cipherlock_shred.md

cipherlock shred

Securely delete files

Synopsis

Overwrite files with random data and zeros, then remove them.

Each file is overwritten with one pass of cryptographically random data followed by one pass of zeros, with fsync between passes. After overwriting, the file is removed from the filesystem.

This makes the original contents unrecoverable even with forensic tools on spinning disks. On SSDs, wear-leveling may leave remnants.

cipherlock shred [flags] <path> [<path>...]

Options

  -h, --help   help for shred

Options inherited from parent commands

      --backup           save original with .bak extension before overwriting
      --color1 string    color for errors (default "#e3342f")
      --color2 string    color for text/labels (default "#22808c")
      --color3 string    color for spinner chars (default "#ffffff")
      --color4 string    color for filled bar (default "#32b8c6")
      --color5 string    color for empty bar (default "#d6d5d4")
      --color6 string    color for gradient B (default "#0f3639")
      --dry-run          simulate the operation without writing any files
      --exclude string   exclude files matching this glob pattern
      --in-place         overwrite the source file instead of creating a new one
      --include string   only process files matching this glob pattern
      --keep             keep the original file (opposite of --in-place)
      --no-color         disable ANSI color output
      --quiet            suppress progress output
      --recursive        process directories recursively

SEE ALSO

• cipherlock - AES-256-GCM file encryption with Argon2id key derivation