diff options
| author | Levi Durfee <levi.durfee@gmail.com> | 2026-01-08 18:50:19 -0500 |
|---|---|---|
| committer | Levi Durfee <levi.durfee@gmail.com> | 2026-01-08 18:54:54 -0500 |
| commit | 6f706d0d05612d9778ece6414b3427c176214586 (patch) | |
| tree | b25266e973cb17ce4524f56314e621f8644a02aa /internal/decrypt.go | |
| parent | dc0d6a4bf3c412aa69c579b74b0586fd61a08508 (diff) | |
Work on comments
Diffstat (limited to 'internal/decrypt.go')
| -rw-r--r-- | internal/decrypt.go | 6 |
1 files changed, 4 insertions, 2 deletions
diff --git a/internal/decrypt.go b/internal/decrypt.go index bd1f68b..252b033 100644 --- a/internal/decrypt.go +++ b/internal/decrypt.go @@ -1,17 +1,19 @@ package internal +// Decrypt recreates the kek from a passphrase and a salt, unwraps the dek using +// the kek, decrypts the data using the dek, and then returns the plaintext. func Decrypt(passphrase string, edek WrappedDEK, ct Ciphertext, salt Salt) ([]byte, error) { kek, err := NewKEKFromEnvB64(passphrase, salt) if err != nil { return nil, err } - dek2, err := UnwrapDEK(edek, kek) + dek, err := UnwrapDEK(edek, kek) if err != nil { return nil, err } - pt, err := DecryptData(ct, dek2) + pt, err := DecryptData(ct, dek) if err != nil { return nil, err } |
