派生位和密钥

返回上层文档
\Deriving bits and keys
const { subtle } = require('node:crypto').webcrypto;
async function pbkdf2(pass, salt, iterations = 1000, length = 256) {
 const ec = new TextEncoder();
 const key = await subtle.importKey(
 'raw',
 ec.encode(pass),
 'PBKDF2',
 false,
 ['deriveBits']);
 const bits = await subtle.deriveBits({
 name: 'PBKDF2',
 hash: 'SHA-512',
 salt: ec.encode(salt),
 iterations,
 }, key, length);
 return bits;
}
async function pbkdf2Key(pass, salt, iterations = 1000, length = 256) {
 const ec = new TextEncoder();
 const keyMaterial = await subtle.importKey(
 'raw',
 ec.encode(pass),
 'PBKDF2',
 false,
 ['deriveKey']);
 const key = await subtle.deriveKey({
 name: 'PBKDF2',
 hash: 'SHA-512',
 salt: ec.encode(salt),
 iterations,
 }, keyMaterial, {
 name: 'AES-GCM',
 length: 256,
 }, true, ['encrypt', 'decrypt']);
 return key;
}