Encrypting Data in the Browser - Exploring Web Crypto APIs
summary
Shows how to encrypt app data in-browser using the Web Crypto APIs with live demos: generate keys, export a JWK encryption key, and use AES-GCM with a 12-byte IV per message so tampering breaks decryption. Demonstrates that crypto.getRandomValues is slower but cryptographically strong, and that PBKDF2 with 100k iterations derives a user key for password protection. Builds a notes app that uploads encrypted buffers plus IV, shares the decryption key in the URL fragment, and the demo proves end-to-end encryption and integrity checks work.
AI-written summary · about
chapters (8)
- 0:00Introduction and welcome
- 3:39Web Crypto API overview
- 10:02Crypto.getRandomValues deep dive
- 13:36Encryption algorithms in Web Crypto
- 21:24Building an encrypted note-taking app
- 28:25Password protection with PBKDF2
- 31:43Demo and project showcase
- 32:48Q&A and closing remarks
related talks
39mEncrypting Data in the Browser - Exploring Web Crypto APIs
23mKeeping secrets with JavaScript
39mWeb Cryptography
23mJS Bringing Crypto to the Masses
23mProtecting Sensitive Data in Web Apps
25mBuilding end-to-end encryption @excalidraw
28mDeveloping zero-knowledge solutions with JavaScript
20m10 Weird Applications of Public Key Cryptography