Question about Keystore.decrypt

[Pana]

import { Keystore, Secp256k1 } from 'ox'

const password = '123456';
const privateKey = Secp256k1.randomPrivateKey()
const key = Keystore.pbkdf2({ password })
const encrypted = await Keystore.encrypt(privateKey, key)

// decrypt
const key2 = Keystore.pbkdf2({ password })
const privateKey = await Keystore.decrypt(keystore, key2) // the decrypt operation failed

// only exactly same key can decrypt the keystore, a new created with same password also failed, why is that

[jxom]

You need a deterministic salt on pbkdf2 as well if you want to rebuild the key.

[Pana]

seems iv is also required right ?

[Pana]

This means not only i need to remember the password, but also the salt and iv, this is uneasy to use

[jxom]

Well that info is already in the return value of Keystore.encrypt(privateKey, key) (crypto.cipherparams / crypto.kdfparams)

[Pana]

thanks

[jxom]

Hi! I made some changes to make working with keystores easier! Now you can just provide the key itself (instead of it's parameters like iv and salt) to decrypt:

import { Keystore, Secp256k1 } from 'ox'

const password = '123456';
const privateKey = Secp256k1.randomPrivateKey()
- const key = Keystore.pbkdf2({ password })
- const encrypted = await Keystore.encrypt(privateKey, key)
+ const [key, opts] = Keystore.pbkdf2({ password })
+ const encrypted = await Keystore.encrypt(privateKey, key, opts)

// decrypt
- const key2 = Keystore.pbkdf2({ password })
+ const [key2] = Keystore.pbkdf2({ password })
const privateKey = await Keystore.decrypt(keystore, key2)

[Pana]

This is great