Function decryptKeyedEnvelope

packages/encryption/src/keyed-envelope.ts:96–112

(
  serialized: string,
  scheme: Scheme,
  keys: EnvelopePrivateKeySlots,
  aad?: string
)

}

export function decryptKeyedEnvelope<Scheme extends string>(
  serialized: string,
  scheme: Scheme,
  keys: EnvelopePrivateKeySlots,
  aad?: string
): string {
  const envelope = parseKeyedEnvelope(serialized, scheme);
  const key = selectPrivateKey(envelope.keyId, keys);

  if (!key.privateKeyPem) {
    throw new EncryptionConfigurationError(
      `Private key is not configured for keyed envelope key ID: ${envelope.keyId}`
    );
  }

  return decryptWithPrivateKey(envelope.ciphertext, key.privateKeyPem, aad);
}

function selectPrivateKey(keyId: string, keys: EnvelopePrivateKeySlots): EnvelopePrivateKeySlot {
  const decryptSlot = keys.decrypt?.find(slot => slot.keyId === keyId);