containers / containers/ocicrypt

JWE For Encryption, Custom Provider for Decryption?

Open
#113 5 comments 0 reactions 0 assignees View on GitHub
Dominant language
Go
Stars
193
Forks
42
Avg merge
13h 46m
Merged PRs (30d)
1

Description

Heyyo! I've got a curious question, I'm working on scenarios where I'd like to use the public half of an RSA key to encrypt content with skopeo as the runner (e.g., `skopeo copy --encryption-key jwe:mymagicprivkey.key oci:alpine oci:encrypted`) and then use a custom provider to handle decryption (e.g., `skopeo copy --decryption-key provider:mysimpleprovider oci:encrypted oci:decrypted`) with a configuraiton that looks a little like:

```
{
"key-providers": {
"mysimpleprovider": {
"cmd": {
"path":"/bin/mysimpleprovider",
"args": []
}
}
}
}
```

Naturally, when ocicrypt sees the encrypted content, it sees it with the jwe scheme and thusly finds no match to decrypt when the only option is mysimpleprovider.

Can I have a mismatched encryption/decryption scenario?

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.