Function encryptWithDataKey

packages/consortium-web/src/lib/encryption.ts:140–161

(
  data: unknown,
  dataKey: Uint8Array,
)

}

export async function encryptWithDataKey(
  data: unknown,
  dataKey: Uint8Array,
): Promise<Uint8Array> {
  const nonce = getRandomBytes(12);
  const key = await getAesKey(dataKey);
  const plaintext = new TextEncoder().encode(JSON.stringify(data));
  const encrypted = await crypto.subtle.encrypt(
    { name: 'AES-GCM', iv: toArrayBuffer(nonce) },
    key,
    plaintext,
  );
  // SubtleCrypto appends authTag to the ciphertext
  const encryptedBytes = new Uint8Array(encrypted);

  // Bundle: version(1) + nonce(12) + ciphertext+authTag
  const bundle = new Uint8Array(1 + 12 + encryptedBytes.length);
  bundle[0] = 0; // version
  bundle.set(nonce, 1);
  bundle.set(encryptedBytes, 13);
  return bundle;
}

export async function decryptWithDataKey(
  bundle: Uint8Array,