Skip to content

Adding method for decrypt the encrypted text.#38

Open
shagihan wants to merge 1 commit intowso2:masterfrom
shagihan:master
Open

Adding method for decrypt the encrypted text.#38
shagihan wants to merge 1 commit intowso2:masterfrom
shagihan:master

Conversation

@shagihan
Copy link
Copy Markdown

Purpose

Since there is no method for decrypting the encrypted text with the cipher-tool, Created a new method to decrypt.

Approach

Users can use -Ddecrypt parameter when running the cipher-tool and by providing necessary parameters could decrypt encrypted text.

@CLAassistant
Copy link
Copy Markdown

CLAassistant commented Aug 5, 2019

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
You have signed the CLA already but the status is still pending? Let us recheck it.

@sachithKay
Copy link
Copy Markdown
Contributor

Cipher-tool is only focussed on encryption. Decryption is handled at runtime. If we let users to run the cipher tool and retrieve the password, wouldn't it create a vulnerability?
What would be a proper use case for this?

@shagihan
Copy link
Copy Markdown
Author

shagihan commented Aug 6, 2020

  1. Cipher tool is not publicly accessible and this is an option only used by the system administrators who is having the the file system access and having execution permissions.
  2. Even to run the decryption, It's required to have the password of the keystore, Which used to encrypt the passwords with cipher tool. In that case, If someone knows the password of the keystore, It's just running several commands to decrypt the cipher text and extract the passwords.

The intention of this modification is just to make some convenience.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants