#!/bin/bash

tmpkey=$(mktemp)
openssl rsautl -decrypt -oaep -inkey $1 -in $2 -out $tmpkey
openssl enc -aes-256-cbc -pbkdf2 -iter 100000 -salt -pass "file:$tmpkey" \
    -in "$3" -out "${3%.*}" -d
rm $tmpkey