data-encryption

Data Encryption

Table of Contents

• Overview
• When to Use
• Quick Start
• Reference Guides
• Best Practices

Overview

Implement robust encryption strategies for protecting sensitive data at rest and in transit using industry-standard cryptographic algorithms and key management practices.

When to Use

• Sensitive data storage
• Database encryption
• File encryption
• Communication security
• Compliance requirements (GDPR, HIPAA, PCI-DSS)
• Password storage
• End-to-end encryption

Quick Start

Minimal working example:

// encryption-service.js
const crypto = require("crypto");
const fs =

Reference Guides

Detailed implementations in the references/ directory:

Best Practices

✅ DO

• Use AES-256-GCM for symmetric encryption
• Use RSA-4096 or ECC for asymmetric encryption
• Implement proper key rotation
• Use secure key storage (HSM, KMS)
• Salt and hash passwords
• Use TLS 1.2+ for transit encryption
• Implement key derivation (PBKDF2, Argon2)
• Use authenticated encryption

❌ DON'T

• Roll your own crypto
• Store keys in code
• Use ECB mode
• Use MD5 or SHA1
• Reuse IVs/nonces
• Use weak key lengths
• Skip authentication tags