Simple, effective, easy to implement encryption for JavaScript
Features
- Encrypts data with multiple processes
- Uses password numbers to Encrypt and Decrypt
- Hashes a string and then later compares with a input
How to use:
- use 'encrypt()' function with a Passcode number, and convert any sentence to encrypted format.
- use 'decrypt()' function with the same Passcode number, to get back the Real sentence.
- use 'hash()' function to finally hash the encrypted value, and later compare
- use 'hashCompare()' to compare user input password and previously stored hashed password, if match, authenticate
Example 💡
const { encrypt, decrypt, hash, hashCompare } = require('keyhasher');
const passCode = process.env.PASS_CODE || 572; // set a passCode in .env or use directly
var encryptedWord = encrypt('passwordInput', passCode);
console.log(`Encrypted Phrase: ${encryptedWord}`) // Output: "QGFkX1NeEkVXYGZXYFVX"
var rawWord = decrypt(encryptedWord, passCode);
console.log(`Output: ${rawWord}`) // Output: "Normal Sentence"
const hashed = hash(encryptedWord); // encryption + hashing
console.log(`Hashed: ${hashed}`) // Output: "5bf22a00c0df8757f68e700066bd56c5edffc4103f9587666ccbde062a0f52f5"
const isCorrect = hashCompare(hash('user given password'), hashed);
// it hashes user input And compares with the hashed value stored in database
console.log(isCorrect); // returns a boolean The hashCompare function -
The hashCompare() function can't be affected with Timing attack.
Timing attacks are a type of attack that can be used to determine the contents of a secret string by measuring the time it takes to compare two strings character-by-character. To prevent timing attacks, Keyhasher uses a constant-time string comparison algorithm.
The use of Buffer in the implementation of the secure string comparison function is to convert the input strings into a format that can be easily compared byte-by-byte in a constant-time manner. Buffer is a built-in class in Node.js that provides a way to represent binary data in the form of a fixed-size sequence of bytes.