Repository files navigation

This library is a small wrapper around node'scrypto library. It offers convenience methods for encrypting and decrypting arbitrary payloads in both AES and RSA.

For use encrypting / decrypting payloads in Anvil, you can generate an RSA keypair from yourorganization's settings page.

Anvil provides easy APIs for all things paperwork.

1. PDF filling API - fill out a PDF template with a web request and structured JSON data.
2. PDF generation API - send markdown or HTML and Anvil will render it to a PDF.
3. Etch E-sign with API - customizable, embeddable, e-signature platform with an API to control the signing process end-to-end.
4. Anvil Workflows (w/ API) - Webforms + PDF + E-sign with a powerful no-code builder. Easily collect structured data, generate PDFs, and request signatures.

Learn more about Anvil on ourAnvil developer page.

yarn add @anvilco/encryption

Then use it

// For RSA functionsimport{encryptRSA,decryptRSA}from'@anvilco/encryption'// For AES functionsimport{generateAESKey,encryptAES,decryptAES}from'@anvilco/encryption'// Could grab the keys from file (or preferably from environment variables)importfsfrom'fs'constprivateKey=fs.readFileSync('path/to/privateKey.pem')constpublicKey=fs.readFileSync('path/to/publicKey.pem')// RSAconstmessage='Super secret message'constencryptedRSAMessage=encryptRSA(publicKey,message)constorigRSAMessage=decryptRSA(privateKey,encryptedRSAMessage)console.log(origRSAMessage===message)// => true// AESconstaesKey=generateAESKey()constencryptedAESMessage=encryptAES(aesKey,message)constorigAESMessage=decryptAES(aesKey,encryptedAESMessage)console.log(origAESMessage===message)// => true

There are two functions for RSA:encryptRSA,decryptRSA, and three for AES:generateAESKey,encryptAES,decryptAES.

There are three functions for AES:

• key = generateAESKey()
• encryptedMessage = encryptAES(key, plainMessage)
• plainMessage = decryptAES(key, encryptedMessage)

encryptAES creates a uniqueIV for each message encrypted and prepends it to the resulting encrypted payload. SoencryptedMessage will be in the format

<iv>:<aesEncryptedPayload>

There are two functions for RSA:

• encryptedMessage = encryptRSA(publicKey, plainMessage)
• plainMessage = decryptRSA(privateKey, encryptedMessage)

These functions encrypt / decrypt with RSAand AES. RSA has an upper limit on how much data it can encrypt. So we create an AES key, encrypt the AES key with RSA, then encrypt the actual message with AES.

Note the encrypted payload (result ofencryptRSA) is in the format:

<rsaEncryptedAESKey>:<aesEncryptedMessage>

This library does not have a way to generate RSA keys.

You could use openssl:

# This generates a 2048 bit private key to fileopenssl genrsa -out privateKey.pem 2048# This extracts the public key to fileopenssl rsa -in privateKey.pem -outform PEM -pubout -out publicKey.pem

You could also use something likenode-rsa:

// Example generating a RSA keypair with node-rsaimportNodeRSAfrom'node-rsa'functiongenerateRSAKeypair(){constkey=newNodeRSA()key.generateKeyPair(2048,65537)return{publicKey:key.exportKey('pkcs8-public-pem'),privateKey:key.exportKey('pkcs8-private-pem'),}}

MIT