import { generate_rsa_keypair_pem } from '@vaultic/crypto-engine';

const { public_pem, private_pem } = await generate_rsa_keypair_pem();

import { rsa_encrypt_base64 } from '@vaultic/crypto-engine';

// Works with any message size - hybrid encryption is automatic
const ciphertext = await rsa_encrypt_base64(publicKeyPem, message);

import { rsa_decrypt_base64 } from '@vaultic/crypto-engine';

// Automatically detects and handles both direct RSA and hybrid encryption
const plaintext = await rsa_decrypt_base64(privateKeyPem, encryptedMessage);

import { protect_keypair, unprotect_keypair } from '@vaultic/crypto-engine';

// Encrypt keys with a password
const passphrase = "secure-password";
const protectedKeys = await protect_keypair(privatePem, publicPem, passphrase);

// Decrypt later with the same password
const recoveredKeys = await unprotect_keypair(protectedKeys, passphrase);

import { protect_message, unprotect_message } from '@vaultic/crypto-engine';

// Encrypt message with password
const secretMessage = "Confidential information";
const protectedMessage = await protect_message(secretMessage, passphrase);

// Decrypt with the same password
const decryptedMessage = await unprotect_message(
  protectedMessage.ciphertext,
  passphrase, 
  protectedMessage.salt, 
  protectedMessage.nonce
);