I'm trying to create a solution to decrypt a file at rest on a server by sending an email to a given address and receiving a reply from that address. I'm struggling to see if its possible and haven't identified a methodology yet; so I'm writing to see if such a solution actually exists.
I don't wish to store an encrypted password on the server, I'd like to be able to derive it based on some exchange via email. Obviously no data sent or received via the email can give away any part of the secret. I've been thinking along the lines of leveraging the email sender signing the message (either s/mime or pgp) and using that signature as an input to generating the encryption key. (Assume the email public key part is available to the server) But I haven't hit upon a way to achieve it.
End result is that when some server process requires access to the encrypted file it sends an email. The recipient simply replies, signs the reply and sends. This is then sufficient for the server to derive the key previously setup.
So anyone know of a methodology or solution that implements something like this?