Kyauta Ɓoye Rubutu

Ɓoyewa mai ƙarfi, na ƙa'ida: AES-256-GCM tare da maɓalli daga kalmar sirrinka ta hanyar PBKDF2 (juyi 250,000, SHA-256). Kowane saƙo yana amfani da sabon gishiri da IV na bazuwar.

Ba a taɓa ajiye ko aika kalmar sirri a ko'ina ba — komai yana faruwa a na'urar gizonka. Idan ka manta da kalmar sirri, ba za a iya dawo da saƙon ba. Raba rubutun da aka ɓoye da kalmar sirri ta hanyoyi daban-daban.

Buɗaɗɗen tsari: Fitowar base64 ce ta salt (byte 16) + IV (byte 12) + ciphertext + tambarin GCM na byte 16, tare da maɓalli daga PBKDF2-SHA256 a maimaitawa 250,000. Ba ya dacewa da OpenSSL ko CryptoJS, amma za ka iya buɗe shi ba tare da wannan shafin ba, misali a Node.js:

const c = require('crypto');
const b = Buffer.from(B64, 'base64');
const k = c.pbkdf2Sync(PASSWORD, b.subarray(0, 16), 250000, 32, 'sha256');
const d = c.createDecipheriv('aes-256-gcm', k, b.subarray(16, 28));
d.setAuthTag(b.subarray(b.length - 16));
console.log(d.update(b.subarray(28, b.length - 16)) + d.final());