I am doing string encryption like below using the guid and storing the cipherout.ciphertext value but not storing the cipherout.iv value. But when decrypting , why cant i just pass the key , instead of passing both key and cipherout.iv values. Because it is asking for both values while decrypting it. Do i need to store both key and cipherout.iv values for decrypting? Please advice FIRSTFILE.js :

var guid = "4ab23a136dc347d";
var inputString = "sometext";

// Create the key
var key = crypto.createSecretKey({guid:guid, encoding:encode.Encoding.UTF_8});

// Encrypt
var cipher = crypto.createCipher({algorithm: crypto.EncryptionAlg.AES, key: key});
cipher.update({input: inputString, inputEncoding: encode.Encoding.UTF_8});
var cipherout = cipher.final({outputEncoding: encode.Encoding.HEX});

SECONDFILE.JS

// Decrypt
var decipher = crypto.createDecipher({algorithm: crypto.EncryptionAlg.AES, key: key, iv:cipherout.iv}); //asking here 
decipher.update({input: cipherout.ciphertext, inputEncoding: encode.Encoding.HEX});
var decipherout = decipher.final({outputEncoding: encode.Encoding.UTF_8});

@samantha not much. By the looks of docs, your iv value should be in your cipherout variable, cipherout.iv is your iv for cypher

thanks @Vaid . I am thinking the same . As of now all my code is working fine . just wanted to clarify if i am in right path or not .

@samantha: Did you run into a similar error : AN_ERROR_OCCURRED_WHILE_DECRYPT_PASSWORDGUID

yes @Vaid , i got that error initially . later i resolved it 🙂👍

@samantha A guid can be used multiple times, thereby you can encrypt multiple strings using same key, but I remember reading somewhere in the docs regarding GUID usability dependent upon script re-execution. Personally I'm not a fan of NetSuite's limited documentation on their implementation of modules like CryptoJS . It came handy in some scenarios but for other situations like calling Restlets from server side scripts - I directly used external crypto-js rather than trying to figure out native Unexpected Errors 🙂

@Vaid ya valid point . Makes sense