PGP Encryption and Decryption in SFTP

[aarthianand93]

Hi Team, 

What is the process for PGP encryption and decryption for flat file to import users in SFTP?

What is the support for this and is it a custom JAR approach in Saviynt?

We are currently in the 24.x version and we would like to know how this is implemented in the latest version. 

Regards,

Aarthi Anand

[DixshantValecha]

Hi Aarthi,

We are looking into your request and we will keep you posted.

[rushikeshvartak]

https://forums.saviynt.com/t5/identity-governance/pgp-encryption-for-flat-files/m-p/13692#M4822

Saviynt is not owning/supporting any encryption/decryption keys for user import process OOB. You could implement it using extensions (jars) to decrypt the encrypted files before processing but it would be a customization.

[aarthianand93]

Hi Rushikesh,

Thank you for the response. Please let us know if you have any references for the decryption process through custom JAR. 

Regards,

Aarthi Anand

[rushikeshvartak]

https://didisoft.com/java-openpgp/examples/decrypt/

[Sukh]

Didisoft is a commercial paid version. Could you please suggest to us with open source options?

[rushikeshvartak]

alternatives to Didisoft for PGP encryption and decryption:

1. GnuPG (GPG):

   • Description: GnuPG is the most widely used open-source implementation of the OpenPGP standard. It is robust and widely supported, with tools available for Windows, macOS, and Linux.
   • Website: gnupg.org
   • Features: Command-line tools, library for integrating into applications, supports various encryption algorithms, key management, and scripting capabilities.

2. OpenPGP.js:

   • Description: OpenPGP.js is an open-source OpenPGP library implemented in JavaScript. It is suitable for web applications and can be used in both browser and Node.js environments.
   • Website: openpgpjs.org
   • Features: Encryption, decryption, signing, and verification. It also supports key generation and management.

3. RNP:

   • Description: RNP is a library for OpenPGP and a command-line tool developed by Ribose. It aims to be a modern, easy-to-use implementation.
   • Website: github.com/riboseinc/rnp
   • Features: Comprehensive support for OpenPGP operations, integration with various platforms, and a focus on modern cryptographic practices.

4. PGPainless:

   • Description: PGPainless is a modern, user-friendly OpenPGP library for Java and Android. It is designed to simplify the integration of PGP into Java applications.
   • Website: pgpainless.org
   • Features: High-level API for ease of use, comprehensive support for OpenPGP features, and compatibility with both desktop and mobile environments.

5. Sequoia-PGP:

   • Description: Sequoia-PGP is an open-source implementation of the OpenPGP standard written in Rust. It aims to be a modern and secure library for PGP operations.
   • Website: sequoia-pgp.org
   • Features: High-level and low-level API, modern cryptographic standards, and a focus on security and ease of integration