End-to-End File Encryption in Browser with Open Source Penumbra
summary
An open source library called Penumbra implements end-to-end browser encryption that decrypts large files in the client without buffering whole files or blocking the main thread. It streams gigabyte and terabyte payloads using writable streams and offloads CPU work to web workers, decrypts files in parallel, zips with Conflux and writes to disk via StreamSaver, and runs in Chrome Safari Edge with fallbacks and Firefox decryption workarounds.
AI-written summary · about
chapters (15)
- 0:00Introduction to talk
- 1:25Consumer data challenges
- 3:31Business data privacy needs
- 5:16End-to-end encryption necessity
- 8:09Browser encryption limitations
- 11:18Introducing Penumbra library
- 14:29Stream encryption pipeline
- 16:13Real-world Penumbra use case
- 17:58Live demo of Penumbra
- 18:39Browser compatibility details
- 20:21Open sourcing Penumbra
- 21:44Potential Penumbra applications
- 22:25Future Penumbra developments
- 24:32Other Transcend open source
- 25:14Closing remarks
related talks
39mEncrypting Data in the Browser - Exploring Web Crypto APIs
34mEncrypting Data in the Browser - Exploring Web Crypto APIs
31mCreating Your Own Image Format in the Browser
39mWeb Cryptography
23mProtecting Sensitive Data in Web Apps
34mToward Secure and Convenient Browsing Data Management in the Cloud
57mBuild your own Secure Messenger
25mBuilding end-to-end encryption @excalidraw