@alorel-personal/build-tools/lib/Crypt.js

"use strict";
Object.defineProperty(exports, "__esModule", { value: true });
const crypto = require("crypto");
const lodash_1 = require("lodash");
class Crypt {
    static decrypt(encrypted, password) {
        const bData = Buffer.from(encrypted, 'base64');
        const salt = bData.slice(0, 64 /* IV_START */);
        const iv = bData.slice(64 /* IV_START */, 80 /* TAG_START */);
        const tag = bData.slice(80 /* TAG_START */, 96 /* TEXT_START */);
        const text = bData.slice(96 /* TEXT_START */);
        const key = crypto.pbkdf2Sync(password, salt, 16384 /* KEY_ITERATIONS */, 32 /* KEY_LEN */, "sha512" /* HASH */);
        const decipher = crypto.createDecipheriv("aes-256-gcm" /* CIPHER */, key, iv);
        decipher.setAuthTag(tag);
        const out = decipher.update(text, 'binary', 'utf8') + decipher.final('utf8');
        if (!out) {
            throw new Error('Unable to decrypt');
        }
        return out;
    }
    static decryptVar(v, password) {
        return Crypt.decrypt(v.__encrypted, password);
    }
    static encrypt(text, password) {
        const iv = crypto.randomBytes(16 /* IV_RANDOM_BYTES */);
        const salt = crypto.randomBytes(64 /* SALT_RANDOM_BYTES */);
        const key = crypto.pbkdf2Sync(password, salt, 16384 /* KEY_ITERATIONS */, 32 /* KEY_LEN */, "sha512" /* HASH */);
        const cipher = crypto.createCipheriv("aes-256-gcm" /* CIPHER */, key, iv);
        const encrypted = Buffer.concat([cipher.update(text, 'utf8'), cipher.final()]);
        const authTag = cipher.getAuthTag();
        return Buffer.concat([salt, iv, authTag, encrypted]).toString('base64');
    }
    static encryptVar(text, password) {
        return { __encrypted: Crypt.encrypt(text, password) };
    }
    static isEncrypted(v) {
        return !!v && lodash_1.isObject(v) && typeof v.__encrypted === 'string';
    }
}
exports.Crypt = Crypt;