ccrypt

ccrypt [options] [file...]
ccencrypt [options] [file...]
ccdecrypt [options] [file...]
ccat [options] [file...]

ccrypt encrypts and decrypts files and streams using the Rijndael cipher (AES) with 256-bit keys. It replaces the original file with an encrypted version bearing a `.cpt` extension, and the original is securely overwritten rather than simply deleted.
The tool provides three modes of operation through separate command names: ccencrypt for encryption, ccdecrypt for decryption, and ccat for decrypting to standard output without modifying the file. All three are functionally equivalent to invoking ccrypt with the appropriate flag.
Keys are prompted interactively by default and must be entered twice for encryption to prevent typos. For automated workflows, keys can be read from a file with the `-k` option.

-e, --encrypt

Encrypt mode

Decrypt mode

Decrypt to stdout

Change encryption key

Read key from file

Specify key on command line (unsafe)

Overwrite without asking

Print progress info

Suppress warnings

Ask for key only once

Use suffix instead of .cpt

Process symbolic links

ccencrypt: Equivalent to ccrypt -e
ccdecrypt: Equivalent to ccrypt -d
ccat: Equivalent to ccrypt -c

Using -K on command line exposes key in process list. Use -k with keyfile or stdin for security. Based on AES/Rijndael cipher.

gpg(1), openssl(1), age(1)