Class EncryptedStore

AES-256-GCM encrypt/decrypt utilities for storage encryption.

All encryption uses GCM mode with authentication tags (AEAD). Each encrypt call generates a fresh 12-byte IV.

Index

Constructors

Methods

decrypt encrypt init isAvailable

Constructors

constructor

new EncryptedStore(config: EncryptedStoreConfig): EncryptedStore
Parameters
- config: EncryptedStoreConfig
Returns EncryptedStore
- Defined in pipeline/src/encrypted-store.ts:28

Methods

decrypt

decrypt(ciphertext: string): Promise<string>
Decrypt base64-encoded ciphertext → plaintext
Parameters
- ciphertext: string
Returns Promise<string>
- Defined in pipeline/src/encrypted-store.ts:58

encrypt

encrypt(plaintext: string): Promise<string>
Encrypt plaintext → base64-encoded ciphertext with embedded IV
Parameters
- plaintext: string
Returns Promise<string>
- Defined in pipeline/src/encrypted-store.ts:43

init

init(): Promise<void>
Initialize the crypto key (async — call before encrypt/decrypt)

Returns Promise<void>
- Defined in pipeline/src/encrypted-store.ts:33

isAvailable

isAvailable(): boolean
Check if encryption is available in the current runtime

Returns boolean
- Defined in pipeline/src/encrypted-store.ts:70