2020-06-30 12:49:37 +02:00
|
|
|
include::../description.adoc[]
|
|
|
|
|
|
|
|
|
|
include::../ask-yourself.adoc[]
|
|
|
|
|
|
|
|
|
|
include::../recommended.adoc[]
|
|
|
|
|
|
|
|
|
|
== Sensitive Code Example
|
|
|
|
|
|
|
|
|
|
----
|
|
|
|
|
// === Client side ===
|
|
|
|
|
crypto.subtle.encrypt(algo, key, plainData); // Sensitive
|
|
|
|
|
crypto.subtle.decrypt(algo, key, encData); // Sensitive
|
|
|
|
|
----
|
2020-06-30 14:49:38 +02:00
|
|
|
|
2020-06-30 12:49:37 +02:00
|
|
|
----
|
|
|
|
|
// === Server side ===
|
|
|
|
|
const crypto = require("crypto");
|
|
|
|
|
const cipher = crypto.createCipher(algo, key); // Sensitive
|
|
|
|
|
const cipheriv = crypto.createCipheriv(algo, key, iv); // Sensitive
|
|
|
|
|
const decipher = crypto.createDecipher(algo, key); // Sensitive
|
|
|
|
|
const decipheriv = crypto.createDecipheriv(algo, key, iv); // Sensitive
|
|
|
|
|
const pubEnc = crypto.publicEncrypt(key, buf); // Sensitive
|
|
|
|
|
const privDec = crypto.privateDecrypt({ key: key, passphrase: secret }, pubEnc); // Sensitive
|
|
|
|
|
const privEnc = crypto.privateEncrypt({ key: key, passphrase: secret }, buf); // Sensitive
|
|
|
|
|
const pubDec = crypto.publicDecrypt(key, privEnc); // Sensitive
|
|
|
|
|
----
|
|
|
|
|
|
|
|
|
|
include::../see.adoc[]
|
