Philiprehberger.EncryptionKit 0.3.0

Philiprehberger.EncryptionKit

AES-256-GCM encryption with key generation, sealed envelopes, PBKDF2 key derivation, streaming, and key rotation.

Installation

dotnet add package Philiprehberger.EncryptionKit

Usage

using Philiprehberger.EncryptionKit;

var encrypted = Encryption.Encrypt("Hello, World!", "my-secret-password");
var decrypted = Encryption.Decrypt(encrypted, "my-secret-password");

Console.WriteLine(decrypted); // "Hello, World!"

Encrypt and Decrypt Bytes

using Philiprehberger.EncryptionKit;

byte[] data = [0x01, 0x02, 0x03, 0x04];

byte[] encrypted = Encryption.Encrypt(data, "my-secret-password");
byte[] decrypted = Encryption.Decrypt(encrypted, "my-secret-password");

Stream Encryption

using Philiprehberger.EncryptionKit;

await using var inputFile = File.OpenRead("largefile.dat");
await using var encryptedFile = File.Create("largefile.enc");

await Encryption.EncryptStreamAsync(inputFile, encryptedFile, "my-secret-password");

encryptedFile.Position = 0;
await using var decryptedFile = File.Create("largefile.dec");

await Encryption.DecryptStreamAsync(encryptedFile, decryptedFile, "my-secret-password");

Key Rotation

using Philiprehberger.EncryptionKit;

var encrypted = Encryption.Encrypt("sensitive data", "old-password");
var rotated = Encryption.ReEncrypt(encrypted, "old-password", "new-password");
var decrypted = Encryption.Decrypt(rotated, "new-password");

Additional Authenticated Data (AAD)

using Philiprehberger.EncryptionKit;

var aad = new byte[] { 0x01, 0x02, 0x03 };
var options = new EncryptionOptions(AssociatedData: aad);

var encrypted = Encryption.Encrypt("authenticated data", "password", options);
var decrypted = Encryption.Decrypt(encrypted, "password", options);

Key Generation

using Philiprehberger.EncryptionKit;

byte[] key = KeyGenerator.GenerateKey();       // 256-bit key
byte[] key128 = KeyGenerator.GenerateKey(128); // 128-bit key
byte[] nonce = KeyGenerator.GenerateNonce();   // 12-byte nonce
byte[] salt = KeyGenerator.GenerateSalt();     // 16-byte salt

Sealed Envelopes

using Philiprehberger.EncryptionKit;

// Seal plaintext into a self-describing envelope
byte[] envelope = SealedEnvelope.Seal("sensitive data", "my-password");

// Open the envelope to get plaintext back
string decrypted = SealedEnvelope.OpenString(envelope, "my-password");

// Works with byte arrays too
byte[] data = new byte[] { 0x01, 0x02, 0x03 };
byte[] sealed = SealedEnvelope.Seal(data, "my-password");
byte[] opened = SealedEnvelope.Open(sealed, "my-password");

Custom Options

using Philiprehberger.EncryptionKit;

var options = new EncryptionOptions(Iterations: 200_000);

var encrypted = Encryption.Encrypt("sensitive data", "password", options);
var decrypted = Encryption.Decrypt(encrypted, "password", options);

API

Encryption

KeyGenerator

SealedEnvelope

EncryptionAlgorithm

EncryptionOptions

Development

dotnet build src/Philiprehberger.EncryptionKit.csproj --configuration Release

Support

If you find this project useful:

⭐ Star the repo

🐛 Report issues

💡 Suggest features

❤️ Sponsor development

🌐 All Open Source Projects

💻 GitHub Profile

🔗 LinkedIn Profile

License

MIT