summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorJustus Winter <justus@sequoia-pgp.org>2021-01-22 11:08:27 +0100
committerJustus Winter <justus@sequoia-pgp.org>2021-01-22 11:21:31 +0100
commit514c51146d090daa9fe1c8996b2ec19123721957 (patch)
tree4536120fb32b5b695cf35e270d4748d9d64c4f7f
parent368f8707c7ed1022d30fc16a97c184206d1a6e37 (diff)
sq: Add man pages generated from the cli.
-rw-r--r--sq/sq-armor.156
-rw-r--r--sq/sq-autocrypt-decode.151
-rw-r--r--sq/sq-autocrypt-encode-sender.164
-rw-r--r--sq/sq-autocrypt.163
-rw-r--r--sq/sq-certify.198
-rw-r--r--sq/sq-dearmor.153
-rw-r--r--sq/sq-decrypt.177
-rw-r--r--sq/sq-encrypt.185
-rw-r--r--sq/sq-inspect.156
-rw-r--r--sq/sq-key-adopt.166
-rw-r--r--sq/sq-key-attest-certifications.168
-rw-r--r--sq/sq-key-generate.192
-rw-r--r--sq/sq-key.183
-rw-r--r--sq/sq-keyring-filter.196
-rw-r--r--sq/sq-keyring-join.151
-rw-r--r--sq/sq-keyring-list.144
-rw-r--r--sq/sq-keyring-merge.151
-rw-r--r--sq/sq-keyring-split.154
-rw-r--r--sq/sq-keyring.196
-rw-r--r--sq/sq-packet-decrypt.159
-rw-r--r--sq/sq-packet-dump.172
-rw-r--r--sq/sq-packet-join.160
-rw-r--r--sq/sq-packet-split.149
-rw-r--r--sq/sq-packet.188
-rw-r--r--sq/sq-sign.182
-rw-r--r--sq/sq-verify.171
-rw-r--r--sq/sq.1202
27 files changed, 1987 insertions, 0 deletions
diff --git a/sq/sq-armor.1 b/sq/sq-armor.1
new file mode 100644
index 00000000..f8fbbe06
--- /dev/null
+++ b/sq/sq-armor.1
@@ -0,0 +1,56 @@
+.TH SQ-ARMOR "1" "JANUARY 2021" " " "USER COMMANDS" 5
+.SH NAME
+sq armor \- Converts binary to ASCII
+
+To make encrypted data easier to handle and transport, OpenPGP data
+can be transformed to an ASCII representation called ASCII Armor. sq
+emits armored data by default, but this subcommand can be used to
+convert existing OpenPGP data to its ASCII\-encoded representation.
+
+The converse operation is 'sq dearmor'.
+
+.SH SYNOPSIS
+\fBsq armor\fR [FLAGS] [OPTIONS] [\-\-] [FILE]
+.SH FLAGS
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Prints help information
+.SH OPTIONS
+.TP
+\fB\-o\fR, \fB\-\-output\fR FILE
+Writes to FILE or stdout if omitted
+
+.TP
+\fB\-\-label\fR LABEL
+Selects the kind of armor header [default: auto] [possible values: auto, message, cert, key, sig, file]
+.SH ARGS
+.TP
+FILE
+Reads from FILE or stdin if omitted
+.SH EXAMPLES
+.TP
+Convert a binary certificate to ASCII
+\fB$ sq armor binary\-juliet.pgp\fR
+.TP
+Convert a binary message to ASCII
+\fB$ sq armor binary\-message.pgp\fR
+
+.SH SEE ALSO
+For the full documentation see <https://docs.sequoia\-pgp.org/sq/>.
+
+.ad l
+.nh
+sq(1), sq\-armor(1), sq\-autocrypt(1), sq\-certify(1), sq\-dearmor(1), sq\-decrypt(1), sq\-encrypt(1), sq\-inspect(1), sq\-key(1), sq\-keyring(1), sq\-packet(1), sq\-sign(1), sq\-verify(1)
+
+
+.SH AUTHORS
+.P
+.RS 2
+.nf
+Azul <azul@sequoia\-pgp.org>
+Igor Matuszewski <igor@sequoia\-pgp.org>
+Justus Winter <justus@sequoia\-pgp.org>
+Kai Michaelis <kai@sequoia\-pgp.org>
+Neal H. Walfield <neal@sequoia\-pgp.org>
+Nora Widdecke <nora@sequoia\-pgp.org>
+Wiktor Kwapisiewicz <wiktor@sequoia\-pgp.org>
diff --git a/sq/sq-autocrypt-decode.1 b/sq/sq-autocrypt-decode.1
new file mode 100644
index 00000000..6f219bf8
--- /dev/null
+++ b/sq/sq-autocrypt-decode.1
@@ -0,0 +1,51 @@
+.TH SQ-AUTOCRYPT-DECODE "1" "JANUARY 2021" " " "USER COMMANDS" 5
+.SH NAME
+sq autocrypt decode \- Reads Autocrypt\-encoded certificates
+
+Given an autocrypt header (or an key\-gossip header), this command
+extracts the certificate encoded within it.
+
+The converse operation is 'sq autocrypt encode\-sender'.
+
+.SH SYNOPSIS
+\fBsq autocrypt decode\fR [FLAGS] [OPTIONS] [\-\-] [FILE]
+.SH FLAGS
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Prints help information
+
+.TP
+\fB\-B\fR, \fB\-\-binary\fR
+Emits binary data
+.SH OPTIONS
+.TP
+\fB\-o\fR, \fB\-\-output\fR FILE
+Writes to FILE or stdout if omitted
+.SH ARGS
+.TP
+FILE
+Reads from FILE or stdin if omitted
+.SH EXAMPLES
+.TP
+Extract all certificates from a mail
+\fB$ sq autocrypt decode autocrypt.eml\fR
+
+.SH SEE ALSO
+For the full documentation see <https://docs.sequoia\-pgp.org/sq/>.
+
+.ad l
+.nh
+sq(1), sq\-armor(1), sq\-autocrypt(1), sq\-autocrypt\-decode(1), sq\-autocrypt\-encode\-sender(1), sq\-certify(1), sq\-dearmor(1), sq\-decrypt(1), sq\-encrypt(1), sq\-inspect(1), sq\-key(1), sq\-keyring(1), sq\-packet(1), sq\-sign(1), sq\-verify(1)
+
+
+.SH AUTHORS
+.P
+.RS 2
+.nf
+Azul <azul@sequoia\-pgp.org>
+Igor Matuszewski <igor@sequoia\-pgp.org>
+Justus Winter <justus@sequoia\-pgp.org>
+Kai Michaelis <kai@sequoia\-pgp.org>
+Neal H. Walfield <neal@sequoia\-pgp.org>
+Nora Widdecke <nora@sequoia\-pgp.org>
+Wiktor Kwapisiewicz <wiktor@sequoia\-pgp.org>
diff --git a/sq/sq-autocrypt-encode-sender.1 b/sq/sq-autocrypt-encode-sender.1
new file mode 100644
index 00000000..46161450
--- /dev/null
+++ b/sq/sq-autocrypt-encode-sender.1
@@ -0,0 +1,64 @@
+.TH SQ-AUTOCRYPT-ENCODE-SENDER "1" "JANUARY 2021" " " "USER COMMANDS" 5
+.SH NAME
+sq autocrypt encode\-sender \- Encodes a certificate into an Autocrypt header
+
+A certificate can be encoded and included in a header of an email
+message. This command encodes the certificate, adds the senders email
+address (which must match the one used in the 'From' header), and the
+senders 'prefer\-encrypt' state (see the Autocrypt spec for more
+information).
+
+The converse operation is 'sq autocrypt decode'.
+
+.SH SYNOPSIS
+\fBsq autocrypt encode\-sender\fR [FLAGS] [OPTIONS] [\-\-] [FILE]
+.SH FLAGS
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Prints help information
+.SH OPTIONS
+.TP
+\fB\-o\fR, \fB\-\-output\fR FILE
+Writes to FILE or stdout if omitted
+
+.TP
+\fB\-\-email\fR ADDRESS
+Sets the address [default: primary userid]
+
+.TP
+\fB\-\-prefer\-encrypt\fR prefer\-encrypt
+Sets the prefer\-encrypt attribute [default: nopreference] [possible values: nopreference, mutual]
+.SH ARGS
+.TP
+FILE
+Reads from FILE or stdin if omitted
+.SH EXAMPLES
+.TP
+Encodes a certificate
+\fB$ sq autocrypt encode\-sender juliet.pgp\fR
+.TP
+Encodes a certificate with an explicit sender address
+\fB$ sq autocrypt encode\-sender \-\-email juliet@example.org juliet.pgp\fR
+.TP
+Encodes a certificate while indicating the willingness to encrypt
+\fB$ sq autocrypt encode\-sender \-\-prefer\-encrypt mutual juliet.pgp\fR
+
+.SH SEE ALSO
+For the full documentation see <https://docs.sequoia\-pgp.org/sq/>.
+
+.ad l
+.nh
+sq(1), sq\-armor(1), sq\-autocrypt(1), sq\-autocrypt\-decode(1), sq\-autocrypt\-encode\-sender(1), sq\-certify(1), sq\-dearmor(1), sq\-decrypt(1), sq\-encrypt(1), sq\-inspect(1), sq\-key(1), sq\-keyring(1), sq\-packet(1), sq\-sign(1), sq\-verify(1)
+
+
+.SH AUTHORS
+.P
+.RS 2
+.nf
+Azul <azul@sequoia\-pgp.org>
+Igor Matuszewski <igor@sequoia\-pgp.org>
+Justus Winter <justus@sequoia\-pgp.org>
+Kai Michaelis <kai@sequoia\-pgp.org>
+Neal H. Walfield <neal@sequoia\-pgp.org>
+Nora Widdecke <nora@sequoia\-pgp.org>
+Wiktor Kwapisiewicz <wiktor@sequoia\-pgp.org>
diff --git a/sq/sq-autocrypt.1 b/sq/sq-autocrypt.1
new file mode 100644
index 00000000..6876d91d
--- /dev/null
+++ b/sq/sq-autocrypt.1
@@ -0,0 +1,63 @@
+.TH SQ-AUTOCRYPT "1" "JANUARY 2021" " " "USER COMMANDS" 5
+.SH NAME
+sq autocrypt \- Communicates certificates using Autocrypt
+
+Autocrypt is a standard for mail user agents to provide convenient
+end\-to\-end encryption of emails. This subcommand provides a limited
+way to produce and consume headers that are used by Autocrypt to
+communicate certificates between clients.
+
+See https://autocrypt.org/
+
+.SH SYNOPSIS
+\fBsq autocrypt\fR [FLAGS] <SUBCOMMAND>
+.SH FLAGS
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Prints help information
+.SH SUBCOMMANDS
+.TP
+\fBhelp\fR
+Prints this message or the help of the given subcommand(s)
+
+.TP
+\fBdecode\fR
+Reads Autocrypt\-encoded certificates
+
+Given an autocrypt header (or an key\-gossip header), this command
+extracts the certificate encoded within it.
+
+The converse operation is 'sq autocrypt encode\-sender'.
+
+
+.TP
+\fBencode\-sender\fR
+Encodes a certificate into an Autocrypt header
+
+A certificate can be encoded and included in a header of an email
+message. This command encodes the certificate, adds the senders email
+address (which must match the one used in the 'From' header), and the
+senders 'prefer\-encrypt' state (see the Autocrypt spec for more
+information).
+
+The converse operation is 'sq autocrypt decode'.
+
+.SH SEE ALSO
+For the full documentation see <https://docs.sequoia\-pgp.org/sq/>.
+
+.ad l
+.nh
+sq(1), sq\-armor(1), sq\-autocrypt(1), sq\-autocrypt\-decode(1), sq\-autocrypt\-encode\-sender(1), sq\-certify(1), sq\-dearmor(1), sq\-decrypt(1), sq\-encrypt(1), sq\-inspect(1), sq\-key(1), sq\-keyring(1), sq\-packet(1), sq\-sign(1), sq\-verify(1)
+
+
+.SH AUTHORS
+.P
+.RS 2
+.nf
+Azul <azul@sequoia\-pgp.org>
+Igor Matuszewski <igor@sequoia\-pgp.org>
+Justus Winter <justus@sequoia\-pgp.org>
+Kai Michaelis <kai@sequoia\-pgp.org>
+Neal H. Walfield <neal@sequoia\-pgp.org>
+Nora Widdecke <nora@sequoia\-pgp.org>
+Wiktor Kwapisiewicz <wiktor@sequoia\-pgp.org>
diff --git a/sq/sq-certify.1 b/sq/sq-certify.1
new file mode 100644
index 00000000..a51a3876
--- /dev/null
+++ b/sq/sq-certify.1
@@ -0,0 +1,98 @@
+.TH SQ-CERTIFY "1" "JANUARY 2021" " " "USER COMMANDS" 5
+.SH NAME
+sq certify \-
+Certifies a User ID for a Certificate
+
+Using a certification a keyholder may vouch for the fact that another
+certificate legitimately belongs to a user id. In the context of
+emails this means that the same entity controls the key and the email
+address. These kind of certifications form the basis for the Web Of
+Trust.
+
+This command emits the certificate with the new certification. The
+updated certificate has to be distributed, preferably by sending it to
+the certificate holder for attestation. See also 'sq key
+attest\-certification'.
+
+.SH SYNOPSIS
+\fBsq certify\fR [FLAGS] [OPTIONS] <CERTIFIER\-KEY> <CERTIFICATE> <USERID>
+.SH FLAGS
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Prints help information
+
+.TP
+\fB\-B\fR, \fB\-\-binary\fR
+Emits binary data
+
+.TP
+\fB\-l\fR, \fB\-\-local\fR
+Makes the certification a local certification. Normally, local certifications are not exported.
+
+.TP
+\fB\-\-non\-revocable\fR
+Marks the certification as being non\-revocable. That is, you cannot later revoke this certification. This should normally only be used with an expiration.
+.SH OPTIONS
+.TP
+\fB\-o\fR, \fB\-\-output\fR FILE
+Writes to FILE or stdout if omitted
+
+.TP
+\fB\-d\fR, \fB\-\-depth\fR TRUST_DEPTH
+Sets the trust depth (sometimes referred to as the trust level). 0 means a normal certification of <CERTIFICATE, USERID>. 1 means CERTIFICATE is also a trusted introducer, 2 means CERTIFICATE is a meta\-trusted introducer, etc. The default is 0.
+
+.TP
+\fB\-a\fR, \fB\-\-amount\fR TRUST_AMOUNT
+Sets the amount of trust. Values between 1 and 120 are meaningful. 120 means fully trusted. Values less than 120 indicate the degree of trust. 60 is usually used for partially trusted. The default is 120.
+
+.TP
+\fB\-r\fR, \fB\-\-regex\fR REGEX
+Adds a regular expression to constrain what a trusted introducer can certify. The regular expression must match the certified User ID in all intermediate introducers, and the certified certificate. Multiple regular expressions may be specified. In that case, at least one must match.
+
+.TP
+\fB\-\-notation\fR NAME
+Adds a notation to the certification. A user\-defined notation's name must be of the form 'name@a.domain.you.control.org'. If the notation's name starts with a !, then the notation is marked as being critical. If a consumer of a signature doesn't understand a critical notation, then it will ignore the signature. The notation is marked as being human readable.
+
+.TP
+\fB\-\-expires\fR TIME
+Makes the certification expire at TIME (as ISO 8601). Use 'never' to create certifications that do not expire.
+
+.TP
+\fB\-\-expires\-in\fR DURATION
+Makes the certification expire after DURATION. Either 'N[ymwd]', for N years, months, weeks, or days, or 'never'. [default: 5y]
+.SH ARGS
+.TP
+CERTIFIER\-KEY
+Creates the certificate using CERTIFIER\-KEY.
+
+.TP
+CERTIFICATE
+Certifies CERTIFICATE.
+
+.TP
+USERID
+Certifies USERID for CERTIFICATE.
+.SH EXAMPLES
+.TP
+Juliet certifies that Romeo controls romeo.pgp and romeo@example.org
+\fB$ sq certify juliet.pgp romeo.pgp '<romeo@example.org>'\fR
+
+.SH SEE ALSO
+For the full documentation see <https://docs.sequoia\-pgp.org/sq/>.
+
+.ad l
+.nh
+sq(1), sq\-armor(1), sq\-autocrypt(1), sq\-certify(1), sq\-dearmor(1), sq\-decrypt(1), sq\-encrypt(1), sq\-inspect(1), sq\-key(1), sq\-keyring(1), sq\-packet(1), sq\-sign(1), sq\-verify(1)
+
+
+.SH AUTHORS
+.P
+.RS 2
+.nf
+Azul <azul@sequoia\-pgp.org>
+Igor Matuszewski <igor@sequoia\-pgp.org>
+Justus Winter <justus@sequoia\-pgp.org>
+Kai Michaelis <kai@sequoia\-pgp.org>
+Neal H. Walfield <neal@sequoia\-pgp.org>
+Nora Widdecke <nora@sequoia\-pgp.org>
+Wiktor Kwapisiewicz <wiktor@sequoia\-pgp.org>
diff --git a/sq/sq-dearmor.1 b/sq/sq-dearmor.1
new file mode 100644
index 00000000..5310fb1b
--- /dev/null
+++ b/sq/sq-dearmor.1
@@ -0,0 +1,53 @@
+.TH SQ-DEARMOR "1" "JANUARY 2021" " " "USER COMMANDS" 5
+.SH NAME
+sq dearmor \- Converts ASCII to binary
+
+To make encrypted data easier to handle and transport, OpenPGP data
+can be transformed to an ASCII representation called ASCII Armor. sq
+transparently handles armored data, but this subcommand can be used to
+explicitly convert existing ASCII\-encoded OpenPGP data to its binary
+representation.
+
+The converse operation is 'sq armor'.
+
+.SH SYNOPSIS
+\fBsq dearmor\fR [FLAGS] [OPTIONS] [\-\-] [FILE]
+.SH FLAGS
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Prints help information
+.SH OPTIONS
+.TP
+\fB\-o\fR, \fB\-\-output\fR FILE
+Writes to FILE or stdout if omitted
+.SH ARGS
+.TP
+FILE
+Reads from FILE or stdin if omitted
+.SH EXAMPLES
+.TP
+Convert a ASCII certificate to binary
+\fB$ sq dearmor ascii\-juliet.pgp\fR
+.TP
+Convert a ASCII message to binary
+\fB$ sq dearmor ascii\-message.pgp\fR
+
+.SH SEE ALSO
+For the full documentation see <https://docs.sequoia\-pgp.org/sq/>.
+
+.ad l
+.nh
+sq(1), sq\-armor(1), sq\-autocrypt(1), sq\-certify(1), sq\-dearmor(1), sq\-decrypt(1), sq\-encrypt(1), sq\-inspect(1), sq\-key(1), sq\-keyring(1), sq\-packet(1), sq\-sign(1), sq\-verify(1)
+
+
+.SH AUTHORS
+.P
+.RS 2
+.nf
+Azul <azul@sequoia\-pgp.org>
+Igor Matuszewski <igor@sequoia\-pgp.org>
+Justus Winter <justus@sequoia\-pgp.org>
+Kai Michaelis <kai@sequoia\-pgp.org>
+Neal H. Walfield <neal@sequoia\-pgp.org>
+Nora Widdecke <nora@sequoia\-pgp.org>
+Wiktor Kwapisiewicz <wiktor@sequoia\-pgp.org>
diff --git a/sq/sq-decrypt.1 b/sq/sq-decrypt.1
new file mode 100644
index 00000000..922c68cd
--- /dev/null
+++ b/sq/sq-decrypt.1
@@ -0,0 +1,77 @@
+.TH SQ-DECRYPT "1" "JANUARY 2021" " " "USER COMMANDS" 5
+.SH NAME
+sq decrypt \- Decrypts a message
+
+Decrypts a message using either supplied keys, or by prompting for a
+password. Any signatures are checked using the supplied certificates.
+
+The converse operation is 'sq encrypt'.
+
+.SH SYNOPSIS
+\fBsq decrypt\fR [FLAGS] [OPTIONS] [\-\-] [FILE]
+.SH FLAGS
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Prints help information
+
+.TP
+\fB\-\-dump\-session\-key\fR
+Prints the session key to stderr
+
+.TP
+\fB\-\-dump\fR
+Prints a packet dump to stderr
+
+.TP
+\fB\-x\fR, \fB\-\-hex\fR
+Prints a hexdump (implies \-\-dump)
+.SH OPTIONS
+.TP
+\fB\-o\fR, \fB\-\-output\fR FILE
+Writes to FILE or stdout if omitted
+
+.TP
+\fB\-n\fR, \fB\-\-signatures\fR N
+Sets the threshold of valid signatures to N. If this threshold is not reached, the message will not be considered verified. [default: 0]
+
+.TP
+\fB\-\-signer\-cert\fR CERT
+Verifies signatures with CERT
+
+.TP
+\fB\-\-recipient\-key\fR KEY
+Decrypts with KEY
+.SH ARGS
+.TP
+FILE
+Reads from FILE or stdin if omitted
+.SH EXAMPLES
+.TP
+Decrypt a file using a secret key
+\fB$ sq decrypt \-\-recipient\-key juliet.pgp ciphertext.pgp\fR
+.TP
+Decrypt a file verifying signatures
+\fB$ sq decrypt \-\-recipient\-key juliet.pgp \-\-signer\-cert romeo.pgp ciphertext.pgp\fR
+.TP
+Decrypt a file using a password
+\fB$ sq decrypt ciphertext.pgp\fR
+
+.SH SEE ALSO
+For the full documentation see <https://docs.sequoia\-pgp.org/sq/>.
+
+.ad l
+.nh
+sq(1), sq\-armor(1), sq\-autocrypt(1), sq\-certify(1), sq\-dearmor(1), sq\-decrypt(1), sq\-encrypt(1), sq\-inspect(1), sq\-key(1), sq\-keyring(1), sq\-packet(1), sq\-sign(1), sq\-verify(1)
+
+
+.SH AUTHORS
+.P
+.RS 2
+.nf
+Azul <azul@sequoia\-pgp.org>
+Igor Matuszewski <igor@sequoia\-pgp.org>
+Justus Winter <justus@sequoia\-pgp.org>
+Kai Michaelis <kai@sequoia\-pgp.org>
+Neal H. Walfield <neal@sequoia\-pgp.org>
+Nora Widdecke <nora@sequoia\-pgp.org>
+Wiktor Kwapisiewicz <wiktor@sequoia\-pgp.org>
diff --git a/sq/sq-encrypt.1 b/sq/sq-encrypt.1
new file mode 100644
index 00000000..7b5df0f6
--- /dev/null
+++ b/sq/sq-encrypt.1
@@ -0,0 +1,85 @@
+.TH SQ-ENCRYPT "1" "JANUARY 2021" " " "USER COMMANDS" 5
+.SH NAME
+sq encrypt \- Encrypts a message
+
+Encrypts a message for any number of recipients and with any number of
+passwords, optionally signing the message in the process.
+
+The converse operation is 'sq decrypt'.
+
+.SH SYNOPSIS
+\fBsq encrypt\fR [FLAGS] [OPTIONS] [\-\-] [FILE]
+.SH FLAGS
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Prints help information
+
+.TP
+\fB\-B\fR, \fB\-\-binary\fR
+Emits binary data
+
+.TP
+\fB\-s\fR, \fB\-\-symmetric\fR
+Adds a password to encrypt with. The message can be decrypted with either one of the recipient's keys, or any password.
+
+.TP
+\fB\-\-use\-expired\-subkey\fR
+If a certificate has only expired encryption\-capable subkeys, falls back to using the one that expired last
+.SH OPTIONS
+.TP
+\fB\-o\fR, \fB\-\-output\fR FILE
+Writes to FILE or stdout if omitted
+
+.TP
+\fB\-\-recipient\-cert\fR CERT\-RING
+Encrypts for all recipients in CERT\-RING
+
+.TP
+\fB\-\-signer\-key\fR KEY
+Signs the message with KEY
+
+.TP
+\fB\-\-mode\fR MODE
+Selects what kind of keys are considered for encryption. Transport select subkeys marked as suitable for transport encryption, rest selects those for encrypting data at rest, and all selects all encryption\-capable subkeys. [default: all] [possible values: transport, rest, all]
+
+.TP
+\fB\-\-compression\fR KIND
+Selects compression scheme to use [default: pad] [possible values: none, pad, zip, zlib, bzip2]
+
+.TP
+\fB\-t\fR, \fB\-\-time\fR TIME
+Chooses keys valid at the specified time and sets the signature's creation time
+.SH ARGS
+.TP
+FILE
+Reads from FILE or stdin if omitted
+.SH EXAMPLES
+.TP
+Encrypt a file using a certificate
+\fB$ sq encrypt \-\-recipient\-key romeo.pgp message.txt\fR
+.TP
+Encrypt a file creating a signature in the process
+\fB$ sq encrypt \-\-recipient\-key romeo.pgp \-\-signer\-cert juliet.pgp message.txt\fR
+.TP
+Encrypt a file using a password
+\fB$ sq encrypt \-\-symmetric message.txt\fR
+
+.SH SEE ALSO
+For the full documentation see <https://docs.sequoia\-pgp.org/sq/>.
+
+.ad l
+.nh
+sq(1), sq\-armor(1), sq\-autocrypt(1), sq\-certify(1), sq\-dearmor(1), sq\-decrypt(1), sq\-encrypt(1), sq\-inspect(1), sq\-key(1), sq\-keyring(1), sq\-packet(1), sq\-sign(1), sq\-verify(1)
+
+
+.SH AUTHORS
+.P
+.RS 2
+.nf
+Azul <azul@sequoia\-pgp.org>
+Igor Matuszewski <igor@sequoia\-pgp.org>
+Justus Winter <justus@sequoia\-pgp.org>
+Kai Michaelis <kai@sequoia\-pgp.org>
+Neal H. Walfield <neal@sequoia\-pgp.org>
+Nora Widdecke <nora@sequoia\-pgp.org>
+Wiktor Kwapisiewicz <wiktor@sequoia\-pgp.org>
diff --git a/sq/sq-inspect.1 b/sq/sq-inspect.1
new file mode 100644
index 00000000..35beaefb
--- /dev/null
+++ b/sq/sq-inspect.1
@@ -0,0 +1,56 @@
+.TH SQ-INSPECT "1" "JANUARY 2021" " " "USER COMMANDS" 5
+.SH NAME
+sq inspect \- Inspects data, like file(1)
+
+It is often difficult to tell from cursory inspection using cat(1) or
+file(1) what kind of OpenPGP one is looking at. This subcommand
+inspects the data and provides a meaningful human\-readable description
+of it.
+
+.SH SYNOPSIS
+\fBsq inspect\fR [FLAGS] [\-\-] [FILE]
+.SH FLAGS
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Prints help information
+
+.TP
+\fB\-\-certifications\fR
+Prints third\-party certifications
+.SH ARGS
+.TP
+FILE
+Reads from FILE or stdin if omitted
+.SH EXAMPLES
+.TP
+Inspects a certificate
+\fB$ sq inspect juliet.pgp\fR
+.TP
+Inspects a certificate ring
+\fB$ sq inspect certs.pgp\fR
+.TP
+Inspects a message
+\fB$ sq inspect message.pgp\fR
+.TP
+Inspects a detached signature
+\fB$ sq inspect message.sig\fR
+
+.SH SEE ALSO
+For the full documentation see <https://docs.sequoia\-pgp.org/sq/>.
+
+.ad l
+.nh
+sq(1), sq\-armor(1), sq\-autocrypt(1), sq\-certify(1), sq\-dearmor(1), sq\-decrypt(1), sq\-encrypt(1), sq\-inspect(1), sq\-key(1), sq\-keyring(1), sq\-packet(1), sq\-sign(1), sq\-verify(1)
+
+
+.SH AUTHORS
+.P
+.RS 2
+.nf
+Azul <azul@sequoia\-pgp.org>
+Igor Matuszewski <igor@sequoia\-pgp.org>
+Justus Winter <justus@sequoia\-pgp.org>
+Kai Michaelis <kai@sequoia\-pgp.org>
+Neal H. Walfield <neal@sequoia\-pgp.org>
+Nora Widdecke <nora@sequoia\-pgp.org>
+Wiktor Kwapisiewicz <wiktor@sequoia\-pgp.org>
diff --git a/sq/sq-key-adopt.1 b/sq/sq-key-adopt.1
new file mode 100644
index 00000000..f0f69dfc
--- /dev/null
+++ b/sq/sq-key-adopt.1
@@ -0,0 +1,66 @@
+.TH SQ-KEY-ADOPT "1" "JANUARY 2021" " " "USER COMMANDS" 5
+.SH NAME
+sq key adopt \-
+Binds keys from one certificate to another
+
+This command allows one to transfer primary keys and subkeys into an
+existing certificate. Say you want to transition to a new
+certificate, but have an authentication subkey on your current
+certificate. You want to keep the authentication subkey because it
+allows access to SSH servers and updating their configuration is not
+feasible.
+