namespace

crypto.webcrypto

namespace webcrypto

An implementation of the Web Crypto API standard.

See the Web Crypto API documentation for details.

interface AesCbcParams
- iv: BufferSource
- name: string
interface AesCtrParams
- counter: BufferSource
- length: number
- name: string
interface AesDerivedKeyParams
- length: number
- name: string
interface AesGcmParams
- additionalData?: BufferSource
- iv: BufferSource
- name: string
- tagLength?: number
interface AesKeyAlgorithm
- length: number
- name: string
interface AesKeyGenParams
- length: number
- name: string
interface Algorithm
- name: string
interface Crypto
Importing the webcrypto object (import { webcrypto } from 'node:crypto') gives an instance of the Crypto class. Crypto is a singleton that provides access to the remainder of the crypto API.
- CryptoKey: CryptoKeyConstructor
- readonly subtle: SubtleCrypto
  Provides access to the SubtleCrypto API.
- getRandomValues<T extends Uint8Array<ArrayBufferLike> | Uint8ClampedArray<ArrayBufferLike> | Uint16Array<ArrayBufferLike> | Uint32Array<ArrayBufferLike> | Int8Array<ArrayBufferLike> | Int16Array<ArrayBufferLike> | Int32Array<ArrayBufferLike> | BigUint64Array<ArrayBufferLike> | BigInt64Array<ArrayBufferLike>>(
  typedArray: T
  ): T;
  Generates cryptographically strong random values. The given typedArray is filled with random values, and a reference to typedArray is returned.
  The given typedArray must be an integer-based instance of NodeJS.TypedArray, i.e. Float32Array and Float64Array are not accepted.
  An error will be thrown if the given typedArray is larger than 65,536 bytes.
- randomUUID(): `${string}-${string}-${string}-${string}-${string}`;
  Generates a random RFC 4122 version 4 UUID. The UUID is generated using a cryptographic pseudorandom number generator.
interface CryptoKey
- readonly algorithm: KeyAlgorithm
  An object detailing the algorithm for which the key can be used along with additional algorithm-specific parameters.
- readonly extractable: boolean
  When true, the CryptoKey can be extracted using either subtleCrypto.exportKey() or subtleCrypto.wrapKey().
- readonly type: KeyType
  A string identifying whether the key is a symmetric ('secret') or asymmetric ('private' or 'public') key.
- readonly usages: KeyUsage[]
  An array of strings identifying the operations for which the key may be used.
  The possible usages are:
  'encrypt' - The key may be used to encrypt data.
  'decrypt' - The key may be used to decrypt data.
  'sign' - The key may be used to generate digital signatures.
  'verify' - The key may be used to verify digital signatures.
  'deriveKey' - The key may be used to derive a new key.
  'deriveBits' - The key may be used to derive bits.
  'wrapKey' - The key may be used to wrap another key.
  'unwrapKey' - The key may be used to unwrap another key.
  Valid key usages depend on the key algorithm (identified by cryptokey.algorithm.name).
interface CryptoKeyConstructor
- readonly length: 0
- readonly name: 'CryptoKey'
- readonly prototype: CryptoKey
interface CryptoKeyPair
The CryptoKeyPair is a simple dictionary object with publicKey and privateKey properties, representing an asymmetric key pair.
- privateKey: CryptoKey
  A CryptoKey whose type will be 'private'.
- publicKey: CryptoKey
  A CryptoKey whose type will be 'public'.
interface EcdhKeyDeriveParams
- name: string
- public: CryptoKey
interface EcdsaParams
- hash: AlgorithmIdentifier
- name: string
interface EcKeyAlgorithm
- name: string
- namedCurve: string
interface EcKeyGenParams
- name: string
- namedCurve: string
interface EcKeyImportParams
- name: string
- namedCurve: string
interface Ed448Params
- context?: BufferSource
- name: string
interface HkdfParams
- hash: AlgorithmIdentifier
- info: BufferSource
- name: string
- salt: BufferSource
interface HmacImportParams
- hash: AlgorithmIdentifier
- length?: number
- name: string
interface HmacKeyAlgorithm
- hash: KeyAlgorithm
- length: number
- name: string
interface HmacKeyGenParams
- hash: AlgorithmIdentifier
- length?: number
- name: string
interface JsonWebKey
- alg?: string
- crv?: string
- d?: string
- dp?: string
- dq?: string
- e?: string
- ext?: boolean
- k?: string
- key_ops?: string[]
- kty?: string
- n?: string
- oth?: RsaOtherPrimesInfo[]
- p?: string
- q?: string
- qi?: string
- use?: string
- x?: string
- y?: string
interface KeyAlgorithm
- name: string
interface Pbkdf2Params
- hash: AlgorithmIdentifier
- iterations: number
- name: string
- salt: BufferSource
interface RsaHashedImportParams
- hash: AlgorithmIdentifier
- name: string
interface RsaHashedKeyAlgorithm
- hash: KeyAlgorithm
- modulusLength: number
- name: string
- publicExponent: BigInteger
interface RsaHashedKeyGenParams
- hash: AlgorithmIdentifier
- modulusLength: number
- name: string
- publicExponent: BigInteger
interface RsaKeyAlgorithm
- modulusLength: number
- name: string
- publicExponent: BigInteger
interface RsaKeyGenParams
- modulusLength: number
- name: string
- publicExponent: BigInteger
interface RsaOaepParams
- label?: BufferSource
- name: string
interface RsaOtherPrimesInfo
- d?: string
- r?: string
- t?: string
interface RsaPssParams
- name: string
- saltLength: number
interface SubtleCrypto
- decrypt(
  algorithm: AlgorithmIdentifier | AesCbcParams | AesCtrParams | AesGcmParams | RsaOaepParams,
  key: CryptoKey,
  data: BufferSource
  ): Promise<ArrayBuffer>;
  Using the method and parameters specified in algorithm and the keying material provided by key, subtle.decrypt() attempts to decipher the provided data. If successful, the returned promise will be resolved with an <ArrayBuffer> containing the plaintext result.
  The algorithms currently supported include:
  'RSA-OAEP'
  'AES-CTR'
  'AES-CBC'
  'AES-GCM'
- deriveBits(
  algorithm: EcdhKeyDeriveParams,
  baseKey: CryptoKey,
  length?: null | number
  ): Promise<ArrayBuffer>;
  Using the method and parameters specified in algorithm and the keying material provided by baseKey, subtle.deriveBits() attempts to generate length bits. The Node.js implementation requires that when length is a number it must be multiple of 8. When length is null the maximum number of bits for a given algorithm is generated. This is allowed for the 'ECDH', 'X25519', and 'X448' algorithms. If successful, the returned promise will be resolved with an <ArrayBuffer> containing the generated data.
  The algorithms currently supported include:
  'ECDH'
  'X25519'
  'X448'
  'HKDF'
  'PBKDF2'
  deriveBits(
  algorithm: EcdhKeyDeriveParams | HkdfParams | Pbkdf2Params,
  baseKey: CryptoKey,
  length: number
  ): Promise<ArrayBuffer>;
- deriveKey(
  algorithm: EcdhKeyDeriveParams | HkdfParams | Pbkdf2Params,
  baseKey: CryptoKey,
  derivedKeyAlgorithm: AlgorithmIdentifier | HmacImportParams | AesDerivedKeyParams,
  extractable: boolean,
  keyUsages: readonly KeyUsage[]
  ): Promise<CryptoKey>;
  Using the method and parameters specified in algorithm, and the keying material provided by baseKey, subtle.deriveKey() attempts to generate a new <CryptoKey>based on the method and parameters inderivedKeyAlgorithm`.
  Calling subtle.deriveKey() is equivalent to calling subtle.deriveBits() to generate raw keying material, then passing the result into the subtle.importKey() method using the deriveKeyAlgorithm, extractable, and keyUsages parameters as input.
  The algorithms currently supported include:
  'ECDH'
  'X25519'
  'X448'
  'HKDF'
  'PBKDF2'
  @param keyUsages
  See Key usages.
- digest(
  algorithm: AlgorithmIdentifier,
  data: BufferSource
  ): Promise<ArrayBuffer>;
  Using the method identified by algorithm, subtle.digest() attempts to generate a digest of data. If successful, the returned promise is resolved with an <ArrayBuffer> containing the computed digest.
  If algorithm is provided as a <string>, it must be one of:
  'SHA-1'
  'SHA-256'
  'SHA-384'
  'SHA-512'
  If algorithm is provided as an <Object>, it must have a name property whose value is one of the above.
- encrypt(
  algorithm: AlgorithmIdentifier | AesCbcParams | AesCtrParams | AesGcmParams | RsaOaepParams,
  key: CryptoKey,
  data: BufferSource
  ): Promise<ArrayBuffer>;
  Using the method and parameters specified by algorithm and the keying material provided by key, subtle.encrypt() attempts to encipher data. If successful, the returned promise is resolved with an <ArrayBuffer> containing the encrypted result.
  The algorithms currently supported include:
  'RSA-OAEP'
  'AES-CTR'
  'AES-CBC'
  'AES-GCM'
- exportKey(
  format: 'jwk',
  key: CryptoKey
  ): Promise<JsonWebKey>;
  Exports the given key into the specified format, if supported.
  If the <CryptoKey> is not extractable, the returned promise will reject.
  When format is either 'pkcs8' or 'spki' and the export is successful, the returned promise will be resolved with an <ArrayBuffer> containing the exported key data.
  When format is 'jwk' and the export is successful, the returned promise will be resolved with a JavaScript object conforming to the JSON Web Key specification.
  @param format
  Must be one of 'raw', 'pkcs8', 'spki', or 'jwk'.
  @returns
  <Promise> containing <ArrayBuffer>.
  exportKey(
  format: 'spki' | 'pkcs8' | 'raw',
  key: CryptoKey
  ): Promise<ArrayBuffer>;
- generateKey(
  algorithm: EcKeyGenParams | RsaHashedKeyGenParams,
  extractable: boolean,
  keyUsages: readonly KeyUsage[]
  ): Promise<CryptoKeyPair>;
  Using the method and parameters provided in algorithm, subtle.generateKey() attempts to generate new keying material. Depending the method used, the method may generate either a single <CryptoKey> or a <CryptoKeyPair>.
  The <CryptoKeyPair> (public and private key) generating algorithms supported include:
  'RSASSA-PKCS1-v1_5'
  'RSA-PSS'
  'RSA-OAEP'
  'ECDSA'
  'Ed25519'
  'Ed448'
  'ECDH'
  'X25519'
  'X448' The <CryptoKey> (secret key) generating algorithms supported include:
  'HMAC'
  'AES-CTR'
  'AES-CBC'
  'AES-GCM'
  'AES-KW'
  @param keyUsages
  See Key usages.
  generateKey(
  algorithm: AesKeyGenParams | HmacKeyGenParams | Pbkdf2Params,
  extractable: boolean,
  keyUsages: readonly KeyUsage[]
  ): Promise<CryptoKey>;
  generateKey(
  algorithm: AlgorithmIdentifier,
  extractable: boolean,
  keyUsages: KeyUsage[]
  ): Promise<CryptoKey | CryptoKeyPair>;
- importKey(
  format: 'jwk',
  keyData: JsonWebKey,
  algorithm: AlgorithmIdentifier | RsaHashedImportParams | EcKeyImportParams | HmacImportParams | AesKeyAlgorithm,
  extractable: boolean,
  keyUsages: readonly KeyUsage[]
  ): Promise<CryptoKey>;
  The subtle.importKey() method attempts to interpret the provided keyData as the given format to create a <CryptoKey> instance using the provided algorithm, extractable, and keyUsages arguments. If the import is successful, the returned promise will be resolved with the created <CryptoKey>.
  If importing a 'PBKDF2' key, extractable must be false.
  @param format
  Must be one of 'raw', 'pkcs8', 'spki', or 'jwk'.
  @param keyUsages
  See Key usages.
  importKey(
  format: 'spki' | 'pkcs8' | 'raw',
  keyData: BufferSource,
  algorithm: AlgorithmIdentifier | RsaHashedImportParams | EcKeyImportParams | HmacImportParams | AesKeyAlgorithm,
  extractable: boolean,
  keyUsages: KeyUsage[]
  ): Promise<CryptoKey>;
- sign(
  algorithm: AlgorithmIdentifier | EcdsaParams | Ed448Params | RsaPssParams,
  key: CryptoKey,
  data: BufferSource
  ): Promise<ArrayBuffer>;
  Using the method and parameters given by algorithm and the keying material provided by key, subtle.sign() attempts to generate a cryptographic signature of data. If successful, the returned promise is resolved with an <ArrayBuffer> containing the generated signature.
  The algorithms currently supported include:
  'RSASSA-PKCS1-v1_5'
  'RSA-PSS'
  'ECDSA'
  'Ed25519'
  'Ed448'
  'HMAC'
- unwrapKey(
  format: KeyFormat,
  wrappedKey: BufferSource,
  unwrappingKey: CryptoKey,
  unwrapAlgorithm: AlgorithmIdentifier | AesCbcParams | AesCtrParams | AesGcmParams | RsaOaepParams,
  unwrappedKeyAlgorithm: AlgorithmIdentifier | RsaHashedImportParams | EcKeyImportParams | HmacImportParams | AesKeyAlgorithm,
  extractable: boolean,
  keyUsages: KeyUsage[]
  ): Promise<CryptoKey>;
  In cryptography, "wrapping a key" refers to exporting and then encrypting the keying material. The subtle.unwrapKey() method attempts to decrypt a wrapped key and create a <CryptoKey> instance. It is equivalent to calling subtle.decrypt() first on the encrypted key data (using the wrappedKey, unwrapAlgo, and unwrappingKey arguments as input) then passing the results in to the subtle.importKey() method using the unwrappedKeyAlgo, extractable, and keyUsages arguments as inputs. If successful, the returned promise is resolved with a <CryptoKey> object.
  The wrapping algorithms currently supported include:
  'RSA-OAEP'
  'AES-CTR'
  'AES-CBC'
  'AES-GCM'
  'AES-KW'
  The unwrapped key algorithms supported include:
  'RSASSA-PKCS1-v1_5'
  'RSA-PSS'
  'RSA-OAEP'
  'ECDSA'
  'Ed25519'
  'Ed448'
  'ECDH'
  'X25519'
  'X448'
  'HMAC'
  'AES-CTR'
  'AES-CBC'
  'AES-GCM'
  'AES-KW'
  @param format
  Must be one of 'raw', 'pkcs8', 'spki', or 'jwk'.
  @param keyUsages
  See Key usages.
- verify(
  algorithm: AlgorithmIdentifier | EcdsaParams | Ed448Params | RsaPssParams,
  key: CryptoKey,
  signature: BufferSource,
  data: BufferSource
  ): Promise<boolean>;
  Using the method and parameters given in algorithm and the keying material provided by key, subtle.verify() attempts to verify that signature is a valid cryptographic signature of data. The returned promise is resolved with either true or false.
  The algorithms currently supported include:
  'RSASSA-PKCS1-v1_5'
  'RSA-PSS'
  'ECDSA'
  'Ed25519'
  'Ed448'
  'HMAC'
- wrapKey(
  format: KeyFormat,
  key: CryptoKey,
  wrappingKey: CryptoKey,
  wrapAlgorithm: AlgorithmIdentifier | AesCbcParams | AesCtrParams | AesGcmParams | RsaOaepParams
  ): Promise<ArrayBuffer>;
  In cryptography, "wrapping a key" refers to exporting and then encrypting the keying material. The subtle.wrapKey() method exports the keying material into the format identified by format, then encrypts it using the method and parameters specified by wrapAlgo and the keying material provided by wrappingKey. It is the equivalent to calling subtle.exportKey() using format and key as the arguments, then passing the result to the subtle.encrypt() method using wrappingKey and wrapAlgo as inputs. If successful, the returned promise will be resolved with an <ArrayBuffer> containing the encrypted key data.
  The wrapping algorithms currently supported include:
  'RSA-OAEP'
  'AES-CTR'
  'AES-CBC'
  'AES-GCM'
  'AES-KW'
  @param format
  Must be one of 'raw', 'pkcs8', 'spki', or 'jwk'.
type AlgorithmIdentifier = Algorithm | string
type BigInteger = Uint8Array
type BufferSource = ArrayBufferView | ArrayBuffer
type HashAlgorithmIdentifier = AlgorithmIdentifier
type KeyFormat = 'jwk' | 'pkcs8' | 'raw' | 'spki'
type KeyType = 'private' | 'public' | 'secret'
type KeyUsage = 'decrypt' | 'deriveBits' | 'deriveKey' | 'encrypt' | 'sign' | 'unwrapKey' | 'verify' | 'wrapKey'
type NamedCurve = string

crypto.webcrypto

namespace webcrypto

interface AesCbcParams

interface AesCtrParams

interface AesDerivedKeyParams

interface AesGcmParams

interface AesKeyAlgorithm

interface AesKeyGenParams

interface Algorithm

interface Crypto

interface CryptoKey

interface CryptoKeyConstructor

interface CryptoKeyPair

interface EcdhKeyDeriveParams

interface EcdsaParams

interface EcKeyAlgorithm

interface EcKeyGenParams

interface EcKeyImportParams

interface Ed448Params

interface HkdfParams

interface HmacImportParams

interface HmacKeyAlgorithm

interface HmacKeyGenParams

interface JsonWebKey

interface KeyAlgorithm

interface Pbkdf2Params

interface RsaHashedImportParams

interface RsaHashedKeyAlgorithm

interface RsaHashedKeyGenParams

interface RsaKeyAlgorithm

interface RsaKeyGenParams

interface RsaOaepParams

interface RsaOtherPrimesInfo

interface RsaPssParams

interface SubtleCrypto