When decryption is performed, the original XML section
replaces the <EncryptedData> tags in an XML
file. To decrypt the XML content, this operation requires the private
key of the recipient for whom the content has been encrypted. In
LiveCycle, all private keys are stored in the Truststore, so the decryption
operation will require the credential alias information, to fetch
the correct private key. The operation to encrypt XML requires the
following inputs:
Encrypted XML. The XML content that has been encrypted,
in the form of a com.adobe.idp.Document object.
Credential alias. A collection of credential aliases to be
used to decrypt the XML. Each credential alias acts as a private
key identifier, that points to the right private key to use to decrypt
the XML or section of XML.
When you provide a user’s
credential alias, the decryption operations looks up the corresponding
private key from the Truststore, and uses it to decrypt the portions
of XML encrypted for that user. However, if you pass null in
the place of the credential alias, the decryption operation finds
all the encrypted portions of the XML, and decrypts all the portions
for which it can find a private key in the Truststore.
|
|
|