在客户端的浏览器上永久存储加密的私钥

// generic shared functions
const kyber = require('crystals-kyber');
function buf(array) { return Buffer.from(array); }
function hex(buffer) { return '0x' + buffer.toString('hex'); }

// not shared, but exists before
let pk_sk = kyber.KeyGen1024();
let pk = pk_sk[0]; // stored on server
let sk = pk_sk[1]; // stored on client

/*** CURRENTLY IN SERVER ***/
// the user has requested an authentication challenge and wants to sign in as user 'u'
var u = "anyusernamehere";

// Generate a random symmetric key (ss) and its encapsulation (c)
let c_ss = kyber.Encrypt1024(pk);
let c = c_ss[0];
let ss1 = c_ss[1];
console.log("server symmetric", hex(ss1));

// decide on algorithm, initialization vector, and message
const crypto = require('crypto');
const algorithm = 'aes-256-ocb';
const iv = crypto.randomBytes(12);
const m = buf(crypto.getRandomValues(new Uint8Array(16)));
console.log("message", hex(m));

/*** SEND BACK algorithm, m, c, iv ***/
/*** CURRENTLY IN CLIENT ***/

// To decapsulate and obtain the same symmetric key
let ss2 = kyber.Decrypt1024(c, sk);
console.log("client symmetric", hex(ss2));

// Encrypting text using the symmetric key
const cipher = crypto.createCipheriv(algorithm, ss2, iv, {
    authTagLength: 16
}); 
let encrypted = cipher.update(m);
encrypted = Buffer.concat([encrypted, cipher.final()]);
const authTag = cipher.getAuthTag();
console.log("encrypted", hex(encrypted));
console.log("authTag", hex(authTag));

/*** SEND BACK encrypted, authTag ***/
/*** CURRENTLY IN SERVER ***/

// Decrypting text using the symmetric key
const decipher = crypto.createDecipheriv(algorithm, ss1, iv, {
    authTagLength: 16
});
decipher.setAuthTag(authTag);
let decrypted = decipher.update(encrypted);
decrypted = Buffer.concat([decrypted, decipher.final()]);
console.log("decrypted", hex(decrypted));
console.log(hex(decrypted) === hex(m));

This is not intended to be run on the browser, as it is a NodeJS script.