doc: Document --add-recipients

--

1 files changed, 20 insertions, 0 deletions

diff --git a/doc/gpg.texi b/doc/gpg.texi
index fcef474f9..2f9134252 100644
--- a/doc/gpg.texi
+++ b/doc/gpg.texi
@@ -193,6 +193,26 @@ the user needs to enter the passphrase.  The option
 @opindex store
 Store only (make a simple literal data packet).
 
+
+@item --add-recipients
+@itemx --change-recipients
+@opindex add-recipients
+@opindex change-recipients
+These two commands can be used to change the recipients of an
+encrypted file or to add more recipients without fully decrypting the
+file.  This command works by decrypting just the encrypted session key
+and then encrypt the session key to the new recipients given with the
+@option{--recipient} options.  The output is the entire file with the
+recipients added.  The advantage over a simple decrypt and encrypt is
+that any inner signature is kept intact and that gpg does not need to
+actually decrypt the bulk of the data.  If
+@option{--change-recipients} is used instead of
+@option{--add-recipients} all existing recipients are removed from the
+output file so than only the newly specified recipients are able to
+decrypt the new file.  Note also that symmetric encrypted session keys
+are removed from the output for both variants of the command.
+
+
 @item --decrypt
 @itemx -d
 @opindex decrypt