create_encryption_key.js

const forge = require("node-forge");

/**
 * Example on how to generate a random AES key and re-use it afterwards
 * @param password
 * @param iv
 * @returns {{key: the|*, iv: the|*}}
 */
const derivePassword = (password, keySize = 32, iv = false) => {
    // generate a random iv
    let passwordIv;
    if (iv) {
        // turn existing iv into bytes
        passwordIv = forge.util.hexToBytes(iv);
    } else {
        // generate a new random iv
        passwordIv = forge.random.getBytesSync(keySize);
    }

    // amount of pbkdf2 iterations,
    const iterations = 300000;

    // derive a 16 bit key from the password and iv
    const derivedBytes = forge.pkcs5.pbkdf2(password, passwordIv, iterations, keySize);

    // turn derivedBytes into a readable string
    const encryptionKey = forge.util.bytesToHex(derivedBytes);

    // turn passwordIv into a readable string
    const encryptionIv = forge.util.bytesToHex(passwordIv);

    return {
        key: encryptionKey,
        iv: encryptionIv
    };
};

/**
 * Basic function just to generate a random AES key
 * @param keySize
 */
const generateRandomKey = keySize => {
    // random bytes
    const key = forge.random.getBytesSync(keySize);

    // straight to hex and return it
    return forge.util.bytesToHex(key);
};

/**
 * Decides the key size
 * 16 for 128 bit AES
 * 24 for 192 bit AES
 * 32 for 256 bit AES
 *
 * @type {number}
 */
const KEY_SIZE = 32;

// the password used to derive a key, could be any string
const password = "Some Password You Can Derive A Key From";

/**
 * set to the given Iv value if you want to turn the password into the same exact encryption key
 * @type {string|false}
 */
const existingIv = false;
// for example:
// const existingIv = "98d90948a157465a00cf0edbea98492b";

const derivedInfo = derivePassword(password, KEY_SIZE, existingIv);
console.log(`Encryption keys (${KEY_SIZE}-bit):`);
console.log("AES Key: ", derivedInfo.key);
console.log("AES Key IV: ", derivedInfo.iv);

const aesKey = generateRandomKey(KEY_SIZE);
console.log("\nRandom AES key: ", aesKey);