EncryptedPkcs8Options

PBES2 encryption options for the encrypted PKCS#8 export/import functions.

interface EncryptedPkcs8Options {
	readonly password: string;
	readonly iterations?: number;
	readonly salt?: Uint8Array;
	readonly iv?: Uint8Array;
	readonly cipher?: AES-128-CBC | AES-192-CBC | AES-256-CBC;
	readonly prf?: HMAC-SHA-1 | HMAC-SHA-256;
}

Properties

• readonly password: string — Password fed to PBKDF2 for key derivation.
• readonly iterations?: number — PBKDF2 iteration count. Default: 100_000.
• readonly salt?: Uint8Array — PBKDF2 salt. Default: 16 cryptographically random bytes.
• readonly iv?: Uint8Array — AES-CBC initialization vector. Default: 16 cryptographically random bytes.
• readonly cipher?: AES-128-CBC | AES-192-CBC | AES-256-CBC — AES-CBC cipher. Default: 'AES-256-CBC'.
• readonly prf?: HMAC-SHA-1 | HMAC-SHA-256 — PBKDF2 pseudo-random function. Default: 'HMAC-SHA-256'.