[{"data":1,"prerenderedAt":5753},["ShallowReactive",2],{"web":3},[4],{"id":5,"title":6,"articleId":7,"articleThumb":8,"body":9,"categoryId":1096,"categoryInfo":5722,"createDate":5726,"description":20,"excerpt":5727,"extension":5735,"isHidden":5736,"isHot":1099,"isRecommend":5736,"isTop":5736,"meta":5737,"navigation":1099,"path":5738,"rawbody":5739,"readingTime":5740,"seo":5741,"sitemap":5742,"stem":5743,"tagIds":5744,"tagInfo":5745,"updateDate":5750,"wordCount":5751,"__hash__":5752},"blog\u002Fblog\u002F9.Web Crypto API浏览器原生加密的终极指南.md","Web Crypto API 浏览器原生加密的终极指南","web-crypto-api","https:\u002F\u002Fcdn.anyfork.top\u002Fimages\u002F20260825111119031.webp",{"type":10,"value":11,"toc":5698},"minimark",[12,17,21,24,27,30,33,39,43,46,57,72,80,94,103,117,125,138,146,160,164,167,181,185,188,193,196,229,233,236,292,296,299,342,346,349,375,379,382,414,418,504,508,515,575,586,593,623,626,633,703,714,721,777,780,787,844,855,859,908,912,915,919,922,925,933,1338,1346,1505,1513,1816,1824,2073,2079,2083,2086,2093,2296,2303,2449,2456,2593,2597,2600,2607,2772,2779,2935,2942,3118,3122,3125,3128,3135,3246,3253,3422,3426,3433,3460,3467,3501,3508,3519,3523,3530,3533,3621,3624,3696,3702,3708,3715,3718,3729,3733,3736,3739,5234,5237,5240,5694],[13,14,16],"h2",{"id":15},"_1-什么是-web-crypto-api","1. 什么是 Web Crypto API？",[18,19,20],"p",{},"Web Crypto API 是浏览器原生提供的一套加密接口，允许 JavaScript 脚本使用密码学原语来构建基于加密的系统。它自 2015 年 7 月起已得到各大浏览器的广泛支持，是一个相当成熟且稳定的 Web 标准。",[18,22,23],{},"在 Web Crypto 规范诞生前，部分浏览器为了满足加密需求，在全局实现了一个名为 Crypto 的接口(即 window.crypto)。但正由于这样，当时各大浏览器的实现缺乏统一的 W3C 标准，定义模糊，且在密码学意义上是不够严谨和安全的（not cryptographically sound）。",[18,25,26],{},"当正式的 Web Crypto API 标准（支持 encrypt、decrypt、sign、verify 等现代异步加密操作）推出时，为了彻底避免和老旧、不安全的旧接口方法发生命名混淆与冲突，W3C 规范决定将这些低底层的密码学核心方法群全部打包进一个全新的独立接口中，这就是 SubtleCrypto。你可以通过全局对象的 crypto.subtle 属性来访问它。",[18,28,29],{},"由于旧的全局 crypto 对象并没有被废除（它依然保留了诸如密码学安全的伪随机数生成器 crypto.getRandomValues() 和 crypto.randomUUID() 等简单的同步方法），因此所有新版的 SubtleCrypto 复杂加密算法全部被挂载到了它的下级属性中。你必须通过 crypto.subtle 属性才能访问到这一整套现代加解密方法。",[18,31,32],{},"Node.js 最早在 v15.0.0 引入了 Web Crypto API 接口。直到 Node.js 19.0.0，官方正式去掉了实验性警告，将其标记为 稳定版本（Stable），并且默认在全局作用域挂载了 globalThis.crypto。",[34,35,36],"warning",{},[18,37,38],{},"重要提示：在现代浏览器中，为了保障密钥安全，crypto.subtle 属性被限制为只能在安全上下文（HTTPS 协议或 localhost）下才能被成功访问。如果你在普通的非加密 HTTP 网页里调用 crypto.subtle，它会直接返回 undefined。",[13,40,42],{"id":41},"_2-为什么选择-web-crypto-api","2. 为什么选择 Web Crypto API？",[18,44,45],{},"在决定是否在 Web 项目中使用 Web Crypto API 时，通常是因为它相比传统的第三方加密库（如 CryptoJS, jsencrypt, forge 等）在安全性、性能和原生支持度上带来了降维打击的优势。",[47,48,49],"ol",{},[50,51,52,56],"li",{},[53,54,55],"strong",{},"防 XSS 攻击的“密钥黑盒”机制（核心安全优势）"," : 这是选择Web Crypto API最关键的安全理由。",[58,59,60,66],"ul",{},[50,61,62,65],{},[53,63,64],{},"传统加密库的痛点："," 如果你用 CryptoJS，密钥必须以明文字符串或 Uint8Array 的形式存在于 JavaScript 变量、localStorage 或 sessionStorage 中。一旦网站遭受 XSS（跨站脚本）攻击，黑客可以直接读取并盗走你的密钥。",[50,67,68,71],{},[53,69,70],{},"Web Crypto 的解决办法："," 它引入了 CryptoKey 对象。在生成或导入密钥时，如果设置 extractable: false，这个密钥在创建后将永远无法通过 JavaScript 读取、打印或导出。它被死死封锁在浏览器的底层安全内存中。黑客即使通过 XSS 控制了你的页面，也拿不到密钥本身，只能在本地调用它，大大降低了密钥泄露的风险。",[47,73,75],{"start":74},2,[50,76,77],{},[53,78,79],{},"硬件级的高性能与非阻塞（异步原生）",[58,81,82,88],{},[50,83,84,87],{},[53,85,86],{},"原生 C++ \u002F 汇编实现："," Web Crypto API 是由浏览器底层（基于 OpenSSL 或操作系统自带的密码学库）用原生代码实现的。相比纯 JavaScript 编写的加密库，它的运行速度快了数十倍到上百倍。",[50,89,90,93],{},[53,91,92],{},"异步非阻塞："," 传统的加密库（如 CryptoJS）大都是同步执行的。当计算大文件哈希，或者进行复杂的 RSA 大素数生成时，会直接卡死浏览器的 UI 主线程，导致页面瞬间卡顿或未响应。而 Web Crypto 的所有核心方法（如 encrypt、digest）全部是异步 Promise 机制，浏览器会将其交给底层的系统线程去算，完全不影响前端界面的流畅度。",[47,95,97],{"start":96},3,[50,98,99,102],{},[53,100,101],{},"密码学安全的伪随机数生成器 (CSPRNG)",": 在密码学中，随机数的质量决定了加密的生死。",[58,104,105,111],{},[50,106,107,110],{},[53,108,109],{},"传统的隐患："," JavaScript 原生的 Math.random() 是非密码学安全的，它的随机轨迹可以被算法预测，绝不能用于生成加密密钥、IV（初始化向量）或盐值。",[50,112,113,116],{},[53,114,115],{},"Web Crypto 的保障："," 提供了 crypto.getRandomValues()，它直接调用操作系统底层的硬件熵源（如系统的 \u002Fdev\u002Furandom 或 CAPI），生成密码学安全的高强度真随机数，保障加密系统的根基不可被破解。",[47,118,120],{"start":119},4,[50,121,122],{},[53,123,124],{},"零依赖，极致减小打包体积 (Zero-Bundle)",[58,126,127,132],{},[50,128,129,131],{},[53,130,64],{}," 引入 CryptoJS、JSEncrypt 或 Forge 会让前端的 Vendor 打包体积（Bundle Size）平白无故增加几十 KB 甚至几百 KB，影响首屏加载速度。",[50,133,134,137],{},[53,135,136],{},"Web Crypto 的优势："," 它是现代浏览器的标准内置 API，不需要 npm install 任何第三方包。直接开箱即用，让前端工程更加轻量、纯净。",[47,139,141],{"start":140},5,[50,142,143],{},[53,144,145],{},"行业标准规范，跨端兼容性完美",[58,147,148,154],{},[50,149,150,153],{},[53,151,152],{},"大厂和 W3C 背书："," 它遵循严格的 W3C 规范，由各大浏览器厂商共同维护和不断优化。",[50,155,156,159],{},[53,157,158],{},"环境通用性："," 目前 Web Crypto API 的覆盖率已接近 100%。不仅在 Chrome、Safari、Edge、Firefox 浏览器中完美支持，在现代的 Node.js (v15+)、Deno、Bun 以及 Cloudflare Workers 等服务端\u002F边缘计算环境中也实现了完全一致的 API。这使得你写的一套加解密代码，可以无缝在前端和服务端之间复用。",[13,161,163],{"id":162},"_3-什么时候不应该选择它","3. 什么时候不应该选择它？",[18,165,166],{},"使用 Web Crypto API 有唯一的限制条件：",[58,168,169,175],{},[50,170,171,174],{},[53,172,173],{},"非安全上下文限制："," 它强制要求 HTTPS 环境（本地开发支持 localhost 或 127.0.0.1）。如果你的网站部署在纯 HTTP 生产环境下，crypto.subtle 会直接返回 undefined 无法工作。",[50,176,177,180],{},[53,178,179],{},"需要高层封装："," 它提供的是非常底层的“密码学原语”（Raw Primitives），不提供像“一键生成 JWT”或者“一键做密码信封”这样的高级功能，开发者需要自己处理字节对齐、IV 传递等微秒的细节。",[13,182,184],{"id":183},"_4-web-crypto-api核心接口","4. Web Crypto API核心接口",[18,186,187],{},"Web Crypto API（通常称为 crypto.subtle）的核心接口主要由以下 5 个标准接口（Interfaces） 和 1 个全局入口 组成。它们构成了浏览器原生密码学生态的基石。",[189,190,192],"h3",{"id":191},"_41-全局入口对象crypto","4.1 全局入口对象Crypto",[18,194,195],{},"虽然这不是单独的加解密接口，但它是所有 Web 加密功能的总入口，挂载在全局 window.crypto（或 globalThis.crypto）上。Crypto提供基础的加密功能，主要包括：",[58,197,198,204],{},[50,199,200,203],{},[53,201,202],{},"核心作用："," 提供基础的同步安全原语。",[50,205,206,209],{},[53,207,208],{},"常用方法：",[58,210,211,217,223],{},[50,212,213,216],{},[53,214,215],{},"crypto.getRandomValues()："," 生成密码学安全的伪随机数（常用于生成 IV 或盐）。",[50,218,219,222],{},[53,220,221],{},"crypto.randomUUID()："," 快速生成一个符合 RFC 4122 标准的随机 UUID 字符串。",[50,224,225,228],{},[53,226,227],{},"crypto.subtle："," 指向核心异步加密接口 SubtleCrypto 的指针。",[189,230,232],{"id":231},"_42-核心操作员subtlecrypto","4.2 核心操作员SubtleCrypto",[18,234,235],{},"这是整个 Web Crypto API 中最重要、最核心的接口。所有的实际异步加解密、签名、密钥派生等操作都在这里执行。SubtleCrypto 提供的主要方法包括：",[58,237,238,243],{},[50,239,240,242],{},[53,241,202],{}," 提供一系列底层、底层的异步密码学原语方法（全部返回 Promise）。",[50,244,245,248],{},[53,246,247],{},"核心方法（按功能分类）：",[58,249,250,256,262,268,274,280,286],{},[50,251,252,255],{},[53,253,254],{},"加密与解密："," encrypt() \u002F decrypt()",[50,257,258,261],{},[53,259,260],{},"签名与验证："," sign() \u002F verify()",[50,263,264,267],{},[53,265,266],{},"哈希计算："," digest()",[50,269,270,273],{},[53,271,272],{},"密钥生成："," generateKey()",[50,275,276,279],{},[53,277,278],{},"密钥导入与导出："," importKey() \u002F exportKey()",[50,281,282,285],{},[53,283,284],{},"密钥包装与解包："," wrapKey() \u002F unwrapKey()",[50,287,288,291],{},[53,289,290],{},"密钥派生："," deriveKey() \u002F deriveBits()",[189,293,295],{"id":294},"_43-密钥实体cryptokey","4.3 密钥实体CryptoKey",[18,297,298],{},"该接口代表一个在浏览器中生成的、受保护的密钥对象。为了安全，浏览器的 SubtleCrypto 方法不直接操作纯文本的密钥字符串（如 \"my-secret-key\"），而是操作 CryptoKey 实例。",[58,300,301,306],{},[50,302,303,305],{},[53,304,202],{}," 作为参数传递给 SubtleCrypto 的各项方法。",[50,307,308,311],{},[53,309,310],{},"核心属性（只读）：",[58,312,313,319,325,331],{},[50,314,315,318],{},[53,316,317],{},"type："," 密钥类型（\"secret\" 对称加密、\"private\" 私钥、\"public\" 公钥）。",[50,320,321,324],{},[53,322,323],{},"extractable："," 布尔值。如果为 false，该密钥在创建后绝对无法从内存中被导出或用 JS 打印出来，防止 XSS 攻击窃取密钥。",[50,326,327,330],{},[53,328,329],{},"algorithm："," 绑定该密钥的算法对象（例如绑定的 AES-GCM 或 RSA-PSS 等参数）。",[50,332,333,336,337,341],{},[53,334,335],{},"usages："," 该密钥被允许的用途数组（例如 ",[338,339,340],"span",{},"'encrypt', 'decrypt'","）。",[189,343,345],{"id":344},"_44-非对称密钥对cryptokeypair","4.4 非对称密钥对CryptoKeyPair",[18,347,348],{},"当使用 RSA、ECDSA 等非对称加密算法时，crypto.subtle.generateKey() 返回的不是单个密钥，而是一个包含公钥和私钥的 CryptoKeyPair 对象。",[58,350,351,356],{},[50,352,353,355],{},[53,354,202],{}," 容器对象，封装非对称密钥对。",[50,357,358,361],{},[53,359,360],{},"核心属性：",[58,362,363,369],{},[50,364,365,368],{},[53,366,367],{},"publicKey："," 一个 CryptoKey 实例，代表公钥（用于加密或验证签名）。",[50,370,371,374],{},[53,372,373],{},"privateKey："," 一个 CryptoKey 实例，代表私钥（用于解密或生成签名）。",[189,376,378],{"id":377},"_45-算法配置对象algorithmidentifier","4.5 算法配置对象AlgorithmIdentifier",[18,380,381],{},"虽然它在技术上是一个规范定义的字典对象（Dictionary），而不是传统的类或接口，但它是每个 API 都必传的灵魂参数。",[58,383,384,389],{},[50,385,386,388],{},[53,387,202],{}," 用来指定具体的密码学算法名称以及其特有的初始化附加参数（如 IV、盐值、计数器等）。",[50,390,391,394],{},[53,392,393],{},"常见表现形式：",[58,395,396,402,408],{},[50,397,398,401],{},[53,399,400],{},"哈希配置："," { name: \"SHA-256\" }",[50,403,404,407],{},[53,405,406],{},"AES-GCM 配置："," { name: \"AES-GCM\", iv: Uint8Array, tagLength: 128 }",[50,409,410,413],{},[53,411,412],{},"PBKDF2（密码派生）配置："," { name: \"PBKDF2\", salt: Uint8Array, iterations: 100000, hash: \"SHA-256\" }",[189,415,417],{"id":416},"_46-核心接口对比速查表","4.6 核心接口对比速查表",[419,420,421,440],"table",{},[422,423,424],"thead",{},[425,426,427,431,434,437],"tr",{},[428,429,430],"th",{},"接口名称",[428,432,433],{},"角色定位",[428,435,436],{},"非安全上下文（HTTP）使用规则",[428,438,439],{},"典型返回值 \u002F 用途",[441,442,443,458,477,491],"tbody",{},[425,444,445,449,452,455],{},[446,447,448],"td",{},"Crypto",[446,450,451],{},"全局大管家",[446,453,454],{},"是（部分方法受限）",[446,456,457],{},"提供crypto.subtle入口、用于生成UUID",[425,459,460,463,466,469],{},[446,461,462],{},"SubtleCrypto",[446,464,465],{},"核心工具库",[446,467,468],{},"否（必须在HTTPS\u002Flocalhost环境下使用）",[446,470,471,472,476],{},"返回",[473,474,475],"code",{},"Promise\u003CArrayBuffer>","，用于生成密文、哈希等加密核心操作",[425,478,479,482,485,488],{},[446,480,481],{},"CryptoKey",[446,483,484],{},"密钥黑盒",[446,486,487],{},"否",[446,489,490],{},"作为安全载体，直接传递给加解密函数使用",[425,492,493,496,499,501],{},[446,494,495],{},"CryptoKeyPair",[446,497,498],{},"密钥对容器",[446,500,487],{},[446,502,503],{},"封装返回包含publicKey和privateKey的密钥对对象",[13,505,507],{"id":506},"_5-web-crypto-api支持的主流算法","5. Web Crypto API支持的主流算法",[47,509,510],{},[50,511,512],{},[53,513,514],{},"对称加密（Symmetric）表",[419,516,517,533],{},[422,518,519],{},[425,520,521,524,527,530],{},[428,522,523],{},"算法标识符",[428,525,526],{},"支持的操作",[428,528,529],{},"推荐搭配与技术参数",[428,531,532],{},"典型应用场景",[441,534,535,549,562],{},[425,536,537,540,543,546],{},[446,538,539],{},"AES-GCM（强烈推荐）",[446,541,542],{},"encrypt、decrypt、generateKey、importKey、exportKey、wrapKey、unwrapKey",[446,544,545],{},"密钥支持128\u002F192\u002F256位，IV推荐96位（12字节）",[446,547,548],{},"传输数据加解密、本地缓存加密，自带防篡改认证标签",[425,550,551,554,556,559],{},[446,552,553],{},"AES-CBC",[446,555,542],{},[446,557,558],{},"密钥支持128\u002F192\u002F256位，IV固定128位（16字节）",[446,560,561],{},"兼容老旧遗留系统的对称加解密业务",[425,563,564,567,569,572],{},[446,565,566],{},"AES-CTR",[446,568,542],{},[446,570,571],{},"计数器模式，支持流式处理",[446,573,574],{},"高频非对齐的流式数据区块加解密",[58,576,577,580,583],{},[50,578,579],{},"AES-GCM 是当前Web场景下的首选方案，硬件加速支持度高，同时自带消息认证能力，无需额外实现哈希校验逻辑，安全性和开发效率都更优。",[50,581,582],{},"不同算法的IV长度要求严格，比如AES-CBC必须使用固定16字节的IV，否则会直接触发解密失败。",[50,584,585],{},"三款算法都完整覆盖了密钥生成、导入导出、包裹\u002F解包裹密钥的全流程操作，完全适配Web Crypto的全场景开发需求。",[47,587,588],{"start":74},[50,589,590],{},[53,591,592],{},"非对称加密算法（Asymmetric）表",[419,594,595,607],{},[422,596,597],{},[425,598,599,601,603,605],{},[428,600,523],{},[428,602,526],{},[428,604,529],{},[428,606,532],{},[441,608,609],{},[425,610,611,614,617,620],{},[446,612,613],{},"RSA-OAEP（强烈推荐）",[446,615,616],{},"encrypt, decrypt, generateKey, importKey, exportKey, wrapKey, unwrapKey",[446,618,619],{},"模数：2048, 4096 位哈希：推荐 SHA-256",[446,621,622],{},"混合加密体系中用于加密“对称密钥”，或加密超短敏感字段",[18,624,625],{},"RSA-OAEP是Web场景下非对称加密的首选方案，它通过最优非对称加密填充机制，解决了传统“教科书RSA”的密文可延展性安全缺陷，在随机预言模型下可以抵御适应性选择密文攻击。由于非对称加密的特性，它不适合直接加密大体积数据，行业通用的最佳实践就是用它加密AES等对称密钥，再用对称算法加密实际业务数据，兼顾安全性和性能效率。",[47,627,628],{"start":96},[50,629,630],{},[53,631,632],{},"数字签名算法（Signature）表",[419,634,635,648],{},[422,636,637],{},[425,638,639,642,644,646],{},[428,640,641],{},"算法名称",[428,643,526],{},[428,645,529],{},[428,647,532],{},[441,649,650,664,677,690],{},[425,651,652,655,658,661],{},[446,653,654],{},"ECDSA（强烈推荐）",[446,656,657],{},"sign、verify、generateKey、importKey、exportKey",[446,659,660],{},"椭圆曲线：P-256、P-384、P-521",[446,662,663],{},"现代高并发身份验签、JWT签名、区块链节点验签",[425,665,666,669,671,674],{},[446,667,668],{},"RSASSA-PKCS1-v1_5",[446,670,657],{},[446,672,673],{},"模数≥2048位，哈希推荐SHA-256",[446,675,676],{},"传统企业级API签名、老旧版本JWT签名验签",[425,678,679,682,684,687],{},[446,680,681],{},"RSA-PSS",[446,683,657],{},[446,685,686],{},"RSA概率签名方案，密码学严谨度极高",[446,688,689],{},"金融级或司法级等高安全要求的数字签名场景",[425,691,692,695,697,700],{},[446,693,694],{},"HMAC",[446,696,657],{},[446,698,699],{},"基于哈希的密钥消息认证码",[446,701,702],{},"前后端API请求防篡改哈希签名，如AWS签名机制",[58,704,705,708,711],{},[50,706,707],{},"ECDSA 是Web场景下的首选签名方案，密钥体积小、验签速度快，非常适配高并发的现代Web服务。",[50,709,710],{},"RSA系列算法兼容性极强，适合需要对接老旧系统的业务场景，其中RSA-PSS的抗攻击能力远高于传统的RSASSA-PKCS1-v1_5。",[50,712,713],{},"HMAC实现成本低，是轻量API防篡改签名的最优选择。",[47,715,716],{"start":119},[50,717,718],{},[53,719,720],{},"单向哈希算法（Digest）表",[419,722,723,735],{},[422,724,725],{},[425,726,727,729,731,733],{},[428,728,641],{},[428,730,526],{},[428,732,529],{},[428,734,532],{},[441,736,737,751,764],{},[425,738,739,742,745,748],{},[446,740,741],{},"SHA-256",[446,743,744],{},"digest",[446,746,747],{},"无需密钥，单向不可逆",[446,749,750],{},"文件完整性校验（秒传场景）、数据防篡改指纹生成",[425,752,753,756,758,761],{},[446,754,755],{},"SHA-384",[446,757,744],{},[446,759,760],{},"无需密钥，单向不可逆，安全强度高于SHA-256",[446,762,763],{},"高敏感数据校验、金融级业务的完整性验证",[425,765,766,769,771,774],{},[446,767,768],{},"SHA-512",[446,770,744],{},[446,772,773],{},"无需密钥，单向不可逆，安全强度最高",[446,775,776],{},"司法级、军工级等高安全要求场景的哈希校验",[18,778,779],{},"这三款同属SHA-2家族哈希算法，都具备单向不可逆的核心特性，无法从最终哈希值反推原始输入内容，仅用于生成数据唯一指纹，不能直接用于加解密还原原始数据。安全强度随输出位数提升而升高，同时计算性能也会小幅下降，普通业务场景优先选择SHA-256即可满足需求。",[47,781,782],{"start":140},[50,783,784],{},[53,785,786],{},"密钥派生算法（Key Derivation）表",[419,788,789,801],{},[422,790,791],{},[425,792,793,795,797,799],{},[428,794,641],{},[428,796,526],{},[428,798,529],{},[428,800,532],{},[441,802,803,817,831],{},[425,804,805,808,811,814],{},[446,806,807],{},"ECDH",[446,809,810],{},"deriveKey、deriveBits、generateKey、importKey、exportKey",[446,812,813],{},"椭圆曲线：Diffie-Hellman",[446,815,816],{},"两个终端在不安全信道中，安全地协商出一致的对称密钥",[425,818,819,822,825,828],{},[446,820,821],{},"PBKDF2",[446,823,824],{},"deriveKey、deriveBits、importKey",[446,826,827],{},"基于密码的密钥派生，推荐迭代≥100000次",[446,829,830],{},"将用户输入的简短文明密码，转换为符合AES标准的高强度密钥",[425,832,833,836,838,841],{},[446,834,835],{},"HKDF",[446,837,824],{},[446,839,840],{},"基于HMAC的密钥扩展算法",[446,842,843],{},"从一个基础主密钥，安全地扩展派生出多个子密钥",[58,845,846,849,852],{},[50,847,848],{},"ECDH 是现代网络通信中密钥协商的核心方案，双方全程不需要直接传输最终的共享密钥，仅通过交换椭圆曲线公钥就能各自计算出完全一致的会话密钥，安全性极高。",[50,850,851],{},"PBKDF2 专门针对低熵的用户密码设计，通过高迭代次数大幅提升暴力破解的成本，是密码类密钥衍生的行业标准方案。",[50,853,854],{},"HKDF 面向已经具备高熵的主密钥材料，能高效地将单个主密钥拆分扩展为多个用途独立的子密钥，广泛应用于TLS等现代加密协议中。",[13,856,858],{"id":857},"_6-web-crypto-api-不支持的主流算法","6. Web Crypto API 不支持的主流算法",[419,860,861,873],{},[422,862,863],{},[425,864,865,867,870],{},[428,866,641],{},[428,868,869],{},"不支持原因",[428,871,872],{},"替代实现方案",[441,874,875,886,897],{},[425,876,877,880,883],{},[446,878,879],{},"MD5",[446,881,882],{},"已被密码学界证实存在碰撞漏洞，安全性完全失效",[446,884,885],{},"引入crypto-js等第三方库实现或使用 SHA-256",[425,887,888,891,894],{},[446,889,890],{},"SM2\u002FSM3\u002FSM4国密系列",[446,892,893],{},"浏览器国际标准未原生内置国密算法",[446,895,896],{},"引入sm-crypto等国密第三方库实现",[425,898,899,902,905],{},[446,900,901],{},"ChaCha20-Poly1305\u002FEd25519",[446,903,904],{},"目前尚未完全普及到所有主流浏览器的 crypto.subtle 中",[446,906,907],{},"引入第三方加密库补充实现",[13,909,911],{"id":910},"_7-常用操作示例","7. 常用操作示例",[18,913,914],{},"以下是整理的 Web Crypto API (crypto.subtle) 最核心、最常用的四大标准代码示例（哈希生成、密钥生成、加密、解密）。需要特别提醒的是：所有 crypto.subtle 的操作都是异步的，都会返回一个 Promise，因此必须配合 async\u002Fawait 使用。",[189,916,918],{"id":917},"_71-对称加密aes-gcm示例","7.1 对称加密AES-GCM示例",[18,920,921],{},"AES-GCM (Galois\u002FCounter Mode) 是一种非常流行且强大的认证加密（AEAD, Authenticated Encryption with Associated Data） 模式。你可以把它理解为一种“二合一”的加密模式：它在高效加密数据的同时，还能确保数据没有被篡改。",[18,923,924],{},"AES-GCM 是兼具高性能和高安全性的认证加密模式，特别适合在 Web Crypto API 这类原生环境中使用。它的安全性高度依赖于每次加密都使用唯一且不可预测的 IV。遵循这一核心原则，并妥善管理密钥、认真验证认证标签，就能为你的 Web 应用构建起一道坚实的数据安全防线。",[47,926,927],{},[50,928,929,932],{},[53,930,931],{},"计算文本哈希摘要 (Digest)","：这是最简单的操作，常用于生成文件的 SHA-256。它不需要密钥。",[934,935,940],"pre",{"className":936,"code":937,"language":938,"meta":939,"style":939},"language-js shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","\u002F**\n * 计算字符串的 SHA-256 哈希值\n * @param {string} text - 输入的文本\n * @returns {Promise\u003Cstring>} Hex 格式的哈希字符串\n *\u002F\nasync function generateHash(text) {\n \u002F\u002F 1. 将文本编码为 Uint8Array 字节流\n const encoder = new TextEncoder();\n const data = encoder.encode(text);\n\n \u002F\u002F 2. 使用 crypto.subtle.digest 生成哈希（返回 ArrayBuffer）\n const hashBuffer = await crypto.subtle.digest('SHA-256', data);\n\n \u002F\u002F 3. 将 ArrayBuffer 转换为常见的十六进制 (Hex) 字符串\n const hashArray = Array.from(new Uint8Array(hashBuffer));\n const hashHex = hashArray.map(b => b.toString(16).padStart(2, '0')).join('');\n \n return hashHex;\n}\n\n\u002F\u002F 使用示例：\nconst sha256Result = await generateHash(\"Hello World\");\n","js","",[473,941,942,950,955,985,1004,1009,1036,1042,1068,1094,1101,1107,1151,1156,1162,1198,1275,1281,1291,1297,1302,1308],{"__ignoreMap":939},[338,943,946],{"class":944,"line":945},"line",1,[338,947,949],{"class":948},"sHwdD","\u002F**\n",[338,951,952],{"class":944,"line":74},[338,953,954],{"class":948}," * 计算字符串的 SHA-256 哈希值\n",[338,956,957,960,964,968,971,975,978,982],{"class":944,"line":96},[338,958,959],{"class":948}," * ",[338,961,963],{"class":962},"s7zQu","@",[338,965,967],{"class":966},"s6hCs","param",[338,969,970],{"class":962}," {",[338,972,974],{"class":973},"sFweD","string",[338,976,977],{"class":962},"}",[338,979,981],{"class":980},"sHdIc"," text",[338,983,984],{"class":948}," - 输入的文本\n",[338,986,987,989,991,994,996,999,1001],{"class":944,"line":119},[338,988,959],{"class":948},[338,990,963],{"class":962},[338,992,993],{"class":966},"returns",[338,995,970],{"class":962},[338,997,998],{"class":973},"Promise\u003Cstring>",[338,1000,977],{"class":962},[338,1002,1003],{"class":948}," Hex 格式的哈希字符串\n",[338,1005,1006],{"class":944,"line":140},[338,1007,1008],{"class":948}," *\u002F\n",[338,1010,1012,1016,1019,1023,1027,1030,1033],{"class":944,"line":1011},6,[338,1013,1015],{"class":1014},"spNyl","async",[338,1017,1018],{"class":1014}," function",[338,1020,1022],{"class":1021},"s2Zo4"," generateHash",[338,1024,1026],{"class":1025},"sMK4o","(",[338,1028,1029],{"class":980},"text",[338,1031,1032],{"class":1025},")",[338,1034,1035],{"class":1025}," {\n",[338,1037,1039],{"class":944,"line":1038},7,[338,1040,1041],{"class":948}," \u002F\u002F 1. 将文本编码为 Uint8Array 字节流\n",[338,1043,1045,1048,1052,1055,1058,1061,1065],{"class":944,"line":1044},8,[338,1046,1047],{"class":1014}," const",[338,1049,1051],{"class":1050},"sTEyZ"," encoder",[338,1053,1054],{"class":1025}," =",[338,1056,1057],{"class":1025}," new",[338,1059,1060],{"class":1021}," TextEncoder",[338,1062,1064],{"class":1063},"swJcz","()",[338,1066,1067],{"class":1025},";\n",[338,1069,1071,1073,1076,1078,1080,1083,1086,1088,1090,1092],{"class":944,"line":1070},9,[338,1072,1047],{"class":1014},[338,1074,1075],{"class":1050}," data",[338,1077,1054],{"class":1025},[338,1079,1051],{"class":1050},[338,1081,1082],{"class":1025},".",[338,1084,1085],{"class":1021},"encode",[338,1087,1026],{"class":1063},[338,1089,1029],{"class":1050},[338,1091,1032],{"class":1063},[338,1093,1067],{"class":1025},[338,1095,1097],{"class":944,"line":1096},10,[338,1098,1100],{"emptyLinePlaceholder":1099},true,"\n",[338,1102,1104],{"class":944,"line":1103},11,[338,1105,1106],{"class":948}," \u002F\u002F 2. 使用 crypto.subtle.digest 生成哈希（返回 ArrayBuffer）\n",[338,1108,1110,1112,1115,1117,1120,1123,1125,1128,1130,1132,1134,1137,1140,1142,1145,1147,1149],{"class":944,"line":1109},12,[338,1111,1047],{"class":1014},[338,1113,1114],{"class":1050}," hashBuffer",[338,1116,1054],{"class":1025},[338,1118,1119],{"class":962}," await",[338,1121,1122],{"class":1050}," crypto",[338,1124,1082],{"class":1025},[338,1126,1127],{"class":1050},"subtle",[338,1129,1082],{"class":1025},[338,1131,744],{"class":1021},[338,1133,1026],{"class":1063},[338,1135,1136],{"class":1025},"'",[338,1138,741],{"class":1139},"sfazB",[338,1141,1136],{"class":1025},[338,1143,1144],{"class":1025},",",[338,1146,1075],{"class":1050},[338,1148,1032],{"class":1063},[338,1150,1067],{"class":1025},[338,1152,1154],{"class":944,"line":1153},13,[338,1155,1100],{"emptyLinePlaceholder":1099},[338,1157,1159],{"class":944,"line":1158},14,[338,1160,1161],{"class":948}," \u002F\u002F 3. 将 ArrayBuffer 转换为常见的十六进制 (Hex) 字符串\n",[338,1163,1165,1167,1170,1172,1175,1177,1180,1182,1185,1188,1190,1193,1196],{"class":944,"line":1164},15,[338,1166,1047],{"class":1014},[338,1168,1169],{"class":1050}," hashArray",[338,1171,1054],{"class":1025},[338,1173,1174],{"class":1050}," Array",[338,1176,1082],{"class":1025},[338,1178,1179],{"class":1021},"from",[338,1181,1026],{"class":1063},[338,1183,1184],{"class":1025},"new",[338,1186,1187],{"class":1021}," Uint8Array",[338,1189,1026],{"class":1063},[338,1191,1192],{"class":1050},"hashBuffer",[338,1194,1195],{"class":1063},"))",[338,1197,1067],{"class":1025},[338,1199,1201,1203,1206,1208,1210,1212,1215,1217,1220,1223,1226,1228,1231,1233,1237,1239,1241,1244,1246,1249,1251,1254,1257,1259,1261,1263,1266,1268,1271,1273],{"class":944,"line":1200},16,[338,1202,1047],{"class":1014},[338,1204,1205],{"class":1050}," hashHex",[338,1207,1054],{"class":1025},[338,1209,1169],{"class":1050},[338,1211,1082],{"class":1025},[338,1213,1214],{"class":1021},"map",[338,1216,1026],{"class":1063},[338,1218,1219],{"class":980},"b",[338,1221,1222],{"class":1014}," =>",[338,1224,1225],{"class":1050}," b",[338,1227,1082],{"class":1025},[338,1229,1230],{"class":1021},"toString",[338,1232,1026],{"class":1063},[338,1234,1236],{"class":1235},"sbssI","16",[338,1238,1032],{"class":1063},[338,1240,1082],{"class":1025},[338,1242,1243],{"class":1021},"padStart",[338,1245,1026],{"class":1063},[338,1247,1248],{"class":1235},"2",[338,1250,1144],{"class":1025},[338,1252,1253],{"class":1025}," '",[338,1255,1256],{"class":1139},"0",[338,1258,1136],{"class":1025},[338,1260,1195],{"class":1063},[338,1262,1082],{"class":1025},[338,1264,1265],{"class":1021},"join",[338,1267,1026],{"class":1063},[338,1269,1270],{"class":1025},"''",[338,1272,1032],{"class":1063},[338,1274,1067],{"class":1025},[338,1276,1278],{"class":944,"line":1277},17,[338,1279,1280],{"class":1063}," \n",[338,1282,1284,1287,1289],{"class":944,"line":1283},18,[338,1285,1286],{"class":962}," return",[338,1288,1205],{"class":1050},[338,1290,1067],{"class":1025},[338,1292,1294],{"class":944,"line":1293},19,[338,1295,1296],{"class":1025},"}\n",[338,1298,1300],{"class":944,"line":1299},20,[338,1301,1100],{"emptyLinePlaceholder":1099},[338,1303,1305],{"class":944,"line":1304},21,[338,1306,1307],{"class":948},"\u002F\u002F 使用示例：\n",[338,1309,1311,1314,1317,1320,1322,1324,1326,1329,1332,1334,1336],{"class":944,"line":1310},22,[338,1312,1313],{"class":1014},"const",[338,1315,1316],{"class":1050}," sha256Result ",[338,1318,1319],{"class":1025},"=",[338,1321,1119],{"class":962},[338,1323,1022],{"class":1021},[338,1325,1026],{"class":1050},[338,1327,1328],{"class":1025},"\"",[338,1330,1331],{"class":1139},"Hello World",[338,1333,1328],{"class":1025},[338,1335,1032],{"class":1050},[338,1337,1067],{"class":1025},[47,1339,1340],{"start":74},[50,1341,1342,1345],{},[53,1343,1344],{},"生成对称加密密钥 (Generate Key)","：在加密数据之前，必须先通过 subtle 算法生成一个标准的加密密钥对象（CryptoKey）。这里以主流的 AES-GCM 算法为例：",[934,1347,1349],{"className":936,"code":1348,"language":938,"meta":939,"style":939},"\u002F**\n * 生成一个用于 AES-GCM 加密的 256 位随机密钥\n * @returns {Promise\u003CCryptoKey>} 返回 CryptoKey 对象\n *\u002F\nasync function generateAESKey() {\n return await crypto.subtle.generateKey(\n {\n name: 'AES-GCM',\n length: 256 \u002F\u002F 密钥长度支持 128, 192, 或 256 位\n },\n false, \u002F\u002F 是否允许该密钥被导出（如果设为 false，密钥无法脱离当前浏览器，安全性极高）\n ['encrypt', 'decrypt'] \u002F\u002F 该密钥被允许用来做什么操作\n );\n}\n\n",[473,1350,1351,1355,1360,1378,1382,1395,1415,1420,1438,1451,1456,1467,1494,1501],{"__ignoreMap":939},[338,1352,1353],{"class":944,"line":945},[338,1354,949],{"class":948},[338,1356,1357],{"class":944,"line":74},[338,1358,1359],{"class":948}," * 生成一个用于 AES-GCM 加密的 256 位随机密钥\n",[338,1361,1362,1364,1366,1368,1370,1373,1375],{"class":944,"line":96},[338,1363,959],{"class":948},[338,1365,963],{"class":962},[338,1367,993],{"class":966},[338,1369,970],{"class":962},[338,1371,1372],{"class":973},"Promise\u003CCryptoKey>",[338,1374,977],{"class":962},[338,1376,1377],{"class":948}," 返回 CryptoKey 对象\n",[338,1379,1380],{"class":944,"line":119},[338,1381,1008],{"class":948},[338,1383,1384,1386,1388,1391,1393],{"class":944,"line":140},[338,1385,1015],{"class":1014},[338,1387,1018],{"class":1014},[338,1389,1390],{"class":1021}," generateAESKey",[338,1392,1064],{"class":1025},[338,1394,1035],{"class":1025},[338,1396,1397,1399,1401,1403,1405,1407,1409,1412],{"class":944,"line":1011},[338,1398,1286],{"class":962},[338,1400,1119],{"class":962},[338,1402,1122],{"class":1050},[338,1404,1082],{"class":1025},[338,1406,1127],{"class":1050},[338,1408,1082],{"class":1025},[338,1410,1411],{"class":1021},"generateKey",[338,1413,1414],{"class":1063},"(\n",[338,1416,1417],{"class":944,"line":1038},[338,1418,1419],{"class":1025}," {\n",[338,1421,1422,1425,1428,1430,1433,1435],{"class":944,"line":1044},[338,1423,1424],{"class":1063}," name",[338,1426,1427],{"class":1025},":",[338,1429,1253],{"class":1025},[338,1431,1432],{"class":1139},"AES-GCM",[338,1434,1136],{"class":1025},[338,1436,1437],{"class":1025},",\n",[338,1439,1440,1443,1445,1448],{"class":944,"line":1070},[338,1441,1442],{"class":1063}," length",[338,1444,1427],{"class":1025},[338,1446,1447],{"class":1235}," 256",[338,1449,1450],{"class":948}," \u002F\u002F 密钥长度支持 128, 192, 或 256 位\n",[338,1452,1453],{"class":944,"line":1096},[338,1454,1455],{"class":1025}," },\n",[338,1457,1458,1462,1464],{"class":944,"line":1103},[338,1459,1461],{"class":1460},"sfNiH"," false",[338,1463,1144],{"class":1025},[338,1465,1466],{"class":948}," \u002F\u002F 是否允许该密钥被导出（如果设为 false，密钥无法脱离当前浏览器，安全性极高）\n",[338,1468,1469,1472,1474,1477,1479,1481,1483,1486,1488,1491],{"class":944,"line":1109},[338,1470,1471],{"class":1063}," [",[338,1473,1136],{"class":1025},[338,1475,1476],{"class":1139},"encrypt",[338,1478,1136],{"class":1025},[338,1480,1144],{"class":1025},[338,1482,1253],{"class":1025},[338,1484,1485],{"class":1139},"decrypt",[338,1487,1136],{"class":1025},[338,1489,1490],{"class":1063},"] ",[338,1492,1493],{"class":948},"\u002F\u002F 该密钥被允许用来做什么操作\n",[338,1495,1496,1499],{"class":944,"line":1153},[338,1497,1498],{"class":1063}," )",[338,1500,1067],{"class":1025},[338,1502,1503],{"class":944,"line":1158},[338,1504,1296],{"class":1025},[47,1506,1507],{"start":96},[50,1508,1509,1512],{},[53,1510,1511],{},"数据加密 Encrypt","：使用生成的密钥和 AES-GCM 算法对敏感文本进行加密。为了安全，AES-GCM 要求每次加密必须配合一个随机的初始化向量 (IV)。",[934,1514,1516],{"className":936,"code":1515,"language":938,"meta":939,"style":939},"\u002F**\n * 对文本进行 AES-GCM 加密\n * @param {string} text - 待加密的明文\n * @param {CryptoKey} key - 上一步生成的 CryptoKey 对象\n * @returns {Promise\u003C{cipherText: ArrayBuffer, iv: Uint8Array}>} 返回密文和IV\n *\u002F\nasync function encryptText(text, key) {\n const encoder = new TextEncoder();\n const encodedText = encoder.encode(text);\n\n \u002F\u002F AES-GCM 推荐使用 12位（96位）的高安全伪随机数作为 IV\n \u002F\u002F 注意：这里使用的是外部同步方法 getRandomValues 生成随机数\n const iv = crypto.getRandomValues(new Uint8Array(12));\n\n \u002F\u002F 执行加密\n const cipherText = await crypto.subtle.encrypt(\n {\n name: 'AES-GCM',\n iv: iv \u002F\u002F 加密参数必须包含 IV\n },\n key, \u002F\u002F 密钥\n encodedText \u002F\u002F 明文数据\n );\n\n \u002F\u002F 需要同时把密文和 IV 返回，因为解密时必须提供一模一样的 IV\n return { cipherText, iv };\n}\n\n",[473,1517,1518,1522,1527,1546,1566,1584,1588,1609,1625,1648,1652,1657,1662,1693,1697,1702,1725,1729,1743,1755,1759,1769,1777,1784,1789,1795,1811],{"__ignoreMap":939},[338,1519,1520],{"class":944,"line":945},[338,1521,949],{"class":948},[338,1523,1524],{"class":944,"line":74},[338,1525,1526],{"class":948}," * 对文本进行 AES-GCM 加密\n",[338,1528,1529,1531,1533,1535,1537,1539,1541,1543],{"class":944,"line":96},[338,1530,959],{"class":948},[338,1532,963],{"class":962},[338,1534,967],{"class":966},[338,1536,970],{"class":962},[338,1538,974],{"class":973},[338,1540,977],{"class":962},[338,1542,981],{"class":980},[338,1544,1545],{"class":948}," - 待加密的明文\n",[338,1547,1548,1550,1552,1554,1556,1558,1560,1563],{"class":944,"line":119},[338,1549,959],{"class":948},[338,1551,963],{"class":962},[338,1553,967],{"class":966},[338,1555,970],{"class":962},[338,1557,481],{"class":973},[338,1559,977],{"class":962},[338,1561,1562],{"class":980}," key",[338,1564,1565],{"class":948}," - 上一步生成的 CryptoKey 对象\n",[338,1567,1568,1570,1572,1574,1576,1579,1581],{"class":944,"line":140},[338,1569,959],{"class":948},[338,1571,963],{"class":962},[338,1573,993],{"class":966},[338,1575,970],{"class":962},[338,1577,1578],{"class":973},"Promise\u003C{cipherText: ArrayBuffer, iv: Uint8Array}>",[338,1580,977],{"class":962},[338,1582,1583],{"class":948}," 返回密文和IV\n",[338,1585,1586],{"class":944,"line":1011},[338,1587,1008],{"class":948},[338,1589,1590,1592,1594,1597,1599,1601,1603,1605,1607],{"class":944,"line":1038},[338,1591,1015],{"class":1014},[338,1593,1018],{"class":1014},[338,1595,1596],{"class":1021}," encryptText",[338,1598,1026],{"class":1025},[338,1600,1029],{"class":980},[338,1602,1144],{"class":1025},[338,1604,1562],{"class":980},[338,1606,1032],{"class":1025},[338,1608,1035],{"class":1025},[338,1610,1611,1613,1615,1617,1619,1621,1623],{"class":944,"line":1044},[338,1612,1047],{"class":1014},[338,1614,1051],{"class":1050},[338,1616,1054],{"class":1025},[338,1618,1057],{"class":1025},[338,1620,1060],{"class":1021},[338,1622,1064],{"class":1063},[338,1624,1067],{"class":1025},[338,1626,1627,1629,1632,1634,1636,1638,1640,1642,1644,1646],{"class":944,"line":1070},[338,1628,1047],{"class":1014},[338,1630,1631],{"class":1050}," encodedText",[338,1633,1054],{"class":1025},[338,1635,1051],{"class":1050},[338,1637,1082],{"class":1025},[338,1639,1085],{"class":1021},[338,1641,1026],{"class":1063},[338,1643,1029],{"class":1050},[338,1645,1032],{"class":1063},[338,1647,1067],{"class":1025},[338,1649,1650],{"class":944,"line":1096},[338,1651,1100],{"emptyLinePlaceholder":1099},[338,1653,1654],{"class":944,"line":1103},[338,1655,1656],{"class":948}," \u002F\u002F AES-GCM 推荐使用 12位（96位）的高安全伪随机数作为 IV\n",[338,1658,1659],{"class":944,"line":1109},[338,1660,1661],{"class":948}," \u002F\u002F 注意：这里使用的是外部同步方法 getRandomValues 生成随机数\n",[338,1663,1664,1666,1669,1671,1673,1675,1678,1680,1682,1684,1686,1689,1691],{"class":944,"line":1153},[338,1665,1047],{"class":1014},[338,1667,1668],{"class":1050}," iv",[338,1670,1054],{"class":1025},[338,1672,1122],{"class":1050},[338,1674,1082],{"class":1025},[338,1676,1677],{"class":1021},"getRandomValues",[338,1679,1026],{"class":1063},[338,1681,1184],{"class":1025},[338,1683,1187],{"class":1021},[338,1685,1026],{"class":1063},[338,1687,1688],{"class":1235},"12",[338,1690,1195],{"class":1063},[338,1692,1067],{"class":1025},[338,1694,1695],{"class":944,"line":1158},[338,1696,1100],{"emptyLinePlaceholder":1099},[338,1698,1699],{"class":944,"line":1164},[338,1700,1701],{"class":948}," \u002F\u002F 执行加密\n",[338,1703,1704,1706,1709,1711,1713,1715,1717,1719,1721,1723],{"class":944,"line":1200},[338,1705,1047],{"class":1014},[338,1707,1708],{"class":1050}," cipherText",[338,1710,1054],{"class":1025},[338,1712,1119],{"class":962},[338,1714,1122],{"class":1050},[338,1716,1082],{"class":1025},[338,1718,1127],{"class":1050},[338,1720,1082],{"class":1025},[338,1722,1476],{"class":1021},[338,1724,1414],{"class":1063},[338,1726,1727],{"class":944,"line":1277},[338,1728,1419],{"class":1025},[338,1730,1731,1733,1735,1737,1739,1741],{"class":944,"line":1283},[338,1732,1424],{"class":1063},[338,1734,1427],{"class":1025},[338,1736,1253],{"class":1025},[338,1738,1432],{"class":1139},[338,1740,1136],{"class":1025},[338,1742,1437],{"class":1025},[338,1744,1745,1748,1750,1752],{"class":944,"line":1293},[338,1746,1747],{"class":1063}," iv",[338,1749,1427],{"class":1025},[338,1751,1668],{"class":1050},[338,1753,1754],{"class":948}," \u002F\u002F 加密参数必须包含 IV\n",[338,1756,1757],{"class":944,"line":1299},[338,1758,1455],{"class":1025},[338,1760,1761,1764,1766],{"class":944,"line":1304},[338,1762,1763],{"class":1050}," key",[338,1765,1144],{"class":1025},[338,1767,1768],{"class":948}," \u002F\u002F 密钥\n",[338,1770,1771,1774],{"class":944,"line":1310},[338,1772,1773],{"class":1050}," encodedText",[338,1775,1776],{"class":948}," \u002F\u002F 明文数据\n",[338,1778,1780,1782],{"class":944,"line":1779},23,[338,1781,1498],{"class":1063},[338,1783,1067],{"class":1025},[338,1785,1787],{"class":944,"line":1786},24,[338,1788,1100],{"emptyLinePlaceholder":1099},[338,1790,1792],{"class":944,"line":1791},25,[338,1793,1794],{"class":948}," \u002F\u002F 需要同时把密文和 IV 返回，因为解密时必须提供一模一样的 IV\n",[338,1796,1798,1800,1802,1804,1806,1808],{"class":944,"line":1797},26,[338,1799,1286],{"class":962},[338,1801,970],{"class":1025},[338,1803,1708],{"class":1050},[338,1805,1144],{"class":1025},[338,1807,1668],{"class":1050},[338,1809,1810],{"class":1025}," };\n",[338,1812,1814],{"class":944,"line":1813},27,[338,1815,1296],{"class":1025},[47,1817,1818],{"start":119},[50,1819,1820,1823],{},[53,1821,1822],{},"数据解密 Decrypt","：传入加密时使用的 CryptoKey、IV 和密文数组，将其还原为人类可读的明文字符串。",[934,1825,1827],{"className":936,"code":1826,"language":938,"meta":939,"style":939},"\u002F**\n * 对 AES-GCM 密文进行解密\n * @param {ArrayBuffer} cipherText - 密文数据\n * @param {CryptoKey} key - 加密时使用的同一个密钥\n * @param {Uint8Array} iv - 加密时对应的随机 IV\n * @returns {Promise\u003Cstring>} 解密后的明文字符串\n *\u002F\nasync function decryptText(cipherText, key, iv) {\n \u002F\u002F 执行解密\n const decryptedBuffer = await crypto.subtle.decrypt(\n {\n name: 'AES-GCM',\n iv: iv \u002F\u002F 必须传入与加密时完全相同的 IV\n },\n key,\n cipherText\n );\n\n \u002F\u002F 将 ArrayBuffer 字节解码还原为字符串\n const decoder = new TextDecoder();\n return decoder.decode(decryptedBuffer);\n}\n",[473,1828,1829,1833,1838,1858,1877,1897,1914,1918,1944,1949,1972,1976,1990,2001,2005,2011,2016,2022,2026,2031,2049,2069],{"__ignoreMap":939},[338,1830,1831],{"class":944,"line":945},[338,1832,949],{"class":948},[338,1834,1835],{"class":944,"line":74},[338,1836,1837],{"class":948}," * 对 AES-GCM 密文进行解密\n",[338,1839,1840,1842,1844,1846,1848,1851,1853,1855],{"class":944,"line":96},[338,1841,959],{"class":948},[338,1843,963],{"class":962},[338,1845,967],{"class":966},[338,1847,970],{"class":962},[338,1849,1850],{"class":973},"ArrayBuffer",[338,1852,977],{"class":962},[338,1854,1708],{"class":980},[338,1856,1857],{"class":948}," - 密文数据\n",[338,1859,1860,1862,1864,1866,1868,1870,1872,1874],{"class":944,"line":119},[338,1861,959],{"class":948},[338,1863,963],{"class":962},[338,1865,967],{"class":966},[338,1867,970],{"class":962},[338,1869,481],{"class":973},[338,1871,977],{"class":962},[338,1873,1562],{"class":980},[338,1875,1876],{"class":948}," - 加密时使用的同一个密钥\n",[338,1878,1879,1881,1883,1885,1887,1890,1892,1894],{"class":944,"line":140},[338,1880,959],{"class":948},[338,1882,963],{"class":962},[338,1884,967],{"class":966},[338,1886,970],{"class":962},[338,1888,1889],{"class":973},"Uint8Array",[338,1891,977],{"class":962},[338,1893,1668],{"class":980},[338,1895,1896],{"class":948}," - 加密时对应的随机 IV\n",[338,1898,1899,1901,1903,1905,1907,1909,1911],{"class":944,"line":1011},[338,1900,959],{"class":948},[338,1902,963],{"class":962},[338,1904,993],{"class":966},[338,1906,970],{"class":962},[338,1908,998],{"class":973},[338,1910,977],{"class":962},[338,1912,1913],{"class":948}," 解密后的明文字符串\n",[338,1915,1916],{"class":944,"line":1038},[338,1917,1008],{"class":948},[338,1919,1920,1922,1924,1927,1929,1932,1934,1936,1938,1940,1942],{"class":944,"line":1044},[338,1921,1015],{"class":1014},[338,1923,1018],{"class":1014},[338,1925,1926],{"class":1021}," decryptText",[338,1928,1026],{"class":1025},[338,1930,1931],{"class":980},"cipherText",[338,1933,1144],{"class":1025},[338,1935,1562],{"class":980},[338,1937,1144],{"class":1025},[338,1939,1668],{"class":980},[338,1941,1032],{"class":1025},[338,1943,1035],{"class":1025},[338,1945,1946],{"class":944,"line":1070},[338,1947,1948],{"class":948}," \u002F\u002F 执行解密\n",[338,1950,1951,1953,1956,1958,1960,1962,1964,1966,1968,1970],{"class":944,"line":1096},[338,1952,1047],{"class":1014},[338,1954,1955],{"class":1050}," decryptedBuffer",[338,1957,1054],{"class":1025},[338,1959,1119],{"class":962},[338,1961,1122],{"class":1050},[338,1963,1082],{"class":1025},[338,1965,1127],{"class":1050},[338,1967,1082],{"class":1025},[338,1969,1485],{"class":1021},[338,1971,1414],{"class":1063},[338,1973,1974],{"class":944,"line":1103},[338,1975,1419],{"class":1025},[338,1977,1978,1980,1982,1984,1986,1988],{"class":944,"line":1109},[338,1979,1424],{"class":1063},[338,1981,1427],{"class":1025},[338,1983,1253],{"class":1025},[338,1985,1432],{"class":1139},[338,1987,1136],{"class":1025},[338,1989,1437],{"class":1025},[338,1991,1992,1994,1996,1998],{"class":944,"line":1153},[338,1993,1747],{"class":1063},[338,1995,1427],{"class":1025},[338,1997,1668],{"class":1050},[338,1999,2000],{"class":948}," \u002F\u002F 必须传入与加密时完全相同的 IV\n",[338,2002,2003],{"class":944,"line":1158},[338,2004,1455],{"class":1025},[338,2006,2007,2009],{"class":944,"line":1164},[338,2008,1763],{"class":1050},[338,2010,1437],{"class":1025},[338,2012,2013],{"class":944,"line":1200},[338,2014,2015],{"class":1050}," cipherText\n",[338,2017,2018,2020],{"class":944,"line":1277},[338,2019,1498],{"class":1063},[338,2021,1067],{"class":1025},[338,2023,2024],{"class":944,"line":1283},[338,2025,1100],{"emptyLinePlaceholder":1099},[338,2027,2028],{"class":944,"line":1293},[338,2029,2030],{"class":948}," \u002F\u002F 将 ArrayBuffer 字节解码还原为字符串\n",[338,2032,2033,2035,2038,2040,2042,2045,2047],{"class":944,"line":1299},[338,2034,1047],{"class":1014},[338,2036,2037],{"class":1050}," decoder",[338,2039,1054],{"class":1025},[338,2041,1057],{"class":1025},[338,2043,2044],{"class":1021}," TextDecoder",[338,2046,1064],{"class":1063},[338,2048,1067],{"class":1025},[338,2050,2051,2053,2055,2057,2060,2062,2065,2067],{"class":944,"line":1304},[338,2052,1286],{"class":962},[338,2054,2037],{"class":1050},[338,2056,1082],{"class":1025},[338,2058,2059],{"class":1021},"decode",[338,2061,1026],{"class":1063},[338,2063,2064],{"class":1050},"decryptedBuffer",[338,2066,1032],{"class":1063},[338,2068,1067],{"class":1025},[338,2070,2071],{"class":944,"line":1310},[338,2072,1296],{"class":1025},[2074,2075,2076],"tip",{},[18,2077,2078],{},"如果要在项目中保存或传输生成的密钥和密文，通常需要通过 crypto.subtle.exportKey('raw', key) 将密钥导出成字节，再用 btoa() 或 Base64 方案 转换成可传输的字符串格式。",[189,2080,2082],{"id":2081},"_72-非对称加密rsa-oaep示例","7.2 非对称加密RSA-OAEP示例",[18,2084,2085],{},"非对称加密使用公钥加密、私钥解密，常用于非对称场景或加密对称密钥（如密钥交换）。这里使用最安全的 RSA-OAEP 算法。",[47,2087,2088],{},[50,2089,2090],{},[53,2091,2092],{},"生成 RSA 密钥对",[934,2094,2096],{"className":936,"code":2095,"language":938,"meta":939,"style":939},"\u002F**\n * 生成用于 RSA-OAEP 加解密的 2048 位密钥对\n * @returns {Promise\u003CCryptoKeyPair>} 返回包含公钥和私钥的对象\n *\u002F\nasync function generateRSAKeyPair() {\n return await crypto.subtle.generateKey(\n {\n name: \"RSA-OAEP\",\n modulusLength: 2048, \u002F\u002F 密钥长度，2048 位是目前的标准安全线\n publicExponent: new Uint8Array([1, 0, 1]), \u002F\u002F 等于 65537，固定的密码学标准常数\n hash: \"SHA-256\", \u002F\u002F 内部使用的哈希算法\n },\n true, \u002F\u002F 是否允许导出\n [\"encrypt\", \"decrypt\"] \u002F\u002F 用途分配\n );\n}\n",[473,2097,2098,2102,2107,2125,2129,2142,2160,2164,2181,2196,2231,2249,2253,2263,2286,2292],{"__ignoreMap":939},[338,2099,2100],{"class":944,"line":945},[338,2101,949],{"class":948},[338,2103,2104],{"class":944,"line":74},[338,2105,2106],{"class":948}," * 生成用于 RSA-OAEP 加解密的 2048 位密钥对\n",[338,2108,2109,2111,2113,2115,2117,2120,2122],{"class":944,"line":96},[338,2110,959],{"class":948},[338,2112,963],{"class":962},[338,2114,993],{"class":966},[338,2116,970],{"class":962},[338,2118,2119],{"class":973},"Promise\u003CCryptoKeyPair>",[338,2121,977],{"class":962},[338,2123,2124],{"class":948}," 返回包含公钥和私钥的对象\n",[338,2126,2127],{"class":944,"line":119},[338,2128,1008],{"class":948},[338,2130,2131,2133,2135,2138,2140],{"class":944,"line":140},[338,2132,1015],{"class":1014},[338,2134,1018],{"class":1014},[338,2136,2137],{"class":1021}," generateRSAKeyPair",[338,2139,1064],{"class":1025},[338,2141,1035],{"class":1025},[338,2143,2144,2146,2148,2150,2152,2154,2156,2158],{"class":944,"line":1011},[338,2145,1286],{"class":962},[338,2147,1119],{"class":962},[338,2149,1122],{"class":1050},[338,2151,1082],{"class":1025},[338,2153,1127],{"class":1050},[338,2155,1082],{"class":1025},[338,2157,1411],{"class":1021},[338,2159,1414],{"class":1063},[338,2161,2162],{"class":944,"line":1038},[338,2163,1419],{"class":1025},[338,2165,2166,2169,2171,2174,2177,2179],{"class":944,"line":1044},[338,2167,2168],{"class":1063}," name",[338,2170,1427],{"class":1025},[338,2172,2173],{"class":1025}," \"",[338,2175,2176],{"class":1139},"RSA-OAEP",[338,2178,1328],{"class":1025},[338,2180,1437],{"class":1025},[338,2182,2183,2186,2188,2191,2193],{"class":944,"line":1070},[338,2184,2185],{"class":1063}," modulusLength",[338,2187,1427],{"class":1025},[338,2189,2190],{"class":1235}," 2048",[338,2192,1144],{"class":1025},[338,2194,2195],{"class":948}," \u002F\u002F 密钥长度，2048 位是目前的标准安全线\n",[338,2197,2198,2201,2203,2205,2207,2210,2213,2215,2218,2220,2223,2226,2228],{"class":944,"line":1096},[338,2199,2200],{"class":1063}," publicExponent",[338,2202,1427],{"class":1025},[338,2204,1057],{"class":1025},[338,2206,1187],{"class":1021},[338,2208,2209],{"class":1063},"([",[338,2211,2212],{"class":1235},"1",[338,2214,1144],{"class":1025},[338,2216,2217],{"class":1235}," 0",[338,2219,1144],{"class":1025},[338,2221,2222],{"class":1235}," 1",[338,2224,2225],{"class":1063},"])",[338,2227,1144],{"class":1025},[338,2229,2230],{"class":948}," \u002F\u002F 等于 65537，固定的密码学标准常数\n",[338,2232,2233,2236,2238,2240,2242,2244,2246],{"class":944,"line":1103},[338,2234,2235],{"class":1063}," hash",[338,2237,1427],{"class":1025},[338,2239,2173],{"class":1025},[338,2241,741],{"class":1139},[338,2243,1328],{"class":1025},[338,2245,1144],{"class":1025},[338,2247,2248],{"class":948}," \u002F\u002F 内部使用的哈希算法\n",[338,2250,2251],{"class":944,"line":1109},[338,2252,1455],{"class":1025},[338,2254,2255,2258,2260],{"class":944,"line":1153},[338,2256,2257],{"class":1460}," true",[338,2259,1144],{"class":1025},[338,2261,2262],{"class":948}," \u002F\u002F 是否允许导出\n",[338,2264,2265,2267,2269,2271,2273,2275,2277,2279,2281,2283],{"class":944,"line":1158},[338,2266,1471],{"class":1063},[338,2268,1328],{"class":1025},[338,2270,1476],{"class":1139},[338,2272,1328],{"class":1025},[338,2274,1144],{"class":1025},[338,2276,2173],{"class":1025},[338,2278,1485],{"class":1139},[338,2280,1328],{"class":1025},[338,2282,1490],{"class":1063},[338,2284,2285],{"class":948},"\u002F\u002F 用途分配\n",[338,2287,2288,2290],{"class":944,"line":1164},[338,2289,1498],{"class":1063},[338,2291,1067],{"class":1025},[338,2293,2294],{"class":944,"line":1200},[338,2295,1296],{"class":1025},[47,2297,2298],{"start":74},[50,2299,2300],{},[53,2301,2302],{},"使用公钥加密",[934,2304,2306],{"className":936,"code":2305,"language":938,"meta":939,"style":939},"\u002F**\n * 使用 RSA 公钥加密文本\n *\u002F\nasync function rsaEncrypt(text, publicKey) {\n const encoder = new TextEncoder();\n const data = encoder.encode(text);\n\n \u002F\u002F 返回 ArrayBuffer 格式的密文\n return await crypto.subtle.encrypt(\n { name: \"RSA-OAEP\" },\n publicKey,\n data\n );\n}\n",[473,2307,2308,2312,2317,2321,2343,2359,2381,2385,2390,2408,2427,2434,2439,2445],{"__ignoreMap":939},[338,2309,2310],{"class":944,"line":945},[338,2311,949],{"class":948},[338,2313,2314],{"class":944,"line":74},[338,2315,2316],{"class":948}," * 使用 RSA 公钥加密文本\n",[338,2318,2319],{"class":944,"line":96},[338,2320,1008],{"class":948},[338,2322,2323,2325,2327,2330,2332,2334,2336,2339,2341],{"class":944,"line":119},[338,2324,1015],{"class":1014},[338,2326,1018],{"class":1014},[338,2328,2329],{"class":1021}," rsaEncrypt",[338,2331,1026],{"class":1025},[338,2333,1029],{"class":980},[338,2335,1144],{"class":1025},[338,2337,2338],{"class":980}," publicKey",[338,2340,1032],{"class":1025},[338,2342,1035],{"class":1025},[338,2344,2345,2347,2349,2351,2353,2355,2357],{"class":944,"line":140},[338,2346,1047],{"class":1014},[338,2348,1051],{"class":1050},[338,2350,1054],{"class":1025},[338,2352,1057],{"class":1025},[338,2354,1060],{"class":1021},[338,2356,1064],{"class":1063},[338,2358,1067],{"class":1025},[338,2360,2361,2363,2365,2367,2369,2371,2373,2375,2377,2379],{"class":944,"line":1011},[338,2362,1047],{"class":1014},[338,2364,1075],{"class":1050},[338,2366,1054],{"class":1025},[338,2368,1051],{"class":1050},[338,2370,1082],{"class":1025},[338,2372,1085],{"class":1021},[338,2374,1026],{"class":1063},[338,2376,1029],{"class":1050},[338,2378,1032],{"class":1063},[338,2380,1067],{"class":1025},[338,2382,2383],{"class":944,"line":1038},[338,2384,1100],{"emptyLinePlaceholder":1099},[338,2386,2387],{"class":944,"line":1044},[338,2388,2389],{"class":948}," \u002F\u002F 返回 ArrayBuffer 格式的密文\n",[338,2391,2392,2394,2396,2398,2400,2402,2404,2406],{"class":944,"line":1070},[338,2393,1286],{"class":962},[338,2395,1119],{"class":962},[338,2397,1122],{"class":1050},[338,2399,1082],{"class":1025},[338,2401,1127],{"class":1050},[338,2403,1082],{"class":1025},[338,2405,1476],{"class":1021},[338,2407,1414],{"class":1063},[338,2409,2410,2413,2416,2418,2420,2422,2424],{"class":944,"line":1096},[338,2411,2412],{"class":1025}," {",[338,2414,2415],{"class":1063}," name",[338,2417,1427],{"class":1025},[338,2419,2173],{"class":1025},[338,2421,2176],{"class":1139},[338,2423,1328],{"class":1025},[338,2425,2426],{"class":1025}," },\n",[338,2428,2429,2432],{"class":944,"line":1103},[338,2430,2431],{"class":1050}," publicKey",[338,2433,1437],{"class":1025},[338,2435,2436],{"class":944,"line":1109},[338,2437,2438],{"class":1050}," data\n",[338,2440,2441,2443],{"class":944,"line":1153},[338,2442,1498],{"class":1063},[338,2444,1067],{"class":1025},[338,2446,2447],{"class":944,"line":1158},[338,2448,1296],{"class":1025},[47,2450,2451],{"start":96},[50,2452,2453],{},[53,2454,2455],{},"使用私钥解密",[934,2457,2459],{"className":936,"code":2458,"language":938,"meta":939,"style":939},"\u002F**\n * 使用 RSA 私钥解密文本\n *\u002F\nasync function rsaDecrypt(cipherText, privateKey) {\n const decryptedBuffer = await crypto.subtle.decrypt(\n { name: \"RSA-OAEP\" },\n privateKey,\n cipherText\n );\n\n const decoder = new TextDecoder();\n return decoder.decode(decryptedBuffer);\n}\n",[473,2460,2461,2465,2470,2474,2496,2518,2534,2541,2545,2551,2555,2571,2589],{"__ignoreMap":939},[338,2462,2463],{"class":944,"line":945},[338,2464,949],{"class":948},[338,2466,2467],{"class":944,"line":74},[338,2468,2469],{"class":948}," * 使用 RSA 私钥解密文本\n",[338,2471,2472],{"class":944,"line":96},[338,2473,1008],{"class":948},[338,2475,2476,2478,2480,2483,2485,2487,2489,2492,2494],{"class":944,"line":119},[338,2477,1015],{"class":1014},[338,2479,1018],{"class":1014},[338,2481,2482],{"class":1021}," rsaDecrypt",[338,2484,1026],{"class":1025},[338,2486,1931],{"class":980},[338,2488,1144],{"class":1025},[338,2490,2491],{"class":980}," privateKey",[338,2493,1032],{"class":1025},[338,2495,1035],{"class":1025},[338,2497,2498,2500,2502,2504,2506,2508,2510,2512,2514,2516],{"class":944,"line":140},[338,2499,1047],{"class":1014},[338,2501,1955],{"class":1050},[338,2503,1054],{"class":1025},[338,2505,1119],{"class":962},[338,2507,1122],{"class":1050},[338,2509,1082],{"class":1025},[338,2511,1127],{"class":1050},[338,2513,1082],{"class":1025},[338,2515,1485],{"class":1021},[338,2517,1414],{"class":1063},[338,2519,2520,2522,2524,2526,2528,2530,2532],{"class":944,"line":1011},[338,2521,2412],{"class":1025},[338,2523,2415],{"class":1063},[338,2525,1427],{"class":1025},[338,2527,2173],{"class":1025},[338,2529,2176],{"class":1139},[338,2531,1328],{"class":1025},[338,2533,2426],{"class":1025},[338,2535,2536,2539],{"class":944,"line":1038},[338,2537,2538],{"class":1050}," privateKey",[338,2540,1437],{"class":1025},[338,2542,2543],{"class":944,"line":1044},[338,2544,2015],{"class":1050},[338,2546,2547,2549],{"class":944,"line":1070},[338,2548,1498],{"class":1063},[338,2550,1067],{"class":1025},[338,2552,2553],{"class":944,"line":1096},[338,2554,1100],{"emptyLinePlaceholder":1099},[338,2556,2557,2559,2561,2563,2565,2567,2569],{"class":944,"line":1103},[338,2558,1047],{"class":1014},[338,2560,2037],{"class":1050},[338,2562,1054],{"class":1025},[338,2564,1057],{"class":1025},[338,2566,2044],{"class":1021},[338,2568,1064],{"class":1063},[338,2570,1067],{"class":1025},[338,2572,2573,2575,2577,2579,2581,2583,2585,2587],{"class":944,"line":1109},[338,2574,1286],{"class":962},[338,2576,2037],{"class":1050},[338,2578,1082],{"class":1025},[338,2580,2059],{"class":1021},[338,2582,1026],{"class":1063},[338,2584,2064],{"class":1050},[338,2586,1032],{"class":1063},[338,2588,1067],{"class":1025},[338,2590,2591],{"class":944,"line":1153},[338,2592,1296],{"class":1025},[189,2594,2596],{"id":2595},"_73-数字签名与验证-rsassa-pkcs1-v1_5","7.3 数字签名与验证 (RSASSA-PKCS1-v1_5)",[18,2598,2599],{},"数字签名常用于防止数据被篡改并确认发送者身份。其逻辑是：私钥签名、公钥验证。这里使用最通用的 RSASSA-PKCS1-v1_5 算法。",[47,2601,2602],{},[50,2603,2604],{},[53,2605,2606],{},"生成数字签名的 RSA 密钥对",[934,2608,2610],{"className":936,"code":2609,"language":938,"meta":939,"style":939},"\u002F**\n * 生成用于数字签名的 RSA 密钥对\n *\u002F\nasync function generateSignKeyPair() {\n return await crypto.subtle.generateKey(\n {\n name: \"RSASSA-PKCS1-v1_5\",\n modulusLength: 2048,\n publicExponent: new Uint8Array([1, 0, 1]),\n hash: \"SHA-256\",\n },\n true,\n [\"sign\", \"verify\"] \u002F\u002F 注意：这里的用途是签名和验证\n );\n}\n",[473,2611,2612,2616,2621,2625,2638,2656,2660,2674,2685,2712,2727,2731,2737,2762,2768],{"__ignoreMap":939},[338,2613,2614],{"class":944,"line":945},[338,2615,949],{"class":948},[338,2617,2618],{"class":944,"line":74},[338,2619,2620],{"class":948}," * 生成用于数字签名的 RSA 密钥对\n",[338,2622,2623],{"class":944,"line":96},[338,2624,1008],{"class":948},[338,2626,2627,2629,2631,2634,2636],{"class":944,"line":119},[338,2628,1015],{"class":1014},[338,2630,1018],{"class":1014},[338,2632,2633],{"class":1021}," generateSignKeyPair",[338,2635,1064],{"class":1025},[338,2637,1035],{"class":1025},[338,2639,2640,2642,2644,2646,2648,2650,2652,2654],{"class":944,"line":140},[338,2641,1286],{"class":962},[338,2643,1119],{"class":962},[338,2645,1122],{"class":1050},[338,2647,1082],{"class":1025},[338,2649,1127],{"class":1050},[338,2651,1082],{"class":1025},[338,2653,1411],{"class":1021},[338,2655,1414],{"class":1063},[338,2657,2658],{"class":944,"line":1011},[338,2659,1419],{"class":1025},[338,2661,2662,2664,2666,2668,2670,2672],{"class":944,"line":1038},[338,2663,1424],{"class":1063},[338,2665,1427],{"class":1025},[338,2667,2173],{"class":1025},[338,2669,668],{"class":1139},[338,2671,1328],{"class":1025},[338,2673,1437],{"class":1025},[338,2675,2676,2679,2681,2683],{"class":944,"line":1044},[338,2677,2678],{"class":1063}," modulusLength",[338,2680,1427],{"class":1025},[338,2682,2190],{"class":1235},[338,2684,1437],{"class":1025},[338,2686,2687,2690,2692,2694,2696,2698,2700,2702,2704,2706,2708,2710],{"class":944,"line":1070},[338,2688,2689],{"class":1063}," publicExponent",[338,2691,1427],{"class":1025},[338,2693,1057],{"class":1025},[338,2695,1187],{"class":1021},[338,2697,2209],{"class":1063},[338,2699,2212],{"class":1235},[338,2701,1144],{"class":1025},[338,2703,2217],{"class":1235},[338,2705,1144],{"class":1025},[338,2707,2222],{"class":1235},[338,2709,2225],{"class":1063},[338,2711,1437],{"class":1025},[338,2713,2714,2717,2719,2721,2723,2725],{"class":944,"line":1096},[338,2715,2716],{"class":1063}," hash",[338,2718,1427],{"class":1025},[338,2720,2173],{"class":1025},[338,2722,741],{"class":1139},[338,2724,1328],{"class":1025},[338,2726,1437],{"class":1025},[338,2728,2729],{"class":944,"line":1103},[338,2730,1455],{"class":1025},[338,2732,2733,2735],{"class":944,"line":1109},[338,2734,2257],{"class":1460},[338,2736,1437],{"class":1025},[338,2738,2739,2741,2743,2746,2748,2750,2752,2755,2757,2759],{"class":944,"line":1153},[338,2740,1471],{"class":1063},[338,2742,1328],{"class":1025},[338,2744,2745],{"class":1139},"sign",[338,2747,1328],{"class":1025},[338,2749,1144],{"class":1025},[338,2751,2173],{"class":1025},[338,2753,2754],{"class":1139},"verify",[338,2756,1328],{"class":1025},[338,2758,1490],{"class":1063},[338,2760,2761],{"class":948},"\u002F\u002F 注意：这里的用途是签名和验证\n",[338,2763,2764,2766],{"class":944,"line":1158},[338,2765,1498],{"class":1063},[338,2767,1067],{"class":1025},[338,2769,2770],{"class":944,"line":1164},[338,2771,1296],{"class":1025},[47,2773,2774],{"start":74},[50,2775,2776],{},[53,2777,2778],{},"使用私钥对数据生成签名",[934,2780,2782],{"className":936,"code":2781,"language":938,"meta":939,"style":939},"\n\u002F**\n * 使用私钥对数据生成签名\n * @returns {Promise\u003CArrayBuffer>} 返回签名摘要\n *\u002F\nasync function signData(text, privateKey) {\n const encoder = new TextEncoder();\n const data = encoder.encode(text);\n\n return await crypto.subtle.sign(\n { name: \"RSASSA-PKCS1-v1_5\" },\n privateKey,\n data\n );\n}\n",[473,2783,2784,2788,2792,2797,2814,2818,2839,2855,2877,2881,2899,2915,2921,2925,2931],{"__ignoreMap":939},[338,2785,2786],{"class":944,"line":945},[338,2787,1100],{"emptyLinePlaceholder":1099},[338,2789,2790],{"class":944,"line":74},[338,2791,949],{"class":948},[338,2793,2794],{"class":944,"line":96},[338,2795,2796],{"class":948}," * 使用私钥对数据生成签名\n",[338,2798,2799,2801,2803,2805,2807,2809,2811],{"class":944,"line":119},[338,2800,959],{"class":948},[338,2802,963],{"class":962},[338,2804,993],{"class":966},[338,2806,970],{"class":962},[338,2808,475],{"class":973},[338,2810,977],{"class":962},[338,2812,2813],{"class":948}," 返回签名摘要\n",[338,2815,2816],{"class":944,"line":140},[338,2817,1008],{"class":948},[338,2819,2820,2822,2824,2827,2829,2831,2833,2835,2837],{"class":944,"line":1011},[338,2821,1015],{"class":1014},[338,2823,1018],{"class":1014},[338,2825,2826],{"class":1021}," signData",[338,2828,1026],{"class":1025},[338,2830,1029],{"class":980},[338,2832,1144],{"class":1025},[338,2834,2491],{"class":980},[338,2836,1032],{"class":1025},[338,2838,1035],{"class":1025},[338,2840,2841,2843,2845,2847,2849,2851,2853],{"class":944,"line":1038},[338,2842,1047],{"class":1014},[338,2844,1051],{"class":1050},[338,2846,1054],{"class":1025},[338,2848,1057],{"class":1025},[338,2850,1060],{"class":1021},[338,2852,1064],{"class":1063},[338,2854,1067],{"class":1025},[338,2856,2857,2859,2861,2863,2865,2867,2869,2871,2873,2875],{"class":944,"line":1044},[338,2858,1047],{"class":1014},[338,2860,1075],{"class":1050},[338,2862,1054],{"class":1025},[338,2864,1051],{"class":1050},[338,2866,1082],{"class":1025},[338,2868,1085],{"class":1021},[338,2870,1026],{"class":1063},[338,2872,1029],{"class":1050},[338,2874,1032],{"class":1063},[338,2876,1067],{"class":1025},[338,2878,2879],{"class":944,"line":1070},[338,2880,1100],{"emptyLinePlaceholder":1099},[338,2882,2883,2885,2887,2889,2891,2893,2895,2897],{"class":944,"line":1096},[338,2884,1286],{"class":962},[338,2886,1119],{"class":962},[338,2888,1122],{"class":1050},[338,2890,1082],{"class":1025},[338,2892,1127],{"class":1050},[338,2894,1082],{"class":1025},[338,2896,2745],{"class":1021},[338,2898,1414],{"class":1063},[338,2900,2901,2903,2905,2907,2909,2911,2913],{"class":944,"line":1103},[338,2902,2412],{"class":1025},[338,2904,2415],{"class":1063},[338,2906,1427],{"class":1025},[338,2908,2173],{"class":1025},[338,2910,668],{"class":1139},[338,2912,1328],{"class":1025},[338,2914,2426],{"class":1025},[338,2916,2917,2919],{"class":944,"line":1109},[338,2918,2538],{"class":1050},[338,2920,1437],{"class":1025},[338,2922,2923],{"class":944,"line":1153},[338,2924,2438],{"class":1050},[338,2926,2927,2929],{"class":944,"line":1158},[338,2928,1498],{"class":1063},[338,2930,1067],{"class":1025},[338,2932,2933],{"class":944,"line":1164},[338,2934,1296],{"class":1025},[47,2936,2937],{"start":96},[50,2938,2939],{},[53,2940,2941],{},"公钥验证签名是否有效",[934,2943,2945],{"className":936,"code":2944,"language":938,"meta":939,"style":939},"\n\u002F**\n * 使用公钥验证签名是否有效\n * @returns {Promise\u003Cboolean>} 验证成功返回 true，被篡改则返回 false\n *\u002F\nasync function verifyData(text, signature, publicKey) {\n const encoder = new TextEncoder();\n const data = encoder.encode(text);\n\n return await crypto.subtle.verify(\n { name: \"RSASSA-PKCS1-v1_5\" },\n publicKey,\n signature, \u002F\u002F 之前生成的签名 ArrayBuffer\n data \u002F\u002F 原始数据\n );\n}\n",[473,2946,2947,2951,2955,2960,2978,2982,3008,3024,3046,3050,3068,3084,3090,3100,3108,3114],{"__ignoreMap":939},[338,2948,2949],{"class":944,"line":945},[338,2950,1100],{"emptyLinePlaceholder":1099},[338,2952,2953],{"class":944,"line":74},[338,2954,949],{"class":948},[338,2956,2957],{"class":944,"line":96},[338,2958,2959],{"class":948}," * 使用公钥验证签名是否有效\n",[338,2961,2962,2964,2966,2968,2970,2973,2975],{"class":944,"line":119},[338,2963,959],{"class":948},[338,2965,963],{"class":962},[338,2967,993],{"class":966},[338,2969,970],{"class":962},[338,2971,2972],{"class":973},"Promise\u003Cboolean>",[338,2974,977],{"class":962},[338,2976,2977],{"class":948}," 验证成功返回 true，被篡改则返回 false\n",[338,2979,2980],{"class":944,"line":140},[338,2981,1008],{"class":948},[338,2983,2984,2986,2988,2991,2993,2995,2997,3000,3002,3004,3006],{"class":944,"line":1011},[338,2985,1015],{"class":1014},[338,2987,1018],{"class":1014},[338,2989,2990],{"class":1021}," verifyData",[338,2992,1026],{"class":1025},[338,2994,1029],{"class":980},[338,2996,1144],{"class":1025},[338,2998,2999],{"class":980}," signature",[338,3001,1144],{"class":1025},[338,3003,2338],{"class":980},[338,3005,1032],{"class":1025},[338,3007,1035],{"class":1025},[338,3009,3010,3012,3014,3016,3018,3020,3022],{"class":944,"line":1038},[338,3011,1047],{"class":1014},[338,3013,1051],{"class":1050},[338,3015,1054],{"class":1025},[338,3017,1057],{"class":1025},[338,3019,1060],{"class":1021},[338,3021,1064],{"class":1063},[338,3023,1067],{"class":1025},[338,3025,3026,3028,3030,3032,3034,3036,3038,3040,3042,3044],{"class":944,"line":1044},[338,3027,1047],{"class":1014},[338,3029,1075],{"class":1050},[338,3031,1054],{"class":1025},[338,3033,1051],{"class":1050},[338,3035,1082],{"class":1025},[338,3037,1085],{"class":1021},[338,3039,1026],{"class":1063},[338,3041,1029],{"class":1050},[338,3043,1032],{"class":1063},[338,3045,1067],{"class":1025},[338,3047,3048],{"class":944,"line":1070},[338,3049,1100],{"emptyLinePlaceholder":1099},[338,3051,3052,3054,3056,3058,3060,3062,3064,3066],{"class":944,"line":1096},[338,3053,1286],{"class":962},[338,3055,1119],{"class":962},[338,3057,1122],{"class":1050},[338,3059,1082],{"class":1025},[338,3061,1127],{"class":1050},[338,3063,1082],{"class":1025},[338,3065,2754],{"class":1021},[338,3067,1414],{"class":1063},[338,3069,3070,3072,3074,3076,3078,3080,3082],{"class":944,"line":1103},[338,3071,2412],{"class":1025},[338,3073,2415],{"class":1063},[338,3075,1427],{"class":1025},[338,3077,2173],{"class":1025},[338,3079,668],{"class":1139},[338,3081,1328],{"class":1025},[338,3083,2426],{"class":1025},[338,3085,3086,3088],{"class":944,"line":1109},[338,3087,2431],{"class":1050},[338,3089,1437],{"class":1025},[338,3091,3092,3095,3097],{"class":944,"line":1153},[338,3093,3094],{"class":1050}," signature",[338,3096,1144],{"class":1025},[338,3098,3099],{"class":948}," \u002F\u002F 之前生成的签名 ArrayBuffer\n",[338,3101,3102,3105],{"class":944,"line":1158},[338,3103,3104],{"class":1050}," data",[338,3106,3107],{"class":948}," \u002F\u002F 原始数据\n",[338,3109,3110,3112],{"class":944,"line":1164},[338,3111,1498],{"class":1063},[338,3113,1067],{"class":1025},[338,3115,3116],{"class":944,"line":1200},[338,3117,1296],{"class":1025},[189,3119,3121],{"id":3120},"_74-密钥的导入与导出-import-export","7.4 密钥的导入与导出 (Import \u002F Export)",[18,3123,3124],{},"在实际业务中，密钥不能只存在于浏览器内存中，我们需要将其导出为字符串传给后端，或者将后端的字符串密钥导入为浏览器可识别的 CryptoKey 对象。",[18,3126,3127],{},"Web Crypto 支持多种格式，最常用的是 JWK (JSON Web Key) 格式（易读、跨平台）和 raw\u002Fspki\u002Fpkcs8（二进制字节流）。",[47,3129,3130],{},[50,3131,3132],{},[53,3133,3134],{},"导出密钥为 JSON (JWK 格式)",[934,3136,3138],{"className":936,"code":3137,"language":938,"meta":939,"style":939},"\u002F**\n * 将 CryptoKey 密钥对象导出为标准的 JSON 对象 (JWK)\n * @param {CryptoKey} key \n * @returns {Promise\u003CObject>} 可直接用于传输或 JSON.stringify 的对象\n *\u002F\nasync function exportKeyToJWK(key) {\n return await crypto.subtle.exportKey(\"jwk\", key);\n}\n",[473,3139,3140,3144,3149,3168,3186,3190,3208,3242],{"__ignoreMap":939},[338,3141,3142],{"class":944,"line":945},[338,3143,949],{"class":948},[338,3145,3146],{"class":944,"line":74},[338,3147,3148],{"class":948}," * 将 CryptoKey 密钥对象导出为标准的 JSON 对象 (JWK)\n",[338,3150,3151,3153,3155,3157,3159,3161,3163,3165],{"class":944,"line":96},[338,3152,959],{"class":948},[338,3154,963],{"class":962},[338,3156,967],{"class":966},[338,3158,970],{"class":962},[338,3160,481],{"class":973},[338,3162,977],{"class":962},[338,3164,1562],{"class":980},[338,3166,3167],{"class":948}," \n",[338,3169,3170,3172,3174,3176,3178,3181,3183],{"class":944,"line":119},[338,3171,959],{"class":948},[338,3173,963],{"class":962},[338,3175,993],{"class":966},[338,3177,970],{"class":962},[338,3179,3180],{"class":973},"Promise\u003CObject>",[338,3182,977],{"class":962},[338,3184,3185],{"class":948}," 可直接用于传输或 JSON.stringify 的对象\n",[338,3187,3188],{"class":944,"line":140},[338,3189,1008],{"class":948},[338,3191,3192,3194,3196,3199,3201,3204,3206],{"class":944,"line":1011},[338,3193,1015],{"class":1014},[338,3195,1018],{"class":1014},[338,3197,3198],{"class":1021}," exportKeyToJWK",[338,3200,1026],{"class":1025},[338,3202,3203],{"class":980},"key",[338,3205,1032],{"class":1025},[338,3207,1035],{"class":1025},[338,3209,3210,3212,3214,3216,3218,3220,3222,3225,3227,3229,3232,3234,3236,3238,3240],{"class":944,"line":1038},[338,3211,1286],{"class":962},[338,3213,1119],{"class":962},[338,3215,1122],{"class":1050},[338,3217,1082],{"class":1025},[338,3219,1127],{"class":1050},[338,3221,1082],{"class":1025},[338,3223,3224],{"class":1021},"exportKey",[338,3226,1026],{"class":1063},[338,3228,1328],{"class":1025},[338,3230,3231],{"class":1139},"jwk",[338,3233,1328],{"class":1025},[338,3235,1144],{"class":1025},[338,3237,1562],{"class":1050},[338,3239,1032],{"class":1063},[338,3241,1067],{"class":1025},[338,3243,3244],{"class":944,"line":1044},[338,3245,1296],{"class":1025},[47,3247,3248],{"start":74},[50,3249,3250],{},[53,3251,3252],{},"将 JSON 导入回密钥对象",[934,3254,3256],{"className":936,"code":3255,"language":938,"meta":939,"style":939},"\u002F**\n * 将 JWK 格式的 JSON 对象导入还原为可用的 AES-GCM 密钥\n * @param {Object} jwkObject \n * @returns {Promise\u003CCryptoKey>}\n *\u002F\nasync function importKeyFromJWK(jwkObject) {\n return await crypto.subtle.importKey(\n \"jwk\",\n jwkObject,\n { name: \"AES-GCM\" }, \u002F\u002F 必须指定对应的算法\n true, \u002F\u002F 是否允许再次导出\n [\"encrypt\", \"decrypt\"] \u002F\u002F 该密钥允许的用途\n );\n}\n",[473,3257,3258,3262,3267,3287,3301,3305,3323,3342,3353,3360,3380,3389,3412,3418],{"__ignoreMap":939},[338,3259,3260],{"class":944,"line":945},[338,3261,949],{"class":948},[338,3263,3264],{"class":944,"line":74},[338,3265,3266],{"class":948}," * 将 JWK 格式的 JSON 对象导入还原为可用的 AES-GCM 密钥\n",[338,3268,3269,3271,3273,3275,3277,3280,3282,3285],{"class":944,"line":96},[338,3270,959],{"class":948},[338,3272,963],{"class":962},[338,3274,967],{"class":966},[338,3276,970],{"class":962},[338,3278,3279],{"class":973},"Object",[338,3281,977],{"class":962},[338,3283,3284],{"class":980}," jwkObject",[338,3286,3167],{"class":948},[338,3288,3289,3291,3293,3295,3297,3299],{"class":944,"line":119},[338,3290,959],{"class":948},[338,3292,963],{"class":962},[338,3294,993],{"class":966},[338,3296,970],{"class":962},[338,3298,1372],{"class":973},[338,3300,1296],{"class":962},[338,3302,3303],{"class":944,"line":140},[338,3304,1008],{"class":948},[338,3306,3307,3309,3311,3314,3316,3319,3321],{"class":944,"line":1011},[338,3308,1015],{"class":1014},[338,3310,1018],{"class":1014},[338,3312,3313],{"class":1021}," importKeyFromJWK",[338,3315,1026],{"class":1025},[338,3317,3318],{"class":980},"jwkObject",[338,3320,1032],{"class":1025},[338,3322,1035],{"class":1025},[338,3324,3325,3327,3329,3331,3333,3335,3337,3340],{"class":944,"line":1038},[338,3326,1286],{"class":962},[338,3328,1119],{"class":962},[338,3330,1122],{"class":1050},[338,3332,1082],{"class":1025},[338,3334,1127],{"class":1050},[338,3336,1082],{"class":1025},[338,3338,3339],{"class":1021},"importKey",[338,3341,1414],{"class":1063},[338,3343,3344,3347,3349,3351],{"class":944,"line":1044},[338,3345,3346],{"class":1025}," \"",[338,3348,3231],{"class":1139},[338,3350,1328],{"class":1025},[338,3352,1437],{"class":1025},[338,3354,3355,3358],{"class":944,"line":1070},[338,3356,3357],{"class":1050}," jwkObject",[338,3359,1437],{"class":1025},[338,3361,3362,3364,3366,3368,3370,3372,3374,3377],{"class":944,"line":1096},[338,3363,2412],{"class":1025},[338,3365,2415],{"class":1063},[338,3367,1427],{"class":1025},[338,3369,2173],{"class":1025},[338,3371,1432],{"class":1139},[338,3373,1328],{"class":1025},[338,3375,3376],{"class":1025}," },",[338,3378,3379],{"class":948}," \u002F\u002F 必须指定对应的算法\n",[338,3381,3382,3384,3386],{"class":944,"line":1103},[338,3383,2257],{"class":1460},[338,3385,1144],{"class":1025},[338,3387,3388],{"class":948}," \u002F\u002F 是否允许再次导出\n",[338,3390,3391,3393,3395,3397,3399,3401,3403,3405,3407,3409],{"class":944,"line":1109},[338,3392,1471],{"class":1063},[338,3394,1328],{"class":1025},[338,3396,1476],{"class":1139},[338,3398,1328],{"class":1025},[338,3400,1144],{"class":1025},[338,3402,2173],{"class":1025},[338,3404,1485],{"class":1139},[338,3406,1328],{"class":1025},[338,3408,1490],{"class":1063},[338,3410,3411],{"class":948},"\u002F\u002F 该密钥允许的用途\n",[338,3413,3414,3416],{"class":944,"line":1153},[338,3415,1498],{"class":1063},[338,3417,1067],{"class":1025},[338,3419,3420],{"class":944,"line":1158},[338,3421,1296],{"class":1025},[13,3423,3425],{"id":3424},"_8-避坑指南","8 避坑指南",[47,3427,3428],{},[50,3429,3430],{},[53,3431,3432],{},"陷阱一：IV 重复使用",[58,3434,3435,3441],{},[50,3436,3437,3440],{},[53,3438,3439],{},"问题："," 在 AES-GCM 等对称加密中，重复使用相同的初始化向量（IV）会导致密钥流重复，严重破坏加密安全性。",[50,3442,3443,3446],{},[53,3444,3445],{},"正确做法：",[58,3447,3448,3451,3454,3457],{},[50,3449,3450],{},"每次加密都使用 crypto.getRandomValues() 生成新的随机 IV",[50,3452,3453],{},"AES-GCM 模式推荐使用 12 字节（非 16 字节！）的 IV",[50,3455,3456],{},"同一密钥下 IV 重复概率应低于 2⁻³²",[50,3458,3459],{},"IV 不需要保密，但必须唯一——记得将 IV 与密文一起存储",[47,3461,3462],{"start":74},[50,3463,3464],{},[53,3465,3466],{},"陷阱二：密钥管理不当",[58,3468,3469,3485],{},[50,3470,3471,3474],{},[53,3472,3473],{},"常见错误：",[58,3475,3476,3479,3482],{},[50,3477,3478],{},"将密钥存储在 localStorage 或 Cookie 中",[50,3480,3481],{},"使用不安全的密钥传输方式",[50,3483,3484],{},"未设置适当的密钥使用限制",[50,3486,3487,3490],{},[53,3488,3489],{},"安全建议：",[58,3491,3492,3495,3498],{},[50,3493,3494],{},"敏感会话密钥存储在 Web Worker 内存中",[50,3496,3497],{},"需要持久化的密钥使用 IndexedDB",[50,3499,3500],{},"使用 exportKey 和 importKey 安全地传输公钥",[47,3502,3503],{"start":96},[50,3504,3505],{},[53,3506,3507],{},"陷阱三：算法选择失误",[58,3509,3510,3513,3516],{},[50,3511,3512],{},"不要使用 SHA-1 或 MD5 进行哈希",[50,3514,3515],{},"不要使用 ECB 模式的 AES 加密",[50,3517,3518],{},"RSA 密钥长度至少 2048 位",[13,3520,3522],{"id":3521},"_9-最佳实践","9 最佳实践",[47,3524,3525],{},[50,3526,3527],{},[53,3528,3529],{},"使用方式选型指南推荐",[18,3531,3532],{},"自 Node.js 19+ 起，Web Crypto API 已成为内置标准，可通过以下方式访问：",[934,3534,3536],{"className":936,"code":3535,"language":938,"meta":939,"style":939},"\u002F\u002F 方式一：使用 globalThis\nconst { subtle } = globalThis.crypto;\n\n\u002F\u002F 方式二：使用 Node.js 模块\nconst { webcrypto } = require('node:crypto');\nconst { subtle } = webcrypto;\n",[473,3537,3538,3543,3566,3570,3575,3604],{"__ignoreMap":939},[338,3539,3540],{"class":944,"line":945},[338,3541,3542],{"class":948},"\u002F\u002F 方式一：使用 globalThis\n",[338,3544,3545,3547,3549,3552,3554,3556,3559,3561,3564],{"class":944,"line":74},[338,3546,1313],{"class":1014},[338,3548,970],{"class":1025},[338,3550,3551],{"class":1050}," subtle ",[338,3553,977],{"class":1025},[338,3555,1054],{"class":1025},[338,3557,3558],{"class":1050}," globalThis",[338,3560,1082],{"class":1025},[338,3562,3563],{"class":1050},"crypto",[338,3565,1067],{"class":1025},[338,3567,3568],{"class":944,"line":96},[338,3569,1100],{"emptyLinePlaceholder":1099},[338,3571,3572],{"class":944,"line":119},[338,3573,3574],{"class":948},"\u002F\u002F 方式二：使用 Node.js 模块\n",[338,3576,3577,3579,3581,3584,3586,3588,3591,3593,3595,3598,3600,3602],{"class":944,"line":140},[338,3578,1313],{"class":1014},[338,3580,970],{"class":1025},[338,3582,3583],{"class":1050}," webcrypto ",[338,3585,977],{"class":1025},[338,3587,1054],{"class":1025},[338,3589,3590],{"class":1021}," require",[338,3592,1026],{"class":1050},[338,3594,1136],{"class":1025},[338,3596,3597],{"class":1139},"node:crypto",[338,3599,1136],{"class":1025},[338,3601,1032],{"class":1050},[338,3603,1067],{"class":1025},[338,3605,3606,3608,3610,3612,3614,3616,3619],{"class":944,"line":1011},[338,3607,1313],{"class":1014},[338,3609,970],{"class":1025},[338,3611,3551],{"class":1050},[338,3613,977],{"class":1025},[338,3615,1054],{"class":1025},[338,3617,3618],{"class":1050}," webcrypto",[338,3620,1067],{"class":1025},[18,3622,3623],{},"这两种方式虽然最终都能让你获取到 subtle 接口，但它们在设计哲学、模块机制、环境通用性以及底层依赖上有着本质的区别。",[419,3625,3626,3639],{},[422,3627,3628],{},[425,3629,3630,3633,3636],{},[428,3631,3632],{},"对比维度",[428,3634,3635],{},"方式一：globalThis.crypto",[428,3637,3638],{},"方式二：require('node:crypto')",[441,3640,3641,3652,3663,3674,3685],{},[425,3642,3643,3646,3649],{},[446,3644,3645],{},"本质定位",[446,3647,3648],{},"Web标准API（与浏览器对齐）",[446,3650,3651],{},"Node.js原生模块API（特定服务端）",[425,3653,3654,3657,3660],{},[446,3655,3656],{},"引入方式",[446,3658,3659],{},"零依赖，直接全局访问",[446,3661,3662],{},"需要显式通过require引入模块",[425,3664,3665,3668,3671],{},[446,3666,3667],{},"跨端通用性",[446,3669,3670],{},"极高（同构JavaScript）",[446,3672,3673],{},"极低（只能在Node.js运行）",[425,3675,3676,3679,3682],{},[446,3677,3678],{},"底层实现",[446,3680,3681],{},"浏览器内核（前端）\u002F Node V8底层封装（后端）",[446,3683,3684],{},"强依赖Node.js内置的OpenSSL库",[425,3686,3687,3690,3693],{},[446,3688,3689],{},"执行上下文",[446,3691,3692],{},"必须在安全上下文（前端限制）",[446,3694,3695],{},"服务端环境，无任何安全上下文限制",[18,3697,3698,3701],{},[53,3699,3700],{},"推荐使用\"globalThis.crypto\"的场景："," 正在编写纯前端项目、前后端全栈通用工具库（Isomorphic Lib），或者代码需要部署在 Cloudflare Workers、Vercel Edge 等现代边缘计算架构中。",[18,3703,3704,3707],{},[53,3705,3706],{},"推荐使用\"require('node:crypto')\"的场景："," 正在编写纯 Node.js 服务端项目（如大型后端服务、CLI 工具），且除了 Web Crypto 之外，还需要用到 Node.js 特有的高级安全特性（如流式加密大文件、硬件安全模块 HSM 交互等）。",[47,3709,3710],{"start":74},[50,3711,3712],{},[53,3713,3714],{},"使用细节建议",[18,3716,3717],{},"Web Crypto API 是浏览器原生加密的黄金标准。它以零依赖、高性能、高安全性的优势，正在逐步取代各种第三方加密库。然而，正如其名 \"subtle\" 所警示的，加密是一个极其专业的领域，细微的错误就可能导致整个系统安全性完全失效。在使用 Web Crypto API 时：",[58,3719,3720,3723,3726],{},[50,3721,3722],{},"始终在 HTTPS 环境下使用",[50,3724,3725],{},"选择正确的算法和参数（如 AES-GCM + 12 字节 IV）",[50,3727,3728],{},"妥善管理密钥的生命周期",[13,3730,3732],{"id":3731},"_10-加解密模板工具","10 加解密模板工具",[18,3734,3735],{},"以下为您编写的这一套 AES-GCM 高级对称加密与解密工具函数。它做到了100% 零依赖、纯原生，通过 globalThis.crypto 实现完美同构。你不需要进行任何环境判断，同一段代码可以无缝运行在浏览器（安全上下文）、Node.js（19+）、Deno、Bun 以及边缘计算（如 Cloudflare Workers）中。",[18,3737,3738],{},"为了解决数据传输与存储的问题，工具函数内部自动处理了 ArrayBuffer 与 Base64 字符串之间的相互转换。可以直接复制使用，代码如下：",[934,3740,3745],{"className":3741,"code":3742,"filename":3743,"language":3744,"meta":939,"style":939},"language-ts shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","\u002F**\n * 完美的同构 Web Crypto 安全加解密工具库 (TypeScript 箭头函数版本)\n * 适用环境：Browser (HTTPS), Node.js 19+, Deno, Bun, Cloudflare Workers\n *\u002F\n\n\u002F\u002F 1. 获取全局同构的 subtle 对象\nconst cryptoProvider = globalThis.crypto\nif (!cryptoProvider) {\n throw new Error('当前运行环境不支持 Web Crypto API。请确保在 HTTPS、localhost 或现代 Node.js 19+ 环境下运行。')\n}\nconst subtle: SubtleCrypto = cryptoProvider.subtle\n\n\u002F**\n * 辅助函数：将 ArrayBuffer 转换为可传输的 Base64 字符串\n * 使用现代批处理写法apply，100% 消除严格模式下的 undefined 类型报错\n *\u002F\nconst bufferToBase64 = (buffer: ArrayBuffer): string => {\n const bytes = new Uint8Array(buffer)\n const binary = String.fromCharCode.apply(null, bytes as unknown as number[])\n return btoa(binary)\n}\n\n\u002F**\n * 辅助函数：将 Base64 字符串还原为 ArrayBuffer\n * 使用 Array.from 映射，确保严格类型安全\n *\u002F\nconst base64ToBuffer = (base64: string): ArrayBuffer => {\n const binaryString = atob(base64)\n const bytes = Uint8Array.from(binaryString, (char) => char.charCodeAt(0))\n return bytes.buffer\n}\n\n\u002F**\n * [同构] 生成 AES-GCM 256位加密密钥\n *\u002F\nexport const generateAESKey = async (): Promise\u003CCryptoKey> => {\n return await subtle.generateKey(\n { name: 'AES-GCM', length: 256 },\n true, \u002F\u002F 允许导出\n ['encrypt', 'decrypt']\n )\n}\n\n\u002F**\n * [同构] 导出 CryptoKey 密钥为可传输的 Base64 字符串\n * @param cryptoKey - 浏览器或服务端生成的 CryptoKey 实体\n *\u002F\nexport const exportKeyToBase64 = async (cryptoKey: CryptoKey): Promise\u003Cstring> => {\n const exported = await subtle.exportKey('raw', cryptoKey)\n return bufferToBase64(exported)\n}\n\n\u002F**\n * [同构] 从 Base64 字符串导入还原为 CryptoKey 密钥对象\n * @param base64Key - Base64 格式的密钥字符串\n *\u002F\nexport const importKeyFromBase64 = async (base64Key: string): Promise\u003CCryptoKey> => {\n const rawKeyBuffer = base64ToBuffer(base64Key)\n return await subtle.importKey('raw', rawKeyBuffer, { name: 'AES-GCM' }, true, ['encrypt', 'decrypt'])\n}\n\n\u002F**\n * [同构] 使用 AES-GCM 算法加密字符串文本\n * @param text - 待加密的明文文本\n * @param key - CryptoKey 密钥对象\n * @returns 返回打包了 \"IV\" 和 \"密文\" 的统一 Base64 字符串\n *\u002F\nexport const encryptText = async (text: string, key: CryptoKey): Promise\u003Cstring> => {\n const encoder = new TextEncoder()\n const encodedText: Uint8Array\u003CArrayBuffer> = encoder.encode(text)\n \u002F\u002F 生成 12 字节的密码学安全伪随机数作为 IV (AES-GCM 标准推荐)\n const iv: Uint8Array\u003CArrayBuffer> = cryptoProvider.getRandomValues(new Uint8Array(12))\n \u002F\u002F 执行加密，返回密文 ArrayBuffer\n const cipherBuffer: ArrayBuffer = await subtle.encrypt({ name: 'AES-GCM', iv: iv }, key, encodedText)\n \u002F\u002F 将 IV（12字节）和密文拼接，方便单字符串传输\n const combined = new Uint8Array(iv.length + cipherBuffer.byteLength)\n combined.set(iv, 0)\n combined.set(new Uint8Array(cipherBuffer), iv.length)\n return bufferToBase64(combined.buffer)\n}\n\n\u002F**\n * [同构] 使用 AES-GCM 算法解密文本\n * @param combinedBase64 - 由 encryptText 生成的统一加密 Base64 字符串（内部含 IV）\n * @param key - 对应的 CryptoKey 密钥对象\n *\u002F\nexport const decryptText = async (combinedBase64: string, key: CryptoKey): Promise\u003Cstring> => {\n const combinedBuffer = base64ToBuffer(combinedBase64)\n const combinedBytes = new Uint8Array(combinedBuffer)\n \u002F\u002F 从头部切出前 12 字节作为 IV\n const iv: Uint8Array\u003CArrayBuffer> = combinedBytes.slice(0, 12)\n \u002F\u002F 剩下的部分作为真正的密文\n const cipherText: Uint8Array\u003CArrayBuffer> = combinedBytes.slice(12)\n \u002F\u002F 执行解密\n const decryptedBuffer: ArrayBuffer = await subtle.decrypt({ name: 'AES-GCM', iv: iv }, key, cipherText.buffer)\n const decoder = new TextDecoder()\n return decoder.decode(decryptedBuffer)\n}\n","crypto.ts","ts",[473,3746,3747,3751,3756,3761,3765,3769,3774,3790,3807,3829,3833,3856,3860,3864,3869,3874,3878,3907,3926,3969,3983,3987,3991,3995,4000,4005,4009,4035,4054,4100,4112,4117,4122,4127,4133,4138,4173,4188,4214,4224,4246,4252,4257,4262,4267,4273,4288,4293,4331,4364,4379,4384,4389,4394,4400,4415,4420,4457,4476,4542,4547,4552,4557,4563,4577,4591,4603,4608,4652,4668,4699,4705,4742,4748,4803,4809,4845,4866,4898,4916,4921,4926,4931,4937,4952,4966,4971,5016,5034,5055,5061,5098,5104,5135,5140,5197,5212,5229],{"__ignoreMap":939},[338,3748,3749],{"class":944,"line":945},[338,3750,949],{"class":948},[338,3752,3753],{"class":944,"line":74},[338,3754,3755],{"class":948}," * 完美的同构 Web Crypto 安全加解密工具库 (TypeScript 箭头函数版本)\n",[338,3757,3758],{"class":944,"line":96},[338,3759,3760],{"class":948}," * 适用环境：Browser (HTTPS), Node.js 19+, Deno, Bun, Cloudflare Workers\n",[338,3762,3763],{"class":944,"line":119},[338,3764,1008],{"class":948},[338,3766,3767],{"class":944,"line":140},[338,3768,1100],{"emptyLinePlaceholder":1099},[338,3770,3771],{"class":944,"line":1011},[338,3772,3773],{"class":948},"\u002F\u002F 1. 获取全局同构的 subtle 对象\n",[338,3775,3776,3778,3781,3783,3785,3787],{"class":944,"line":1038},[338,3777,1313],{"class":1014},[338,3779,3780],{"class":1050}," cryptoProvider ",[338,3782,1319],{"class":1025},[338,3784,3558],{"class":1050},[338,3786,1082],{"class":1025},[338,3788,3789],{"class":1050},"crypto\n",[338,3791,3792,3795,3798,3801,3804],{"class":944,"line":1044},[338,3793,3794],{"class":962},"if",[338,3796,3797],{"class":1050}," (",[338,3799,3800],{"class":1025},"!",[338,3802,3803],{"class":1050},"cryptoProvider) ",[338,3805,3806],{"class":1025},"{\n",[338,3808,3809,3812,3814,3817,3819,3821,3824,3826],{"class":944,"line":1070},[338,3810,3811],{"class":962}," throw",[338,3813,1057],{"class":1025},[338,3815,3816],{"class":1021}," Error",[338,3818,1026],{"class":1063},[338,3820,1136],{"class":1025},[338,3822,3823],{"class":1139},"当前运行环境不支持 Web Crypto API。请确保在 HTTPS、localhost 或现代 Node.js 19+ 环境下运行。",[338,3825,1136],{"class":1025},[338,3827,3828],{"class":1063},")\n",[338,3830,3831],{"class":944,"line":1096},[338,3832,1296],{"class":1025},[338,3834,3835,3837,3840,3842,3846,3848,3851,3853],{"class":944,"line":1103},[338,3836,1313],{"class":1014},[338,3838,3839],{"class":1050}," subtle",[338,3841,1427],{"class":1025},[338,3843,3845],{"class":3844},"sBMFI"," SubtleCrypto",[338,3847,1054],{"class":1025},[338,3849,3850],{"class":1050}," cryptoProvider",[338,3852,1082],{"class":1025},[338,3854,3855],{"class":1050},"subtle\n",[338,3857,3858],{"class":944,"line":1109},[338,3859,1100],{"emptyLinePlaceholder":1099},[338,3861,3862],{"class":944,"line":1153},[338,3863,949],{"class":948},[338,3865,3866],{"class":944,"line":1158},[338,3867,3868],{"class":948}," * 辅助函数：将 ArrayBuffer 转换为可传输的 Base64 字符串\n",[338,3870,3871],{"class":944,"line":1164},[338,3872,3873],{"class":948}," * 使用现代批处理写法apply，100% 消除严格模式下的 undefined 类型报错\n",[338,3875,3876],{"class":944,"line":1200},[338,3877,1008],{"class":948},[338,3879,3880,3882,3885,3887,3889,3892,3894,3897,3900,3903,3905],{"class":944,"line":1277},[338,3881,1313],{"class":1014},[338,3883,3884],{"class":1050}," bufferToBase64 ",[338,3886,1319],{"class":1025},[338,3888,3797],{"class":1025},[338,3890,3891],{"class":980},"buffer",[338,3893,1427],{"class":1025},[338,3895,3896],{"class":3844}," ArrayBuffer",[338,3898,3899],{"class":1025},"):",[338,3901,3902],{"class":3844}," string",[338,3904,1222],{"class":1014},[338,3906,1035],{"class":1025},[338,3908,3909,3911,3914,3916,3918,3920,3922,3924],{"class":944,"line":1283},[338,3910,1047],{"class":1014},[338,3912,3913],{"class":1050}," bytes",[338,3915,1054],{"class":1025},[338,3917,1057],{"class":1025},[338,3919,1187],{"class":1021},[338,3921,1026],{"class":1063},[338,3923,3891],{"class":1050},[338,3925,3828],{"class":1063},[338,3927,3928,3930,3933,3935,3938,3940,3943,3945,3948,3950,3953,3955,3958,3961,3963,3966],{"class":944,"line":1293},[338,3929,1047],{"class":1014},[338,3931,3932],{"class":1050}," binary",[338,3934,1054],{"class":1025},[338,3936,3937],{"class":1050}," String",[338,3939,1082],{"class":1025},[338,3941,3942],{"class":1050},"fromCharCode",[338,3944,1082],{"class":1025},[338,3946,3947],{"class":1021},"apply",[338,3949,1026],{"class":1063},[338,3951,3952],{"class":1025},"null,",[338,3954,3913],{"class":1050},[338,3956,3957],{"class":962}," as",[338,3959,3960],{"class":3844}," unknown",[338,3962,3957],{"class":962},[338,3964,3965],{"class":3844}," number",[338,3967,3968],{"class":1063},"[])\n",[338,3970,3971,3973,3976,3978,3981],{"class":944,"line":1299},[338,3972,1286],{"class":962},[338,3974,3975],{"class":1021}," btoa",[338,3977,1026],{"class":1063},[338,3979,3980],{"class":1050},"binary",[338,3982,3828],{"class":1063},[338,3984,3985],{"class":944,"line":1304},[338,3986,1296],{"class":1025},[338,3988,3989],{"class":944,"line":1310},[338,3990,1100],{"emptyLinePlaceholder":1099},[338,3992,3993],{"class":944,"line":1779},[338,3994,949],{"class":948},[338,3996,3997],{"class":944,"line":1786},[338,3998,3999],{"class":948}," * 辅助函数：将 Base64 字符串还原为 ArrayBuffer\n",[338,4001,4002],{"class":944,"line":1791},[338,4003,4004],{"class":948}," * 使用 Array.from 映射，确保严格类型安全\n",[338,4006,4007],{"class":944,"line":1797},[338,4008,1008],{"class":948},[338,4010,4011,4013,4016,4018,4020,4023,4025,4027,4029,4031,4033],{"class":944,"line":1813},[338,4012,1313],{"class":1014},[338,4014,4015],{"class":1050}," base64ToBuffer ",[338,4017,1319],{"class":1025},[338,4019,3797],{"class":1025},[338,4021,4022],{"class":980},"base64",[338,4024,1427],{"class":1025},[338,4026,3902],{"class":3844},[338,4028,3899],{"class":1025},[338,4030,3896],{"class":3844},[338,4032,1222],{"class":1014},[338,4034,1035],{"class":1025},[338,4036,4038,4040,4043,4045,4048,4050,4052],{"class":944,"line":4037},28,[338,4039,1047],{"class":1014},[338,4041,4042],{"class":1050}," binaryString",[338,4044,1054],{"class":1025},[338,4046,4047],{"class":1021}," atob",[338,4049,1026],{"class":1063},[338,4051,4022],{"class":1050},[338,4053,3828],{"class":1063},[338,4055,4057,4059,4061,4063,4065,4067,4069,4071,4074,4076,4078,4081,4083,4085,4088,4090,4093,4095,4097],{"class":944,"line":4056},29,[338,4058,1047],{"class":1014},[338,4060,3913],{"class":1050},[338,4062,1054],{"class":1025},[338,4064,1187],{"class":1050},[338,4066,1082],{"class":1025},[338,4068,1179],{"class":1021},[338,4070,1026],{"class":1063},[338,4072,4073],{"class":1050},"binaryString",[338,4075,1144],{"class":1025},[338,4077,3797],{"class":1025},[338,4079,4080],{"class":980},"char",[338,4082,1032],{"class":1025},[338,4084,1222],{"class":1014},[338,4086,4087],{"class":1050}," char",[338,4089,1082],{"class":1025},[338,4091,4092],{"class":1021},"charCodeAt",[338,4094,1026],{"class":1063},[338,4096,1256],{"class":1235},[338,4098,4099],{"class":1063},"))\n",[338,4101,4103,4105,4107,4109],{"class":944,"line":4102},30,[338,4104,1286],{"class":962},[338,4106,3913],{"class":1050},[338,4108,1082],{"class":1025},[338,4110,4111],{"class":1050},"buffer\n",[338,4113,4115],{"class":944,"line":4114},31,[338,4116,1296],{"class":1025},[338,4118,4120],{"class":944,"line":4119},32,[338,4121,1100],{"emptyLinePlaceholder":1099},[338,4123,4125],{"class":944,"line":4124},33,[338,4126,949],{"class":948},[338,4128,4130],{"class":944,"line":4129},34,[338,4131,4132],{"class":948}," * [同构] 生成 AES-GCM 256位加密密钥\n",[338,4134,4136],{"class":944,"line":4135},35,[338,4137,1008],{"class":948},[338,4139,4141,4144,4147,4150,4152,4155,4158,4161,4164,4166,4169,4171],{"class":944,"line":4140},36,[338,4142,4143],{"class":962},"export",[338,4145,4146],{"class":1014}," const",[338,4148,4149],{"class":1050}," generateAESKey ",[338,4151,1319],{"class":1025},[338,4153,4154],{"class":1014}," async",[338,4156,4157],{"class":1025}," ():",[338,4159,4160],{"class":3844}," Promise",[338,4162,4163],{"class":1025},"\u003C",[338,4165,481],{"class":3844},[338,4167,4168],{"class":1025},">",[338,4170,1222],{"class":1014},[338,4172,1035],{"class":1025},[338,4174,4176,4178,4180,4182,4184,4186],{"class":944,"line":4175},37,[338,4177,1286],{"class":962},[338,4179,1119],{"class":962},[338,4181,3839],{"class":1050},[338,4183,1082],{"class":1025},[338,4185,1411],{"class":1021},[338,4187,1414],{"class":1063},[338,4189,4191,4193,4195,4197,4199,4201,4203,4205,4208,4210,4212],{"class":944,"line":4190},38,[338,4192,2412],{"class":1025},[338,4194,2415],{"class":1063},[338,4196,1427],{"class":1025},[338,4198,1253],{"class":1025},[338,4200,1432],{"class":1139},[338,4202,1136],{"class":1025},[338,4204,1144],{"class":1025},[338,4206,4207],{"class":1063}," length",[338,4209,1427],{"class":1025},[338,4211,1447],{"class":1235},[338,4213,2426],{"class":1025},[338,4215,4217,4219,4221],{"class":944,"line":4216},39,[338,4218,2257],{"class":1460},[338,4220,1144],{"class":1025},[338,4222,4223],{"class":948}," \u002F\u002F 允许导出\n",[338,4225,4227,4229,4231,4233,4235,4237,4239,4241,4243],{"class":944,"line":4226},40,[338,4228,1471],{"class":1063},[338,4230,1136],{"class":1025},[338,4232,1476],{"class":1139},[338,4234,1136],{"class":1025},[338,4236,1144],{"class":1025},[338,4238,1253],{"class":1025},[338,4240,1485],{"class":1139},[338,4242,1136],{"class":1025},[338,4244,4245],{"class":1063},"]\n",[338,4247,4249],{"class":944,"line":4248},41,[338,4250,4251],{"class":1063}," )\n",[338,4253,4255],{"class":944,"line":4254},42,[338,4256,1296],{"class":1025},[338,4258,4260],{"class":944,"line":4259},43,[338,4261,1100],{"emptyLinePlaceholder":1099},[338,4263,4265],{"class":944,"line":4264},44,[338,4266,949],{"class":948},[338,4268,4270],{"class":944,"line":4269},45,[338,4271,4272],{"class":948}," * [同构] 导出 CryptoKey 密钥为可传输的 Base64 字符串\n",[338,4274,4276,4278,4280,4282,4285],{"class":944,"line":4275},46,[338,4277,959],{"class":948},[338,4279,963],{"class":962},[338,4281,967],{"class":966},[338,4283,4284],{"class":980}," cryptoKey",[338,4286,4287],{"class":948}," - 浏览器或服务端生成的 CryptoKey 实体\n",[338,4289,4291],{"class":944,"line":4290},47,[338,4292,1008],{"class":948},[338,4294,4296,4298,4300,4303,4305,4307,4309,4312,4314,4317,4319,4321,4323,4325,4327,4329],{"class":944,"line":4295},48,[338,4297,4143],{"class":962},[338,4299,4146],{"class":1014},[338,4301,4302],{"class":1050}," exportKeyToBase64 ",[338,4304,1319],{"class":1025},[338,4306,4154],{"class":1014},[338,4308,3797],{"class":1025},[338,4310,4311],{"class":980},"cryptoKey",[338,4313,1427],{"class":1025},[338,4315,4316],{"class":3844}," CryptoKey",[338,4318,3899],{"class":1025},[338,4320,4160],{"class":3844},[338,4322,4163],{"class":1025},[338,4324,974],{"class":3844},[338,4326,4168],{"class":1025},[338,4328,1222],{"class":1014},[338,4330,1035],{"class":1025},[338,4332,4334,4336,4339,4341,4343,4345,4347,4349,4351,4353,4356,4358,4360,4362],{"class":944,"line":4333},49,[338,4335,1047],{"class":1014},[338,4337,4338],{"class":1050}," exported",[338,4340,1054],{"class":1025},[338,4342,1119],{"class":962},[338,4344,3839],{"class":1050},[338,4346,1082],{"class":1025},[338,4348,3224],{"class":1021},[338,4350,1026],{"class":1063},[338,4352,1136],{"class":1025},[338,4354,4355],{"class":1139},"raw",[338,4357,1136],{"class":1025},[338,4359,1144],{"class":1025},[338,4361,4284],{"class":1050},[338,4363,3828],{"class":1063},[338,4365,4367,4369,4372,4374,4377],{"class":944,"line":4366},50,[338,4368,1286],{"class":962},[338,4370,4371],{"class":1021}," bufferToBase64",[338,4373,1026],{"class":1063},[338,4375,4376],{"class":1050},"exported",[338,4378,3828],{"class":1063},[338,4380,4382],{"class":944,"line":4381},51,[338,4383,1296],{"class":1025},[338,4385,4387],{"class":944,"line":4386},52,[338,4388,1100],{"emptyLinePlaceholder":1099},[338,4390,4392],{"class":944,"line":4391},53,[338,4393,949],{"class":948},[338,4395,4397],{"class":944,"line":4396},54,[338,4398,4399],{"class":948}," * [同构] 从 Base64 字符串导入还原为 CryptoKey 密钥对象\n",[338,4401,4403,4405,4407,4409,4412],{"class":944,"line":4402},55,[338,4404,959],{"class":948},[338,4406,963],{"class":962},[338,4408,967],{"class":966},[338,4410,4411],{"class":980}," base64Key",[338,4413,4414],{"class":948}," - Base64 格式的密钥字符串\n",[338,4416,4418],{"class":944,"line":4417},56,[338,4419,1008],{"class":948},[338,4421,4423,4425,4427,4430,4432,4434,4436,4439,4441,4443,4445,4447,4449,4451,4453,4455],{"class":944,"line":4422},57,[338,4424,4143],{"class":962},[338,4426,4146],{"class":1014},[338,4428,4429],{"class":1050}," importKeyFromBase64 ",[338,4431,1319],{"class":1025},[338,4433,4154],{"class":1014},[338,4435,3797],{"class":1025},[338,4437,4438],{"class":980},"base64Key",[338,4440,1427],{"class":1025},[338,4442,3902],{"class":3844},[338,4444,3899],{"class":1025},[338,4446,4160],{"class":3844},[338,4448,4163],{"class":1025},[338,4450,481],{"class":3844},[338,4452,4168],{"class":1025},[338,4454,1222],{"class":1014},[338,4456,1035],{"class":1025},[338,4458,4460,4462,4465,4467,4470,4472,4474],{"class":944,"line":4459},58,[338,4461,1047],{"class":1014},[338,4463,4464],{"class":1050}," rawKeyBuffer",[338,4466,1054],{"class":1025},[338,4468,4469],{"class":1021}," base64ToBuffer",[338,4471,1026],{"class":1063},[338,4473,4438],{"class":1050},[338,4475,3828],{"class":1063},[338,4477,4479,4481,4483,4485,4487,4489,4491,4493,4495,4497,4499,4501,4503,4505,4507,4509,4511,4513,4515,4517,4520,4522,4525,4527,4529,4531,4533,4535,4537,4539],{"class":944,"line":4478},59,[338,4480,1286],{"class":962},[338,4482,1119],{"class":962},[338,4484,3839],{"class":1050},[338,4486,1082],{"class":1025},[338,4488,3339],{"class":1021},[338,4490,1026],{"class":1063},[338,4492,1136],{"class":1025},[338,4494,4355],{"class":1139},[338,4496,1136],{"class":1025},[338,4498,1144],{"class":1025},[338,4500,4464],{"class":1050},[338,4502,1144],{"class":1025},[338,4504,970],{"class":1025},[338,4506,2415],{"class":1063},[338,4508,1427],{"class":1025},[338,4510,1253],{"class":1025},[338,4512,1432],{"class":1139},[338,4514,1136],{"class":1025},[338,4516,3376],{"class":1025},[338,4518,4519],{"class":1460}," true",[338,4521,1144],{"class":1025},[338,4523,4524],{"class":1063}," [",[338,4526,1136],{"class":1025},[338,4528,1476],{"class":1139},[338,4530,1136],{"class":1025},[338,4532,1144],{"class":1025},[338,4534,1253],{"class":1025},[338,4536,1485],{"class":1139},[338,4538,1136],{"class":1025},[338,4540,4541],{"class":1063},"])\n",[338,4543,4545],{"class":944,"line":4544},60,[338,4546,1296],{"class":1025},[338,4548,4550],{"class":944,"line":4549},61,[338,4551,1100],{"emptyLinePlaceholder":1099},[338,4553,4555],{"class":944,"line":4554},62,[338,4556,949],{"class":948},[338,4558,4560],{"class":944,"line":4559},63,[338,4561,4562],{"class":948}," * [同构] 使用 AES-GCM 算法加密字符串文本\n",[338,4564,4566,4568,4570,4572,4574],{"class":944,"line":4565},64,[338,4567,959],{"class":948},[338,4569,963],{"class":962},[338,4571,967],{"class":966},[338,4573,981],{"class":980},[338,4575,4576],{"class":948}," - 待加密的明文文本\n",[338,4578,4580,4582,4584,4586,4588],{"class":944,"line":4579},65,[338,4581,959],{"class":948},[338,4583,963],{"class":962},[338,4585,967],{"class":966},[338,4587,1562],{"class":980},[338,4589,4590],{"class":948}," - CryptoKey 密钥对象\n",[338,4592,4594,4596,4598,4600],{"class":944,"line":4593},66,[338,4595,959],{"class":948},[338,4597,963],{"class":962},[338,4599,993],{"class":966},[338,4601,4602],{"class":948}," 返回打包了 \"IV\" 和 \"密文\" 的统一 Base64 字符串\n",[338,4604,4606],{"class":944,"line":4605},67,[338,4607,1008],{"class":948},[338,4609,4611,4613,4615,4618,4620,4622,4624,4626,4628,4630,4632,4634,4636,4638,4640,4642,4644,4646,4648,4650],{"class":944,"line":4610},68,[338,4612,4143],{"class":962},[338,4614,4146],{"class":1014},[338,4616,4617],{"class":1050}," encryptText ",[338,4619,1319],{"class":1025},[338,4621,4154],{"class":1014},[338,4623,3797],{"class":1025},[338,4625,1029],{"class":980},[338,4627,1427],{"class":1025},[338,4629,3902],{"class":3844},[338,4631,1144],{"class":1025},[338,4633,1562],{"class":980},[338,4635,1427],{"class":1025},[338,4637,4316],{"class":3844},[338,4639,3899],{"class":1025},[338,4641,4160],{"class":3844},[338,4643,4163],{"class":1025},[338,4645,974],{"class":3844},[338,4647,4168],{"class":1025},[338,4649,1222],{"class":1014},[338,4651,1035],{"class":1025},[338,4653,4655,4657,4659,4661,4663,4665],{"class":944,"line":4654},69,[338,4656,1047],{"class":1014},[338,4658,1051],{"class":1050},[338,4660,1054],{"class":1025},[338,4662,1057],{"class":1025},[338,4664,1060],{"class":1021},[338,4666,4667],{"class":1063},"()\n",[338,4669,4671,4673,4675,4677,4679,4681,4683,4685,4687,4689,4691,4693,4695,4697],{"class":944,"line":4670},70,[338,4672,1047],{"class":1014},[338,4674,1631],{"class":1050},[338,4676,1427],{"class":1025},[338,4678,1187],{"class":3844},[338,4680,4163],{"class":1025},[338,4682,1850],{"class":3844},[338,4684,4168],{"class":1025},[338,4686,1054],{"class":1025},[338,4688,1051],{"class":1050},[338,4690,1082],{"class":1025},[338,4692,1085],{"class":1021},[338,4694,1026],{"class":1063},[338,4696,1029],{"class":1050},[338,4698,3828],{"class":1063},[338,4700,4702],{"class":944,"line":4701},71,[338,4703,4704],{"class":948}," \u002F\u002F 生成 12 字节的密码学安全伪随机数作为 IV (AES-GCM 标准推荐)\n",[338,4706,4708,4710,4712,4714,4716,4718,4720,4722,4724,4726,4728,4730,4732,4734,4736,4738,4740],{"class":944,"line":4707},72,[338,4709,1047],{"class":1014},[338,4711,1668],{"class":1050},[338,4713,1427],{"class":1025},[338,4715,1187],{"class":3844},[338,4717,4163],{"class":1025},[338,4719,1850],{"class":3844},[338,4721,4168],{"class":1025},[338,4723,1054],{"class":1025},[338,4725,3850],{"class":1050},[338,4727,1082],{"class":1025},[338,4729,1677],{"class":1021},[338,4731,1026],{"class":1063},[338,4733,1184],{"class":1025},[338,4735,1187],{"class":1021},[338,4737,1026],{"class":1063},[338,4739,1688],{"class":1235},[338,4741,4099],{"class":1063},[338,4743,4745],{"class":944,"line":4744},73,[338,4746,4747],{"class":948}," \u002F\u002F 执行加密，返回密文 ArrayBuffer\n",[338,4749,4751,4753,4756,4758,4760,4762,4764,4766,4768,4770,4772,4775,4777,4779,4781,4783,4785,4787,4789,4791,4793,4795,4797,4799,4801],{"class":944,"line":4750},74,[338,4752,1047],{"class":1014},[338,4754,4755],{"class":1050}," cipherBuffer",[338,4757,1427],{"class":1025},[338,4759,3896],{"class":3844},[338,4761,1054],{"class":1025},[338,4763,1119],{"class":962},[338,4765,3839],{"class":1050},[338,4767,1082],{"class":1025},[338,4769,1476],{"class":1021},[338,4771,1026],{"class":1063},[338,4773,4774],{"class":1025},"{",[338,4776,2415],{"class":1063},[338,4778,1427],{"class":1025},[338,4780,1253],{"class":1025},[338,4782,1432],{"class":1139},[338,4784,1136],{"class":1025},[338,4786,1144],{"class":1025},[338,4788,1668],{"class":1063},[338,4790,1427],{"class":1025},[338,4792,1668],{"class":1050},[338,4794,3376],{"class":1025},[338,4796,1562],{"class":1050},[338,4798,1144],{"class":1025},[338,4800,1631],{"class":1050},[338,4802,3828],{"class":1063},[338,4804,4806],{"class":944,"line":4805},75,[338,4807,4808],{"class":948}," \u002F\u002F 将 IV（12字节）和密文拼接，方便单字符串传输\n",[338,4810,4812,4814,4817,4819,4821,4823,4825,4828,4830,4833,4836,4838,4840,4843],{"class":944,"line":4811},76,[338,4813,1047],{"class":1014},[338,4815,4816],{"class":1050}," combined",[338,4818,1054],{"class":1025},[338,4820,1057],{"class":1025},[338,4822,1187],{"class":1021},[338,4824,1026],{"class":1063},[338,4826,4827],{"class":1050},"iv",[338,4829,1082],{"class":1025},[338,4831,4832],{"class":1050},"length",[338,4834,4835],{"class":1025}," +",[338,4837,4755],{"class":1050},[338,4839,1082],{"class":1025},[338,4841,4842],{"class":1050},"byteLength",[338,4844,3828],{"class":1063},[338,4846,4848,4851,4853,4856,4858,4860,4862,4864],{"class":944,"line":4847},77,[338,4849,4850],{"class":1050}," combined",[338,4852,1082],{"class":1025},[338,4854,4855],{"class":1021},"set",[338,4857,1026],{"class":1063},[338,4859,4827],{"class":1050},[338,4861,1144],{"class":1025},[338,4863,2217],{"class":1235},[338,4865,3828],{"class":1063},[338,4867,4869,4871,4873,4875,4877,4879,4881,4883,4886,4888,4890,4892,4894,4896],{"class":944,"line":4868},78,[338,4870,4850],{"class":1050},[338,4872,1082],{"class":1025},[338,4874,4855],{"class":1021},[338,4876,1026],{"class":1063},[338,4878,1184],{"class":1025},[338,4880,1187],{"class":1021},[338,4882,1026],{"class":1063},[338,4884,4885],{"class":1050},"cipherBuffer",[338,4887,1032],{"class":1063},[338,4889,1144],{"class":1025},[338,4891,1668],{"class":1050},[338,4893,1082],{"class":1025},[338,4895,4832],{"class":1050},[338,4897,3828],{"class":1063},[338,4899,4901,4903,4905,4907,4910,4912,4914],{"class":944,"line":4900},79,[338,4902,1286],{"class":962},[338,4904,4371],{"class":1021},[338,4906,1026],{"class":1063},[338,4908,4909],{"class":1050},"combined",[338,4911,1082],{"class":1025},[338,4913,3891],{"class":1050},[338,4915,3828],{"class":1063},[338,4917,4919],{"class":944,"line":4918},80,[338,4920,1296],{"class":1025},[338,4922,4924],{"class":944,"line":4923},81,[338,4925,1100],{"emptyLinePlaceholder":1099},[338,4927,4929],{"class":944,"line":4928},82,[338,4930,949],{"class":948},[338,4932,4934],{"class":944,"line":4933},83,[338,4935,4936],{"class":948}," * [同构] 使用 AES-GCM 算法解密文本\n",[338,4938,4940,4942,4944,4946,4949],{"class":944,"line":4939},84,[338,4941,959],{"class":948},[338,4943,963],{"class":962},[338,4945,967],{"class":966},[338,4947,4948],{"class":980}," combinedBase64",[338,4950,4951],{"class":948}," - 由 encryptText 生成的统一加密 Base64 字符串（内部含 IV）\n",[338,4953,4955,4957,4959,4961,4963],{"class":944,"line":4954},85,[338,4956,959],{"class":948},[338,4958,963],{"class":962},[338,4960,967],{"class":966},[338,4962,1562],{"class":980},[338,4964,4965],{"class":948}," - 对应的 CryptoKey 密钥对象\n",[338,4967,4969],{"class":944,"line":4968},86,[338,4970,1008],{"class":948},[338,4972,4974,4976,4978,4981,4983,4985,4987,4990,4992,4994,4996,4998,5000,5002,5004,5006,5008,5010,5012,5014],{"class":944,"line":4973},87,[338,4975,4143],{"class":962},[338,4977,4146],{"class":1014},[338,4979,4980],{"class":1050}," decryptText ",[338,4982,1319],{"class":1025},[338,4984,4154],{"class":1014},[338,4986,3797],{"class":1025},[338,4988,4989],{"class":980},"combinedBase64",[338,4991,1427],{"class":1025},[338,4993,3902],{"class":3844},[338,4995,1144],{"class":1025},[338,4997,1562],{"class":980},[338,4999,1427],{"class":1025},[338,5001,4316],{"class":3844},[338,5003,3899],{"class":1025},[338,5005,4160],{"class":3844},[338,5007,4163],{"class":1025},[338,5009,974],{"class":3844},[338,5011,4168],{"class":1025},[338,5013,1222],{"class":1014},[338,5015,1035],{"class":1025},[338,5017,5019,5021,5024,5026,5028,5030,5032],{"class":944,"line":5018},88,[338,5020,1047],{"class":1014},[338,5022,5023],{"class":1050}," combinedBuffer",[338,5025,1054],{"class":1025},[338,5027,4469],{"class":1021},[338,5029,1026],{"class":1063},[338,5031,4989],{"class":1050},[338,5033,3828],{"class":1063},[338,5035,5037,5039,5042,5044,5046,5048,5050,5053],{"class":944,"line":5036},89,[338,5038,1047],{"class":1014},[338,5040,5041],{"class":1050}," combinedBytes",[338,5043,1054],{"class":1025},[338,5045,1057],{"class":1025},[338,5047,1187],{"class":1021},[338,5049,1026],{"class":1063},[338,5051,5052],{"class":1050},"combinedBuffer",[338,5054,3828],{"class":1063},[338,5056,5058],{"class":944,"line":5057},90,[338,5059,5060],{"class":948}," \u002F\u002F 从头部切出前 12 字节作为 IV\n",[338,5062,5064,5066,5068,5070,5072,5074,5076,5078,5080,5082,5084,5087,5089,5091,5093,5096],{"class":944,"line":5063},91,[338,5065,1047],{"class":1014},[338,5067,1668],{"class":1050},[338,5069,1427],{"class":1025},[338,5071,1187],{"class":3844},[338,5073,4163],{"class":1025},[338,5075,1850],{"class":3844},[338,5077,4168],{"class":1025},[338,5079,1054],{"class":1025},[338,5081,5041],{"class":1050},[338,5083,1082],{"class":1025},[338,5085,5086],{"class":1021},"slice",[338,5088,1026],{"class":1063},[338,5090,1256],{"class":1235},[338,5092,1144],{"class":1025},[338,5094,5095],{"class":1235}," 12",[338,5097,3828],{"class":1063},[338,5099,5101],{"class":944,"line":5100},92,[338,5102,5103],{"class":948}," \u002F\u002F 剩下的部分作为真正的密文\n",[338,5105,5107,5109,5111,5113,5115,5117,5119,5121,5123,5125,5127,5129,5131,5133],{"class":944,"line":5106},93,[338,5108,1047],{"class":1014},[338,5110,1708],{"class":1050},[338,5112,1427],{"class":1025},[338,5114,1187],{"class":3844},[338,5116,4163],{"class":1025},[338,5118,1850],{"class":3844},[338,5120,4168],{"class":1025},[338,5122,1054],{"class":1025},[338,5124,5041],{"class":1050},[338,5126,1082],{"class":1025},[338,5128,5086],{"class":1021},[338,5130,1026],{"class":1063},[338,5132,1688],{"class":1235},[338,5134,3828],{"class":1063},[338,5136,5138],{"class":944,"line":5137},94,[338,5139,1948],{"class":948},[338,5141,5143,5145,5147,5149,5151,5153,5155,5157,5159,5161,5163,5165,5167,5169,5171,5173,5175,5177,5179,5181,5183,5185,5187,5189,5191,5193,5195],{"class":944,"line":5142},95,[338,5144,1047],{"class":1014},[338,5146,1955],{"class":1050},[338,5148,1427],{"class":1025},[338,5150,3896],{"class":3844},[338,5152,1054],{"class":1025},[338,5154,1119],{"class":962},[338,5156,3839],{"class":1050},[338,5158,1082],{"class":1025},[338,5160,1485],{"class":1021},[338,5162,1026],{"class":1063},[338,5164,4774],{"class":1025},[338,5166,2415],{"class":1063},[338,5168,1427],{"class":1025},[338,5170,1253],{"class":1025},[338,5172,1432],{"class":1139},[338,5174,1136],{"class":1025},[338,5176,1144],{"class":1025},[338,5178,1668],{"class":1063},[338,5180,1427],{"class":1025},[338,5182,1668],{"class":1050},[338,5184,3376],{"class":1025},[338,5186,1562],{"class":1050},[338,5188,1144],{"class":1025},[338,5190,1708],{"class":1050},[338,5192,1082],{"class":1025},[338,5194,3891],{"class":1050},[338,5196,3828],{"class":1063},[338,5198,5200,5202,5204,5206,5208,5210],{"class":944,"line":5199},96,[338,5201,1047],{"class":1014},[338,5203,2037],{"class":1050},[338,5205,1054],{"class":1025},[338,5207,1057],{"class":1025},[338,5209,2044],{"class":1021},[338,5211,4667],{"class":1063},[338,5213,5215,5217,5219,5221,5223,5225,5227],{"class":944,"line":5214},97,[338,5216,1286],{"class":962},[338,5218,2037],{"class":1050},[338,5220,1082],{"class":1025},[338,5222,2059],{"class":1021},[338,5224,1026],{"class":1063},[338,5226,2064],{"class":1050},[338,5228,3828],{"class":1063},[338,5230,5232],{"class":944,"line":5231},98,[338,5233,1296],{"class":1025},[18,5235,5236],{},"TS 测试脚本",[18,5238,5239],{},"如果你在 Vite\u002FNuxt\u002FNext.js 项目或者使用了 ts-node \u002F bun \u002F deno 的后端环境中，可以直接引入并运行这段强类型的测试代码：",[934,5241,5244],{"className":3741,"code":5242,"filename":5243,"language":3744,"meta":939,"style":939},"import { decryptText, encryptText, exportKeyToBase64, generateAESKey, importKeyFromBase64 } from 'crypto'\n;(async () => {\n try {\n const rawData: string = '前后端全平台无缝传输的敏感数据 1234-abcd-TS-VERSION'\n console.log('🔒 原始待加解密明文:', rawData)\n\n \u002F\u002F ==========================================\n \u002F\u002F 阶段一：在 A 端（例如 Node.js 后端）生成密钥并加密\n \u002F\u002F ==========================================\n const originalKey: CryptoKey = await generateAESKey()\n\n \u002F\u002F 导出密钥为 Base64 字符串\n const transportableKeyStr: string = await exportKeyToBase64(originalKey)\n console.log('🔑 [传输中] 密钥已安全序列化为 Base64:', transportableKeyStr)\n\n \u002F\u002F 对数据进行加密\n const secureCipherText: string = await encryptText(rawData, originalKey)\n console.log('📦 [传输中] 密文已安全打包（含IV）为 Base64:', secureCipherText)\n\n \u002F\u002F ==========================================\n \u002F\u002F 阶段二：在 B 端（例如现代 Web 浏览器前端）收到数据解密\n \u002F\u002F ==========================================\n console.log('\\n--- 数据已通过网络无缝抵达另一端 ---')\n\n \u002F\u002F 1. 恢复强类型的 CryptoKey 实体\n const receivedKey: CryptoKey = await importKeyFromBase64(transportableKeyStr)\n\n \u002F\u002F 2. 还原数据内容\n const decryptedOutput: string = await decryptText(secureCipherText, receivedKey)\n console.log('🔓 [还原成功] 解密后的最终明文结果:', decryptedOutput)\n } catch (error) {\n console.error('❌ 密码学同构解密链路失败，错误原因: ', error)\n }\n})()\n\n","test-crypto.ts",[473,5245,5246,5286,5302,5309,5330,5355,5359,5364,5369,5373,5392,5396,5401,5425,5448,5452,5457,5485,5508,5512,5516,5521,5525,5547,5551,5556,5580,5584,5589,5617,5640,5658,5682,5687],{"__ignoreMap":939},[338,5247,5248,5251,5253,5255,5257,5259,5261,5264,5266,5268,5270,5273,5276,5279,5281,5283],{"class":944,"line":945},[338,5249,5250],{"class":962},"import",[338,5252,970],{"class":1025},[338,5254,1926],{"class":1050},[338,5256,1144],{"class":1025},[338,5258,1596],{"class":1050},[338,5260,1144],{"class":1025},[338,5262,5263],{"class":1050}," exportKeyToBase64",[338,5265,1144],{"class":1025},[338,5267,1390],{"class":1050},[338,5269,1144],{"class":1025},[338,5271,5272],{"class":1050}," importKeyFromBase64",[338,5274,5275],{"class":1025}," }",[338,5277,5278],{"class":962}," from",[338,5280,1253],{"class":1025},[338,5282,3563],{"class":1139},[338,5284,5285],{"class":1025},"'\n",[338,5287,5288,5291,5293,5295,5298,5300],{"class":944,"line":74},[338,5289,5290],{"class":1025},";",[338,5292,1026],{"class":1050},[338,5294,1015],{"class":1014},[338,5296,5297],{"class":1025}," ()",[338,5299,1222],{"class":1014},[338,5301,1035],{"class":1025},[338,5303,5304,5307],{"class":944,"line":96},[338,5305,5306],{"class":962}," try",[338,5308,1035],{"class":1025},[338,5310,5311,5314,5317,5319,5321,5323,5325,5328],{"class":944,"line":119},[338,5312,5313],{"class":1014}," const",[338,5315,5316],{"class":1050}," rawData",[338,5318,1427],{"class":1025},[338,5320,3902],{"class":3844},[338,5322,1054],{"class":1025},[338,5324,1253],{"class":1025},[338,5326,5327],{"class":1139},"前后端全平台无缝传输的敏感数据 1234-abcd-TS-VERSION",[338,5329,5285],{"class":1025},[338,5331,5332,5335,5337,5340,5342,5344,5347,5349,5351,5353],{"class":944,"line":140},[338,5333,5334],{"class":1050}," console",[338,5336,1082],{"class":1025},[338,5338,5339],{"class":1021},"log",[338,5341,1026],{"class":1063},[338,5343,1136],{"class":1025},[338,5345,5346],{"class":1139},"🔒 原始待加解密明文:",[338,5348,1136],{"class":1025},[338,5350,1144],{"class":1025},[338,5352,5316],{"class":1050},[338,5354,3828],{"class":1063},[338,5356,5357],{"class":944,"line":1011},[338,5358,1100],{"emptyLinePlaceholder":1099},[338,5360,5361],{"class":944,"line":1038},[338,5362,5363],{"class":948}," \u002F\u002F ==========================================\n",[338,5365,5366],{"class":944,"line":1044},[338,5367,5368],{"class":948}," \u002F\u002F 阶段一：在 A 端（例如 Node.js 后端）生成密钥并加密\n",[338,5370,5371],{"class":944,"line":1070},[338,5372,5363],{"class":948},[338,5374,5375,5377,5380,5382,5384,5386,5388,5390],{"class":944,"line":1096},[338,5376,5313],{"class":1014},[338,5378,5379],{"class":1050}," originalKey",[338,5381,1427],{"class":1025},[338,5383,4316],{"class":3844},[338,5385,1054],{"class":1025},[338,5387,1119],{"class":962},[338,5389,1390],{"class":1021},[338,5391,4667],{"class":1063},[338,5393,5394],{"class":944,"line":1103},[338,5395,1100],{"emptyLinePlaceholder":1099},[338,5397,5398],{"class":944,"line":1109},[338,5399,5400],{"class":948}," \u002F\u002F 导出密钥为 Base64 字符串\n",[338,5402,5403,5405,5408,5410,5412,5414,5416,5418,5420,5423],{"class":944,"line":1153},[338,5404,5313],{"class":1014},[338,5406,5407],{"class":1050}," transportableKeyStr",[338,5409,1427],{"class":1025},[338,5411,3902],{"class":3844},[338,5413,1054],{"class":1025},[338,5415,1119],{"class":962},[338,5417,5263],{"class":1021},[338,5419,1026],{"class":1063},[338,5421,5422],{"class":1050},"originalKey",[338,5424,3828],{"class":1063},[338,5426,5427,5429,5431,5433,5435,5437,5440,5442,5444,5446],{"class":944,"line":1158},[338,5428,5334],{"class":1050},[338,5430,1082],{"class":1025},[338,5432,5339],{"class":1021},[338,5434,1026],{"class":1063},[338,5436,1136],{"class":1025},[338,5438,5439],{"class":1139},"🔑 [传输中] 密钥已安全序列化为 Base64:",[338,5441,1136],{"class":1025},[338,5443,1144],{"class":1025},[338,5445,5407],{"class":1050},[338,5447,3828],{"class":1063},[338,5449,5450],{"class":944,"line":1164},[338,5451,1100],{"emptyLinePlaceholder":1099},[338,5453,5454],{"class":944,"line":1200},[338,5455,5456],{"class":948}," \u002F\u002F 对数据进行加密\n",[338,5458,5459,5461,5464,5466,5468,5470,5472,5474,5476,5479,5481,5483],{"class":944,"line":1277},[338,5460,5313],{"class":1014},[338,5462,5463],{"class":1050}," secureCipherText",[338,5465,1427],{"class":1025},[338,5467,3902],{"class":3844},[338,5469,1054],{"class":1025},[338,5471,1119],{"class":962},[338,5473,1596],{"class":1021},[338,5475,1026],{"class":1063},[338,5477,5478],{"class":1050},"rawData",[338,5480,1144],{"class":1025},[338,5482,5379],{"class":1050},[338,5484,3828],{"class":1063},[338,5486,5487,5489,5491,5493,5495,5497,5500,5502,5504,5506],{"class":944,"line":1283},[338,5488,5334],{"class":1050},[338,5490,1082],{"class":1025},[338,5492,5339],{"class":1021},[338,5494,1026],{"class":1063},[338,5496,1136],{"class":1025},[338,5498,5499],{"class":1139},"📦 [传输中] 密文已安全打包（含IV）为 Base64:",[338,5501,1136],{"class":1025},[338,5503,1144],{"class":1025},[338,5505,5463],{"class":1050},[338,5507,3828],{"class":1063},[338,5509,5510],{"class":944,"line":1293},[338,5511,1100],{"emptyLinePlaceholder":1099},[338,5513,5514],{"class":944,"line":1299},[338,5515,5363],{"class":948},[338,5517,5518],{"class":944,"line":1304},[338,5519,5520],{"class":948}," \u002F\u002F 阶段二：在 B 端（例如现代 Web 浏览器前端）收到数据解密\n",[338,5522,5523],{"class":944,"line":1310},[338,5524,5363],{"class":948},[338,5526,5527,5529,5531,5533,5535,5537,5540,5543,5545],{"class":944,"line":1779},[338,5528,5334],{"class":1050},[338,5530,1082],{"class":1025},[338,5532,5339],{"class":1021},[338,5534,1026],{"class":1063},[338,5536,1136],{"class":1025},[338,5538,5539],{"class":1050},"\\n",[338,5541,5542],{"class":1139},"--- 数据已通过网络无缝抵达另一端 ---",[338,5544,1136],{"class":1025},[338,5546,3828],{"class":1063},[338,5548,5549],{"class":944,"line":1786},[338,5550,1100],{"emptyLinePlaceholder":1099},[338,5552,5553],{"class":944,"line":1791},[338,5554,5555],{"class":948}," \u002F\u002F 1. 恢复强类型的 CryptoKey 实体\n",[338,5557,5558,5560,5563,5565,5567,5569,5571,5573,5575,5578],{"class":944,"line":1797},[338,5559,5313],{"class":1014},[338,5561,5562],{"class":1050}," receivedKey",[338,5564,1427],{"class":1025},[338,5566,4316],{"class":3844},[338,5568,1054],{"class":1025},[338,5570,1119],{"class":962},[338,5572,5272],{"class":1021},[338,5574,1026],{"class":1063},[338,5576,5577],{"class":1050},"transportableKeyStr",[338,5579,3828],{"class":1063},[338,5581,5582],{"class":944,"line":1813},[338,5583,1100],{"emptyLinePlaceholder":1099},[338,5585,5586],{"class":944,"line":4037},[338,5587,5588],{"class":948}," \u002F\u002F 2. 还原数据内容\n",[338,5590,5591,5593,5596,5598,5600,5602,5604,5606,5608,5611,5613,5615],{"class":944,"line":4056},[338,5592,5313],{"class":1014},[338,5594,5595],{"class":1050}," decryptedOutput",[338,5597,1427],{"class":1025},[338,5599,3902],{"class":3844},[338,5601,1054],{"class":1025},[338,5603,1119],{"class":962},[338,5605,1926],{"class":1021},[338,5607,1026],{"class":1063},[338,5609,5610],{"class":1050},"secureCipherText",[338,5612,1144],{"class":1025},[338,5614,5562],{"class":1050},[338,5616,3828],{"class":1063},[338,5618,5619,5621,5623,5625,5627,5629,5632,5634,5636,5638],{"class":944,"line":4102},[338,5620,5334],{"class":1050},[338,5622,1082],{"class":1025},[338,5624,5339],{"class":1021},[338,5626,1026],{"class":1063},[338,5628,1136],{"class":1025},[338,5630,5631],{"class":1139},"🔓 [还原成功] 解密后的最终明文结果:",[338,5633,1136],{"class":1025},[338,5635,1144],{"class":1025},[338,5637,5595],{"class":1050},[338,5639,3828],{"class":1063},[338,5641,5642,5645,5648,5650,5653,5656],{"class":944,"line":4114},[338,5643,5644],{"class":1025}," }",[338,5646,5647],{"class":962}," catch",[338,5649,3797],{"class":1063},[338,5651,5652],{"class":1050},"error",[338,5654,5655],{"class":1063},") ",[338,5657,3806],{"class":1025},[338,5659,5660,5662,5664,5666,5668,5670,5673,5675,5677,5680],{"class":944,"line":4119},[338,5661,5334],{"class":1050},[338,5663,1082],{"class":1025},[338,5665,5652],{"class":1021},[338,5667,1026],{"class":1063},[338,5669,1136],{"class":1025},[338,5671,5672],{"class":1139},"❌ 密码学同构解密链路失败，错误原因: ",[338,5674,1136],{"class":1025},[338,5676,1144],{"class":1025},[338,5678,5679],{"class":1050}," error",[338,5681,3828],{"class":1063},[338,5683,5684],{"class":944,"line":4124},[338,5685,5686],{"class":1025}," }\n",[338,5688,5689,5691],{"class":944,"line":4129},[338,5690,977],{"class":1025},[338,5692,5693],{"class":1050},")()\n",[5695,5696,5697],"style",{},"html pre.shiki code .sHwdD, html code.shiki .sHwdD{--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#546E7A;--shiki-default-font-style:italic;--shiki-dark:#676E95;--shiki-dark-font-style:italic}html pre.shiki code .s7zQu, html code.shiki .s7zQu{--shiki-light:#39ADB5;--shiki-light-font-style:italic;--shiki-default:#89DDFF;--shiki-default-font-style:italic;--shiki-dark:#89DDFF;--shiki-dark-font-style:italic}html pre.shiki code .s6hCs, html code.shiki .s6hCs{--shiki-light:#9C3EDA;--shiki-light-font-style:italic;--shiki-default:#C792EA;--shiki-default-font-style:italic;--shiki-dark:#C792EA;--shiki-dark-font-style:italic}html pre.shiki code .sFweD, html code.shiki .sFweD{--shiki-light:#E2931D;--shiki-light-font-style:italic;--shiki-default:#FFCB6B;--shiki-default-font-style:italic;--shiki-dark:#FFCB6B;--shiki-dark-font-style:italic}html pre.shiki code .sHdIc, html code.shiki .sHdIc{--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#EEFFFF;--shiki-default-font-style:italic;--shiki-dark:#BABED8;--shiki-dark-font-style:italic}html pre.shiki code .spNyl, html code.shiki .spNyl{--shiki-light:#9C3EDA;--shiki-default:#C792EA;--shiki-dark:#C792EA}html pre.shiki code .s2Zo4, html code.shiki .s2Zo4{--shiki-light:#6182B8;--shiki-default:#82AAFF;--shiki-dark:#82AAFF}html pre.shiki code .sMK4o, html code.shiki .sMK4o{--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF}html pre.shiki code .sTEyZ, html code.shiki .sTEyZ{--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8}html pre.shiki code .swJcz, html code.shiki .swJcz{--shiki-light:#E53935;--shiki-default:#F07178;--shiki-dark:#F07178}html pre.shiki code .sfazB, html code.shiki .sfazB{--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D}html pre.shiki code .sbssI, html code.shiki .sbssI{--shiki-light:#F76D47;--shiki-default:#F78C6C;--shiki-dark:#F78C6C}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .sfNiH, html code.shiki .sfNiH{--shiki-light:#FF5370;--shiki-default:#FF9CAC;--shiki-dark:#FF9CAC}html pre.shiki code .sBMFI, html code.shiki .sBMFI{--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B}",{"title":939,"searchDepth":96,"depth":96,"links":5699},[5700,5701,5702,5703,5711,5712,5713,5719,5720,5721],{"id":15,"depth":74,"text":16},{"id":41,"depth":74,"text":42},{"id":162,"depth":74,"text":163},{"id":183,"depth":74,"text":184,"children":5704},[5705,5706,5707,5708,5709,5710],{"id":191,"depth":96,"text":192},{"id":231,"depth":96,"text":232},{"id":294,"depth":96,"text":295},{"id":344,"depth":96,"text":345},{"id":377,"depth":96,"text":378},{"id":416,"depth":96,"text":417},{"id":506,"depth":74,"text":507},{"id":857,"depth":74,"text":858},{"id":910,"depth":74,"text":911,"children":5714},[5715,5716,5717,5718],{"id":917,"depth":96,"text":918},{"id":2081,"depth":96,"text":2082},{"id":2595,"depth":96,"text":2596},{"id":3120,"depth":96,"text":3121},{"id":3424,"depth":74,"text":3425},{"id":3521,"depth":74,"text":3522},{"id":3731,"depth":74,"text":3732},{"name":5723,"symbol":5724,"icon":5725,"id":1096},"Node.js","node","material-icon-theme:nodejs-alt","2026-08-25 15:59:25",{"type":10,"value":5728},[5729,5732],[18,5730,5731],{},"在过去很长一段时间里，只要一提到在前端进行加密、解密、生成哈希（MD5\u002FSHA）或生成随机数，绝大多数开发者的第一反应就是 npm install crypto-js。作为曾经的功勋库，crypto-js 陪伴我们度过了无数个项目。",[18,5733,5734],{},"然而，随着 Web 标准的演进，现代浏览器早已内置了一个更强大、更安全、性能也更恐怖的官方武器——Web Crypto API。时至今日，如果你还在新项目里打包第三方的加密库，是时候了解一下为什么要换成原生 API 了。","md",false,{},"\u002Fblog\u002Fweb-crypto-api","---\ntitle: Web Crypto API 浏览器原生加密的终极指南\ndescription: Web Crypto API 是浏览器原生提供的一套加密接口，允许 JavaScript 脚本使用密码学原语来构建基于加密的系统。它自 2015 年 7 月起已得到各大浏览器的广泛支持，是一个相当成熟且稳定的 Web 标准。\narticleId: web-crypto-api\ncreateDate: \"2026-08-25 15:59:25\"\nupdateDate: \"2026-08-26 10:46:16\"\narticleThumb: https:\u002F\u002Fcdn.anyfork.top\u002Fimages\u002F20260825111119031.webp\ntagIds: \n - 12\ncategoryId: 10\nisTop: false\nisRecommend: false\nisHot: true\nisHidden: false\nnavigation: true\n---\n在过去很长一段时间里，只要一提到在前端进行加密、解密、生成哈希（MD5\u002FSHA）或生成随机数，绝大多数开发者的第一反应就是 npm install crypto-js。作为曾经的功勋库，crypto-js 陪伴我们度过了无数个项目。\n\n然而，随着 Web 标准的演进，现代浏览器早已内置了一个更强大、更安全、性能也更恐怖的官方武器——Web Crypto API。时至今日，如果你还在新项目里打包第三方的加密库，是时候了解一下为什么要换成原生 API 了。\n\u003C!--more-->\n\n## 1. 什么是 Web Crypto API？\nWeb Crypto API 是浏览器原生提供的一套加密接口，允许 JavaScript 脚本使用密码学原语来构建基于加密的系统。它自 2015 年 7 月起已得到各大浏览器的广泛支持，是一个相当成熟且稳定的 Web 标准。\n\n在 Web Crypto 规范诞生前，部分浏览器为了满足加密需求，在全局实现了一个名为 Crypto 的接口(即 window.crypto)。但正由于这样，当时各大浏览器的实现缺乏统一的 W3C 标准，定义模糊，且在密码学意义上是不够严谨和安全的（not cryptographically sound）。\n\n当正式的 Web Crypto API 标准（支持 encrypt、decrypt、sign、verify 等现代异步加密操作）推出时，为了彻底避免和老旧、不安全的旧接口方法发生命名混淆与冲突，W3C 规范决定将这些低底层的密码学核心方法群全部打包进一个全新的独立接口中，这就是 SubtleCrypto。你可以通过全局对象的 crypto.subtle 属性来访问它。\n\n由于旧的全局 crypto 对象并没有被废除（它依然保留了诸如密码学安全的伪随机数生成器 crypto.getRandomValues() 和 crypto.randomUUID() 等简单的同步方法），因此所有新版的 SubtleCrypto 复杂加密算法全部被挂载到了它的下级属性中。你必须通过 crypto.subtle 属性才能访问到这一整套现代加解密方法。\n\nNode.js 最早在 v15.0.0 引入了 Web Crypto API 接口。直到 Node.js 19.0.0，官方正式去掉了实验性警告，将其标记为 稳定版本（Stable），并且默认在全局作用域挂载了 globalThis.crypto。\n\n::warning\n重要提示：在现代浏览器中，为了保障密钥安全，crypto.subtle 属性被限制为只能在安全上下文（HTTPS 协议或 localhost）下才能被成功访问。如果你在普通的非加密 HTTP 网页里调用 crypto.subtle，它会直接返回 undefined。\n::\n## 2. 为什么选择 Web Crypto API？\n在决定是否在 Web 项目中使用 Web Crypto API 时，通常是因为它相比传统的第三方加密库（如 CryptoJS, jsencrypt, forge 等）在安全性、性能和原生支持度上带来了降维打击的优势。\n1. **防 XSS 攻击的“密钥黑盒”机制（核心安全优势）** : 这是选择Web Crypto API最关键的安全理由。\n- **传统加密库的痛点：** 如果你用 CryptoJS，密钥必须以明文字符串或 Uint8Array 的形式存在于 JavaScript 变量、localStorage 或 sessionStorage 中。一旦网站遭受 XSS（跨站脚本）攻击，黑客可以直接读取并盗走你的密钥。\n- **Web Crypto 的解决办法：** 它引入了 CryptoKey 对象。在生成或导入密钥时，如果设置 extractable: false，这个密钥在创建后将永远无法通过 JavaScript 读取、打印或导出。它被死死封锁在浏览器的底层安全内存中。黑客即使通过 XSS 控制了你的页面，也拿不到密钥本身，只能在本地调用它，大大降低了密钥泄露的风险。\n2. **硬件级的高性能与非阻塞（异步原生）**\n- **原生 C++ \u002F 汇编实现：** Web Crypto API 是由浏览器底层（基于 OpenSSL 或操作系统自带的密码学库）用原生代码实现的。相比纯 JavaScript 编写的加密库，它的运行速度快了数十倍到上百倍。\n- **异步非阻塞：** 传统的加密库（如 CryptoJS）大都是同步执行的。当计算大文件哈希，或者进行复杂的 RSA 大素数生成时，会直接卡死浏览器的 UI 主线程，导致页面瞬间卡顿或未响应。而 Web Crypto 的所有核心方法（如 encrypt、digest）全部是异步 Promise 机制，浏览器会将其交给底层的系统线程去算，完全不影响前端界面的流畅度。\n3. **密码学安全的伪随机数生成器 (CSPRNG)**: 在密码学中，随机数的质量决定了加密的生死。\n- **传统的隐患：** JavaScript 原生的 Math.random() 是非密码学安全的，它的随机轨迹可以被算法预测，绝不能用于生成加密密钥、IV（初始化向量）或盐值。\n- **Web Crypto 的保障：** 提供了 crypto.getRandomValues()，它直接调用操作系统底层的硬件熵源（如系统的 \u002Fdev\u002Furandom 或 CAPI），生成密码学安全的高强度真随机数，保障加密系统的根基不可被破解。\n4. **零依赖，极致减小打包体积 (Zero-Bundle)**\n- **传统加密库的痛点：** 引入 CryptoJS、JSEncrypt 或 Forge 会让前端的 Vendor 打包体积（Bundle Size）平白无故增加几十 KB 甚至几百 KB，影响首屏加载速度。\n- **Web Crypto 的优势：** 它是现代浏览器的标准内置 API，不需要 npm install 任何第三方包。直接开箱即用，让前端工程更加轻量、纯净。\n5. **行业标准规范，跨端兼容性完美**\n- **大厂和 W3C 背书：** 它遵循严格的 W3C 规范，由各大浏览器厂商共同维护和不断优化。\n- **环境通用性：** 目前 Web Crypto API 的覆盖率已接近 100%。不仅在 Chrome、Safari、Edge、Firefox 浏览器中完美支持，在现代的 Node.js (v15+)、Deno、Bun 以及 Cloudflare Workers 等服务端\u002F边缘计算环境中也实现了完全一致的 API。这使得你写的一套加解密代码，可以无缝在前端和服务端之间复用。\n## 3. 什么时候不应该选择它？\n使用 Web Crypto API 有唯一的限制条件：\n- **非安全上下文限制：** 它强制要求 HTTPS 环境（本地开发支持 localhost 或 127.0.0.1）。如果你的网站部署在纯 HTTP 生产环境下，crypto.subtle 会直接返回 undefined 无法工作。\n- **需要高层封装：** 它提供的是非常底层的“密码学原语”（Raw Primitives），不提供像“一键生成 JWT”或者“一键做密码信封”这样的高级功能，开发者需要自己处理字节对齐、IV 传递等微秒的细节。\n## 4. Web Crypto API核心接口\nWeb Crypto API（通常称为 crypto.subtle）的核心接口主要由以下 5 个标准接口（Interfaces） 和 1 个全局入口 组成。它们构成了浏览器原生密码学生态的基石。\n### 4.1 全局入口对象Crypto\n虽然这不是单独的加解密接口，但它是所有 Web 加密功能的总入口，挂载在全局 window.crypto（或 globalThis.crypto）上。Crypto提供基础的加密功能，主要包括：\n- **核心作用：** 提供基础的同步安全原语。\n- **常用方法：**\n - **crypto.getRandomValues()：** 生成密码学安全的伪随机数（常用于生成 IV 或盐）。\n - **crypto.randomUUID()：** 快速生成一个符合 RFC 4122 标准的随机 UUID 字符串。\n - **crypto.subtle：** 指向核心异步加密接口 SubtleCrypto 的指针。\n### 4.2 核心操作员SubtleCrypto\n这是整个 Web Crypto API 中最重要、最核心的接口。所有的实际异步加解密、签名、密钥派生等操作都在这里执行。SubtleCrypto 提供的主要方法包括：\n- **核心作用：** 提供一系列底层、底层的异步密码学原语方法（全部返回 Promise）。\n- **核心方法（按功能分类）：**\n - **加密与解密：** encrypt() \u002F decrypt()\n - **签名与验证：** sign() \u002F verify()\n - **哈希计算：** digest()\n - **密钥生成：** generateKey()\n - **密钥导入与导出：** importKey() \u002F exportKey()\n - **密钥包装与解包：** wrapKey() \u002F unwrapKey()\n - **密钥派生：** deriveKey() \u002F deriveBits()\n### 4.3 密钥实体CryptoKey\n该接口代表一个在浏览器中生成的、受保护的密钥对象。为了安全，浏览器的 SubtleCrypto 方法不直接操作纯文本的密钥字符串（如 \"my-secret-key\"），而是操作 CryptoKey 实例。\n- **核心作用：** 作为参数传递给 SubtleCrypto 的各项方法。\n- **核心属性（只读）：**\n - **type：** 密钥类型（\"secret\" 对称加密、\"private\" 私钥、\"public\" 公钥）。\n - **extractable：** 布尔值。如果为 false，该密钥在创建后绝对无法从内存中被导出或用 JS 打印出来，防止 XSS 攻击窃取密钥。\n - **algorithm：** 绑定该密钥的算法对象（例如绑定的 AES-GCM 或 RSA-PSS 等参数）。\n - **usages：** 该密钥被允许的用途数组（例如 ['encrypt', 'decrypt']）。\n### 4.4 非对称密钥对CryptoKeyPair\n当使用 RSA、ECDSA 等非对称加密算法时，crypto.subtle.generateKey() 返回的不是单个密钥，而是一个包含公钥和私钥的 CryptoKeyPair 对象。\n- **核心作用：** 容器对象，封装非对称密钥对。\n- **核心属性：**\n - **publicKey：** 一个 CryptoKey 实例，代表公钥（用于加密或验证签名）。\n - **privateKey：** 一个 CryptoKey 实例，代表私钥（用于解密或生成签名）。\n### 4.5 算法配置对象AlgorithmIdentifier\n虽然它在技术上是一个规范定义的字典对象（Dictionary），而不是传统的类或接口，但它是每个 API 都必传的灵魂参数。\n- **核心作用：** 用来指定具体的密码学算法名称以及其特有的初始化附加参数（如 IV、盐值、计数器等）。\n- **常见表现形式：** \n - **哈希配置：** { name: \"SHA-256\" }\n - **AES-GCM 配置：** { name: \"AES-GCM\", iv: Uint8Array, tagLength: 128 }\n - **PBKDF2（密码派生）配置：** { name: \"PBKDF2\", salt: Uint8Array, iterations: 100000, hash: \"SHA-256\" }\n\n### 4.6 核心接口对比速查表\n| 接口名称 | 角色定位 | 非安全上下文（HTTP）使用规则 | 典型返回值 \u002F 用途 |\n| --- | --- | --- | --- |\n| Crypto | 全局大管家 | 是（部分方法受限） | 提供crypto.subtle入口、用于生成UUID |\n| SubtleCrypto | 核心工具库 | 否（必须在HTTPS\u002Flocalhost环境下使用） | 返回`Promise\u003CArrayBuffer>`，用于生成密文、哈希等加密核心操作 |\n| CryptoKey | 密钥黑盒 | 否 | 作为安全载体，直接传递给加解密函数使用 |\n| CryptoKeyPair | 密钥对容器 | 否 | 封装返回包含publicKey和privateKey的密钥对对象 |\n## 5. Web Crypto API支持的主流算法\n1. **对称加密（Symmetric）表**\n\n| 算法标识符 | 支持的操作 | 推荐搭配与技术参数 | 典型应用场景 |\n| --- | --- | --- | --- |\n| AES-GCM（强烈推荐） | encrypt、decrypt、generateKey、importKey、exportKey、wrapKey、unwrapKey | 密钥支持128\u002F192\u002F256位，IV推荐96位（12字节） | 传输数据加解密、本地缓存加密，自带防篡改认证标签 |\n| AES-CBC | encrypt、decrypt、generateKey、importKey、exportKey、wrapKey、unwrapKey | 密钥支持128\u002F192\u002F256位，IV固定128位（16字节） | 兼容老旧遗留系统的对称加解密业务 |\n| AES-CTR | encrypt、decrypt、generateKey、importKey、exportKey、wrapKey、unwrapKey | 计数器模式，支持流式处理 | 高频非对齐的流式数据区块加解密 |\n\n- AES-GCM 是当前Web场景下的首选方案，硬件加速支持度高，同时自带消息认证能力，无需额外实现哈希校验逻辑，安全性和开发效率都更优。\n- 不同算法的IV长度要求严格，比如AES-CBC必须使用固定16字节的IV，否则会直接触发解密失败。\n- 三款算法都完整覆盖了密钥生成、导入导出、包裹\u002F解包裹密钥的全流程操作，完全适配Web Crypto的全场景开发需求。\n\n2. **非对称加密算法（Asymmetric）表**\n\n| 算法标识符 | 支持的操作 | 推荐搭配与技术参数 | 典型应用场景 |\n| --- | --- | --- | --- |\n| RSA-OAEP（强烈推荐） | encrypt, decrypt, generateKey, importKey, exportKey, wrapKey, unwrapKey | 模数：2048, 4096 位哈希：推荐 SHA-256 | 混合加密体系中用于加密“对称密钥”，或加密超短敏感字段 |\n\nRSA-OAEP是Web场景下非对称加密的首选方案，它通过最优非对称加密填充机制，解决了传统“教科书RSA”的密文可延展性安全缺陷，在随机预言模型下可以抵御适应性选择密文攻击。由于非对称加密的特性，它不适合直接加密大体积数据，行业通用的最佳实践就是用它加密AES等对称密钥，再用对称算法加密实际业务数据，兼顾安全性和性能效率。\n\n3. **数字签名算法（Signature）表**\n\n| 算法名称 | 支持的操作 | 推荐搭配与技术参数| 典型应用场景 |\n| --- | --- | --- | --- |\n| ECDSA（强烈推荐） | sign、verify、generateKey、importKey、exportKey | 椭圆曲线：P-256、P-384、P-521 | 现代高并发身份验签、JWT签名、区块链节点验签 |\n| RSASSA-PKCS1-v1_5 | sign、verify、generateKey、importKey、exportKey | 模数≥2048位，哈希推荐SHA-256 | 传统企业级API签名、老旧版本JWT签名验签 |\n| RSA-PSS | sign、verify、generateKey、importKey、exportKey | RSA概率签名方案，密码学严谨度极高 | 金融级或司法级等高安全要求的数字签名场景 |\n| HMAC | sign、verify、generateKey、importKey、exportKey | 基于哈希的密钥消息认证码 | 前后端API请求防篡改哈希签名，如AWS签名机制 |\n\n- ECDSA 是Web场景下的首选签名方案，密钥体积小、验签速度快，非常适配高并发的现代Web服务。\n- RSA系列算法兼容性极强，适合需要对接老旧系统的业务场景，其中RSA-PSS的抗攻击能力远高于传统的RSASSA-PKCS1-v1_5。\n- HMAC实现成本低，是轻量API防篡改签名的最优选择。\n\n4. **单向哈希算法（Digest）表**\n\n| 算法名称 | 支持的操作 | 推荐搭配与技术参数 | 典型应用场景 |\n| --- | --- | --- | --- |\n| SHA-256 | digest | 无需密钥，单向不可逆 | 文件完整性校验（秒传场景）、数据防篡改指纹生成 |\n| SHA-384 | digest | 无需密钥，单向不可逆，安全强度高于SHA-256 | 高敏感数据校验、金融级业务的完整性验证 |\n| SHA-512 | digest | 无需密钥，单向不可逆，安全强度最高 | 司法级、军工级等高安全要求场景的哈希校验 |\n\n这三款同属SHA-2家族哈希算法，都具备单向不可逆的核心特性，无法从最终哈希值反推原始输入内容，仅用于生成数据唯一指纹，不能直接用于加解密还原原始数据。安全强度随输出位数提升而升高，同时计算性能也会小幅下降，普通业务场景优先选择SHA-256即可满足需求。\n\n5. **密钥派生算法（Key Derivation）表**\n\n| 算法名称 | 支持的操作 | 推荐搭配与技术参数 | 典型应用场景 |\n| --- | --- | --- | --- |\n| ECDH | deriveKey、deriveBits、generateKey、importKey、exportKey | 椭圆曲线：Diffie-Hellman | 两个终端在不安全信道中，安全地协商出一致的对称密钥 |\n| PBKDF2 | deriveKey、deriveBits、importKey | 基于密码的密钥派生，推荐迭代≥100000次 | 将用户输入的简短文明密码，转换为符合AES标准的高强度密钥 |\n| HKDF | deriveKey、deriveBits、importKey | 基于HMAC的密钥扩展算法 | 从一个基础主密钥，安全地扩展派生出多个子密钥 |\n\n- ECDH 是现代网络通信中密钥协商的核心方案，双方全程不需要直接传输最终的共享密钥，仅通过交换椭圆曲线公钥就能各自计算出完全一致的会话密钥，安全性极高。\n- PBKDF2 专门针对低熵的用户密码设计，通过高迭代次数大幅提升暴力破解的成本，是密码类密钥衍生的行业标准方案。\n- HKDF 面向已经具备高熵的主密钥材料，能高效地将单个主密钥拆分扩展为多个用途独立的子密钥，广泛应用于TLS等现代加密协议中。\n## 6. Web Crypto API 不支持的主流算法\n| 算法名称 | 不支持原因 | 替代实现方案 |\n| --- | --- | --- |\n| MD5 | 已被密码学界证实存在碰撞漏洞，安全性完全失效 | 引入crypto-js等第三方库实现或使用 SHA-256 |\n| SM2\u002FSM3\u002FSM4国密系列 | 浏览器国际标准未原生内置国密算法 | 引入sm-crypto等国密第三方库实现 |\n| ChaCha20-Poly1305\u002FEd25519 | 目前尚未完全普及到所有主流浏览器的 crypto.subtle 中 | 引入第三方加密库补充实现 |\n## 7. 常用操作示例\n以下是整理的 Web Crypto API (crypto.subtle) 最核心、最常用的四大标准代码示例（哈希生成、密钥生成、加密、解密）。需要特别提醒的是：所有 crypto.subtle 的操作都是异步的，都会返回一个 Promise，因此必须配合 async\u002Fawait 使用。\n### 7.1 对称加密AES-GCM示例\nAES-GCM (Galois\u002FCounter Mode) 是一种非常流行且强大的认证加密（AEAD, Authenticated Encryption with Associated Data） 模式。你可以把它理解为一种“二合一”的加密模式：它在高效加密数据的同时，还能确保数据没有被篡改。\n\nAES-GCM 是兼具高性能和高安全性的认证加密模式，特别适合在 Web Crypto API 这类原生环境中使用。它的安全性高度依赖于每次加密都使用唯一且不可预测的 IV。遵循这一核心原则，并妥善管理密钥、认真验证认证标签，就能为你的 Web 应用构建起一道坚实的数据安全防线。\n\n1. **计算文本哈希摘要 (Digest)**：这是最简单的操作，常用于生成文件的 SHA-256。它不需要密钥。\n```js\n\u002F**\n * 计算字符串的 SHA-256 哈希值\n * @param {string} text - 输入的文本\n * @returns {Promise\u003Cstring>} Hex 格式的哈希字符串\n *\u002F\nasync function generateHash(text) {\n \u002F\u002F 1. 将文本编码为 Uint8Array 字节流\n const encoder = new TextEncoder();\n const data = encoder.encode(text);\n\n \u002F\u002F 2. 使用 crypto.subtle.digest 生成哈希（返回 ArrayBuffer）\n const hashBuffer = await crypto.subtle.digest('SHA-256', data);\n\n \u002F\u002F 3. 将 ArrayBuffer 转换为常见的十六进制 (Hex) 字符串\n const hashArray = Array.from(new Uint8Array(hashBuffer));\n const hashHex = hashArray.map(b => b.toString(16).padStart(2, '0')).join('');\n \n return hashHex;\n}\n\n\u002F\u002F 使用示例：\nconst sha256Result = await generateHash(\"Hello World\");\n```\n2. **生成对称加密密钥 (Generate Key)**：在加密数据之前，必须先通过 subtle 算法生成一个标准的加密密钥对象（CryptoKey）。这里以主流的 AES-GCM 算法为例：\n```js\n\u002F**\n * 生成一个用于 AES-GCM 加密的 256 位随机密钥\n * @returns {Promise\u003CCryptoKey>} 返回 CryptoKey 对象\n *\u002F\nasync function generateAESKey() {\n return await crypto.subtle.generateKey(\n {\n name: 'AES-GCM',\n length: 256 \u002F\u002F 密钥长度支持 128, 192, 或 256 位\n },\n false, \u002F\u002F 是否允许该密钥被导出（如果设为 false，密钥无法脱离当前浏览器，安全性极高）\n ['encrypt', 'decrypt'] \u002F\u002F 该密钥被允许用来做什么操作\n );\n}\n\n```\n3. **数据加密 Encrypt**：使用生成的密钥和 AES-GCM 算法对敏感文本进行加密。为了安全，AES-GCM 要求每次加密必须配合一个随机的初始化向量 (IV)。\n```js\n\u002F**\n * 对文本进行 AES-GCM 加密\n * @param {string} text - 待加密的明文\n * @param {CryptoKey} key - 上一步生成的 CryptoKey 对象\n * @returns {Promise\u003C{cipherText: ArrayBuffer, iv: Uint8Array}>} 返回密文和IV\n *\u002F\nasync function encryptText(text, key) {\n const encoder = new TextEncoder();\n const encodedText = encoder.encode(text);\n\n \u002F\u002F AES-GCM 推荐使用 12位（96位）的高安全伪随机数作为 IV\n \u002F\u002F 注意：这里使用的是外部同步方法 getRandomValues 生成随机数\n const iv = crypto.getRandomValues(new Uint8Array(12));\n\n \u002F\u002F 执行加密\n const cipherText = await crypto.subtle.encrypt(\n {\n name: 'AES-GCM',\n iv: iv \u002F\u002F 加密参数必须包含 IV\n },\n key, \u002F\u002F 密钥\n encodedText \u002F\u002F 明文数据\n );\n\n \u002F\u002F 需要同时把密文和 IV 返回，因为解密时必须提供一模一样的 IV\n return { cipherText, iv };\n}\n\n```\n4. **数据解密 Decrypt**：传入加密时使用的 CryptoKey、IV 和密文数组，将其还原为人类可读的明文字符串。\n```js\n\u002F**\n * 对 AES-GCM 密文进行解密\n * @param {ArrayBuffer} cipherText - 密文数据\n * @param {CryptoKey} key - 加密时使用的同一个密钥\n * @param {Uint8Array} iv - 加密时对应的随机 IV\n * @returns {Promise\u003Cstring>} 解密后的明文字符串\n *\u002F\nasync function decryptText(cipherText, key, iv) {\n \u002F\u002F 执行解密\n const decryptedBuffer = await crypto.subtle.decrypt(\n {\n name: 'AES-GCM',\n iv: iv \u002F\u002F 必须传入与加密时完全相同的 IV\n },\n key,\n cipherText\n );\n\n \u002F\u002F 将 ArrayBuffer 字节解码还原为字符串\n const decoder = new TextDecoder();\n return decoder.decode(decryptedBuffer);\n}\n```\n::tip\n如果要在项目中保存或传输生成的密钥和密文，通常需要通过 crypto.subtle.exportKey('raw', key) 将密钥导出成字节，再用 btoa() 或 Base64 方案 转换成可传输的字符串格式。\n::\n### 7.2 非对称加密RSA-OAEP示例\n非对称加密使用公钥加密、私钥解密，常用于非对称场景或加密对称密钥（如密钥交换）。这里使用最安全的 RSA-OAEP 算法。\n\n1. **生成 RSA 密钥对**\n```js\n\u002F**\n * 生成用于 RSA-OAEP 加解密的 2048 位密钥对\n * @returns {Promise\u003CCryptoKeyPair>} 返回包含公钥和私钥的对象\n *\u002F\nasync function generateRSAKeyPair() {\n return await crypto.subtle.generateKey(\n {\n name: \"RSA-OAEP\",\n modulusLength: 2048, \u002F\u002F 密钥长度，2048 位是目前的标准安全线\n publicExponent: new Uint8Array([1, 0, 1]), \u002F\u002F 等于 65537，固定的密码学标准常数\n hash: \"SHA-256\", \u002F\u002F 内部使用的哈希算法\n },\n true, \u002F\u002F 是否允许导出\n [\"encrypt\", \"decrypt\"] \u002F\u002F 用途分配\n );\n}\n```\n2. **使用公钥加密**\n```js\n\u002F**\n * 使用 RSA 公钥加密文本\n *\u002F\nasync function rsaEncrypt(text, publicKey) {\n const encoder = new TextEncoder();\n const data = encoder.encode(text);\n\n \u002F\u002F 返回 ArrayBuffer 格式的密文\n return await crypto.subtle.encrypt(\n { name: \"RSA-OAEP\" },\n publicKey,\n data\n );\n}\n```\n3. **使用私钥解密**\n```js\n\u002F**\n * 使用 RSA 私钥解密文本\n *\u002F\nasync function rsaDecrypt(cipherText, privateKey) {\n const decryptedBuffer = await crypto.subtle.decrypt(\n { name: \"RSA-OAEP\" },\n privateKey,\n cipherText\n );\n\n const decoder = new TextDecoder();\n return decoder.decode(decryptedBuffer);\n}\n```\n### 7.3 数字签名与验证 (RSASSA-PKCS1-v1_5)\n数字签名常用于防止数据被篡改并确认发送者身份。其逻辑是：私钥签名、公钥验证。这里使用最通用的 RSASSA-PKCS1-v1_5 算法。\n\n1. **生成数字签名的 RSA 密钥对**\n```js\n\u002F**\n * 生成用于数字签名的 RSA 密钥对\n *\u002F\nasync function generateSignKeyPair() {\n return await crypto.subtle.generateKey(\n {\n name: \"RSASSA-PKCS1-v1_5\",\n modulusLength: 2048,\n publicExponent: new Uint8Array([1, 0, 1]),\n hash: \"SHA-256\",\n },\n true,\n [\"sign\", \"verify\"] \u002F\u002F 注意：这里的用途是签名和验证\n );\n}\n```\n2. **使用私钥对数据生成签名**\n```js\n\n\u002F**\n * 使用私钥对数据生成签名\n * @returns {Promise\u003CArrayBuffer>} 返回签名摘要\n *\u002F\nasync function signData(text, privateKey) {\n const encoder = new TextEncoder();\n const data = encoder.encode(text);\n\n return await crypto.subtle.sign(\n { name: \"RSASSA-PKCS1-v1_5\" },\n privateKey,\n data\n );\n}\n```\n3. **公钥验证签名是否有效**\n```js\n\n\u002F**\n * 使用公钥验证签名是否有效\n * @returns {Promise\u003Cboolean>} 验证成功返回 true，被篡改则返回 false\n *\u002F\nasync function verifyData(text, signature, publicKey) {\n const encoder = new TextEncoder();\n const data = encoder.encode(text);\n\n return await crypto.subtle.verify(\n { name: \"RSASSA-PKCS1-v1_5\" },\n publicKey,\n signature, \u002F\u002F 之前生成的签名 ArrayBuffer\n data \u002F\u002F 原始数据\n );\n}\n```\n### 7.4 密钥的导入与导出 (Import \u002F Export)\n在实际业务中，密钥不能只存在于浏览器内存中，我们需要将其导出为字符串传给后端，或者将后端的字符串密钥导入为浏览器可识别的 CryptoKey 对象。\n\nWeb Crypto 支持多种格式，最常用的是 JWK (JSON Web Key) 格式（易读、跨平台）和 raw\u002Fspki\u002Fpkcs8（二进制字节流）。\n\n1. **导出密钥为 JSON (JWK 格式)**\n```js\n\u002F**\n * 将 CryptoKey 密钥对象导出为标准的 JSON 对象 (JWK)\n * @param {CryptoKey} key \n * @returns {Promise\u003CObject>} 可直接用于传输或 JSON.stringify 的对象\n *\u002F\nasync function exportKeyToJWK(key) {\n return await crypto.subtle.exportKey(\"jwk\", key);\n}\n```\n2. **将 JSON 导入回密钥对象**\n```js\n\u002F**\n * 将 JWK 格式的 JSON 对象导入还原为可用的 AES-GCM 密钥\n * @param {Object} jwkObject \n * @returns {Promise\u003CCryptoKey>}\n *\u002F\nasync function importKeyFromJWK(jwkObject) {\n return await crypto.subtle.importKey(\n \"jwk\",\n jwkObject,\n { name: \"AES-GCM\" }, \u002F\u002F 必须指定对应的算法\n true, \u002F\u002F 是否允许再次导出\n [\"encrypt\", \"decrypt\"] \u002F\u002F 该密钥允许的用途\n );\n}\n```\n## 8 避坑指南\n1. **陷阱一：IV 重复使用**\n- **问题：** 在 AES-GCM 等对称加密中，重复使用相同的初始化向量（IV）会导致密钥流重复，严重破坏加密安全性。\n- **正确做法：**\n - 每次加密都使用 crypto.getRandomValues() 生成新的随机 IV\n - AES-GCM 模式推荐使用 12 字节（非 16 字节！）的 IV\n - 同一密钥下 IV 重复概率应低于 2⁻³²\n - IV 不需要保密，但必须唯一——记得将 IV 与密文一起存储\n\n2. **陷阱二：密钥管理不当**\n- **常见错误：**\n - 将密钥存储在 localStorage 或 Cookie 中\n - 使用不安全的密钥传输方式\n - 未设置适当的密钥使用限制\n- **安全建议：**\n - 敏感会话密钥存储在 Web Worker 内存中\n - 需要持久化的密钥使用 IndexedDB\n - 使用 exportKey 和 importKey 安全地传输公钥\n\n3. **陷阱三：算法选择失误**\n- 不要使用 SHA-1 或 MD5 进行哈希\n- 不要使用 ECB 模式的 AES 加密\n- RSA 密钥长度至少 2048 位\n\n## 9 最佳实践\n1. **使用方式选型指南推荐**\n\n自 Node.js 19+ 起，Web Crypto API 已成为内置标准，可通过以下方式访问：\n```js\n\u002F\u002F 方式一：使用 globalThis\nconst { subtle } = globalThis.crypto;\n\n\u002F\u002F 方式二：使用 Node.js 模块\nconst { webcrypto } = require('node:crypto');\nconst { subtle } = webcrypto;\n```\n这两种方式虽然最终都能让你获取到 subtle 接口，但它们在设计哲学、模块机制、环境通用性以及底层依赖上有着本质的区别。\n\n| 对比维度 | 方式一：globalThis.crypto | 方式二：require('node:crypto') |\n| --- | --- | --- |\n| 本质定位 | Web标准API（与浏览器对齐） | Node.js原生模块API（特定服务端） |\n| 引入方式 | 零依赖，直接全局访问 | 需要显式通过require引入模块 |\n| 跨端通用性 | 极高（同构JavaScript） | 极低（只能在Node.js运行） |\n| 底层实现 | 浏览器内核（前端）\u002F Node V8底层封装（后端） | 强依赖Node.js内置的OpenSSL库 |\n| 执行上下文 | 必须在安全上下文（前端限制） | 服务端环境，无任何安全上下文限制 |\n\n**推荐使用\"globalThis.crypto\"的场景：** 正在编写纯前端项目、前后端全栈通用工具库（Isomorphic Lib），或者代码需要部署在 Cloudflare Workers、Vercel Edge 等现代边缘计算架构中。\n\n**推荐使用\"require('node:crypto')\"的场景：** 正在编写纯 Node.js 服务端项目（如大型后端服务、CLI 工具），且除了 Web Crypto 之外，还需要用到 Node.js 特有的高级安全特性（如流式加密大文件、硬件安全模块 HSM 交互等）。\n\n2. **使用细节建议**\n\nWeb Crypto API 是浏览器原生加密的黄金标准。它以零依赖、高性能、高安全性的优势，正在逐步取代各种第三方加密库。然而，正如其名 \"subtle\" 所警示的，加密是一个极其专业的领域，细微的错误就可能导致整个系统安全性完全失效。在使用 Web Crypto API 时：\n- 始终在 HTTPS 环境下使用\n- 选择正确的算法和参数（如 AES-GCM + 12 字节 IV）\n- 妥善管理密钥的生命周期\n\n## 10 加解密模板工具\n以下为您编写的这一套 AES-GCM 高级对称加密与解密工具函数。它做到了100% 零依赖、纯原生，通过 globalThis.crypto 实现完美同构。你不需要进行任何环境判断，同一段代码可以无缝运行在浏览器（安全上下文）、Node.js（19+）、Deno、Bun 以及边缘计算（如 Cloudflare Workers）中。\n\n为了解决数据传输与存储的问题，工具函数内部自动处理了 ArrayBuffer 与 Base64 字符串之间的相互转换。可以直接复制使用，代码如下：\n```ts [crypto.ts]\n\u002F**\n * 完美的同构 Web Crypto 安全加解密工具库 (TypeScript 箭头函数版本)\n * 适用环境：Browser (HTTPS), Node.js 19+, Deno, Bun, Cloudflare Workers\n *\u002F\n\n\u002F\u002F 1. 获取全局同构的 subtle 对象\nconst cryptoProvider = globalThis.crypto\nif (!cryptoProvider) {\n throw new Error('当前运行环境不支持 Web Crypto API。请确保在 HTTPS、localhost 或现代 Node.js 19+ 环境下运行。')\n}\nconst subtle: SubtleCrypto = cryptoProvider.subtle\n\n\u002F**\n * 辅助函数：将 ArrayBuffer 转换为可传输的 Base64 字符串\n * 使用现代批处理写法apply，100% 消除严格模式下的 undefined 类型报错\n *\u002F\nconst bufferToBase64 = (buffer: ArrayBuffer): string => {\n const bytes = new Uint8Array(buffer)\n const binary = String.fromCharCode.apply(null, bytes as unknown as number[])\n return btoa(binary)\n}\n\n\u002F**\n * 辅助函数：将 Base64 字符串还原为 ArrayBuffer\n * 使用 Array.from 映射，确保严格类型安全\n *\u002F\nconst base64ToBuffer = (base64: string): ArrayBuffer => {\n const binaryString = atob(base64)\n const bytes = Uint8Array.from(binaryString, (char) => char.charCodeAt(0))\n return bytes.buffer\n}\n\n\u002F**\n * [同构] 生成 AES-GCM 256位加密密钥\n *\u002F\nexport const generateAESKey = async (): Promise\u003CCryptoKey> => {\n return await subtle.generateKey(\n { name: 'AES-GCM', length: 256 },\n true, \u002F\u002F 允许导出\n ['encrypt', 'decrypt']\n )\n}\n\n\u002F**\n * [同构] 导出 CryptoKey 密钥为可传输的 Base64 字符串\n * @param cryptoKey - 浏览器或服务端生成的 CryptoKey 实体\n *\u002F\nexport const exportKeyToBase64 = async (cryptoKey: CryptoKey): Promise\u003Cstring> => {\n const exported = await subtle.exportKey('raw', cryptoKey)\n return bufferToBase64(exported)\n}\n\n\u002F**\n * [同构] 从 Base64 字符串导入还原为 CryptoKey 密钥对象\n * @param base64Key - Base64 格式的密钥字符串\n *\u002F\nexport const importKeyFromBase64 = async (base64Key: string): Promise\u003CCryptoKey> => {\n const rawKeyBuffer = base64ToBuffer(base64Key)\n return await subtle.importKey('raw', rawKeyBuffer, { name: 'AES-GCM' }, true, ['encrypt', 'decrypt'])\n}\n\n\u002F**\n * [同构] 使用 AES-GCM 算法加密字符串文本\n * @param text - 待加密的明文文本\n * @param key - CryptoKey 密钥对象\n * @returns 返回打包了 \"IV\" 和 \"密文\" 的统一 Base64 字符串\n *\u002F\nexport const encryptText = async (text: string, key: CryptoKey): Promise\u003Cstring> => {\n const encoder = new TextEncoder()\n const encodedText: Uint8Array\u003CArrayBuffer> = encoder.encode(text)\n \u002F\u002F 生成 12 字节的密码学安全伪随机数作为 IV (AES-GCM 标准推荐)\n const iv: Uint8Array\u003CArrayBuffer> = cryptoProvider.getRandomValues(new Uint8Array(12))\n \u002F\u002F 执行加密，返回密文 ArrayBuffer\n const cipherBuffer: ArrayBuffer = await subtle.encrypt({ name: 'AES-GCM', iv: iv }, key, encodedText)\n \u002F\u002F 将 IV（12字节）和密文拼接，方便单字符串传输\n const combined = new Uint8Array(iv.length + cipherBuffer.byteLength)\n combined.set(iv, 0)\n combined.set(new Uint8Array(cipherBuffer), iv.length)\n return bufferToBase64(combined.buffer)\n}\n\n\u002F**\n * [同构] 使用 AES-GCM 算法解密文本\n * @param combinedBase64 - 由 encryptText 生成的统一加密 Base64 字符串（内部含 IV）\n * @param key - 对应的 CryptoKey 密钥对象\n *\u002F\nexport const decryptText = async (combinedBase64: string, key: CryptoKey): Promise\u003Cstring> => {\n const combinedBuffer = base64ToBuffer(combinedBase64)\n const combinedBytes = new Uint8Array(combinedBuffer)\n \u002F\u002F 从头部切出前 12 字节作为 IV\n const iv: Uint8Array\u003CArrayBuffer> = combinedBytes.slice(0, 12)\n \u002F\u002F 剩下的部分作为真正的密文\n const cipherText: Uint8Array\u003CArrayBuffer> = combinedBytes.slice(12)\n \u002F\u002F 执行解密\n const decryptedBuffer: ArrayBuffer = await subtle.decrypt({ name: 'AES-GCM', iv: iv }, key, cipherText.buffer)\n const decoder = new TextDecoder()\n return decoder.decode(decryptedBuffer)\n}\n```\nTS 测试脚本\n\n如果你在 Vite\u002FNuxt\u002FNext.js 项目或者使用了 ts-node \u002F bun \u002F deno 的后端环境中，可以直接引入并运行这段强类型的测试代码：\n\n```ts[test-crypto.ts]\nimport { decryptText, encryptText, exportKeyToBase64, generateAESKey, importKeyFromBase64 } from 'crypto'\n;(async () => {\n try {\n const rawData: string = '前后端全平台无缝传输的敏感数据 1234-abcd-TS-VERSION'\n console.log('🔒 原始待加解密明文:', rawData)\n\n \u002F\u002F ==========================================\n \u002F\u002F 阶段一：在 A 端（例如 Node.js 后端）生成密钥并加密\n \u002F\u002F ==========================================\n const originalKey: CryptoKey = await generateAESKey()\n\n \u002F\u002F 导出密钥为 Base64 字符串\n const transportableKeyStr: string = await exportKeyToBase64(originalKey)\n console.log('🔑 [传输中] 密钥已安全序列化为 Base64:', transportableKeyStr)\n\n \u002F\u002F 对数据进行加密\n const secureCipherText: string = await encryptText(rawData, originalKey)\n console.log('📦 [传输中] 密文已安全打包（含IV）为 Base64:', secureCipherText)\n\n \u002F\u002F ==========================================\n \u002F\u002F 阶段二：在 B 端（例如现代 Web 浏览器前端）收到数据解密\n \u002F\u002F ==========================================\n console.log('\\n--- 数据已通过网络无缝抵达另一端 ---')\n\n \u002F\u002F 1. 恢复强类型的 CryptoKey 实体\n const receivedKey: CryptoKey = await importKeyFromBase64(transportableKeyStr)\n\n \u002F\u002F 2. 还原数据内容\n const decryptedOutput: string = await decryptText(secureCipherText, receivedKey)\n console.log('🔓 [还原成功] 解密后的最终明文结果:', decryptedOutput)\n } catch (error) {\n console.error('❌ 密码学同构解密链路失败，错误原因: ', error)\n }\n})()\n\n```",33.5,{"title":6,"description":20},{"loc":5738},"blog\u002F9.Web Crypto API浏览器原生加密的终极指南",[1109],[5746],{"name":5747,"symbol":5748,"icon":5749,"id":1109},"浏览器","web","mdi:web","2026-08-26 10:46:16",6031,"dFEAXKZPH39je0En-u1mE32EQFhpez4BM-ckLEv9l8w",1787994231063]