Reduce iv (nonce) size to 96 bits

NIST Special Publication 800-38D recommends EXACTLY 96 bits

diff --git a/decrypt.js b/decrypt.js
index ff85e32df6c8465ba3823fde6169d61ef6e0d3a1..cfa06066517cf4376aafb033a8b4aa84675ad402 100644 (file)
--- a/decrypt.js
+++ b/decrypt.js
@@ -3,11 +3,11 @@ export default async function decrypt(content, password) {
 
   const contentBuffer = Uint8Array.from(atob(content), c => c.charCodeAt(0));
   const salt = new Uint8Array(32);
-  const iv = new Uint8Array(32);
-  const ciphertext = new Uint8Array(contentBuffer.byteLength - 64);
+  const iv = new Uint8Array(12);
+  const ciphertext = new Uint8Array(contentBuffer.byteLength - 44);
   salt.set(contentBuffer.slice(0, 32));
-  iv.set(contentBuffer.slice(32, 64));
-  ciphertext.set(contentBuffer.slice(64));
+  iv.set(contentBuffer.slice(32, 44));
+  ciphertext.set(contentBuffer.slice(44));
 
   const keyMaterial = await crypto.subtle.importKey(
     'raw',

diff --git a/encrypt.js b/encrypt.js
index febaffa51e91d8ec43bd5945afceab12b2ab89db..e8ccc52279a813c7d18e737d27a9615071ce2540 100644 (file)
--- a/encrypt.js
+++ b/encrypt.js
@@ -4,7 +4,7 @@ export default async function encrypt(plaintext, password) {
   const encodedPassword = encoder.encode(password);
 
   const salt = new Uint8Array(32);
-  const iv = new Uint8Array(32);
+  const iv = new Uint8Array(12);
   crypto.getRandomValues(salt);
   crypto.getRandomValues(iv);