Ensure Safer Decryption Process

[campeon23]

Description: In our decryption routine, decrypted content gets written back to the disk. This approach could expose sensitive plaintext content, even if temporarily.

Recommendation: Refrain from writing decrypted content back to the disk unless there's a compelling requirement. Ideally, handle decrypted content solely in memory.

Example Fix:

func DecryptFileToMemory(filePath string, key []byte) ([]byte, error) {
    encryptedData, err := ioutil.ReadFile(filePath)
    if err != nil {
        return nil, err
    }
    return decryptDataInMemory(encryptedData, key)
}

Acceptance Criteria:

• Modify the decryption process to manage decrypted content in memory by default.
• Implement tests to confirm the safety and functionality of the revised process.
• Update related documentation to reflect this change and the rationale behind it.

Severity Level: Medium

[campeon23]

Duplicated ticket. Original #153