The trt_engine_decryption_lib_path environment variable renders encryption worthless

[BengtGustafsson]

Describe the issue

As the end user can redirect encryption/decryption to their own library that for instance does not encryption the entire encryption facility is useless. It is mostly useless anyway as a perpetrator can replace the vendor specified library under its original name but providing an environment variable just for the benefit of perpetrators is even more ridiculous.

To reproduce

set the env var and observe bypassing of the encryption in the wink of an eye.

Urgency

Not urgent as encryption doesn't even work anyway.

Platform

Windows

OS Version

11

ONNX Runtime Installation

Built from Source

ONNX Runtime Version or Commit ID

1.20

ONNX Runtime API

C++

Architecture

X64

Execution Provider

TensorRT

Execution Provider Library Version

CUDA 11.6, TrT 10.4.0.26

[github-actions]

This issue has been automatically marked as stale due to inactivity and will be closed in 30 days if no further activity occurs. If further support is needed, please provide an update and/or more details.