Cappu Crypt

CappuCrypt is a really simple key management API service.

Why?

It's great for really small and simple projects, where encryption security is a concern. But not to an extend where you have to concern yourself with key rotations or access control policies.

How easy is it to use?

It just comes with 3 API endpoints, one for decrypting, one for encrypting, and one for key deletion.

Javascript Examples

// Send POST Multiform request for encryption...
const formData = new FormData();
formData.append('encryptionType', 'AES_256');
formData.append('content', 'Hello, World!');

fetch('http://localhost:8080/crypt/encrypt', {
  method: 'POST',
  headers: {
    'Authorization': '<SNIP>'
  },
  body: formData
})
.then(response => response.json())
.then(data => console.log(data))

// Result ->
{
  "status": "SUCCESS",
  "id": "2d01a221-c2ff-4d29-ae9e-b79c7bdcb337",
  "encryptedContent": "JC5TeDwH+ugji+yBKmuXlqdHgqUw8dY8Z9MXoqODlZiqseDZgD0/AGo=",
  "messages": [
    "ID was not provided, creating new ID.",
    "Created new key for 2d01a221-c2ff-4d29-ae9e-b79c7bdcb337 with encryption method: AES_256"
  ],
  "notes": [
    "NEW_ID_CREATED",
    "ENCRYPTED_WITH_AES_256"
  ]
}

// POST Request to decrypt it back!
const formData = new FormData();
formData.append('id', '2d01a221-c2ff-4d29-ae9e-b79c7bdcb337');
formData.append('content', 'JC5TeDwH+ugji+yBKmuXlqdHgqUw8dY8Z9MXoqODlZiqseDZgD0/AGo=');

fetch('http://localhost:8080/crypt/decrypt', {
  method: 'POST',
  headers: {
    'Authorization': '<SNIP>'
  },
  body: formData
})
.then(response => response.json())
.then(data => console.log(data))

// Result ->
{
  "status": "SUCCESS",
  "decryptedContent": "Hello, World!",
  "messages": [
    "ID found in database. Using existing key.",
    "Decrypted content with encryption type: AES_256"
  ],
  "notes": [
    "DECRYPTED_WITH_AES_256"
  ]
}

Features

• Supports AES-128, AES-192 and AES-256.
  • Uses GCM Mode for all encryption, supporting optional metadata for integrity checks.
• An Authorization Key to make API requests.
• A master key to encrypt all the keys.
• One simple Springboot application, so you can place it in a back-facing server without exposure to the outside world!

Getting Started

See how to deploy, or documentations on API endpoints on the wiki.