# Light weight cipher for payload protection

**URL:** <https://discourse.nodered.org/t/light-weight-cipher-for-payload-protection/43626>\
**Category:** Developing Nodes\
**Created:** [4 April 2021 06:35 UTC](https://discourse.nodered.org/t/light-weight-cipher-for-payload-protection/43626 "2021-04-04T06:35:20Z")\
**Posts on this page:** 20\
**Page:** 1

<div class="post-metadata">

**Author:** ![sreelakshmi25996](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/sreelakshmi25996/32/39742_2.png) [@sreelakshmi25996](https://discourse.nodered.org/u/sreelakshmi25996)\
**Post date:** [4 April 2021 06:35 UTC](https://discourse.nodered.org/t/light-weight-cipher-for-payload-protection/43626/1 "2021-04-04T06:35:20Z")

</div>

Hello! Is it possible to create a lightweight cipher node, for example, a present cipher or a speck cipher in node-red for payload protection?

---

<div class="post-metadata">

**Author:** ![Steve-Mcl](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/steve-mcl/32/4826_2.png) [@Steve-Mcl](https://discourse.nodered.org/u/Steve-Mcl)\
**Post date:** [4 April 2021 08:35 UTC](https://discourse.nodered.org/t/light-weight-cipher-for-payload-protection/43626/2 "2021-04-04T08:35:49Z")

</div>

Protection from what? Corruption? Being peaked in a network?

There is always simple base64 and there are some encrypt/decrypt contrib nodes in the palette that can be installed.

---

<div class="post-metadata">

**Author:** ![sreelakshmi25996](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/sreelakshmi25996/32/39742_2.png) [@sreelakshmi25996](https://discourse.nodered.org/u/sreelakshmi25996)\
**Post date:** [4 April 2021 09:32 UTC](https://discourse.nodered.org/t/light-weight-cipher-for-payload-protection/43626/3 "2021-04-04T09:32:09Z")

</div>

Yeah, I am using MQTT for payload ( image) transfer between raspberry pi and a windows system so base64 is already used. But if we use the base64 everyone can easily convert the code back from base64. And also I tried the encrypt/decrypt node from node-red but they are using AES, DES encryption algorithm so I just want to create something new like present cipher /speck cipher because they use less memory when compared to AES and DES.

---

<div class="post-metadata">

**Author:** ![Steve-Mcl](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/steve-mcl/32/4826_2.png) [@Steve-Mcl](https://discourse.nodered.org/u/Steve-Mcl)\
**Post date:** [4 April 2021 09:36 UTC](https://discourse.nodered.org/t/light-weight-cipher-for-payload-protection/43626/4 "2021-04-04T09:36:50Z")

</div>

Easy enough to do in a function node.

Install [generic-speck](https://www.npmjs.com/package/generic-speck) from npm into your .node-red directory

Add a reference to it in globals in settings.js

Write a function to use it.

(See node-red docs for how to)

---

<div class="post-metadata">

**Author:** ![Steve-Mcl](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/steve-mcl/32/4826_2.png) [@Steve-Mcl](https://discourse.nodered.org/u/Steve-Mcl)\
**Post date:** [4 April 2021 09:43 UTC](https://discourse.nodered.org/t/light-weight-cipher-for-payload-protection/43626/5 "2021-04-04T09:43:02Z")

</div>

Sorry I see this is in the creating nodes category. Are you planning to make a node that does this?

If so, then ignore my previous post about using function node.

---

<div class="post-metadata">

**Author:** ![sreelakshmi25996](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/sreelakshmi25996/32/39742_2.png) [@sreelakshmi25996](https://discourse.nodered.org/u/sreelakshmi25996)\
**Post date:** [4 April 2021 14:15 UTC](https://discourse.nodered.org/t/light-weight-cipher-for-payload-protection/43626/6 "2021-04-04T14:15:53Z")

</div>

Yes. I am planning to create one but I just have a rough idea about the present cipher I need to code it in javascript and need to create a HTML program for the same and also inexperienced in this field. so, any help?

---

<div class="post-metadata">

**Author:** ![Colin](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/colin/32/17040_2.png) [@Colin](https://discourse.nodered.org/u/Colin)\
**Post date:** [4 April 2021 14:31 UTC](https://discourse.nodered.org/t/light-weight-cipher-for-payload-protection/43626/7 "2021-04-04T14:31:57Z")

</div>

> [@sreelakshmi25996](#):
>
> everyone can easily convert the code back from base64

You can use user/pwd authentication in mqtt and only allow the users you want to access the private topics.

---

<div class="post-metadata">

**Author:** ![Steve-Mcl](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/steve-mcl/32/4826_2.png) [@Steve-Mcl](https://discourse.nodered.org/u/Steve-Mcl)\
**Post date:** [4 April 2021 14:44 UTC](https://discourse.nodered.org/t/light-weight-cipher-for-payload-protection/43626/8 "2021-04-04T14:44:24Z")

</div>

> [@sreelakshmi25996](#):
>
> I am planning to create one but I just have a rough idea about the present cipher I need to code it in javascript and need to

Create a new node using the instructions [here](https://nodered.org/docs/creating-nodes/first-node)

> [@sreelakshmi25996](#):
>
> and need to create a HTML program for the same

What does that mean?

---

<div class="post-metadata">

**Author:** ![sreelakshmi25996](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/sreelakshmi25996/32/39742_2.png) [@sreelakshmi25996](https://discourse.nodered.org/u/sreelakshmi25996)\
**Post date:** [4 April 2021 15:49 UTC](https://discourse.nodered.org/t/light-weight-cipher-for-payload-protection/43626/9 "2021-04-04T15:49:11Z")

</div>

I mean about the HTML file which defines the node's properties, edit dialog and help text

---

<div class="post-metadata">

**Author:** ![sreelakshmi25996](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/sreelakshmi25996/32/39742_2.png) [@sreelakshmi25996](https://discourse.nodered.org/u/sreelakshmi25996)\
**Post date:** [4 April 2021 16:32 UTC](https://discourse.nodered.org/t/light-weight-cipher-for-payload-protection/43626/10 "2021-04-04T16:32:18Z")

</div>

yes I did that

---

<div class="post-metadata">

**Author:** ![Colin](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/colin/32/17040_2.png) [@Colin](https://discourse.nodered.org/u/Colin)\
**Post date:** [4 April 2021 16:45 UTC](https://discourse.nodered.org/t/light-weight-cipher-for-payload-protection/43626/11 "2021-04-04T16:45:31Z")

</div>

If you have protected it so only permitted users can access the data then why do you need to encrypt it?

---

<div class="post-metadata">

**Author:** ![chrisn-au](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/chrisn-au/32/25504_2.png) [@chrisn-au](https://discourse.nodered.org/u/chrisn-au)\
**Post date:** [4 April 2021 23:57 UTC](https://discourse.nodered.org/t/light-weight-cipher-for-payload-protection/43626/12 "2021-04-04T23:57:30Z")

</div>

If your payloads are small and you are looking for an out of the box solution you could use a json web token encrypt payload on way in and on the way back out.

---

<div class="post-metadata">

**Author:** ![sreelakshmi25996](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/sreelakshmi25996/32/39742_2.png) [@sreelakshmi25996](https://discourse.nodered.org/u/sreelakshmi25996)\
**Post date:** [7 April 2021 16:05 UTC](https://discourse.nodered.org/t/light-weight-cipher-for-payload-protection/43626/13 "2021-04-07T16:05:30Z")

</div>

But the data transfer is through wifi so if a person using a network analyser tool like Wireshark can easily access the data.

---

<div class="post-metadata">

**Author:** ![sreelakshmi25996](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/sreelakshmi25996/32/39742_2.png) [@sreelakshmi25996](https://discourse.nodered.org/u/sreelakshmi25996)\
**Post date:** [7 April 2021 16:12 UTC](https://discourse.nodered.org/t/light-weight-cipher-for-payload-protection/43626/14 "2021-04-07T16:12:42Z")

</div>

Is it possible to encrypt the data using JSON web token in real-time data transmission?.

---

<div class="post-metadata">

**Author:** ![Steve-Mcl](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/steve-mcl/32/4826_2.png) [@Steve-Mcl](https://discourse.nodered.org/u/Steve-Mcl)\
**Post date:** [7 April 2021 16:18 UTC](https://discourse.nodered.org/t/light-weight-cipher-for-payload-protection/43626/15 "2021-04-07T16:18:08Z")

</div>

Easy enough to try...

- [node-red-contrib-jwt (node) - Node-RED](https://flows.nodered.org/node/node-red-contrib-jwt)
- [node-red-contrib-auth (node) - Node-RED](https://flows.nodered.org/node/node-red-contrib-auth)
- [node-red-contrib-iiot-jwt (node) - Node-RED](https://flows.nodered.org/node/node-red-contrib-iiot-jwt)

You could use the below subflow (inline) to tell you how long the operation takes...

[https://flows.nodered.org/flow/63f29373e826a9fd4943d679d43e725f](https://flows.nodered.org/flow/63f29373e826a9fd4943d679d43e725f)

---

<div class="post-metadata">

**Author:** ![chrisn-au](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/chrisn-au/32/25504_2.png) [@chrisn-au](https://discourse.nodered.org/u/chrisn-au)\
**Post date:** [7 April 2021 17:04 UTC](https://discourse.nodered.org/t/light-weight-cipher-for-payload-protection/43626/16 "2021-04-07T17:04:39Z")

</div>

@Steve-Mcl you sparked my interest

 ![Screen Shot 2021-04-08 at 3.02.07 am](https://us1.discourse-cdn.com/flex026/uploads/nodered/original/3X/8/9/893d2d3c0e5bd913fca2bb5a01157e6d98bd2ea2.png)

```auto
[{"id":"9a693308.7ebaf","type":"subflow","name":"flow-timer","info":"","category":"","in":[{"x":80,"y":100,"wires":[{"id":"7fc82258.93e36c"}]}],"out":[{"x":440,"y":100,"wires":[{"id":"7fc82258.93e36c","port":0}]}],"env":[{"name":"name","type":"str","value":"measure","ui":{"icon":"font-awesome/fa-tag","label":{"en-US":"Timer Name"},"type":"input","opts":{"types":["str","env"]}}},{"name":"operation","type":"str","value":"start","ui":{"icon":"font-awesome/fa-cog","label":{"en-US":"Operation"},"type":"select","opts":{"opts":[{"l":{"en-US":"start"},"v":"start"},{"l":{"en-US":"stop"},"v":"stop"},{"l":{"en-US":"msg.topic"},"v":"msg.topic"},{"l":{"en-US":"msg.operation"},"v":"msg.operation"},{"l":{"en-US":"msg.payload"},"v":"msg.payload"}]}}}],"meta":{"module":"node-red-contrib-flow-performance","type":"flow-performance","version":"1.0.1","author":"Steve-Mcl","desc":"Inline flow performance measure node","keywords":"node-red performance","license":"MIT"},"color":"#DAEAAA","icon":"node-red/timer.svg","status":{"x":280,"y":160,"wires":[{"id":"7fc82258.93e36c","port":1}]}},{"id":"7fc82258.93e36c","type":"function","z":"9a693308.7ebaf","name":"do operation","func":"// @ts-ignore\nvar name = msg.perfName || env.get(\"name\");\n// @ts-ignore\nvar operation = msg.perfOperation || env.get(\"operation\");\nvar measures = global.get(\"flow_timers\") || {};\nvar measure = measures[name] || {};\n\nfunction doOp(measure, op){\n if(operation === \"start\"){\n measure.start = Date.now();//change to process.hrtime\n measure.stop = null;\n measure.durationMs = null;\n } else if(operation === \"stop\") {\n measure.stop = Date.now();//change to process.hrtime\n measure.durationMs = measure.start ? measure.stop - measure.start : null;\n msg._performance = measure;\n }\n}\n\n\nif(operation === \"start\"){\n doOp(measure, operation);\n} else if(operation === \"stop\") {\n doOp(measure, operation);\n node.send([null, { payload: { text: name + \": \" + measure.durationMs + \"ms\" }}]);\n} else if(operation === \"msg.topic\") {\n operation = msg.topic;\n doOp(measure, operation);\n} else if(operation === \"msg.operation\") {\n operation = msg.operation;\n doOp(measure, operation);\n} else if(operation === \"msg.payload\") {\n operation = msg.payload;\n doOp(measure, operation);\n} else {\n return [msg, null];\n}\nmeasures[name] = measure;\nglobal.set(\"flow_timers\", measures);\n\nreturn [msg, null];","outputs":2,"noerr":0,"initialize":"","finalize":"","libs":[],"x":250,"y":100,"wires":[[],[]]},{"id":"8fa477b0.2bbac8","type":"inject","z":"df3cdacd.dc9198","name":"function","repeat":"","crontab":"","once":false,"onceDelay":0.1,"topic":"function","payload":"function","payloadType":"str","x":430,"y":160,"wires":[["bee75a4f.ee4ba8"]]},{"id":"2be583a4.ba884c","type":"debug","z":"df3cdacd.dc9198","name":"","active":false,"tosidebar":true,"console":false,"tostatus":false,"complete":"false","x":930,"y":180,"wires":[]},{"id":"e5ac4683.f614f8","type":"inject","z":"df3cdacd.dc9198","name":"JSONata","props":[{"p":"payload"},{"p":"topic","vt":"str"}],"repeat":"","crontab":"","once":false,"onceDelay":0.1,"topic":"JSONata","payload":"JSONata","payloadType":"str","x":420,"y":200,"wires":[["bee75a4f.ee4ba8"]]},{"id":"2c44f3c4.ee5efc","type":"switch","z":"df3cdacd.dc9198","name":"","property":"topic","propertyType":"msg","rules":[{"t":"eq","v":"function","vt":"str"},{"t":"eq","v":"JSONata","vt":"str"}],"checkall":"true","repair":false,"outputs":2,"x":590,"y":300,"wires":[["80b9b0b2.1dd84"],["6cb64e4a.f6365"]]},{"id":"90fd90b2.99848","type":"function","z":"df3cdacd.dc9198","name":"Native JS Sort","func":"msg.payload.sort((a,b) => {\n if(a.age < b.age){\n return -1;\n }else if(a.age > b.age){\n return 1;\n }else{\n return 0;\n }\n})\n\nreturn msg;","outputs":1,"noerr":0,"initialize":"","finalize":"","libs":[],"x":940,"y":260,"wires":[["f6181e74.1732a"]]},{"id":"9b6c9c50.0fd5e","type":"change","z":"df3cdacd.dc9198","name":"JSONata sort","rules":[{"t":"set","p":"payload","pt":"msg","to":"payload^(age)","tot":"jsonata"}],"action":"","property":"","from":"","to":"","reg":false,"x":940,"y":340,"wires":[["617e024.a7ac9fc"]]},{"id":"e6915905.e4b498","type":"comment","z":"df3cdacd.dc9198","name":"measure time it takes for Function node VS JSONata","info":"","x":770,"y":120,"wires":[]},{"id":"bee75a4f.ee4ba8","type":"function","z":"df3cdacd.dc9198","name":"Generate a dataset","func":"var data = [];\n\nfunction randomFloat(min, max) { \n return Math.random() * (max - min) + min; \n}\nfunction randomInt(min, max) {\n return Math.floor(Math.random() * (max - min + 1) + min);\n}\nfunction randomBool() {\n return Math.random() >= 0.5;\n}\n\nvar makeRow = function() {\n return {\n \"name\": \"Item \" + (data.length+1),\n \"gender\": randomBool() == true ? \"male\" : \"female\",\n \"age\": randomInt(18,75),\n \"height\": randomInt(18,75),\n \"lat\": randomFloat(51.0,54.9),\n \"lon\": randomFloat(-1.8, 1.8),\n \"friendCount\": randomInt(30,300),\n \"employmentDuration\": randomFloat(1.0,35.9),\n \"accessLevel\": randomInt(1,9),\n \"canEdit\": randomBool(),\n \"canWrite\": randomBool(),\n \"dob\": `${randomInt(1930,1999)}-${randomInt(1,12)}-${randomInt(1,28)}`\n }\n}\n\nfor(let i = 0; i < 1000; i++) {\n data.push(makeRow());\n}\n\nmsg.payload = data;\nreturn msg;","outputs":1,"noerr":0,"initialize":"","finalize":"","x":646,"y":180,"wires":[["2be583a4.ba884c","2c44f3c4.ee5efc"]]},{"id":"80b9b0b2.1dd84","type":"subflow:9a693308.7ebaf","z":"df3cdacd.dc9198","name":"","env":[{"name":"name","value":"function","type":"str"}],"x":760,"y":260,"wires":[["90fd90b2.99848"]]},{"id":"f6181e74.1732a","type":"subflow:9a693308.7ebaf","z":"df3cdacd.dc9198","name":"","env":[{"name":"name","value":"function","type":"str"},{"name":"operation","value":"stop","type":"str"}],"x":1120,"y":260,"wires":[["189d3e26.ffd122"]]},{"id":"6cb64e4a.f6365","type":"subflow:9a693308.7ebaf","z":"df3cdacd.dc9198","name":"","env":[{"name":"name","value":"jsonata","type":"str"}],"x":760,"y":340,"wires":[["9b6c9c50.0fd5e"]]},{"id":"617e024.a7ac9fc","type":"subflow:9a693308.7ebaf","z":"df3cdacd.dc9198","name":"","env":[{"name":"name","value":"jsonata","type":"str"},{"name":"operation","value":"stop","type":"str"}],"x":1120,"y":340,"wires":[["7ce9f7fe.b33ed8"]]},{"id":"7ce9f7fe.b33ed8","type":"debug","z":"df3cdacd.dc9198","name":"JSONata","active":true,"tosidebar":true,"console":false,"tostatus":false,"complete":"true","targetType":"full","statusVal":"","statusType":"auto","x":1280,"y":340,"wires":[]},{"id":"189d3e26.ffd122","type":"debug","z":"df3cdacd.dc9198","name":"function","active":true,"tosidebar":true,"console":false,"tostatus":false,"complete":"true","targetType":"full","statusVal":"","statusType":"auto","x":1280,"y":260,"wires":[]}]

```

so bottom line to encrypt a very simple payload the cost is about ~2 ms. Seems ok to me

---

<div class="post-metadata">

**Author:** ![Steve-Mcl](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/steve-mcl/32/4826_2.png) [@Steve-Mcl](https://discourse.nodered.org/u/Steve-Mcl)\
**Post date:** [7 April 2021 17:14 UTC](https://discourse.nodered.org/t/light-weight-cipher-for-payload-protection/43626/17 "2021-04-07T17:14:34Z")

</div>

> [@chrisn-au](#):
>
> you sparked my interest

Sorry 😂😂😂

Did you try sending something larger like an image?

---

<div class="post-metadata">

**Author:** ![chrisn-au](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/chrisn-au/32/25504_2.png) [@chrisn-au](https://discourse.nodered.org/u/chrisn-au)\
**Post date:** [7 April 2021 17:25 UTC](https://discourse.nodered.org/t/light-weight-cipher-for-payload-protection/43626/18 "2021-04-07T17:25:14Z")

</div>

a 20 mb file - so a 50% cost 4 secs to 6 secs

 ![Screen Shot 2021-04-08 at 3.22.03 am](https://us1.discourse-cdn.com/flex026/uploads/nodered/original/3X/6/f/6f4930293f5f02bcab2222206570c325ad254806.png)

```auto
[{"id":"9a693308.7ebaf","type":"subflow","name":"flow-timer","info":"","category":"","in":[{"x":80,"y":100,"wires":[{"id":"7fc82258.93e36c"}]}],"out":[{"x":440,"y":100,"wires":[{"id":"7fc82258.93e36c","port":0}]}],"env":[{"name":"name","type":"str","value":"measure","ui":{"icon":"font-awesome/fa-tag","label":{"en-US":"Timer Name"},"type":"input","opts":{"types":["str","env"]}}},{"name":"operation","type":"str","value":"start","ui":{"icon":"font-awesome/fa-cog","label":{"en-US":"Operation"},"type":"select","opts":{"opts":[{"l":{"en-US":"start"},"v":"start"},{"l":{"en-US":"stop"},"v":"stop"},{"l":{"en-US":"msg.topic"},"v":"msg.topic"},{"l":{"en-US":"msg.operation"},"v":"msg.operation"},{"l":{"en-US":"msg.payload"},"v":"msg.payload"}]}}}],"color":"#DAEAAA","icon":"node-red/timer.svg","status":{"x":280,"y":160,"wires":[{"id":"7fc82258.93e36c","port":1}]}},{"id":"7fc82258.93e36c","type":"function","z":"9a693308.7ebaf","name":"do operation","func":"// @ts-ignore\nvar name = msg.perfName || env.get(\"name\");\n// @ts-ignore\nvar operation = msg.perfOperation || env.get(\"operation\");\nvar measures = global.get(\"flow_timers\") || {};\nvar measure = measures[name] || {};\n\nfunction doOp(measure, op){\n if(operation === \"start\"){\n measure.start = Date.now();//change to process.hrtime\n measure.stop = null;\n measure.durationMs = null;\n } else if(operation === \"stop\") {\n measure.stop = Date.now();//change to process.hrtime\n measure.durationMs = measure.start ? measure.stop - measure.start : null;\n msg._performance = measure;\n }\n}\n\n\nif(operation === \"start\"){\n doOp(measure, operation);\n} else if(operation === \"stop\") {\n doOp(measure, operation);\n node.send([null, { payload: { text: name + \": \" + measure.durationMs + \"ms\" }}]);\n} else if(operation === \"msg.topic\") {\n operation = msg.topic;\n doOp(measure, operation);\n} else if(operation === \"msg.operation\") {\n operation = msg.operation;\n doOp(measure, operation);\n} else if(operation === \"msg.payload\") {\n operation = msg.payload;\n doOp(measure, operation);\n} else {\n return [msg, null];\n}\nmeasures[name] = measure;\nglobal.set(\"flow_timers\", measures);\n\nreturn [msg, null];","outputs":2,"noerr":0,"initialize":"","finalize":"","x":250,"y":100,"wires":[[],[]]},{"id":"189d3e26.ffd122","type":"debug","z":"bce50b9f.7a7508","name":"Log it","active":true,"tosidebar":true,"console":false,"tostatus":false,"complete":"true","targetType":"full","statusVal":"","statusType":"auto","x":1280,"y":1380,"wires":[]},{"id":"f6181e74.1732a","type":"subflow:9a693308.7ebaf","z":"bce50b9f.7a7508","name":"stop jwt","env":[{"name":"name","value":"jwt","type":"str"},{"name":"operation","value":"stop","type":"str"}],"x":1140,"y":1350,"wires":[["189d3e26.ffd122"]]},{"id":"617e024.a7ac9fc","type":"subflow:9a693308.7ebaf","z":"bce50b9f.7a7508","name":"stop clear","env":[{"name":"name","value":"clear","type":"str"},{"name":"operation","value":"stop","type":"str"}],"x":1140,"y":1425,"wires":[["189d3e26.ffd122"]]},{"id":"2f4e3a15.2fab26","type":"jwt verify","z":"bce50b9f.7a7508","name":"","alg":["HS256"],"jwkurl":"","secret":"node-red","key":"","signvar":"payload","storetoken":"payload","x":1000,"y":1350,"wires":[["f6181e74.1732a"]]},{"id":"3f0baaf3.68cafe","type":"mqtt in","z":"bce50b9f.7a7508","name":"","topic":"/jwt-test","qos":"2","datatype":"auto","broker":"8d864a45.0e5a9","x":825,"y":1425,"wires":[["617e024.a7ac9fc"]]},{"id":"a62c2bfa.fdde4","type":"mqtt in","z":"bce50b9f.7a7508","name":"","topic":"/jwt-test-token","qos":"2","datatype":"auto","broker":"8d864a45.0e5a9","x":845,"y":1350,"wires":[["2f4e3a15.2fab26"]]},{"id":"8d864a45.0e5a9","type":"mqtt-broker","name":"","broker":"mqtt","port":"1883","clientid":"","usetls":false,"compatmode":false,"keepalive":"60","cleansession":true,"birthTopic":"","birthQos":"0","birthRetain":"false","birthPayload":"","closeTopic":"","closeQos":"0","closeRetain":"false","closePayload":"","willTopic":"","willQos":"0","willRetain":"false","willPayload":""}]

```

---

<div class="post-metadata">

**Author:** ![Colin](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/colin/32/17040_2.png) [@Colin](https://discourse.nodered.org/u/Colin)\
**Post date:** [7 April 2021 19:56 UTC](https://discourse.nodered.org/t/light-weight-cipher-for-payload-protection/43626/19 "2021-04-07T19:56:43Z")

</div>

> [@sreelakshmi25996](#):
>
> if a person using a network analyser tool like Wireshark can easily access the data.

Not if you use wss or mqtts. I assumed you were doing that already since you are interested in keeping the data private. That with user/pwd access should be able to do everything you need.

---

<div class="post-metadata">

**Author:** ![Colin](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/colin/32/17040_2.png) [@Colin](https://discourse.nodered.org/u/Colin)\
**Post date:** [7 April 2021 19:57 UTC](https://discourse.nodered.org/t/light-weight-cipher-for-payload-protection/43626/20 "2021-04-07T19:57:26Z")

</div>

> [@chrisn-au](#):
>
> so bottom line to encrypt a very simple payload the cost is about ~2 ms. Seems ok to me

But why bother when you can easily use wss or mqtts?

[Next page](https://discourse.nodered.org/t/light-weight-cipher-for-payload-protection/43626.md?page=2)