Scheduled maintenanceScheduled maintenance: PayWise infrastructure maintenance is planned from Friday, October 9 at 7:00 p.m. ET through Monday, October 12 at 8:00 a.m. ET. Sandbox and Production services may experience intermittent interruptions during this period. Existing PayWise service URLs and SFTP hostnames will remain unchanged.
Skip to main content

Client-side Encryption Helpers

Overview​

Use these helper packages when you need to encrypt values like session_token or transaction_id on the client side before sending them to PayWise services.

All packages are compatible with the PayWise encryption format used by:

  • paywise-dap/src/shared/crypto/encryption.service.ts
  • payWiseEncrypt(secretKey, value)
  • payWiseDecrypt(secretKey, encryptedBase64)

Download packages​

Shared algorithm contract​

All language packages follow the same encryption contract:

  • AES-256-CBC
  • PKCS padding
  • OpenSSL-style EVP_BytesToKey derivation with MD5 and an 8-byte salt
  • Envelope payload fields: ct, iv, s
  • Final output format: base64(utf8(json-envelope))

Because the contract is shared, payloads can be encrypted in one language and decrypted in another.

Language guides​