diff --git a/Design:-Encryption-of-credentials.md b/Design:-Encryption-of-credentials.md index f745702..e8053ec 100644 --- a/Design:-Encryption-of-credentials.md +++ b/Design:-Encryption-of-credentials.md @@ -42,11 +42,11 @@ By keeping it a valid JSON object underlying storage implementations should not ### Encryption scheme - var encryptionKey = crypto.createHash('sha256').update(userKey).digest(); - var initVector = crypto.randomBytes(16); - var cipher = crypto.createCipheriv("aes-256-ctr", encryptionKey, initVector); - var result = cipher.update(JSON.stringify(credentials), 'utf8', 'base64') + cipher.final('base64'); - result = initVector.toString('hex') + result; + var encryptionKey = crypto.createHash('sha256').update(userKey).digest(); + var initVector = crypto.randomBytes(16); + var cipher = crypto.createCipheriv("aes-256-ctr", encryptionKey, initVector); + var result = cipher.update(JSON.stringify(credentials), 'utf8', 'base64') + cipher.final('base64'); + result = initVector.toString('hex') + result; ### Decryption scheme