hybrid decrypt

hybrid_decrypt

# decrypt /path/to/decrypted/target
# assumes existence of target.iv, target.key (aes-256-cbc), target.enc (encrypted target)
decrypt () {
  local IV=`base64 -d < "$1.iv" | openssl rsautl -decrypt \
    -inkey /etc/ssl/private/private.key`
  local KEY=`base64 -d < "$1.key" | openssl rsautl -decrypt \
    -inkey /etc/ssl/private/private.key`
  openssl aes-256-cbc -d -a -in "$1.enc" -out "$1" -iv "$IV" -K "$KEY"
}