Method decrypt

packages/shared/src/secrets/encryption.ts:68–85

(material: SecretEncryptionMaterial)

  }

  async decrypt(material: SecretEncryptionMaterial): Promise<string> {
    const masterKey = await this.keyPromise;
    const iv = SecretEncryption.decode(material.iv);
    const ciphertext = SecretEncryption.decode(material.ciphertext);
    const authTag = material.authTag ? SecretEncryption.decode(material.authTag) : new Uint8Array();

    const payload = new Uint8Array(ciphertext.length + authTag.length);
    payload.set(ciphertext);
    payload.set(authTag, ciphertext.length);

    const decrypted = await crypto.subtle.decrypt(
      { name: 'AES-GCM', iv: SecretEncryption.toArrayBuffer(iv) },
      masterKey,
      SecretEncryption.toArrayBuffer(payload)
    );

    return new TextDecoder().decode(decrypted);
  }

  private async normalizeKey(
    masterKey: CryptoKey | ArrayBuffer | ArrayBufferView,