Decrypting attributes on-the-fly

[Cantor, Scott]

On 2/6/14, 8:19 PM, "Griffin Cheng [CLIB]" <cscheng at cpce-polyu.edu.hk>
wrote:

>Sorry, I am a newbie to Shibboleth. I do not understand what ³plugin
>hook² is about and how the whole workflow can ³attach² to it.  The
>problem is, the attribute in question is stored encrypted in the first
>place, using key that is not part of the Shibboleth itself.

I can't teach you how to build an extension. Not in Java, and certainly
not in C++. If you don't have those skills, there's no way to do this. If
you do, then you need to learn how Shibboleth works by reading
documentation and looking at the code and figuring out how to extend it.

I don't know where/when you want to decrypt the data, or on which end, and
I can't determine that for you. If I did, then I could describe what kind
of plugin is needed to do this.

Furthermore, if the PGP key needed to decypt the data isn't available at
the place you want to do it, then you're done. You can't do anything with
the data without that.

-- Scott