AES-256-GCM file encryption with Argon2id key derivation
cipherlock encrypts and decrypts files using AES-256-GCM authenticated encryption with Argon2id memory-hard key derivation.
It supports single files, entire directories, and stdin/stdout pipe mode.
--backup save original with .bak extension before overwriting
--color1 string color for errors (default "#e3342f")
--color2 string color for text/labels (default "#22808c")
--color3 string color for spinner chars (default "#ffffff")
--color4 string color for filled bar (default "#32b8c6")
--color5 string color for empty bar (default "#d6d5d4")
--color6 string color for gradient B (default "#0f3639")
--dry-run simulate the operation without writing any files
--exclude string exclude files matching this glob pattern
-h, --help help for cipherlock
--in-place overwrite the source file instead of creating a new one
--include string only process files matching this glob pattern
--keep keep the original file (opposite of --in-place)
--no-color disable ANSI color output
--quiet suppress progress output
--recursive process directories recursively
- cipherlock bench - Benchmark Argon2id performance and recommend KDF parameters
- cipherlock bombe - Verify file integrity
- cipherlock click - Verify password and file integrity
- cipherlock completion - Generate shell completion script
- cipherlock config - Manage configuration profiles
- cipherlock decrypt - Decrypt a file
- cipherlock dial - Generate an X25519 encryption key pair
- cipherlock encrypt - Encrypt a file or directory
- cipherlock gate - Time-gated file encryption
- cipherlock key - Manage encryption keys
- cipherlock rotor - Re-encrypt a file with a new password
- cipherlock show-profile - Display a configuration profile
- cipherlock shred - Securely delete files
- cipherlock tumbler - Display encrypted file metadata
- cipherlock version - Print version information