diff options
Diffstat (limited to 'internal/decrypt.go')
| -rw-r--r-- | internal/decrypt.go | 6 |
1 files changed, 4 insertions, 2 deletions
diff --git a/internal/decrypt.go b/internal/decrypt.go index bd1f68b..252b033 100644 --- a/internal/decrypt.go +++ b/internal/decrypt.go @@ -1,17 +1,19 @@ package internal +// Decrypt recreates the kek from a passphrase and a salt, unwraps the dek using +// the kek, decrypts the data using the dek, and then returns the plaintext. func Decrypt(passphrase string, edek WrappedDEK, ct Ciphertext, salt Salt) ([]byte, error) { kek, err := NewKEKFromEnvB64(passphrase, salt) if err != nil { return nil, err } - dek2, err := UnwrapDEK(edek, kek) + dek, err := UnwrapDEK(edek, kek) if err != nil { return nil, err } - pt, err := DecryptData(ct, dek2) + pt, err := DecryptData(ct, dek) if err != nil { return nil, err } |