meixler/web-browser-based-file-encryption-decryption

Use your web browser to encrypt and decrypt files.

Web Browser Based File Encryption / Decryption

Use your web browser to encrypt and decrypt files.

Usage

Download web-browser-based-file-encryption-decryption.html, then open the .html document in your web browser. Or, simply point your web browser to the .html document hosted here.

Then, use the web page rendered in your browser to encrypt a file using a password. Use the same password later to decrypt the file. IMPORTANT: The same password that was used to encrypt the file must be used to decrypt the file later. If you loose or forget the password, it cannot be recovered!

Operation and privacy

The page uses javascript running within your web browser to encrypt and decrypt files client-side, in-browser. The page makes no network connections during this process, to ensure that your files and password do not leave your web browser during the process. This can be independently verified by reviewing the source code for the page, or by monitoring your web browser's networking activity during operation of the page. The page can also be downloaded and run locally on your system offline.

Cryptography

All client-side cryptography is implemented using the Web Crypto API. Files are encrypted using AES-CBC 256-bit symmetric encryption. The encryption key is derived from the password and a random salt using PBKDF2 derivation with 10000 iterations of SHA256 hashing.

Compatibility with openssl

The encryption used by the page is compatible with openssl.

Files encrypted using the page can be decrypted using openssl using the following command:

openssl aes-256-cbc -d -salt -pbkdf2 -iter 10000 -in encryptedfilename -out plaintextfilename

Files encrypted using the following openssl command can be decrypted using the page:

openssl aes-256-cbc -e -salt -pbkdf2 -iter 10000 -in plaintextfilename -out encryptedfilename

Running the page offline

The web page is self-contained. The page does not require any supporting files; all javascript and css for the page is contained in the source code of the page. To run the page locally on your system offline, simply save the page to your system as a .html file, then open the file from your system in your web browser (optionally with networking disabled).

Verifying the integrity of the page

The expected SHA256 checksum hash of the .html file containing the page is:

c7398059dffd25fa8a9d81c570250887fba61dc4eafcfca42f9081196389ed05

If loading the page from a web server, you can verify that the checksum hash of the .html file downloaded from the web server matches the expected checksum hash using the Page Integrity browser extension. If running the page offline, it is recommended that you verify that the checksum hash of the .html file matches the expected checksum hash before opening the file in your web browser.

Contributing

Pull requests are welcome.

License

This project is licensed under the GPL-3.0 open source license.

Contact

Please contact MTI for any questions or comments concerning this project.

web-browser-based-file-encryption-decryption's Issues

openssl command doesn't seem to work.

Hide the "File encrypted" green feedback text when a file is dropped in the dropzone

Hi there, @meixler:

First, congratulations for this code, I use it to encrypt GLBs and really appreciate it.

Said this, a UX-related aspect I think may be improved (in a really easy way) is to hide the "File encrypted" green feedback text when a file is dropped in the dropzone. one you encryp a file It's always sitted there, being so a bit annoying when you're encrypting/devrypting several files with the same password.

Best regards.