EncryptedPkcs8Options

EncryptedPkcs8Options

PBES2 encryption options for the encrypted PKCS#8 export/import functions.

interface EncryptedPkcs8Options {
	readonly password: string;
	readonly iterations?: number;
	readonly salt?: Uint8Array;
	readonly iv?: Uint8Array;
	readonly cipher?: "AES-128-CBC" | "AES-192-CBC" | "AES-256-CBC";
	readonly prf?: "HMAC-SHA-1" | "HMAC-SHA-256";
}

Properties

• readonly password: string — Password fed to PBKDF2 for key derivation.
• readonly iterations?: number — PBKDF2 iteration count, an integer from 1 to 4294967295. Default: 100_000.
• readonly salt?: Uint8Array — PBKDF2 salt. Default: 16 cryptographically random bytes.
• readonly iv?: Uint8Array — AES-CBC initialization vector. Default: 16 cryptographically random bytes.
• readonly cipher?: "AES-128-CBC" | "AES-192-CBC" | "AES-256-CBC" — AES-CBC cipher. Default: 'AES-256-CBC'.
• readonly prf?: "HMAC-SHA-1" | "HMAC-SHA-256" — PBKDF2 pseudo-random function. Default: 'HMAC-SHA-256'.