Class WebCryptoProvider

Cryptographic provider implementation using the Web Crypto API.

This provider leverages the browser's native Web Crypto API for cryptographic operations, offering excellent performance and security. It supports modern algorithms including RSA, ECDSA, AES, and SHA hashes. The Web Crypto API is available in both browsers and Node.js (16+), making this provider suitable for cross-platform applications.

Supported operations:

Hashing: SHA-1, SHA-256, SHA-384, SHA-512 (MD5 not supported)
Asymmetric: RSA-PKCS1, RSA-PSS, RSA-OAEP, ECDSA, ECDH
Symmetric: AES-GCM, AES-CBC, AES-CTR
Key derivation: PBKDF2, HKDF

Example

const provider = new WebCryptoProvider()

// Hash data
const hash = await provider.digest(data, 'SHA-256')

// Sign data with RSA-PSS
const signature = await provider.sign(
    data,
    privateKeyInfo,
    { type: 'RSA_PSS', params: { hash: 'SHA-256', saltLength: 32 } }
)

// Encrypt with AES-GCM
const encrypted = await provider.encryptSymmetric(
    plaintext,
    key,
    { type: 'AES_GCM', params: { iv: iv, tagLength: 16 } }
)

Hierarchy (View Summary)

WebCryptoProvider
- WebCryptoExtendedProvider

Implements

CryptoProvider

Constructors

constructor

new WebCryptoProvider(): WebCryptoProvider
Returns WebCryptoProvider

Properties

`Protected`crypto

crypto: { subtle: SubtleCrypto } = globalThis.crypto

Reference to the Web Crypto API interface. Protected to allow testing with mock implementations.

Methods

contentEncryptionAlgorithm

contentEncryptionAlgorithm(
    encryptionParams:
        | SymmetricEncryptionAlgorithmParams
        | PbeAlgorithmParams,
): AlgorithmIdentifier
Converts symmetric encryption algorithm parameters to a content encryption algorithm identifier.
Parameters
- encryptionParams: SymmetricEncryptionAlgorithmParams | PbeAlgorithmParams
  The symmetric encryption algorithm parameters
Returns AlgorithmIdentifier
Content encryption algorithm as an AlgorithmIdentifier
Implementation of CryptoProvider.contentEncryptionAlgorithm
- Defined in packages/pki-lite/src/core/crypto/WebCryptoProvider.ts:944

decrypt

decrypt(
    data: Uint8Array<ArrayBuffer>,
    privateKeyInfo: PrivateKeyInfo,
    algorithm: AsymmetricEncryptionAlgorithmParams,
): Promise<Uint8Array<ArrayBuffer>>
Decrypts the given data using the specified private key and asymmetric algorithm.
Parameters
- data: Uint8Array<ArrayBuffer>
  The data to decrypt
- privateKeyInfo: PrivateKeyInfo
  The private key information
- algorithm: AsymmetricEncryptionAlgorithmParams
  The decryption algorithm to use
Returns Promise<Uint8Array<ArrayBuffer>>
Promise resolving to the decrypted data as a Uint8Array
Implementation of CryptoProvider.decrypt
- Defined in packages/pki-lite/src/core/crypto/WebCryptoProvider.ts:619

decryptSymmetric

decryptSymmetric(
    data: Uint8Array<ArrayBuffer>,
    key: string | Uint8Array<ArrayBuffer> | CryptoKey,
    algorithm: SymmetricEncryptionAlgorithmParams | PbeAlgorithmParams,
): Promise<Uint8Array<ArrayBuffer>>
Decrypts the given data using the specified symmetric key and algorithm.
Parameters
- data: Uint8Array<ArrayBuffer>
  The data to decrypt
- key: string | Uint8Array<ArrayBuffer> | CryptoKey
  The symmetric key to use for decryption
- algorithm: SymmetricEncryptionAlgorithmParams | PbeAlgorithmParams
  The decryption algorithm to use
Returns Promise<Uint8Array<ArrayBuffer>>
Promise resolving to the decrypted data as a Uint8Array
Implementation of CryptoProvider.decryptSymmetric
- Defined in packages/pki-lite/src/core/crypto/WebCryptoProvider.ts:639

`Protected`deriveCryptoKey

deriveCryptoKey(
password: string | Uint8Array<ArrayBuffer> | CryptoKey,
algorithm: PbeAlgorithmParams,
): Promise<CryptoKey>
Parameters
- password: string | Uint8Array<ArrayBuffer> | CryptoKey
- algorithm: PbeAlgorithmParams
Returns Promise<CryptoKey>
- Defined in packages/pki-lite/src/core/crypto/WebCryptoProvider.ts:418

deriveKey

deriveKey(
password: string | Uint8Array<ArrayBuffer> | CryptoKey,
algorithm: PbeAlgorithmParams,
): Promise<Uint8Array<ArrayBuffer>>
Derives a cryptographic key from a password using the specified algorithm.
Parameters
- password: string | Uint8Array<ArrayBuffer> | CryptoKey
  The password or key material to derive from
- algorithm: PbeAlgorithmParams
  The key derivation algorithm parameters
Returns Promise<Uint8Array<ArrayBuffer>>
Promise resolving to the derived key as a Uint8Array
Implementation of CryptoProvider.deriveKey
- Defined in packages/pki-lite/src/core/crypto/WebCryptoProvider.ts:503

derivePkcs12Key

derivePkcs12Key(
    password: string | Uint8Array<ArrayBuffer>,
    salt: Uint8Array<ArrayBuffer>,
    iterationCount: number,
    keyLength: number,
    purpose?: "encryption" | "iv" | "mac",
    hash?: HashAlgorithm,
): Promise<Uint8Array<ArrayBuffer>>
Derives key material using PKCS#12 password-based KDF (RFC 7292 Appendix B). Supports modern hash algorithms for improved security while maintaining OpenSSL compatibility.
Parameters
- password: string | Uint8Array<ArrayBuffer>
  The password (string or bytes, will be converted to BMPString format)
- salt: Uint8Array<ArrayBuffer>
  Salt value for key derivation
- iterationCount: number
  Number of iterations for key strengthening
- keyLength: number
  Desired key length in bytes
- purpose: "encryption" | "iv" | "mac" = 'encryption'
  Key purpose: 'encryption' (id=1), 'iv' (id=2), or 'mac' (id=3)
- hash: HashAlgorithm = 'SHA-1'
  Hash algorithm to use (default: SHA-1 for legacy compatibility)
Returns Promise<Uint8Array<ArrayBuffer>>
Promise resolving to the derived key bytes
Example
```
// Derive a MAC key with SHA-256
const macKey = await provider.derivePkcs12Key(
    password,
    salt,
    100000,
    32,
    'mac',
    'SHA-256'
)
```
Implementation of CryptoProvider.derivePkcs12Key
- Defined in packages/pki-lite/src/core/crypto/WebCryptoProvider.ts:479

digest

digest(
data: Uint8Array<ArrayBuffer>,
algorithm: HashAlgorithm,
): Promise<Uint8Array<ArrayBuffer>>
Computes a cryptographic hash of the input data.
Parameters
- data: Uint8Array<ArrayBuffer>
  The data to hash
- algorithm: HashAlgorithm
  The hash algorithm to use
Returns Promise<Uint8Array<ArrayBuffer>>
The computed hash bytes

Throws
UnsupportedCryptoAlgorithmError if the algorithm is not supported
Implementation of CryptoProvider.digest
- Defined in packages/pki-lite/src/core/crypto/WebCryptoProvider.ts:83

digestAlgorithm

digestAlgorithm(hash: HashAlgorithm): AlgorithmIdentifier
Converts a hash algorithm to a digest algorithm identifier.
Parameters
- hash: HashAlgorithm
  The hash algorithm
Returns AlgorithmIdentifier
Digest algorithm as a Uint8Array or AlgorithmIdentifier
Implementation of CryptoProvider.digestAlgorithm
- Defined in packages/pki-lite/src/core/crypto/WebCryptoProvider.ts:898

encrypt

encrypt(
    data: Uint8Array<ArrayBuffer>,
    publicKeyInfo: SubjectPublicKeyInfo,
    algorithm: AsymmetricEncryptionAlgorithmParams,
): Promise<Uint8Array<ArrayBuffer>>
Encrypts data using asymmetric (public key) cryptography.
Parameters
- data: Uint8Array<ArrayBuffer>
  The data to encrypt
- publicKeyInfo: SubjectPublicKeyInfo
  The public key information
- algorithm: AsymmetricEncryptionAlgorithmParams
  The encryption algorithm to use
Returns Promise<Uint8Array<ArrayBuffer>>
Promise resolving to the encrypted data as a Uint8Array
Implementation of CryptoProvider.encrypt
- Defined in packages/pki-lite/src/core/crypto/WebCryptoProvider.ts:595

encryptSymmetric

encryptSymmetric(
    data: Uint8Array<ArrayBuffer>,
    key: string | Uint8Array<ArrayBuffer> | CryptoKey,
    algorithm: SymmetricEncryptionAlgorithmParams | PbeAlgorithmParams,
): Promise<Uint8Array<ArrayBuffer>>
Encrypts the given data using the specified symmetric key and algorithm.
Parameters
- data: Uint8Array<ArrayBuffer>
  The data to encrypt
- key: string | Uint8Array<ArrayBuffer> | CryptoKey
  The symmetric key to use for encryption
- algorithm: SymmetricEncryptionAlgorithmParams | PbeAlgorithmParams
  The encryption algorithm to use
Returns Promise<Uint8Array<ArrayBuffer>>
Promise resolving to the encrypted data as a Uint8Array
Implementation of CryptoProvider.encryptSymmetric
- Defined in packages/pki-lite/src/core/crypto/WebCryptoProvider.ts:556

generateKeyPair

generateKeyPair(
    options: {
        algorithm: "RSA" | "EC";
        hash?: string;
        keySize?: number;
        namedCurve?: string;
        publicExponent?: Uint8Array<ArrayBuffer>;
    },
): Promise<
    {
        privateKey: Uint8Array<ArrayBuffer>;
        publicKey: Uint8Array<ArrayBuffer>;
    },
>
Generates an asymmetric key pair for the specified algorithm and options.
Parameters
- options: {
      algorithm: "RSA" | "EC";
      hash?: string;
      keySize?: number;
      namedCurve?: string;
      publicExponent?: Uint8Array<ArrayBuffer>;
  }
  Configuration options including algorithm, key size, and other parameters
Returns Promise<
    {
        privateKey: Uint8Array<ArrayBuffer>;
        publicKey: Uint8Array<ArrayBuffer>;
    },
>
A Promise that resolves to an object containing the public and private keys
Implementation of CryptoProvider.generateKeyPair
- Defined in packages/pki-lite/src/core/crypto/WebCryptoProvider.ts:703

generateSymmetricKey

generateSymmetricKey(
algorithm: SymmetricEncryptionAlgorithmParams,
): Uint8Array<ArrayBuffer>
Generates a symmetric key for the specified encryption algorithm.
Parameters
- algorithm: SymmetricEncryptionAlgorithmParams
  The encryption algorithm to use
Returns Uint8Array<ArrayBuffer>
The generated symmetric key as a Uint8Array
Implementation of CryptoProvider.generateSymmetricKey
- Defined in packages/pki-lite/src/core/crypto/WebCryptoProvider.ts:677

getEcCurveParameters

getEcCurveParameters(
encryptionParams: AsymmetricEncryptionAlgorithmParams,
): ObjectIdentifier
Gets the EC curve parameters for a given asymmetric encryption algorithm.
Parameters
- encryptionParams: AsymmetricEncryptionAlgorithmParams
  The asymmetric encryption algorithm parameters
Returns ObjectIdentifier
EC curve parameters as a Uint8Array or ObjectIdentifier
Implementation of CryptoProvider.getEcCurveParameters
- Defined in packages/pki-lite/src/core/crypto/WebCryptoProvider.ts:764

getEcNamedCurve

getEcNamedCurve(
algorithm: AlgorithmIdentifier,
publicKeyInfo?: SubjectPublicKeyInfo,
): NamedCurve
Extracts the EC named curve from an algorithm identifier or public key.
Parameters
- algorithm: AlgorithmIdentifier
  The ASN.1 algorithm identifier
- OptionalpublicKeyInfo: SubjectPublicKeyInfo
  Optional public key information to extract curve from
Returns NamedCurve
The EC named curve identifier
Implementation of CryptoProvider.getEcNamedCurve
- Defined in packages/pki-lite/src/core/crypto/WebCryptoProvider.ts:1450

`Protected`getKeyMaterial

getKeyMaterial(password: string | Uint8Array<ArrayBuffer>): Promise<CryptoKey>
Parameters
- password: string | Uint8Array<ArrayBuffer>
Returns Promise<CryptoKey>
- Defined in packages/pki-lite/src/core/crypto/WebCryptoProvider.ts:399

getRandomValues

getRandomValues(length: number): Uint8Array<ArrayBuffer>
Generates cryptographically secure random bytes.
Parameters
- length: number
  The number of random bytes to generate
Returns Uint8Array<ArrayBuffer>
Array containing the random bytes
Implementation of CryptoProvider.getRandomValues
- Defined in packages/pki-lite/src/core/crypto/WebCryptoProvider.ts:395

getWebCryptoAlgorithm

getWebCryptoAlgorithm(
algorithm: AsymmetricEncryptionAlgorithmParams,
): EcKeyImportParams | RsaPssParams | RsaOaepParams | RsaHashedKeyAlgorithm
Internal
Converts PKI algorithm parameters to Web Crypto API algorithm specification.
Parameters
- algorithm: AsymmetricEncryptionAlgorithmParams
  The PKI algorithm parameters
Returns EcKeyImportParams | RsaPssParams | RsaOaepParams | RsaHashedKeyAlgorithm
Web Crypto API compatible algorithm specification
- Defined in packages/pki-lite/src/core/crypto/WebCryptoProvider.ts:133

getWebCryptoDerivationAlgorithm

getWebCryptoDerivationAlgorithm(
    algorithm: {
        params: {
            hash: HashAlgorithm;
            iterationCount: number;
            keyLength?: number;
            salt: Uint8Array<ArrayBuffer>;
        };
        type: "PBKDF2";
    },
): Pbkdf2Params
Parameters
- algorithm: {
      params: {
          hash: HashAlgorithm;
          iterationCount: number;
          keyLength?: number;
          salt: Uint8Array<ArrayBuffer>;
      };
      type: "PBKDF2";
  }
Returns Pbkdf2Params
- Defined in packages/pki-lite/src/core/crypto/WebCryptoProvider.ts:377

getWebCryptoSymmetricAlgorithm

getWebCryptoSymmetricAlgorithm(
algorithm: SymmetricEncryptionAlgorithmParams,
): AesCbcParams | AesGcmParams
Parameters
- algorithm: SymmetricEncryptionAlgorithmParams
Returns AesCbcParams | AesGcmParams
- Defined in packages/pki-lite/src/core/crypto/WebCryptoProvider.ts:234

getWebCryptoSymmetricKeyGenAlgorithm

getWebCryptoSymmetricKeyGenAlgorithm(
    algorithm:
        | "PBES2"
        | "AES_128_GCM"
        | "AES_192_GCM"
        | "AES_256_GCM"
        | "AES_128_CCM"
        | "AES_192_CCM"
        | "AES_256_CCM"
        | "AES_128_CBC"
        | "AES_192_CBC"
        | "AES_256_CBC"
        | "AES_128_ECB"
        | "AES_192_ECB"
        | "AES_256_ECB"
        | "PKCS12_SHA1_RC4_128"
        | "PKCS12_SHA1_RC4_40"
        | "PKCS12_SHA1_3DES_3KEY"
        | "PKCS12_SHA1_3DES_2KEY"
        | "PKCS12_SHA1_RC2_128"
        | "PKCS12_SHA1_RC2_40",
): AesDerivedKeyParams
Parameters
- algorithm:
      | "PBES2"
      | "AES_128_GCM"
      | "AES_192_GCM"
      | "AES_256_GCM"
      | "AES_128_CCM"
      | "AES_192_CCM"
      | "AES_256_CCM"
      | "AES_128_CBC"
      | "AES_192_CBC"
      | "AES_256_CBC"
      | "AES_128_ECB"
      | "AES_192_ECB"
      | "AES_256_ECB"
      | "PKCS12_SHA1_RC4_128"
      | "PKCS12_SHA1_RC4_40"
      | "PKCS12_SHA1_3DES_3KEY"
      | "PKCS12_SHA1_3DES_2KEY"
      | "PKCS12_SHA1_RC2_128"
      | "PKCS12_SHA1_RC2_40"
Returns AesDerivedKeyParams
- Defined in packages/pki-lite/src/core/crypto/WebCryptoProvider.ts:314

hmac

hmac(
    key: Uint8Array<ArrayBuffer>,
    data: Uint8Array<ArrayBuffer>,
    hash: HashAlgorithm,
): Promise<Uint8Array<ArrayBuffer>>
Computes an HMAC (Hash-based Message Authentication Code) of the input data.
Parameters
- key: Uint8Array<ArrayBuffer>
  The secret key for HMAC
- data: Uint8Array<ArrayBuffer>
  The data to authenticate
- hash: HashAlgorithm
  The hash algorithm to use
Returns Promise<Uint8Array<ArrayBuffer>>
The computed HMAC bytes

Throws
UnsupportedCryptoAlgorithmError if the algorithm is not supported
Implementation of CryptoProvider.hmac
- Defined in packages/pki-lite/src/core/crypto/WebCryptoProvider.ts:105

keyEncryptionAlgorithm

keyEncryptionAlgorithm(
encryptionParams: AsymmetricEncryptionAlgorithmParams,
): AlgorithmIdentifier
Converts asymmetric encryption algorithm parameters to a key encryption algorithm identifier.
Parameters
- encryptionParams: AsymmetricEncryptionAlgorithmParams
  The asymmetric encryption algorithm parameters
Returns AlgorithmIdentifier
Key encryption algorithm as an AlgorithmIdentifier
Implementation of CryptoProvider.keyEncryptionAlgorithm
- Defined in packages/pki-lite/src/core/crypto/WebCryptoProvider.ts:927

sign

sign(
    data: Uint8Array<ArrayBuffer>,
    privateKeyInfo: PrivateKeyInfo,
    algorithm: AsymmetricEncryptionAlgorithmParams,
): Promise<Uint8Array<ArrayBuffer>>
Creates a digital signature for the given data.
Parameters
- data: Uint8Array<ArrayBuffer>
  The data to sign
- privateKeyInfo: PrivateKeyInfo
  The signer's private key
- algorithm: AsymmetricEncryptionAlgorithmParams
  The signature algorithm and parameters
Returns Promise<Uint8Array<ArrayBuffer>>
Promise resolving to the signature bytes
Implementation of CryptoProvider.sign
- Defined in packages/pki-lite/src/core/crypto/WebCryptoProvider.ts:179

signatureAlgorithm

signatureAlgorithm(
encryptionParams: AsymmetricEncryptionAlgorithmParams,
): AlgorithmIdentifier
Converts asymmetric encryption algorithm parameters to a signature algorithm identifier.
Parameters
- encryptionParams: AsymmetricEncryptionAlgorithmParams
  The asymmetric encryption algorithm parameters
Returns AlgorithmIdentifier
Signature algorithm as a Uint8Array or AlgorithmIdentifier
Implementation of CryptoProvider.signatureAlgorithm
- Defined in packages/pki-lite/src/core/crypto/WebCryptoProvider.ts:793

toAsymmetricEncryptionAlgorithmParams

toAsymmetricEncryptionAlgorithmParams(
algorithm: AlgorithmIdentifier,
publicKeyInfo?: SubjectPublicKeyInfo,
): AsymmetricEncryptionAlgorithmParams
Converts an ASN.1 algorithm identifier to asymmetric encryption algorithm parameters.
Parameters
- algorithm: AlgorithmIdentifier
  The ASN.1 algorithm identifier
- OptionalpublicKeyInfo: SubjectPublicKeyInfo
  Optional public key information for context
Returns AsymmetricEncryptionAlgorithmParams
Asymmetric encryption algorithm parameters
Implementation of CryptoProvider.toAsymmetricEncryptionAlgorithmParams
- Defined in packages/pki-lite/src/core/crypto/WebCryptoProvider.ts:1331

toDerivationAlgorithmParams

toDerivationAlgorithmParams(
    algorithm: AlgorithmIdentifier,
): {
    params: {
        hash: HashAlgorithm;
        iterationCount: number;
        keyLength?: number;
        salt: Uint8Array<ArrayBuffer>;
    };
    type: "PBKDF2";
}
Parameters
- algorithm: AlgorithmIdentifier
Returns {
    params: {
        hash: HashAlgorithm;
        iterationCount: number;
        keyLength?: number;
        salt: Uint8Array<ArrayBuffer>;
    };
    type: "PBKDF2";
}
- Defined in packages/pki-lite/src/core/crypto/WebCryptoProvider.ts:1075

toHashAlgorithm

toHashAlgorithm(algorithm: AlgorithmIdentifier): HashAlgorithm
Converts an ASN.1 algorithm identifier to a hash algorithm.
Parameters
- algorithm: AlgorithmIdentifier
  The ASN.1 algorithm identifier
Returns HashAlgorithm
The hash algorithm
Implementation of CryptoProvider.toHashAlgorithm
- Defined in packages/pki-lite/src/core/crypto/WebCryptoProvider.ts:1476

toPbeAlgorithmParams

toPbeAlgorithmParams(algorithm: AlgorithmIdentifier): PbeAlgorithmParams
Parameters
- algorithm: AlgorithmIdentifier
Returns PbeAlgorithmParams
- Defined in packages/pki-lite/src/core/crypto/WebCryptoProvider.ts:1110

toSymmetricEncryptionAlgorithmParams

toSymmetricEncryptionAlgorithmParams(
algorithm: AlgorithmIdentifier,
): SymmetricEncryptionAlgorithmParams
Converts an ASN.1 algorithm identifier to symmetric encryption algorithm parameters.
Parameters
- algorithm: AlgorithmIdentifier
  The ASN.1 algorithm identifier
Returns SymmetricEncryptionAlgorithmParams
Symmetric encryption algorithm parameters
Implementation of CryptoProvider.toSymmetricEncryptionAlgorithmParams
- Defined in packages/pki-lite/src/core/crypto/WebCryptoProvider.ts:1239

verify

verify(
    data: Uint8Array<ArrayBuffer>,
    publicKeyInfo: SubjectPublicKeyInfo,
    signature: Uint8Array<ArrayBuffer>,
    algorithm: AsymmetricEncryptionAlgorithmParams,
): Promise<boolean>
Verifies a digital signature against the original data.
Parameters
- data: Uint8Array<ArrayBuffer>
  The original data that was signed
- publicKeyInfo: SubjectPublicKeyInfo
  The signer's public key
- signature: Uint8Array<ArrayBuffer>
  The signature to verify
- algorithm: AsymmetricEncryptionAlgorithmParams
  The signature algorithm and parameters
Returns Promise<boolean>
Promise resolving to true if signature is valid
Implementation of CryptoProvider.verify
- Defined in packages/pki-lite/src/core/crypto/WebCryptoProvider.ts:203

Class WebCryptoProvider

Example

Hierarchy (View Summary)

Implements

Index

Constructors

Properties

Methods

Constructors

constructor

Returns WebCryptoProvider

Properties

Protectedcrypto

Methods

contentEncryptionAlgorithm

Parameters

Returns AlgorithmIdentifier

decrypt

Parameters

Returns Promise<Uint8Array<ArrayBuffer>>

decryptSymmetric

Parameters

Returns Promise<Uint8Array<ArrayBuffer>>

ProtectedderiveCryptoKey

Parameters

Returns Promise<CryptoKey>

deriveKey

Parameters

Returns Promise<Uint8Array<ArrayBuffer>>

derivePkcs12Key

Parameters

Returns Promise<Uint8Array<ArrayBuffer>>

Example

digest

Parameters

Returns Promise<Uint8Array<ArrayBuffer>>

Throws

digestAlgorithm

Parameters

Returns AlgorithmIdentifier

encrypt

Parameters

Returns Promise<Uint8Array<ArrayBuffer>>

encryptSymmetric

Parameters

Returns Promise<Uint8Array<ArrayBuffer>>

generateKeyPair

Parameters

Returns Promise< { privateKey: Uint8Array<ArrayBuffer>; publicKey: Uint8Array<ArrayBuffer>; },>

generateSymmetricKey

Parameters

Returns Uint8Array<ArrayBuffer>

getEcCurveParameters

Parameters

Returns ObjectIdentifier

getEcNamedCurve

Parameters

Returns NamedCurve

ProtectedgetKeyMaterial

Parameters

Returns Promise<CryptoKey>

getRandomValues

Parameters

Returns Uint8Array<ArrayBuffer>

getWebCryptoAlgorithm

Parameters

Returns EcKeyImportParams | RsaPssParams | RsaOaepParams | RsaHashedKeyAlgorithm

getWebCryptoDerivationAlgorithm

Parameters

Returns Pbkdf2Params

getWebCryptoSymmetricAlgorithm

Parameters

Returns AesCbcParams | AesGcmParams

getWebCryptoSymmetricKeyGenAlgorithm

Parameters

Returns AesDerivedKeyParams

hmac

Parameters

Returns Promise<Uint8Array<ArrayBuffer>>

Throws

`Protected`crypto

`Protected`deriveCryptoKey

Returns Promise<
{
privateKey: Uint8Array<ArrayBuffer>;
publicKey: Uint8Array<ArrayBuffer>;
},
>

`Protected`getKeyMaterial

Returns {
params: {
hash: HashAlgorithm;
iterationCount: number;
keyLength?: number;
salt: Uint8Array<ArrayBuffer>;
};
type: "PBKDF2";
}