Why are we using SAP maintained keypair for decryption in AS2 sender adapter

[mounikaravilla]

Hello All,

I would be grateful if anyone answer this query on SAP Cloud Integration 

 SAP owned keypair 'sap_cloudintegrationcertificate' is been used for decryption in AS2 adapter

Mentioned in the help document https://help.sap.com/docs/cloud-integration/sap-cloud-integration/configure-as2-sender-adapter

As 

Note

The private key alias for Cloud Integration is, sap_cloudintegrationcertificate

As per our understanding this key is used for Authentication purpose, how is it been used to decrypt the messages (sent by a third-party)

[EmanuelGraves]

The key pair sap_cloudintegrationcertificate mentioned in the SAP Cloud Integration documentation serves a dual purpose. While it is primarily used for authentication purposes during communication between SAP Cloud Integration and external parties (e.g., AS2 partners), it can also be utilized for decryption if required. In the context of AS2 communication, decryption typically occurs when SAP Cloud Integration receives encrypted messages from external partners. These messages are encrypted using the public key corresponding to the sap_cloudintegrationcertificate private key stored within SAP Cloud Integration. Upon receiving the encrypted message, SAP Cloud Integration uses its private key to decrypt the message and process its contents. So, although the primary purpose of the sap_cloudintegrationcertificate key pair may be for authentication, it can also be used for decryption when necessary, such as in the AS2 adapter scenario mentioned in the documentation. This approach simplifies key management and ensures secure communication between SAP Cloud Integration and external partners.