Cryptography - Node.js Basics Part 8

Hope you enjoyed the video!

Check out this code here:

Join my Discord server to chat with me:

Check out some code on my GitHub:

Tweet me something funny on Twitter:

Say hi over at Facebook:

Sincerely,
Engineer Man

[TheRomane]

Dude your really good at explaining this stuff

[qqch]

Concise, to the point. a good starting point for crypto. Thank you!

[egeneral]

I'm glad I found your channel. Thank you.

[johnbecker]

For the entripy pool that the os uses if there is absolulty no random io (microphones, mice, keyboards) you will not actualy get a truly "random" number. For security depentent operations you need some external source that can't be predicted. (note some computers are able to use the desink in hardrives gpus and other subsystems that have their own slower cup on them to genorate numbers)

[rosalyna_]

heeey i'm a beginner with node js and i want to send a document that is encrypted then the reciever could decrypt it how can i do that

[AnandanK_]

I can able to see tat folder 052 having tis example. So it means almost 50+ samples u have. Can u plz share tat

[tehreemsultan]

Thank you so much for the video it helped much

[bharathbellamkonda]

could say or link anything how to use encryption and decryption using crypto-js node module

[vigneshs]

Which algorithm will 7used to encrypt in react and decrypt in node.js

[Warmonger]

No HMAC? Would not this imply a padding oracle? Or does the crypto module take care of this?

[lipi]

Encrytion and decryption are heavy tasks.
Directly using the main thread would block other operations like listening to requests.
Any other library which does this in a separate thread?

[Sunilreyna]

hi how do we encrypt req res like https. so no one able to read response we sent to cleint, expect client app running

[JNET_Reloaded]

page not found error on code lnk, plz fix and reply.

[ozzyfromspace]

What? I've always used the third-party crypto-js module 😳💀🙈

[gguitarp]

I was just about to say, “true randomness doesn’t exist in code” good catch 😁

[johnbecker]

Also you should store the secrets in a file only readabl by root then make a startup file that you run as root which reads the file then passes that to the main server file that you are using while not running that as root (im sure there must be a better way to do this but I cant think of it for the life of me). This way if someone gets access to your server they can't get your keys and they also dont have root access.

[troooooper]

i don't get it, wtf is IV??
do you need to store IV per transaction, because apparently i read it can't be the static but needs to be the same while decrypting

[love-hammer]

Sufficient randomness not true randomness but I'm nitpicking.