next-gdrive-index/src/utils/encryptionHelper.ts

import crypto from "crypto";

export function generateRandomEncryptionKey(): Promise<string> {
  return new Promise((resolve, reject) => {
    crypto.randomBytes(32, (err, buffer) => {
      if (err) {
        reject(err);
      }
      resolve(buffer.toString("hex"));
    });
  });
}

export function createEncryptionKey(
  passphrase: string,
): Promise<string> {
  return new Promise((resolve, reject) => {
    const salt = crypto.randomBytes(16); // generate a random salt
    const iterations = 100000; // number of PBKDF2 iterations
    const keyLength = 32; // desired key length in bytes

    crypto.pbkdf2(
      passphrase,
      salt,
      iterations,
      keyLength,
      "sha256",
      (err, derivedKey) => {
        if (err) throw reject(err);
        const encryptionKey = derivedKey.toString("hex");
        resolve(encryptionKey);
      },
    );
  });
}

export function encrypt(
  data: string,
  encryptionKey: string = process.env
    .NEXT_PUBLIC_ENCRYPTION_KEY as string,
) {
  const iv = crypto.randomBytes(16);
  const cipher = crypto.createCipheriv(
    "aes-256-cbc",
    Buffer.from(encryptionKey, "hex"),
    iv,
  );
  let encrypted = cipher.update(data);
  encrypted = Buffer.concat([encrypted, cipher.final()]);
  return (
    iv.toString("hex") + ":" + encrypted.toString("hex")
  );
}

export function decrypt(
  encryptedData: string,
  encryptionKey: string = process.env
    .NEXT_PUBLIC_ENCRYPTION_KEY as string,
) {
  if (!encryptedData) return "";
  const [ivString, encryptedString] =
    encryptedData.split(":");
  const iv = Buffer.from(ivString, "hex");
  const encrypted = Buffer.from(encryptedString, "hex");
  const decipher = crypto.createDecipheriv(
    "aes-256-cbc",
    Buffer.from(encryptionKey, "hex"),
    iv,
  );
  let decrypted = decipher.update(encrypted);
  decrypted = Buffer.concat([decrypted, decipher.final()]);
  return decrypted.toString();
}

const urlKey =
  (process.env.NEXT_PUBLIC_ENCRYPTION_KEY as string).slice(
    0,
    16,
  ) || "";
const urlIV = Buffer.from(urlKey);

export function shortEncrypt(fileId: string): string {
  const cipher = crypto.createCipheriv(
    "aes-128-cbc",
    urlKey,
    urlIV,
  );
  let cipherText = cipher.update(fileId, "utf8", "hex");
  cipherText += cipher.final("hex");
  return cipherText;
}

export function shortDecrypt(cipherText: string): string {
  if (!cipherText) return "";
  const decipher = crypto.createDecipheriv(
    "aes-128-cbc",
    urlKey,
    urlIV,
  );
  let plainText = decipher.update(
    cipherText,
    "hex",
    "utf8",
  );
  plainText += decipher.final("utf8");
  return plainText;
}