Sirdhowrka Qoraalka oo Bilaash ah

Sirsheeg xoog leh oo caadi ah: AES-256-GCM oo furaha laga soo saaray furahaaga sirta ah iyada oo la adeegsanayo PBKDF2 (250,000 dib-u-celin, SHA-256). Fariin kasta waxay isticmaashaa salt iyo IV random ah oo cusub.

Furaha sirta ah marnaba lama keydiyo lamana diro meel kasta — wax walba waxaa lagu shaqeeyaa browserkaaga. Haddii aad lumiso furaha sirta ah, fariinta lama soo celin karo. Wadaag qoraalka sirsheegan iyo furaha sirta ah jidad kala duwan.

Qaab furan: Natiijadu waa base64 oo ah salt (16 byte) + IV (12 byte) + qoraal sirtoonaaday + calaamad GCM 16-byte ah, furaha waxa laga helay PBKDF2-SHA256 oo 250,000 jeer ah. Ma aha mid la jaan qaadaya OpenSSL ama CryptoJS, laakiin waad furi kartaa adigoon boggan isticmaalin, tusaale ahaan Node.js:

const c = require('crypto');
const b = Buffer.from(B64, 'base64');
const k = c.pbkdf2Sync(PASSWORD, b.subarray(0, 16), 250000, 32, 'sha256');
const d = c.createDecipheriv('aes-256-gcm', k, b.subarray(16, 28));
d.setAuthTag(b.subarray(b.length - 16));
console.log(d.update(b.subarray(28, b.length - 16)) + d.final());