decrypt.rb

[Aki Tuomi]

> On 11 April 2019 17:44 David Salisbury via dovecot <dovecot at dovecot.org> wrote:
> 
>  
> On 4/11/2019 1:50 AM, Aki Tuomi wrote:
> >
> >> ...
> >> So, not being an expert at encryption, what are the ramifications of
> >> those digests being read as different values in the two different
> >> places??   I do notice that the get_pubid_priv() function is internal to
> >> the decrypt.rb script and calls several OpenSSL functions.
> >>
> >> -Dave
> > Hmm... can you show me how you made the keypair for encryption? Maybe there is some difference?
> >
> > Aki
> >
> 
> Aki, I just used the "EC key" instructions from the Dovecot MailCrypt wiki:
> https://wiki.dovecot.org/Plugins/MailCrypt
> 
> "
> In order to generate an EC key, you must first choose a curve from the 
> output of this command:
>  > openssl ecparam -list_curves
> 
> If you choose the curve prime256v1, generate and EC key with the command:
>  > openssl ecparam -name prime256v1 -genkey | openssl pkey -out 
> ecprivkey.pem
> 
> Then generate a public key out of your private EC key
>  > openssl pkey -in ecprivkey.pem -pubout -out ecpubkey.pem
> "
> 
> -Dave

I'm going on a limb and guess that there is something strange happening with ruby and openssl versions here.

The main point of the script is to show how the data can be decrypted, and can be used for small-scale data recovery as well.

Aki