Cipher (AES-GCM)

Encrypts fields using a user-supplied key

This transformation encrypts fields in the document using a user-supplied key (AES-GCM). Overwrites the field with base64(nonce||ciphertext). The data can be decrypted externally using the same key (double-MD5 derived) if you know the format.

Settings:

SettingDescription
FieldsField names, JSON dot-notation to a field or fields, or * to apply globally
KeyA user-supplied key string that gets turned into a 32-byte AES key via double MD5

Behavior:

  • If the field doesn't exist or isn't a string, it's treated as an empty string.
  • The plugin does not do decryption; that must be handled elsewhere.