crypto-js VS lz-string

The default settings seem to be at fault here, not the implementation it self.

> This is because it both defaults to SHA1, a cryptographic hash algorithm considered insecure since at least 2005, and defaults to one single iteration, a 'strength' or 'difficulty' value specified at 1,000 when specified in 1993

The fix: https://github.com/brix/crypto-js/commit/421dd538b2d34e7c24a...

crypto-js

CryptoJS 官方說明文件：GitHub。

You might use the .env file, which sits inside a server, to store important passwords and keys to databases and APIs. Keeping it in text inside a .env is risky as it may get exposed if the server is compromised. To avoid this issue, one should use Encryption and Decryption. There are a couple of tools and libraries which offer similar functionality. You can try any of those, but we recommend using CryptoJS or Forge.

Edit: They are likely using this version: https://github.com/brix/crypto-js/releases/tag/3.1.5

The Crypto-JS library should be able to decode this. The docs show a simple method, and I'm using it like so:

crypto-js

I kept searching and stumbled accross Staticrypt. This looked pretty promising. This is based on the crypto.js library and will take a full HTML page and encrypt it. The user will then need to enter the password for the script to un-encrypt it. It sounded pretty neat. I plugged in some HTML code and a password to the site to test it out, and sure enough, it spat out an encrypted page. It looked promising enough to look further into.

Don't even have to change any logic just encrypt on write and decrypt on read with something like this: https://github.com/brix/crypto-js

Compresion / Decompression using lz-string

The really nice thing about JSON is that it's very compressible. I was saving my game's entire world state as JSON and ran up against the 5MB LocalStorage limits for Javascript pretty quick. When I brought in lz-string for compression I got 90% reduction in save sizes, and that's not even a particularly aggressive algorithm.