Decryption

When decryption is performed, the original XML section replaces the <EncryptedData> tags in an XML file. To decrypt the XML content, this operation requires the private key of the recipient for whom the content has been encrypted. In LiveCycle, all private keys are stored in the Truststore, so the decryption operation will require the credential alias information, to fetch the correct private key. The operation to encrypt XML requires the following inputs:

  • Encrypted XML. The XML content that has been encrypted, in the form of a com.adobe.idp.Document object.

  • Credential alias. A collection of credential aliases to be used to decrypt the XML. Each credential alias acts as a private key identifier, that points to the right private key to use to decrypt the XML or section of XML.

When you provide a user’s credential alias, the decryption operations looks up the corresponding private key from the Truststore, and uses it to decrypt the portions of XML encrypted for that user. However, if you pass null in the place of the credential alias, the decryption operation finds all the encrypted portions of the XML, and decrypts all the portions for which it can find a private key in the Truststore.

// Ethnio survey code removed