Developer reference
Crypto package reference
A high-level guide to @bunorden/crypto; verify exports against the package source for production work.
Current primitives
- AES-GCM authenticated encryption helpers.
- Argon2id-first key derivation when an optional provider is available, with PBKDF2 fallback compatibility.
- Key-version and encrypted-entry helpers.
- Library-level recovery metadata and wrapped-master-key primitives.
Important boundary
Crypto APIs are developer primitives, not a statement that every product supports a user-facing recovery or rotation workflow. Authenticated encryption detects modifications; no implementation should be described as tamper-proof.