Apero.Crypto.Cipher (Apero v2.0.0)

Symmetric encryption and streaming cipher utilities.

Supports AES-256-GCM (authenticated), ChaCha20-Poly1305, and AES-256-CTR (streaming mode for large files/streams).

All encrypted values are self-contained (IV/nonce + tag + ciphertext, Base64-encoded) and use :crypto.strong_rand_bytes/1 for key/IV generation.

Summary

Functions

decrypt(encoded, key)

Decrypts a value encrypted with encrypt/2. Returns {:ok, plaintext} or {:error, reason}.

decrypt_chacha20(encoded, key)

Decrypts ChaCha20-Poly1305 encrypted data. Returns plaintext on success, :error on failure.

decrypt_ctr(ciphertext, key, iv)

Decrypts data encrypted with AES-256-CTR streaming.

encrypt(plaintext, key \\ nil)

Encrypts plaintext with AES-256-GCM. Returns {:ok, ciphertext}.

encrypt_chacha20(plaintext, key)

Encrypts plaintext with ChaCha20-Poly1305.

stream_encrypt(arg, chunk)

Encrypts a chunk of data in streaming mode.

stream_finalize(state)

Finalizes a streaming encryption. Returns the final state (discard after).

stream_init(key)

Starts an AES-256-CTR encryption stream. Use with stream_encrypt/2 and stream_finalize/1.

Functions

decrypt(encoded, key)

@spec decrypt(binary(), binary()) :: {:ok, binary()} | {:error, term()}

Decrypts a value encrypted with encrypt/2. Returns {:ok, plaintext} or {:error, reason}.

decrypt_chacha20(encoded, key)

@spec decrypt_chacha20(binary(), binary()) :: binary() | :error

Decrypts ChaCha20-Poly1305 encrypted data. Returns plaintext on success, :error on failure.

decrypt_ctr(ciphertext, key, iv)

@spec decrypt_ctr(binary(), binary(), binary()) :: {:ok, binary()} | :error

Decrypts data encrypted with AES-256-CTR streaming.

encrypt(plaintext, key \\ nil)

@spec encrypt(binary(), binary() | nil) :: {:ok, binary()}

Encrypts plaintext with AES-256-GCM. Returns {:ok, ciphertext}.

encrypt_chacha20(plaintext, key)

@spec encrypt_chacha20(binary(), binary()) :: binary()

Encrypts plaintext with ChaCha20-Poly1305.

stream_encrypt(arg, chunk)

@spec stream_encrypt(
  {any(), binary()},
  binary()
) :: {any(), binary(), binary()}

Encrypts a chunk of data in streaming mode.

stream_finalize(state)

@spec stream_finalize(any()) :: binary()

Finalizes a streaming encryption. Returns the final state (discard after).

stream_init(key)

@spec stream_init(binary()) :: {any(), binary()}

Starts an AES-256-CTR encryption stream. Use with stream_encrypt/2 and stream_finalize/1.