تشفير البيانات (Data Encryption)

const https = require('https');
const fs = require('fs');

const options = {
  key: fs.readFileSync('server.key'),
  cert: fs.readFileSync('server.crt'),
};

https.createServer(options, app).listen(443);

const crypto = require('crypto');

const algorithm = 'aes-256-gcm';
const key = crypto.randomBytes(32);
const iv = crypto.randomBytes(16);

function encrypt(text) {
  const cipher = crypto.createCipheriv(algorithm, key, iv);
  let encrypted = cipher.update(text, 'utf8', 'hex');
  encrypted += cipher.final('hex');
  const authTag = cipher.getAuthTag().toString('hex');
  return { encrypted, iv: iv.toString('hex'), authTag };
}

function decrypt(encrypted, ivHex, authTagHex) {
  const decipher = crypto.createCipheriv(
    algorithm,
    key,
    Buffer.from(ivHex, 'hex')
  );
  decipher.setAuthTag(Buffer.from(authTagHex, 'hex'));
  let decrypted = decipher.update(encrypted, 'hex', 'utf8');
  decrypted += decipher.final('utf8');
  return decrypted;
}

const { generateKeyPairSync, publicEncrypt, privateDecrypt } = require('crypto');

const { publicKey, privateKey } = generateKeyPairSync('rsa', {
  modulusLength: 4096,
  publicKeyEncoding: { type: 'spki', format: 'pem' },
  privateKeyEncoding: { type: 'pkcs8', format: 'pem' },
});

const encrypted = publicEncrypt(publicKey, Buffer.from('secret data'));
const decrypted = privateDecrypt(privateKey, encrypted);

const encryptedEmail = encrypt(userEmail);

await db.query(
  'INSERT INTO users (email_encrypted, email_iv, email_auth) VALUES (?, ?, ?)',
  [encryptedEmail.encrypted, encryptedEmail.iv, encryptedEmail.authTag]
);

const fs = require('fs');
const zlib = require('zlib');
const crypto = require('crypto');

const key = crypto.randomBytes(32);
const iv = crypto.randomBytes(16);
const cipher = crypto.createCipheriv('aes-256-cbc', key, iv);

const readStream = fs.createReadStream('file.txt');
const writeStream = fs.createWriteStream('file.enc');

readStream
  .pipe(zlib.createGzip())
  .pipe(cipher)
  .pipe(writeStream);

const bcrypt = require('bcrypt');

// تجزئة كلمة المرور (لا يمكن فكها)
const hash = await bcrypt.hash(password, 12);

// التحقق
const match = await bcrypt.compare(password, hash);

const crypto = require('crypto');

// توليد مفاتيح عشوائية
const secret = crypto.randomBytes(64).toString('hex');

// HMac للتوقيع
const hmac = crypto.createHmac('sha256', secret);
hmac.update('message');
const signature = hmac.digest('hex');