README

Encrypt/decrypt toolkit for TypeScript — pre-release (v0.1.0)

Pre-release, not security-audited. Only the items marked Verified in docs/IMPLEMENTATION_STATUS.md are implemented. The Rust core and non-TypeScript ports have not been compiled or run. No third-party runtime dependencies.

Install

npm install lombokencryptdecrypt   # not yet published; build from source for now

Quick Start

import { aesGcm, randomKey256, stringToBytes, bytesToString } from 'lombokencryptdecrypt';

const key = randomKey256();
const aad = stringToBytes('ctx');
const { ciphertext, tag, iv } = await aesGcm.encrypt(stringToBytes('halo lombok'), key, { aad });
const plain = await aesGcm.decrypt(ciphertext, key, iv, tag, { aad });
console.log(bytesToString(plain)); // "halo lombok"

Subpath imports: /symmetric, /asymmetric, /hash, /mac, /kdf, /keystore, /stream, /audit.

What is implemented

AES-GCM, ChaCha20-Poly1305, XChaCha20-Poly1305, AES-XTS, SM3/SM4, SHA-2, SHA-3/SHAKE, HMAC, CMAC, HKDF, PBKDF2, scrypt, Ed25519, ECDH, authenticated streaming, password-protected KeyStore. Argon2 and ML-KEM fail closed (UNSUPPORTED_ALGORITHM). Everything else is planned — see docs/IMPLEMENTATION_STATUS.md.

Develop

npm install
npm run typecheck && npm test && npm run build:ts

Documentation

Implementation status
API Reference, Architecture, Masterplan, Spec — design documents; describe planned scope, may exceed what is implemented
Security Policy · Contributing

Part of Lombok Ecosystem

Tier 2 — Security & Compliance in @codinglombok.

codinglombok / lombokencryptdecrypt

Package info

Security

Statistics