polycrypt/polycrypt

PolyCrypt - A pure JS implementation of the WebCrypto API

PolyCrypt - A pure JS implementation of the WebCrypto API

This project is an implementation of the W3C WebCrypto API.

For full details, see our website

Quick Start

> echo 127.0.0.1  polycrypt-test >>/etc/hosts
> cd $POLYCRYPT_ROOT
> ./tool/webservers.sh
> # Load http://polycrypt-test:8000/ in your favorite browser

Successfully tested in the following browsers

• Chrome [ Desktop, Android, iOS ]
• Firefox [ Desktop, Android ]
• Safari [ Desktop, iOS ]
• Internet Explorer [ Desktop, Phone ]
• Opera [ Desktop ]
• iCab

Currently thought to not work these browsers

• Default Android browser
• Opera Mini
• Versions of IE < 10

Known issues

• Safari: Does not work in Private Browsing Mode
• Firefox: Does not work if cookies set to "Ask me"
• Appears not work with NoScript (even when disabled for site)
• Cannot be used from local pages (on disk) due to need for postMessage

polycrypt's Issues

Please mark this project as inactive

Thanks for your work on this.

The web page says (at the bottom) that the project is no longer active. It would be helpful if the repo README also indicated this. I'd also suggest making the notice on the web site more prominent.

Rewrite to support Promises instead of DOM Requests

It seems that polycript is based on an outdated draft of the Web Crypto spec. The newer revision are based on Promises, instead of DOM Request - leading to a code pattern like

crypto.subtle.digest(... ).then( func);

instead of

crypto.subtle.digest(... ).oncomplete = then;

Maybe it's worth noting that in the README as long as this is not met?

How to access Wndows Certificate Store

How can I access Windows Certificate Store so I can sign using certificates on there?
thanks in advance, Marcos.

Question regarding X509 certificates

Hi,

Congratulations!! Your project rocks :)

We are maintaining a Java based CryptoApplet for digitally sign content in the browser using a personal X509 certificate stored in the browser store, SO or smartcard reader.

Do you think that there is any chance or future integration to move from Java applets to a pure JavaScript approach?

Best regards,
Ricardo

Single Script

Hi,

I'm currently looking to use polycrypt during development as a reference implementation of the W3C Api inside of a PhoneGap application. Including http://polycrypt.net/polycrypt.js in my HTML app is not really possible, since I would like to deploy all dependencies in my PhoneGap bundle.

Is there a way to bundle all of the required scripts into a single file?

Thanks

set font weight to 300

Hey

So this technically has to do with the polycrypt.net website. But I would humbly like to recommend making the font-weight 300 instead of "lighter" on .content. It is barely legible on latest chrome and firefox (on osx) but looks fine on safari. setting to 300 makes it legible on all three.

Cheers!

using Math.random() to seed RNGs is not secure

This implementation uses WebWorkers which have no access to the underlying window.crypto API that modern browsers implement to provide access to, among other things, cryptographically strong PRNGs. JSBN attempts to seed its pool from window.crypto, or, failing that, it just dumps a bunch of numbers in from Math.random() which is NOT suitable for cryptography.

This library is useful as a polyfill, but what's the point exactly if it's not secure?