I am new to cryptography.
I have a package to be shared with Bob which is something like below:
Package contains: data.zip and Application
- data.zip is encrypted
- Application will have logic to decrypt the data
Bob will run
Application and it will decrypt the
Now for the decryption key, I understand that I can maintain a key store where I can keep the key securely which my Application will access and get the key.
But in my case Bob will execute the
Application with the decryption key doesn't make sense as Bob can easily take the key or logic to form the key from
In this scenario how can I handle the decryption part? what is the ideal solution and how where should I keep the key?