Sidebar
endurox:v7.5.x:manuals:exdecrypt.8
Name
exdecrypt — Decrypt the string value
DESCRIPTION
Program decrypts one or many STRING value passed on command line. In the result program prints to stdout clear string value. The debug is configured in standard way as for all other binaries via ndrxdebug.conf or Common Config.
The encrypted value of the string can be made by exencrypt(8) utility.
Encryption keys which are used for string encryption are provided either by using built-in algorithm (username+hostname) hashed with SHA1. Or from vendor specific loaded plugin.
The encryption principles allows to encrypt the sensitive data and store on disk in PCI/DSS compatible way. And exdecrypt can be used for scripts to get in runtime the clear values needed.
In case of decrypt failure, logs needs to be analyzed. There could be problems with base64 string or invalid encryption key. In case decrypt process founds the binary zero (0x00 byte) in output string, error is generated automatically, because this value if forbidden in string decryption.