kbpgp icon indicating copy to clipboard operation
kbpgp copied to clipboard

Is it possible to "decrypt" a signed message without the public key?

Open skylarmt opened this issue 4 years ago • 1 comments

I'd like my application to decode and process the contents of a signed message, even if it can't verify the signature with a public key. I can do this with gpg --decrypt, which gives me the contents of the message along with "Can't check signature: No public key", but kbpgp gives an error.

kbpgp.unbox({keyfetch: keyring, armored: pgpmsg}, function (err, literals) {} should have the message in literals[0].toString() even if the rest of the info (such as literals[0].get_data_signer()) is missing.

skylarmt avatar Jul 05 '21 03:07 skylarmt

I would like to second this - CyberChef uses this function and it caught us out - throwing a cryptic error when trying to decrypt a signed message.

cybermnemosyne avatar Aug 11 '21 14:08 cybermnemosyne