Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Regarding E2E encryption #178

Closed
duc12597 opened this issue Aug 15, 2018 · 1 comment
Closed

Regarding E2E encryption #178

duc12597 opened this issue Aug 15, 2018 · 1 comment

Comments

@duc12597
Copy link

I am running an Android simulator to test the E2E encryption. I was able to send an encrypted request from mobile to API server, so how do I decrypt the encrypted request payload at my custom API endpoint?

I also see 2 SOAP methods for E2E encryption. What are they used for and when?

@petrdvorak
Copy link
Member

Hello @duc12597, please visit our Gitter for the general discussion - we use Github to track issues:

https://gitter.im/wultra/powerauth

To give you an implementation gist of the current E2E, here is an example:

https://github.com/wultra/powerauth-restful-integration/blob/develop/powerauth-restful-server-spring/src/main/java/io/getlime/security/powerauth/app/rest/api/spring/controller/EncryptedDataExchangeController.java

Currently, only what's called "non-personalized" encryptor (encryption with keys specific for application, not user / activation) is implemented.

Also, please note that the current E2E is in PoC / Beta mode and we will be completely rewriting E2E in the future release, to that the implementation follows the standard ECIES implementation.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants