https://github.com/nealfennimore/webcrypto-ts
No dependency Web Crypto Typescript wrapper with strict type enforcement. Node + Browser support
https://github.com/nealfennimore/webcrypto-ts
aes aes-cbc aes-ctr aes-gcm aes-kw ecdh ecdsa elliptic-curve hkdf hmac pbkdf rsa rsa-oaep rsa-pkcs1 rsa-pss sha256 sha384 sha512 webcrypto webcrypto-api
Last synced: 11 days ago
JSON representation
No dependency Web Crypto Typescript wrapper with strict type enforcement. Node + Browser support
- Host: GitHub
- URL: https://github.com/nealfennimore/webcrypto-ts
- Owner: nealfennimore
- Created: 2022-08-02T19:39:52.000Z (over 2 years ago)
- Default Branch: main
- Last Pushed: 2025-03-29T02:54:52.000Z (25 days ago)
- Last Synced: 2025-04-11T23:13:07.107Z (11 days ago)
- Topics: aes, aes-cbc, aes-ctr, aes-gcm, aes-kw, ecdh, ecdsa, elliptic-curve, hkdf, hmac, pbkdf, rsa, rsa-oaep, rsa-pkcs1, rsa-pss, sha256, sha384, sha512, webcrypto, webcrypto-api
- Language: TypeScript
- Homepage: https://webcrypto.neal.codes/
- Size: 3.22 MB
- Stars: 5
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# Webcrypto TS
[](https://github.com/nealfennimore/webcrypto-ts/actions/workflows/test.yml) [](https://codecov.io/gh/nealfennimore/webcrypto-ts)
A minimal ESM based, no dependency, typescript wrapper for the [Web Crypto API](https://developer.mozilla.org/en-US/docs/Web/API/Web_Crypto_API). Supports both nodejs and browser Web Crypto.
Algorithms are split into their own modules, which enforces consumption of cryptographic materials from the same algorithm. API follows entirely with the Web Crypto API, but removes the need for specifying every argument (secure defaults and inferred key usages). Keys are also [proxied](#proxied-keys-and-methods) to make it easier to use with cryptographic operations.
- [Documentation](https://webcrypto.neal.codes) 📖
- [Github](https://github.com/nealfennimore/webcrypto-ts) :octocat:
- [NPM](https://www.npmjs.com/package/@nfen/webcrypto-ts)
## Install
```sh
npm i @nfen/webcrypto-ts
```
## Proxied Keys and Methods
All generated keys are wrapped in a [Proxy](https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Proxy) object, which allows for executing methods specific to each key within a [small wrapper](https://github.com/nealfennimore/webcrypto-ts/blob/main/src/proxy.ts).
For example, we can generate an ECDSA keypair and `sign` directly off the `privateKey`.
```ts
import * as ECDSA from "@nfen/webcrypto-ts/lib/ec/ecdsa";
const keyPair = await ECDSA.generateKeyPair();
const message = new TextEncoder().encode("a message");
const signature = await keyPair.privateKey.sign({ hash: "SHA-512" }, message);
```
We can still use the WebCrypto based API too. Access any CryptoKey or CryptoKeyPair by using `self` on the key.
```ts
const signature = await ECDSA.sign(keyPair.privateKey.self, { hash: "SHA-512" }, message);
```
## Examples
Many more examples in the [Documentation](https://webcrypto.neal.codes).
### ECDSA
```ts
import * as ECDSA from "@nfen/webcrypto-ts/lib/ec/ecdsa";
const keyPair = await ECDSA.generateKeyPair();
const message = new TextEncoder().encode("a message");
const signature = await keyPair.privateKey.sign({ hash: "SHA-512" }, message);
const pubJwk = await keyPair.publicKey.exportKey("jwk");
const publicKey = await ECDSA.importKey(
"jwk",
pubJwk,
{ namedCurve: "P-512" },
true,
["verify"]
);
const isVerified = await publicKey.verify(
{ hash: "SHA-512" },
signature,
message
);
```
### RSA-OAEP
```ts
import * as RSA_OAEP from "@nfen/webcrypto-ts/lib/rsa/rsa_oaep";
import * as AES_CBC from "@nfen/webcrypto-ts/lib/aes/aes_cbc";
import * as Random from "@nfen/webcrypto-ts/lib/random";
const kek = await RSA_OAEP.generateKeyPair(
{
hash: "SHA-512",
modulusLength: 4096,
publicExponent: new Uint8Array([0x01, 0x00, 0x01]),
},
true,
["wrapKey", "unwrapKey"]
);
const dek = await AES_CBC.generateKey();
const label = await Random.getValues(8);
const wrappedCbcKey = await kek.publicKey.wrapKey("raw", dek.self, { label });
```
### AES-GCM
```ts
import * as AES_GCM from "@nfen/webcrypto-ts/lib/aes/aes_gcm";
import { IV } from "@nfen/webcrypto-ts/lib/random";
const iv = await IV.generate();
const key = await AES_GCM.generateKey();
const message = "a message";
const cipherText = await key.encrypt(
{ iv },
new TextEncoder().encode("a message")
);
console.assert(
new TextDecoder().decode(await key.decrypt({ iv }, message)) === message
);
```