Comment by Xeoncross

I'm not a cryptographer, but I'm pretty sure that CBC (https://github.com/robinmoisson/staticrypt/blob/main/lib/cry...) should be replaced with GCM (https://developer.mozilla.org/en-US/docs/Web/API/SubtleCrypt...) since this is not a stream.

https://security.stackexchange.com/questions/184305/why-woul...

(also, use the built-in WebCrypto API instead of the crypto-js package)