Search code examples
pythonpython-3.xencryptionrsapycryptodome

Python3 Cryptodome - how to decrypt pem?


I am trying to decrypt my private key in python using cryptodome. Under raw_cipher_data is my password to encrypt the private key. But I get the error message "ValueError: PEM is encrypted, but no passphrase available"

MY IMPORT

from Cryptodome.Signature import PKCS1_v1_5
from Cryptodome.Hash import SHA
from Cryptodome.PublicKey import RSA
from base64 import b64decode

CODE

rsa_key = RSA.importKey(open('pem file location', "rb").read())
verifier = PKCS1_v1_5.new(rsa_key)
raw_cipher_data = b64decode(<your cipher data>)
phn = rsa_key.decrypt(raw_cipher_data)

MY ERROR MSG

  File ".\app.py", line 24, in <module>
    rsa_key = RSA.importKey(f.read(), passphrase="CNt3wiSY3Sjn0fEh2fsq")
  File "C:\Users\xx\AppData\Local\Programs\Python\Python37-32\lib\site-packages\Cryptodome\PublicKey\RSA.py", line 733, in import_key
    (der, marker, enc_flag) = PEM.decode(tostr(extern_key), passphrase)
  File "C:\Users\xx\AppData\Local\Programs\Python\Python37-32\lib\site-packages\Cryptodome\IO\PEM.py", line 163, in decode
    data = unpad(objdec.decrypt(data), objdec.block_size)
  File "C:\Users\xx\AppData\Local\Programs\Python\Python37-32\lib\site-packages\Cryptodome\Util\Padding.py", line 90, in unpad
    raise ValueError("Padding is incorrect.")
ValueError: Padding is incorrect.

Solution

  • I think your RSA key is encrypted. As per the documentation, you should provide the passphrase like this rsa_key = RSA.importKey(open('pem file location', "rb").read(), passphrase="yourpasswordhere")