(Node.js) PBES1 Password-Based Encryption (PBE)

Demonstrates how to implement password-based encryption according to the PKCS #5 v2.0: Password-Based Cryptography Standard (published by RSA Laboratories). This example uses PBES1, which ise based on the PBKDF1 function and an underlying block cipher such as RC2, DES, etc.

Install Chilkat for Node.js and Electron using npm at Chilkat npm packages for Node.js Chilkat npm packages for Electron on Windows, Linux, MacOSX, and ARM

var os = require('os');
if (os.platform() == 'win32') {  
    if (os.arch() == 'ia32') {
        var chilkat = require('@chilkat/ck-node21-win-ia32');
    } else {
        var chilkat = require('@chilkat/ck-node21-win64'); 
    }
} else if (os.platform() == 'linux') {
    if (os.arch() == 'arm') {
        var chilkat = require('@chilkat/ck-node21-arm');
    } else if (os.arch() == 'x86') {
        var chilkat = require('@chilkat/ck-node21-linux32');
    } else {
        var chilkat = require('@chilkat/ck-node21-linux64');
    }
} else if (os.platform() == 'darwin') {
    if (os.arch() == 'arm64') {
        var chilkat = require('@chilkat/ck-node21-mac-m1');
    } else {
        var chilkat = require('@chilkat/ck-node21-macosx');
    }
}

function chilkatExample() {

    // This example assumes the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    var crypt = new chilkat.Crypt2();

    // Set properties for PBES1 encryption:

    crypt.CryptAlgorithm = "pbes1";
    crypt.PbesPassword = "mySecretPassword";

    // Set the underlying PBE algorithm (and key length):
    // For PBES1, the underlying algorithm must be either
    // 56-bit DES or 64-bit RC2 
    // (this is according to the PKCS#5 specifications at
    // http://www.rsa.com/rsalabs/node.asp?id=2127   )
    crypt.PbesAlgorithm = "rc2";
    crypt.KeyLength = 64;

    // The salt for PBKDF1 is always 8 bytes:
    crypt.SetEncodedSalt("0102030405060708","hex");

    // A higher iteration count makes the algorithm more
    // computationally expensive and therefore exhaustive
    // searches (for breaking the encryption) is more difficult:
    crypt.IterationCount = 1024;

    // A hash algorithm needs to be set for PBES1:
    crypt.HashAlgorithm = "sha1";

    // Indicate that the encrypted bytes should be returned
    // as a hex string:
    crypt.EncodingMode = "hex";

    var plainText = "To be encrypted.";

    var encryptedText = crypt.EncryptStringENC(plainText);

    console.log(encryptedText);

    // Now decrypt:
    var decryptedText = crypt.DecryptStringENC(encryptedText);

    console.log(decryptedText);

}

chilkatExample();