Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Adding method for decrypt the encrypted text. #38

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

Adding method for decrypt the encrypted text. #38

wants to merge 1 commit into from

Conversation

shagihan
Copy link

Purpose

Since there is no method for decrypting the encrypted text with the cipher-tool, Created a new method to decrypt.

Approach

Users can use -Ddecrypt parameter when running the cipher-tool and by providing necessary parameters could decrypt encrypted text.

@CLAassistant
Copy link

CLAassistant commented Aug 5, 2019

CLA assistant check
All committers have signed the CLA.

@sachithKay
Copy link
Contributor

Cipher-tool is only focussed on encryption. Decryption is handled at runtime. If we let users to run the cipher tool and retrieve the password, wouldn't it create a vulnerability?
What would be a proper use case for this?

@shagihan
Copy link
Author

shagihan commented Aug 6, 2020

  1. Cipher tool is not publicly accessible and this is an option only used by the system administrators who is having the the file system access and having execution permissions.
  2. Even to run the decryption, It's required to have the password of the keystore, Which used to encrypt the passwords with cipher tool. In that case, If someone knows the password of the keystore, It's just running several commands to decrypt the cipher text and extract the passwords.

The intention of this modification is just to make some convenience.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants