perf(encryption): update encryption method to AES-GCM (#424)

neuland-ingolstadt · Oct 18, 2024 · 9b26cac · 9b26cac
1 parent 1c639d5
commit 9b26cac
Showing 1 changed file with 4 additions and 4 deletions.
diff --git a/rogue-thi-app/lib/credential-storage.js b/rogue-thi-app/lib/credential-storage.js
@@ -53,17 +53,17 @@ export default class CredentialStorage {
   async write(id, data) {
     const key = await crypto.subtle.generateKey(
       {
-        name: 'AES-CBC',
+        name: 'AES-GCM',
         length: 256,
       },
       false,
       ['encrypt', 'decrypt']
     )
-    const iv = crypto.getRandomValues(new Uint8Array(16))
+    const iv = crypto.getRandomValues(new Uint8Array(12)) // AES-GCM typically uses a 12-byte IV
 
     const encrypted = await crypto.subtle.encrypt(
       {
-        name: 'AES-CBC',
+        name: 'AES-GCM',
         iv,
       },
       key,
@@ -94,7 +94,7 @@ export default class CredentialStorage {
 
       const decrypted = await crypto.subtle.decrypt(
         {
-          name: 'AES-CBC',
+          name: 'AES-GCM',
           iv,
         },
         key,