Function GetImageDecryptConverter

images/encryption/encryption.go:487–495

GetImageDecryptConverter returns a converter function for image decryption

(cc *encconfig.CryptoConfig, lf LayerFilter)

// GetImageDecryptConverter returns a converter function for image decryption
func GetImageDecryptConverter(cc *encconfig.CryptoConfig, lf LayerFilter) converter.ConvertFunc {
	return func(ctx context.Context, cs content.Store, desc ocispec.Descriptor) (*ocispec.Descriptor, error) {
		newDesc, _, err := DecryptImage(ctx, cs, desc, cc, lf)
		if err != nil {
			return nil, err
		}
		return &newDesc, nil
	}
}

// CheckAuthorization checks whether a user has the right keys to be allowed to access an image (every layer)
// It takes decrypting of the layers only as far as decrypting the asymmetrically encrypted data