Encryptor

5 min

	With the Encryptor app in Make, you can encrypt any text data using AES (Advanced Encryption Standard), PGP (Pretty Good Privacy), and create a digital signature.

You do not need to establish a connection to use the Encryptor app.

AES (Advanced Encryption Standard) is a symmetric-key algorithm. It uses the same key for both encrypting and decrypting data.

PGP (Pretty Good Privacy) is an asymmetric-key algorithm. It uses a private key, a public key, and a session key. The session key is encrypted with the public key and decrypted with the private key.

The digital signature generates a unique hash using SHA-1 or SHA-256.

Encryptor modules

You can use the following types of modules to build your scenarios.

Decrypt data using AES (Advanced Encryption Standard).

AES is a symmetric-key algorithm. It uses the same key for both encrypting and decrypting data.

Example: Encrypt and decrypt a message with AES (advanced) modules

Field	Description
Key (required)	Create a keychain.The key will be encrypted by Make and won't be accessible to anyone. This adds an additional layer of security. Name: Enter a name for your key. Key: Enter your key. If the key is encoded as plain text, the 128-bit key requires 16 characters and a 256-bit key requires 32 characters. Key Encoding: Select Base64, Hexadecimal, or Plain Text.
Bits (required)	Select 128 or 256.
Input encoding (required)	The encoding format of the data you are providing in the field below. Select Binary, Base 64, or Hexadecimal.
Data (required)	Enter or map the data you want to decrypt.
Output encoding (required)	The encoding format of the encrypted text you want the module to generate. Select ASCII, Binary, or UTF-8.
Cipher Algorithm (required)	Select CBC or GCM.
Initialization Vector Encoding	The encoding format of the initialization vector. Select UTF-8, Binary, Base 64, or Hexadecimal.
Authentication Tag Encoding	The encoding format of the authentication tag. Select Binary, Base 64, or Hexadecimal. Authenticated encryption mode only (GCM).

Decrypt data using AES (Advanced Encryption Standard). Use this module if you don't share your scenario or if you trust the users who will have access to it, because the key you enter will not be encrypted by Make and will be visible to anyone who opens the module, gets the blueprint, or watches the execution logs of the scenario. If you want more security, use AES Decrypt (advanced).

AES is a symmetric-key algorithm. It uses the same key for both encrypting and decrypting data.

Example: Encrypt and decrypt a message with AES (simple) modules

Field	Description
Input encoding (required)	The encoding format of the data you are providing in the field below. Select Binary, Base 64, or Hexadecimal.
Data (required)	Enter or map the data you want to decrypt.
Output encoding (required)	The encoding format of the encrypted text you want the module to generate. Select ASCII, Binary, or UTF-8.
Secret key (required)	Enter your secret key.

Encrypt data using AES (Advanced Encryption Standard).

AES is a symmetric-key algorithm. It uses the same key for both encrypting and decrypting data.

Example: Encrypt and decrypt a message with AES (advanced) modules

Field	Description
Key (required)	Create a keychain. The key will be encrypted by Make and won't be accessible to anyone. This adds an additional layer of security. Name: Enter a name for your key. Key: Enter your key. If the key is encoded as plain text, the 128-bit key requires 16 characters and a 256-bit key requires 32 characters. Key Encoding: Select Base64, Hexadecimal, or Plain Text.
Bits (required)	Select 128 or 256.
Input encoding (required)	The encoding format of the data you are providing in the field below. Select Binary, Base 64, or Hexadecimal.
Data (required)	Enter or map the data you want to encrypt.
Output encoding (required)	The encoding format of the encrypted text you want the module to generate. Select ASCII, Binary, or UTF-8.
Cipher Algorithm (required)	Select CBC or GCM.
Initialization Vector Encoding	The encoding format of the initialization vector. Select UTF-8, Binary, Base 64, or Hexadecimal.

Encrypt data using AES (Advanced Encryption Standard).

Use this module if you don't share your scenario or if you trust the users who will have access to it, because the key you enter will not be encrypted by Make and will be visible to anyone who opens the module, gets the blueprint, or watches the execution logs of the scenario. If you want more security, use AES Encrypt (advanced).

AES is a symmetric-key algorithm. It uses the same key for both encrypting and decrypting data.

Example: Encrypt and decrypt a message with AES (simple) modules

Field	Description
Input encoding (required)	The encoding format of the data you are providing in the field below. Select Binary, Base 64, or Hexadecimal.
Data (required)	Enter or map the data you want to encrypt.
Output encoding (required)	The encoding format of the encrypted text you want the module to generate. Select ASCII, Binary, or UTF-8.
Secret key (required)	Enter your secret key.

Create a digital signature using RSA-SHA1 or RSA-SHA-256.

Example: Create a digital signature

Field	Description
Key (required)	Create a keychain. Name (required): Enter a name for your key. Private Key (required): Enter your private key. Must match pattern /^-----BEGIN (RSA PRIVATE\|PRIVATE) KEY-----[A-Za-z0-9+\/=\n\s]+-----END \1 KEY-----\n$/. Passphrase (optional):* Enter a phrase.
Algorithm (required)	Algorithm used to process the signature. Select RSA-SHA1 or RSA-SHA256. RSA-SHA256 is more secure than RSA-SHA1. We recommend using RSA-SHA256 unless the recipient only supports RSA-SHA1.
Input encoding (required)	The encoding format of the data you are providing in the Data field below. Select ASCII, Binary, or UTF-8.
Output encoding (required)	The encoding format of the encrypted text you want the module to generate. Select Base64 or Hexadecimal.
Data (required)	Enter or map the data you want to use to create a digital signature.

Decrypt data using PGP (Pretty Good Privacy).

PGP is an asymmetric-key algorithm. It uses a private key and a public key. You can use keys that leverage the ECC or RSA algorithm. Messages are encrypted and decrypted with a session symmetric key. Then the session key is encrypted with a public key and decrypted with a private key.

Example: Encrypt and decrypt a PGP message

Field	Description
Private key (required)	Create a keychain. The private key is your own key that will be used to decrypt the session key. It can be protected by an optional passphrase. If you use the RSA key algorithm the minimum key size is 2048 bits. Name (required): Enter a name for your key. Private Key PGP (required): Enter your private key. Must match pattern /^-----BEGIN PGP PRIVATE KEY BLOCK-----[\s\S]+-----END PGP PRIVATE KEY BLOCK-----\n$/. Passphrase (optional):* Enter a phrase used to protectthe key.
Public key	Create a keychain. This is the sender's public key that you can add if you want to verify the signature of the message and to ensure the sender is legitimate. This works with the option Verify signature with a public key below. If you use the RSA key algorithm, the minimum key size is 2048 bits. Name (required): Public Key PGP (required): Enter your public key. Must match pattern /^-----BEGIN PGP PUBLIC KEY BLOCK-----[\s\S]+-----END PGP PUBLIC KEY BLOCK-----\n*$/.
Message (required)	Enter or map the message you want to decrypt.
Verify signature with a public key?	Select Yes or No. If the sender signs the message, this option verifies if the signature matches or not. It requires the Public key of the sender in the field above. The decryption will fail if no valid signature is found.

Encrypt data using PGP (Pretty Good Privacy).

Example: Encrypt and decrypt a PGP message

Field	Description
Private key	Create a keychain. Name (required): Enter a name for your key. Private Key PGP (required): Enter your private key. It can be optionally protected with a Passphrase. If you provide your private key, the message will be automatically signed. If you use the RSA key algorithm the minimum key size is 2048 bits. Passphrase (optional): Enter a phrase used to protect the key.
Public key (required)	Create a keychain. Name (required): Enter a name for your key. Public Key PGP (required): This is the public key of the recipient you want to send an encrypted message to. It's used to encrypt the session key that is used to encrypt the message. If you use the RSA key algorithm the minimum key size is 2048 bits.
Message (required)	Enter or map the message you want to encrypt.

Encryptor

Encryptor modules

AES Decrypt (advanced)

AES Decrypt (simple)

AES Encrypt (advanced)

AES Encrypt (simple)

Create digital signature

Decrypt a PGP message

Encrypt a PGP message