Eric Burger <eburger(_at_)brooktrout(_dot_)com> writes:
So, the question is, are there implementations of PGP where one can:
1. Extract the encrypted session key from the PGP-encrypted object
2. An API for handing over the encrypted session key and the client key,
returning the clear session key (this would run on the remote client).
3. An API that takes the clear session key and the PGP-encrypted object and
returns the cleartext object.
Why not have the client decrypt the session key, re-encrypt it with the
server's public key, and send it back? Any version of PGP supports this, and
it solves the difficult problem of "an API for [...] the client returning the
session key".
Peter.