Function decryptWithEphemeralKey

packages/consortium-cli/src/ui/auth.ts:130–138

(encryptedBundle: Uint8Array, recipientSecretKey: Uint8Array)

}

function decryptWithEphemeralKey(encryptedBundle: Uint8Array, recipientSecretKey: Uint8Array): Uint8Array | null {
    const ephemeralPublicKey = encryptedBundle.slice(0, 32);
    const nonce = encryptedBundle.slice(32, 32 + tweetnacl.box.nonceLength);
    const encrypted = encryptedBundle.slice(32 + tweetnacl.box.nonceLength);

    const decrypted = tweetnacl.box.open(encrypted, nonce, ephemeralPublicKey, recipientSecretKey);
    if (!decrypted) return null;
    return decrypted;
}

/**
 * Ensure authentication and machine setup