hcef

hcef

hcef is a fast and secure Node.js native addon written in C++ that provides file encryption with custom obfuscation and HMAC integrity verification. Built using OpenSSL and N-API.

Features

• OpenSSL-backed
• HMAC-SHA256 integrity check
• Obfuscation: Caesar cipher, XOR, and byte reversal
• Uses salt and IV for each encryption
• Secure key derivation (PBKDF2-HMAC-SHA256-ARGON2)
• Automatic Base64 encoding for file structure
• Native performance with clean memory handling
• Zlib package for compression

Installation

npm install hcef

Note: Requires a C++17-compatible compiler, node-gyp, and OpenSSL development headers installed.

Usage

Encrypt a file

const hcef = require('hcef');

const result = hcef.encrypt('example.txt', 'myStrongPassword123');
console.log(result);

Decrypt a file

const hcef = require('hcef');

const result = hcef.decrypt('example.txt.enf', 'myStrongPassword123');
console.log(result);

The output will be saved to example.txt.enf (encrypted) and example.txt.enf.dnf (decrypted)

File Format Structure

The encrypted file is a Base64-encoded string containing:

MAGIC_HEADER:salt:iv:mac:ciphertext

• MAGIC_HEADER: To verify the file is encrypted using hcrypt-native
• salt, iv, mac, and ciphertext are all base64-encoded

Security

• Keys are derived using 100,000 PBKDF2 iterations (HMAC-SHA256)
• HMAC prevents tampering and verifies integrity before decryption
• Memory is securely wiped using OPENSSL_cleanse
• Uses Both PBKDF2 and ARGON2 To Slow Down Brute Force Attacking [Latest Release]
• zlib compression.

While this project is production-hardened, always stay updated with the latest OpenSSL and test thoroughly in your environment.

Development & Testing

This package is actively maintained and tested with:

• Manual encryption-decryption consistency checks
• Corruption resilience tests (tampered file detection)
• Compatibility checks across major platforms

License

MIT

Contributing

Pull requests and suggestions are welcome. Please open issues to report bugs or request features.

Changelog

Version	Status	Description
2.2.6	Stable	Stable and secure, but many dependencies. Try using the latest.
2.3.7	Stable	Stable release with added security layers.
2.4.3+	Stable	Stable Release Added zlib for compression
2.5.2	Latest	Latest Release Adds Smart error handling, and Key Encryption Smart Handling

Author

Developed and maintained by Jeck