You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Is your feature request related to a problem? Please describe.
Currently, there is no way to decrypt data from asymmetric keys that already exist.
This is due to the functions :
FindKeyPair
FindKeyPairs
FindKeyPairWithAttributes
FindKeyPairsWithAttributes
FindAllKeyPairs
which only return Signer type or array of this type.
As a consequence, looking for an existing key pair in a KMS results only in signing operations and not decryption operations.
Encryption remains possible by getting the public key of the asymmetric pair with signer.Public().
This is mostly due to the function makeKeyPair that builds pkcs11PrivateKeyDSA, pkcs11PrivateKeyRSA and pkcs11PrivateKeyECDSA but returns a Signer type instead, preventing any Decrypt function to be called from this type.
Describe the solution you'd like
The methods :
makeKeyPair
FindKeyPair
FindKeyPairs
FindKeyPairWithAttributes
FindKeyPairsWithAttributes
FindAllKeyPairs
should return a SignerDecrypter type instead of a Signer type to allow decryption operations from existing keypairs in pkcs11 stores.
The text was updated successfully, but these errors were encountered:
Is your feature request related to a problem? Please describe.
Currently, there is no way to decrypt data from asymmetric keys that already exist.
This is due to the functions :
which only return
Signer
type or array of this type.As a consequence, looking for an existing key pair in a KMS results only in signing operations and not decryption operations.
Encryption remains possible by getting the public key of the asymmetric pair with
signer.Public()
.This is mostly due to the function
makeKeyPair
that buildspkcs11PrivateKeyDSA
,pkcs11PrivateKeyRSA
andpkcs11PrivateKeyECDSA
but returns aSigner
type instead, preventing anyDecrypt
function to be called from this type.Describe the solution you'd like
The methods :
should return a
SignerDecrypter
type instead of aSigner
type to allow decryption operations from existing keypairs in pkcs11 stores.The text was updated successfully, but these errors were encountered: