aws-encryption-sdk-decryption-oracle

This project provides a REST API to be used as a decryption oracle to verify that ciphertext can be successfully decrypted by the AWS Encryption SDK for Python.

The API is deployed on Amazon API Gateway and backed by AWS Lambda.

API v0

Path

/v0/decrypt

Request

Method: POST
Body: Raw ciphertext bytes
Headers:
- Content-Type: application/octet-stream
- Accept: application/octet-stream

Response

200 response code with the raw plaintext bytes as the body
400 response code with whatever error code was encountered as the body

Development

Building

The Lambda package must be built on an Amazon Linux platform as close as possible to the AWS Lambda environment.

To build the Lambda package, run: tox -e chalice -- package {TARGET DIR}

Deployment

This API is built using Chalice and can be deployed independently of any other infrastructure.

To build and deploy the API, run: tox -e chalice -- deploy