Keeping secrets with JavaScript
summary
Demonstrates the Web Cryptography API by building an encrypted notes app using localforage for storage and SubtleCrypto promises, hashing notes with SHA-256 (32 bytes) for integrity, adding HMAC for authenticity, deriving keys from passwords with PBKDF2 (salt stored) and using AES-GCM with a 16‑byte nonce for confidentiality; Chrome lacks full PBKDF2 support, Firefox implements it behind a pref, code stores salt and nonce, rejects tampered data, and the example runs end to end.
AI-written summary · about
chapters (6)
- 0:00Intro
- 7:42Message authentication codes
- 10:31Key derivation
- 11:35Passwordbased key derivation
- 19:18Recap
- 22:04Outro
related talks
34mEncrypting Data in the Browser - Exploring Web Crypto APIs
39mEncrypting Data in the Browser - Exploring Web Crypto APIs
39mWeb Cryptography
23mJS Bringing Crypto to the Masses
58m10 Lines of Encryption, 1500 Lines of Key Management- 58m10 Lines of Encryption, 1500 Lines of Key Management
28mDeveloping zero-knowledge solutions with JavaScript
25mCryptography Isn't Scary