preceding command, [options] indicates the CLI options. For details about these options, see Table 1.

Table 1 Parameter description

Parameter

Description

--input_path

or

-i
Mandatory. It indicates the path of the plaintext data to be decrypted. Data to be decrypted can be in the following types:
  • Single file: File permission is 600 or 400.
  • Single folder: Folder permission is 700 or 500, and the permissions on the files in the folder is 600, 500, or 400.
  • All data in the directory and its subdirectories under the path will be decrypted. However, the total number of files to be decrypted at a time cannot exceed 2 x 107.
  • The size of a single file to be decrypted must be less than 11 GB.
NOTE:

Ensure that the owner group of the encryption/decryption tool is the same as that of the data to be encrypted and decrypted. After the encryption or decryption is complete, check whether the file permission meets the requirements.

--output_path

or

-o

Mandatory. It indicates the path for storing the decryption result.

NOTE:
  • The path cannot be a directory or subdirectory at the same level as --input/-i.
  • Ensure that you have at least the 700 permission on the path.

--h or --help

Optional. It displays the help information.

-f or --key_file

Mandatory. It specifies the file path of the master key exported from AI-VAULT. The encryption password of the master key is required to set this parameter.

-e or --encrypt_tool

Optional. Decryption tool. 0 (default) indicates crypto_fs, and 1 indicates client_tool.