[CVAT][Exchange/Recording Oracles] Add encryption support

[Marishka17]

Description

This PR enables decryption of downloaded escrow manifests that Job Launcher encryptes

Summary of changes

• Python SDK:
  • Added EncryptionUtils.is_encrypted method to check whether data is encrypted or not
• CVAT Oracles:
  • Set Oracle PGP_PUBLIC_KEY_URL to KVStore when starting service if there is no such key URL in KVStore or the key/URL has changed
  • Check whether escrow manifest is encrypted and decrypt them using PGP_PRIVATE_KEY/PGP_PASSPHRASE if necessary
  • PR adds 3 new environment variables (per oracle) to handle encryption: PGP_PRIVATE_KEY, PGP_PASSPHRASE, PGP_PUBLIC_KEY_URL

How test the changes

Added unit tests for Exchange/Recording Oracles and for python SDK

Related issues

Keywords for linking issues

[vercel]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

2 Skipped Deployments

Name	Status	Preview	Comments	Updated (UTC)
escrow-dashboard	⬜️ Ignored (Inspect)	Visit Preview		Jul 12, 2024 11:55am
faucet-server	⬜️ Ignored (Inspect)	Visit Preview		Jul 12, 2024 11:55am

[Dzeranov]

Lgtm.
Once we prepare a staging environment for these changes (public key generation, etc.) will approve and merge.