8000 Failed to decrypt ciphertext: number of unwrapped shares is 0 but expected 1 for 'no split' option · Issue #3 · GoogleCloudPlatform/stet · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content

Failed to decrypt ciphertext: number of unwrapped shares is 0 but expected 1 for 'no split' option #3

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
dco5000 opened this issue May 16, 2023 · 0 comments
Open

Failed to decrypt ciphertext: number of unwrapped shares is 0 but expected 1 for 'no split' option #3

dco5000 opened this issue May 16, 2023 · 0 comments

Comments

@dco5000
Copy link
dco5000 commented May 16, 2023

Have a working stet w/ Google KMS environment. I can use gsutil to send encrypted files to Cloud Storage from both my "on-prem" ubuntu with STET and my confidential computing VM. When I attempt to download from Storage to my "on-prem" ubuntu, I get the error: Failed to decrypt ciphertext: number of unwrapped shares is 0 but expected 1 for 'no split' option. This configuration had worked with an issue a year ago, but I've struggled to get the "on-prem" client to work. I tried to set up a new STET client on a Google Cloud VM and same result as my "on-prem" VM. My stet.yaml file in both on-prem and confidential computing are identical... example:
GNU nano 4.8 stet.yaml

~/.config/stet.yaml

encrypt_config:
key_config:
kek_infos:
- kek_uri: "gcp-kms://projects/xxxx/locations/us-central1/keyRings/ciphertrust-EKM/cryptoKeys/open-wrap-unwrap"
dek_algorithm: AES256_GCM
no_split: true

decrypt_config:
key_configs:

  • kek_infos: # Note the extra hyphen here, because key_configs is a repeated field.
    • kek_uri: "gcp-kms://projects/xxxx/locations/us-central1/keyRings/ciphertrust-EKM/cryptoKeys/open-wrap-unwrap"
      dek_algorithm: AES256_GCM
      no_split: true
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@dco5000
0