crypt.encrypt

Encrypts a string with AES using the given key and mode.

crypt.encrypt(data: string, key: string, iv: string?, mode: string?): (string, string)

key is a base64-encoded 256-bit AES key (call crypt.generatekey() to make one).

iv is a base64-encoded 16-byte initialization vector.

Default mode is "CBC". Other accepted modes: "ECB", "CTR", "CFB", "OFB", "GCM".
Learn more here.

Parameters

Parameter	Type	Description
data	string	The plaintext to encrypt.
key	string	Base64-encoded 32-byte AES key.
iv	string?	Base64-encoded 16-byte IV. Random if omitted.
mode	string?	One of the modes. Defaults to "CBC".

Returns

(string, string) - a tuple of (ciphertext, IV) where both are base64-encoded. The IV is returned even when the caller provided one, so the value can always be stored or transmitted alongside the ciphertext.

Example

Cache some sensitive data to disk so the next script run can reuse it without re-fetching.
Encrypt it first so anyone who copies or shares the file can’t read the value.

Example 1

<<<<<<< HEAD
local encrypt = crypt.encrypt("Hello, world!", "test", "test", "test")
=======
-- crypt.encrypt(data: string, key: string, iv: string?, mode: string?): (string, string)
>>>>>>> 50e30f53759b0538759af25c9b271514aa2c9290

Always save the generated IV, as it is required to decrypt the data later.