gistfile1.txt

start (secret) -> return apiObject with [encrypt, decrypt] with plaintext secret stored in closure

encrypt (input) -> generate salt, iv, additionalData, -> generate hash from salt and secret -> generate key from hash -> encrypt with key -> return json string with salt, iv, additionalData, and encrypted data (edited)

decrypt(input) -> read salt, iv, additionalData -> generate hash from salt and secret -> generate key from hash -> decrypt with key -> return unecrypted data

and the 'encrypted text' includes plaintext metadata about the encryption settings (salt, iv, additionalData)