𝖨𝖢𝖤. 𝖨𝗇𝗍𝗋𝗎𝗂𝗌𝗂𝗈𝗇 𝖢𝗈𝗎𝗇𝗍𝖾𝗋𝗆𝖾𝖺𝗌𝗎𝗋𝖾𝗌 𝖤𝗅𝖾𝖼𝗍𝗋𝗈𝗇𝗂𝖼𝗌

Encrypt your secrets and sensitive data at rest.

QuickStart

1. Create a Node.JS project with the ICE client

``bash $ git init ice-client-demo && cd ice-client-demo $ npm init -y $ npm install ice-client dotenv --save`

`js require('dotenv').config(); var ice = require('ice-client');

ice.encrypt("neuromancer", function(err, ciphertext) { console.log("ciphertext:", ciphertext.toString('base64'));

ice.decrypt(ciphertext, function(err, plaintext) { console.log("plaintext:", plaintext.toString()); }); })`

2. Get an ICE access key. The fastest way is through the Heroku ICE Addon.

`sh $ heroku create ice-client-demo Creating ⬢ ice-client-demo... done

$ heroku addons:add ice Creating ice on ⬢ ice-client-demo... free Created ice-corrugated-21355 as ICE_AWS_ACCESS_KEY_ID, ICE_AWS_SECRET_ACCESS_KEY, ICE_ENCRYPTION_CONTEXT, ICE_KEY_ARN

$ heroku config -s ICE_AWS_ACCESS_KEY_ID=AKIAJ2CNXCVNUZ5UDZAQ ICE_AWS_SECRET_ACCESS_KEY='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' ICE_ENCRYPTION_CONTEXT='ctx=night-construct-1443' ICE_KEY_ARN='arn:aws:kms:us-east-1:178540880712:key/b6b5f625-6603-471a-a6dd-962fa51d4c0a'

$ heroku config -s > .env`

3. Use the ICE client and backing cryptography service to encrypt and decrypt data.

`sh $ node index.js ciphertext: AQECAHhUH3SgfMwR3l/3GhIC4MjA43IDifWWdSXIVR0nbqnHkwAAAGkwZwYJKoZIhvcNAQcGoFowWAIBADBTBgkqhkiG9w0BBwEwHgYJYIZIAWUDBAEuMBEEDJPX7Xptjiilx9m2AQIBEIAmUMLbAMoVZdoCTNLZMDDiwdt5A5rNx/TrQCvdj6/wTlBP39xBZH0= plaintext: neuromancer``

Authors

* Noah Zoschke

License

Apache 2.0

QuickStart

1. Create a Node.JS project with the ICE client

bash
    $ git init ice-client-demo && cd ice-client-demo
    $ npm init -y
    $ npm install ice-client dotenv --save

js
    require('dotenv').config();
    var ice = require('ice-client');

    ice.encrypt("neuromancer", function(err, ciphertext) {
        console.log("ciphertext:", ciphertext.toString('base64'));

        ice.decrypt(ciphertext, function(err, plaintext) {
            console.log("plaintext:", plaintext.toString());
        });
    })

2. Get an ICE access key. The fastest way is through the Heroku ICE Addon.

sh
    $ heroku create ice-client-demo
    Creating ⬢ ice-client-demo... done

    $ heroku addons:add ice
    Creating ice on ⬢ ice-client-demo... free
    Created ice-corrugated-21355 as ICE_AWS_ACCESS_KEY_ID, ICE_AWS_SECRET_ACCESS_KEY, ICE_ENCRYPTION_CONTEXT, ICE_KEY_ARN

    $ heroku config -s
    ICE_AWS_ACCESS_KEY_ID=AKIAJ2CNXCVNUZ5UDZAQ
    ICE_AWS_SECRET_ACCESS_KEY='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'
    ICE_ENCRYPTION_CONTEXT='ctx=night-construct-1443'
    ICE_KEY_ARN='arn:aws:kms:us-east-1:178540880712:key/b6b5f625-6603-471a-a6dd-962fa51d4c0a'

    $ heroku config -s > .env

3. Use the ICE client and backing cryptography service to encrypt and decrypt data.

sh
    $ node index.js 
    ciphertext: AQECAHhUH3SgfMwR3l/3GhIC4MjA43IDifWWdSXIVR0nbqnHkwAAAGkwZwYJKoZIhvcNAQcGoFowWAIBADBTBgkqhkiG9w0BBwEwHgYJYIZIAWUDBAEuMBEEDJPX7Xptjiilx9m2AQIBEIAmUMLbAMoVZdoCTNLZMDDiwdt5A5rNx/TrQCvdj6/wTlBP39xBZH0=
    plaintext:  neuromancer