???? ??? ???? API ?, ????, ??? ???? ?? ??? ??? ???? ?? ? ?? ??? ?????. ??? ??? ? ?? ?? ??? ?? ?? ???? ???? ??? ???? ??? ? ????. ? ??? ?????? ????? ??? ?? ??? ?? Web Crypto API? ???? ??? JavaScript? ???? ???? ????? ???? ??? ???????.

???? ???? ??? ??????

???? ?? ? ?? ???(?? ???)? ??? ?? ????? ?? ? ?? ???? ??(???)?? ?????. ??? ?? ??? ???? ???? ?????? ?? ??? ??? ????. ??? ??? ????? ??? ?????.

• ????? ??? ??? API ?
• ??? ??? ??.
• ???? ?? ??? ?? ???? ?? ???.

JavaScript?? ?? ???? ???? ??? ???????.

---

AES-GCM? ??? ??? ? ???

???? ??? ??? ?? ???? ?? ??? AES-GCM(Advanced Encryption Standard - Galois/Counter Mode)? ???????. ??? ??? ????.

1. ???? ??: PBKDF2(???? ?? ? ?? ?? 2)? ???? ?????? ?? ?? ?????.
2. Salt ? IV: ? ???? ?? ??? ??(???? ??? ???? ??? ??) ? iv(??? ??)? ?????.
3. ???: AES-GCM? ???? ?? ???? ??????.
4. ???: ??? ????? salt/iv? ???? ???? ??????.

---

?? ??

?? JavaScript ??? ??? ????.

??? ?? ????

??? ??? ?? ? ??? ?? ArrayBuffer? 16?? ?? ?????.

function arrayBufferToHex(buffer) {
    return [...new Uint8Array(buffer)]
        .map(byte => byte.toString(16).padStart(2, '0'))
        .join('');
}

function hexToArrayBuffer(hex) {
    const bytes = new Uint8Array(hex.length / 2);
    for (let i = 0; i < hex.length; i += 2) {
        bytes[i / 2] = parseInt(hex.substr(i, 2), 16);
    }
    return bytes.buffer;
}

?????? ? ??

PBKDF2? ???? ??? ??? ?? ?????.

async function getCryptoKey(password) {
    const encoder = new TextEncoder();
    const keyMaterial = encoder.encode(password);
    return crypto.subtle.importKey(
        'raw',
        keyMaterial,
        { name: 'PBKDF2' },
        false,
        ['deriveKey']
    );
}

async function deriveKey(password, salt) {
    const keyMaterial = await getCryptoKey(password);
    return crypto.subtle.deriveKey(
        {
            name: 'PBKDF2',
            salt: salt,
            iterations: 100000,
            hash: 'SHA-256'
        },
        keyMaterial,
        { name: 'AES-GCM', length: 256 },
        false,
        ['encrypt', 'decrypt']
    );
}

??? ??

????? ??? ???:

async function encryptText(text, password) {
    const encoder = new TextEncoder();
    const salt = crypto.getRandomValues(new Uint8Array(16));
    const iv = crypto.getRandomValues(new Uint8Array(12));
    const key = await deriveKey(password, salt);

    const encrypted = await crypto.subtle.encrypt(
        { name: 'AES-GCM', iv: iv },
        key,
        encoder.encode(text)
    );

    return {
        cipherText: arrayBufferToHex(encrypted),
        iv: arrayBufferToHex(iv),
        salt: arrayBufferToHex(salt)
    };
}

??? ??

??? ????? ??? ???:

async function decryptText(encryptedData, password) {
    const { cipherText, iv, salt } = encryptedData;
    const key = await deriveKey(password, hexToArrayBuffer(salt));

    const decrypted = await crypto.subtle.decrypt(
        { name: 'AES-GCM', iv: hexToArrayBuffer(iv) },
        key,
        hexToArrayBuffer(cipherText)
    );

    const decoder = new TextDecoder();
    return decoder.decode(decrypted);
}

?? ?

?? ??? ???? ??? ???????.

function arrayBufferToHex(buffer) {
    return [...new Uint8Array(buffer)]
        .map(byte => byte.toString(16).padStart(2, '0'))
        .join('');
}

function hexToArrayBuffer(hex) {
    const bytes = new Uint8Array(hex.length / 2);
    for (let i = 0; i < hex.length; i += 2) {
        bytes[i / 2] = parseInt(hex.substr(i, 2), 16);
    }
    return bytes.buffer;
}

---

?? ?? ??

1. ??? ????? ?????: ???? ???? ?????? ?????.
2. ??? IV? ???? ??: ?? ???? ???? ?? ??? IV? ?????.
3. ?? ???? ??: ?????? ??? ???? ????? ?????? ???.
4. HTTPS ??: ??????? HTTPS? ???? ?? ?? ???? ????? ?????.

---

API ?? ?? ??? ??? ????? ?? ?????? ??? ?? ?? ?????. ?? ?? API ?? ??? ?????.

? ??? ??? JavaScript? ??? ??? ??? ??? ? ???? ?? ?????. ??? ??? PHP ??? ????? ?? ?? ??? ?????!