containers / containers/ocicrypt
JWE For Encryption, Custom Provider for Decryption?
- Dominant language
- Go
- Stars
- 193
- Forks
- 42
- Avg merge
- 13h 46m
- Merged PRs (30d)
- 1
Description
Heyyo! I've got a curious question, I'm working on scenarios where I'd like to use the public half of an RSA key to encrypt content with skopeo as the runner (e.g., `skopeo copy --encryption-key jwe:mymagicprivkey.key oci:alpine oci:encrypted`) and then use a custom provider to handle decryption (e.g., `skopeo copy --decryption-key provider:mysimpleprovider oci:encrypted oci:decrypted`) with a configuraiton that looks a little like:
```
{
"key-providers": {
"mysimpleprovider": {
"cmd": {
"path":"/bin/mysimpleprovider",
"args": []
}
}
}
}
```
Naturally, when ocicrypt sees the encrypted content, it sees it with the jwe scheme and thusly finds no match to decrypt when the only option is mysimpleprovider.
Can I have a mismatched encryption/decryption scenario?
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.