Copyright Digital Equipment Corp. All rights reserved.

Qualifiers

/AES      /AES=keyword

   Specifies that you must use AES algorithm. If this qualifier is
   not specified, the DES algorithm is used by default. You can use
   the following keywords with the /AES qualifier:

   Keyword           Description
   AES128(default)   Indicates that 128 bits AES key value is used.
                     The MAC value generated in this mode is of
                     size 128 bits.
   AES192            Indicates that 192 bits AES key value is used.
                     The MAC value generated in this mode is of
                     size 192 bits.
   AES256            Indicates that 256 bits AES key value is used.
                     The MAC value generated in this mode is of
                     size 256 bits.

/BACKUP
      /BACKUP[=time]

   Selects files according to the dates of their most recent backup.

   This qualifier is relevant only when used with the /BEFORE or the
   /SINCE qualifier. In addition, do not use /BACKUP with /EXPIRED
   or /MODIFIED.

   If you omit time, TODAY is used. For more information on time
   specifications, see the OpenVMS User's Manual.


/BEFORE
      /BEFORE=time

   Selects files that have a creation time before the time you
   specify.

   If you omit time, TODAY is used. For more information on time
   specifications, see the OpenVMS User's Manual.


/BY_OWNER
      /BY_OWNER[=uic]
      /NOBY_OWNER

   Selects files with the owner UIC you specify.

   If you omit uic, the UIC of the current process is used. For
   more information on specifying UIC format, see the OpenVMS User's
   Manual.


/CONFIRM
      /CONFIRM
      /NOCONFIRM

   Controls whether or not a confirmation request is displayed
   before each authentication, as follows:

   Response         Meaning

   YES              Authenticates the file
   NO or <Return>   Does not authenticate the file (default)
   QUIT or          Does not authenticate the file or any subsequent
   <Ctrl/Z>         files
   ALL              Encrypts the file plus all subsequent files


/DATABASE
      /DATABASE=file-spec
      /NODATABASE

   File name of the file in which to store binary MAC values.

   Generates a MAC using the file contents. If you do not specify a
   file name, the file name SYS$LOGIN:ENCRYPT$MAC.DAT is used.


/EXCLUDE
      /EXCLUDE=file-spec
      /NOEXCLUDE

   Excludes the specified files from the authentication operation.
   You can use wildcard characters. You do not need to enter an
   entire file specification. Any field that you omit defaults to
   the input file specification.

   Because directory files are never encrypted, you need not specify
   them.


/EXPIRED
      /EXPIRED[=time]

   Selects files according to the dates on which they expire.

   This qualifier is relevant only when used with the /BEFORE or the
   /SINCE qualifier. In addition, do not use /EXPIRED with /BACKUP
   or /MODIFIED.

   If you omit a time value, TODAY is used. For more information on
   time specifications, see the OpenVMS User's Manual.


/LOG
   Displays the results of the authentication operation.


/MODIFIED
      /MODIFIED[=time]

   Selects files according to the dates on which they were last
   modified.

   This qualifier is relevant only when used with the /BEFORE or the
   /SINCE qualifier. In addition, do not use /MODIFIED with /BACKUP
   or /EXPIRED.

   If you omit a time value, TODAY is used. For more information on
   time specifications, see the OpenVMS User's Manual.


/MULTIPLE_FILES
   Indicates that the file-spec parameter contains a list of file
   names to be checked. The file-spec file is opened and each record
   is read and treated as a file-spec.


/OUTPUT
      /OUTPUT=file-spec
      /NOOUTPUT

   File name of the file in which to store readable MAC values.
   These MAC values represent both the file contents as well as the
   security settings. If you do not specify a file name, the default
   file name SYS$LOGIN:ENCRYPT$MAC.LIS is used.


/SECURITY
      /SECURITY=file-spec
      /NOSECURITY

   File name of the file in which to store binary MAC values. If you
   do not specify a file name, the default file name ENCRYPT$SEC.DAT
   is used.

   Generates a MAC using the file's security settings: owner,
   protection settings, and optional ACL.


/SINCE
      /SINCE[=time]

   Selects files that have a creation time before the time you
   specify.

   If you omit time, TODAY is used. For more information on time
   specifications, see the OpenVMS User's Manual.


/UPDATE
      /UPDATE
      /NOUPDATE

   Associates new MAC values with one or more files.