LearningTransformsv1

Encrypt and decrypt text with AES-GCM

Encrypt text locally with authenticated encryption, then decrypt the packaged payload with the same passphrase.

Output

Transformed result

Generated locally after the page loads.

Programming example

Input

OperationCode example

Plaintext or encrypted payload PassphrasePBKDF2 derives a key locally in your browser. Nothing is sent to the server.

Input

OperationCode example

Plaintext or encrypted payload PassphrasePBKDF2 derives a key locally in your browser. Nothing is sent to the server.

Output

Transformed result

Generated locally after the page loads.

Programming example

Relationship

What connects the input and output?

PBKDF2 derives a 256-bit key from the passphrase and a random salt. AES-GCM encrypts the UTF-8 bytes with a fresh 96-bit initialization vector and authenticates the ciphertext. The salt, vector and ciphertext are packaged together for this demonstration.

Sources

NIST SP 800-38D: GCM and GMACNational Institute of Standards and TechnologyUS-PUBLIC-DOMAIN
NIST SP 800-132: Password-Based Key DerivationNational Institute of Standards and TechnologyUS-PUBLIC-DOMAIN
MDN: SubtleCrypto encrypt()Mozilla Developer Network

What connects the input and output?

Sources

Discussion