格 千格 KiloCell

AES Encrypted Decryption Local processing

Encrypted decryption text using AES-GCM algorithms, PBKDF2 Key Derivation, Random IV, data not leaving your browser

Security statement: Automatically generate random IV and salt values using AES-GCM mode. Output format: SaltValue(16B) + IV(12B) + Secret + AuthenticationLabel(16B) 。 All encryption operations are done locally in the browser and data will not be uploaded to the server.

AES Encryption Full User Guide

Text-declassification of AES-GCM by Web Cripto locally in browser: Passwords are issued with key, random salt and IV, and text can be exported to Base64 or Hex. Optional AES-128 / AES-256 (#keyLength)。 Interface contains explicit/secret input #inputPassword #password, Show Switches, Output Formats #outputFormat, processing/cleaning/copying. Mode toggle between encryption and decryption (updateMode)。 Full crypto.subtle- The data is not being uploaded. Locally protected demonstrations for sensitive drafts are not enterprise-level key hosting or file disk encryption products.

Algorithmic tubes (scripts)

  • deriveKey:importKey password is the PBKDF2 material →diveKey gets AES-GCM keys.
  • Encryption: Generates salt/IV → encrypt package output (formats with salt, iv, secret text, depending on the script).
  • Decrypt: Decoding the defaults of Base64/ Hex → decrypt → UTF-8 by format.
  • Tool Functions:arrayBufferToBase64/base64ToArrayBuffer、arrayBufferToHex/hexToArrayBuffer。
  • Errors shown in #error: Wrong password, broken format, unsafe context, etc.

Safe use steps

  1. Use only in the safe context of HTTPS or localhost to ensure that subtle is available.
  2. (a) The password is long and random, and not for the birthday; The password is not to be sent with the secret text.
  3. (a) Encrypted copying of a secret text is saved separately; Forget the password and not get it back.
  4. The format (Base64/Hex) for decryption must be the same length as the key for encryption.
  5. The public computer emptys the input output and clipboard.

Borders and Error Areas

  • AES-GCM provides confidentiality and integrity, but does not replace the complete programme design for TLS.
  • The government has also been able to influence the government's decision to use the word "simplified" to promote the right to freedom of expression. Tools can't force you to use strong passwords.
  • Any secret text that is not the output of this tool may not be compatible in format.
  • Large text may be slower; For super-large documents, please use a dedicated tool.
  • If you have a malicious extension of the page, you will no longer be trusted locally, but please note the browser environment.

FAQ

The most common reason for the failure to decrypt?

Password error, output format error, code cut or space swaps.

128 and 256. How do you choose?

General default 256; Consistency with the collaborators is required, otherwise communication is not possible.

And what's the difference between "text encryption" and other pages?

This page identifies AES-GCM + PBKDF 2 pipelines; Other pages may have different algorithms or scenarios, and do not mix in texts.

Can you encrypt the file?

(a) Main interface is text-oriented; Please specify whether or not to support or use the file type tool.

Collaboration engagement template

Written agreement when exchanging a secret message with a colleague: Algorithm AES-GCM, key length, output Base64 or Hex, password channel (line/cipher manager) shall never be written in the same message body. The old secret is reencrypted after the password is rotated.

Password and Export Custody

The password is generated and pasted only by password manager, avoiding browsers remembering the public configuration file. Secrets can be stored on a web board, with passwords and other channels. Base64 does not mix with Hex in the same secret. Reproduction and second distribution to confirm non-retention of express #input。 The empty button should be simultaneously clear and out to prevent shoulder-snacking. The PBKDF2 is about 100,000 times causing perceived delays, which is normally in exchange for slow Hash.

Failed Checklist

1) whether the mode is declassified; 2) whether the key length is consistent; 3) whether the format Base64/Hex is consistent; (4) Whether the secret is complete; 5) Whether it is in the context of safety. The extension does not deal with genuine secrets when hijacking pages. This tool is not uploaded, but screen sharing will expose input and switch windows when remote assistance is provided.

Attach to the key page with the confidentiality

You can use the key page to generate high entropy passwords and paste to the password box on this page. The document Hashi page is used for completeness verification and is not a substitute for encryption. Concept separation: Encrypted contents, Hashi examination modified, material supplied with confidential keys.