Encrypted IndexedDB namespace lab with CRUD operations and key derivation inspector
Use a raw key and a payload. Payload accepts JSON when parseable; otherwise it is treated as plain text.
Aguardando operacao...
Creates a new record with an opaque UUID key and returns the generated key back to the workbench.
Nenhum UUID gerado ainda.
Refresh the current namespace, count records, list keys, seed sample data and clear only this namespace.
Nenhuma chave carregada.
Every mutation refreshes records, keys and counters. Existing records from another session may appear with opaque IDB keys when raw keys are not known in memory.
Sem dados.
aguardando conexao...
Dbaldo stores encrypted blobs under opaque IDB keys. The raw key and namespace are never written as clear text.
iandara-dbaldo / records
ns_prefix:sha512(raw_key + namespace) -> { b64: "...", h: "sha512..." }
ns_prefix:sha512(raw_key + namespace) -> { b64: "...", h: "sha512..." }
other_ns:sha512(raw_key + namespace) -> { b64: "...", h: "..." }
SHA-512(idb_key + ciphertext_b64) and checked during get() and list().
This card mirrors the exact derivation from packages/dbaldo/main.mjs.
--
--
The same raw key must generate different opaque prefixes and different final IDB keys when the namespace changes.
--
--