Add ability to decrypt a file

1 files changed, 28 insertions, 0 deletions

diff --git a/internal/decrypt.go b/internal/decrypt.go
new file mode 100644
index 0000000..64ae7cf
--- /dev/null
+++ b/internal/decrypt.go
@@ -0,0 +1,28 @@
+package internal
+
+import (
+	"github.com/joho/godotenv"
+)
+
+func Decrypt(edek WrappedDEK, ct Ciphertext) ([]byte, error) {
+	if err := godotenv.Load(); err != nil {
+		return nil, err
+	}
+
+	kek, err := NewKEKFromEnvB64("SECRET_KEY")
+	if err != nil {
+		return nil, err
+	}
+
+	dek2, err := UnwrapDEK(edek, kek)
+	if err != nil {
+		return nil, err
+	}
+
+	pt, err := DecryptData(ct, dek2)
+	if err != nil {
+		return nil, err
+	}
+
+	return pt, nil
+}