Skip to main content

Encryption

Encrypted Information​

Certain webhook payloads include encrypted data (e.g., deleted receiver emails) for privacy. Decrypt using the secret from registration.

Encryption Details
  • Algorithm: AES-256-CBC
  • Key Derivation: SHA-256 hash of the secret
  • IV: First 16 bytes of encrypted data

Decryption Example (PHP)​

<?php
function decode($encrypted, $secret) {
    $enc_bin = hex2bin($encrypted);
    $key = hash('sha256', $secret, true);
    $iv = substr($enc_bin, 0, 16);
    $decoded = openssl_decrypt(substr($enc_bin, 16), 'AES-256-CBC', $key, OPENSSL_RAW_DATA, $iv);
    return $decoded;
}
Security Note

Store the secret securely. Use it only for decryption and never expose in logs or responses.