@batalabs/virlow-crypto

Client-side encryption primitives for Virlow: PBKDF2 key derivation and AES-256-GCM. Framework-free; runs in browsers and Node 20+.

Virlow encrypts notes on the user's device, so the key is derived from their master password and never sent anywhere. This package is that layer, extracted so the web app, the local MCP connector, and the hosted connector all use one implementation rather than three.

import { deriveMasterKey, encryptNoteFields, decryptNoteFields } from '@batalabs/virlow-crypto';

const { key } = await deriveMasterKey(masterPassword, userId);
const { encryptedTitle, encryptedContent, iv } = await encryptNoteFields(key, title, body);

Published from batalabs/virlow-app.