crypto-js

library4.2.0jsnpmunverified

JavaScript library of crypto standards providing various cryptographic algorithms including AES, DES, SHA-256, MD5, HMAC, and PBKDF2. Version 4.2.0 is the latest stable release, but the library is discontinued and no longer maintained. It supports both Node.js and browser environments with modular imports. The library uses the native Crypto module for random number generation but relies on its own implementations for other operations. Development has stopped; users are encouraged to migrate to the native Web Crypto API in modern browsers or Node.js crypto module. Release cadence has been low, with the last release in 2021.

auth-security serialization

npm install crypto-js

github ↗package ↗

INSTALL

IMPORT

SIG · CRYPTO-JS

crypto-js

auth-securityjavascriptv4.2.0

Install

—

Import

—

Disk

—

Pass rate

0/ 6

Env Coverage0 / 6

glibc

18–22

musl

18–22

Install & Compatibility

Where this runs

tested against v? · npm install

Install × environment matrix

Each cell = how many times install + import succeeded across repeated harness runs. Partial = flaky.
glibc = Debian/Ubuntu slim · musl = Alpine Linux

musl

node 18–226 runs

build_error

glibc

node 18–226 runs

build_error

Code

Verified usage

Verified import paths — ran on the pinned version, not inferred.

AES

✓ import AES from 'crypto-js/aes';

✗ const AES = require('crypto-js/aes');

ESM import works with bundlers like webpack; in Node.js, use require() for CommonJS.

CryptoJS

✓ import CryptoJS from 'crypto-js';

✗ const CryptoJS = require('crypto-js').default;

Default import for the full library; no need for .default.

SHA256

✓ import SHA256 from 'crypto-js/sha256';

✗ import { SHA256 } from 'crypto-js';

Named export not available; must import default from specific module.

enc.Base64

✓ import Base64 from 'crypto-js/enc-base64';

✗ const Base64 = require('crypto-js/enc-base64').Base64;

Import default; the module exports a single encoder object.

hmacSHA512

✓ import hmacSHA512 from 'crypto-js/hmac-sha512';

✗ import { hmacSHA512 } from 'crypto-js';

Import default from the specific HMAC module.

lib.WordArray

✓ import CryptoJS from 'crypto-js'; const wordArray = CryptoJS.lib.WordArray;

✗ import WordArray from 'crypto-js/lib-wordarray';

WordArray is accessed via the core object; it is not a separate module.

Demonstrates SHA-256 hashing, AES encryption and decryption with a string key, and hex encoding.

import CryptoJS from 'crypto-js'; import SHA256 from 'crypto-js/sha256'; import AES from 'crypto-js/aes'; import encHex from 'crypto-js/enc-hex'; // Hash a message const hash = SHA256('Message'); console.log(hash.toString(encHex)); // hex digest // Encrypt and decrypt const secretKey = 'secret-key-42'; const original = 'Hello, World!'; const ciphertext = CryptoJS.AES.encrypt(original, secretKey).toString(); console.log('Encrypted:', ciphertext); const bytes = CryptoJS.AES.decrypt(ciphertext, secretKey); const decrypted = bytes.toString(CryptoJS.enc.Utf8); console.log('Decrypted:', decrypted);

Debug

Known issues

deprecatedCryptoJS is discontinued and no longer maintained.

fix

Migrate to native Web Crypto API in browsers or Node.js crypto module.

affects: >=4.0.0

gotchaAES encryption with a string key uses an internal KDF and may produce different ciphertexts on different platforms due to nonce generation. Use a consistent salt or pass an IV explicitly to ensure reproducibility.

fix

Provide a proper IV: CryptoJS.AES.encrypt(msg, key, { iv: CryptoJS.lib.WordArray.random(16) }).toString()

affects: >=3.0.0

breakingIn v4, automatic conversion of WordArray to hex string was removed; toString() with an encoder is now required.

fix

Use hash.toString(CryptoJS.enc.Hex) or other explicit encoder.

affects: >=4.0.0

gotchaUsing Math.random() for key generation is insecure; CryptoJS uses native crypto for random numbers in Node.js, but in older browsers your custom keys may be weak.

fix

Always use CryptoJS.lib.WordArray.random() for secure keys.

affects: >=4.0.0

deprecatedThe Bower package manager is deprecated; CryptoJS is still available via npm.

fix

Install via npm instead: npm install crypto-js

affects: <=4.2.0

Errors

Common errors & fixes

TypeError: Cannot read properties of undefined (reading 'enc')

Attempting to access CryptoJS.enc without importing the full library or specific encoder.

fix

Import full library: import CryptoJS from 'crypto-js'; then use CryptoJS.enc.Utf8.

Uncaught TypeError: CryptoJS.enc.Hex is undefined

Using an encoder without importing its module.

fix

Explicitly import the encoder: import encHex from 'crypto-js/enc-hex';

Error: CryptoJS requires WebAssembly support (or similar)

Rare edge case on very old browsers lacking WebAssembly; not a typical error.

fix

Update browser or use a polyfill.

Module not found: Error: Can't resolve 'crypto-js/aes'

Missing import or incorrect path when using standalone scripts without bundler.

fix

Ensure the module is installed: npm install crypto-js. For browser, include via script tag: <script src='path/to/crypto-js/crypto-js.js'></script>

Upgrade

Version history

4.2.0latest on npm

Audit

Dependencies

No dependency data recorded yet.

Agent activity

18 hits · last 30 days

node

OpenAI (training)

Resources

githubhttps://github.com/brix/crypto-js ↗

packagehttps://www.npmjs.com/package/crypto-js ↗