thew0lf/javascript-crypto-library

The JavaScript Crypto Library provides web developers with an extensive and efficient set of cryptographic functions. The library aims to obtain maximum execution speed while preserving modularity and reusability. The library is released as open source under a BDS license.

JAVASCRIPT CRYPTO LIBRARY - by Clipperz

The JavaScript Crypto Library provides web developers with an extensive and efficient set of cryptographic functions. The library aims to obtain maximum execution speed while preserving modularity and reusability.

ALL the code included in this project, if not otherwise stated, is released with the BSD 3-Clause License (see LICENSE.txt), and all rights are reserved to Clipperz Srl.

For any use not allowed by the license, please contact us.

Features

The Javascript Crypto Library currently includes:

• AES-256, symmetric encryption;
• Fortuna, a strong pseudo-random number generator;
• SRP, a verifier-based authentication protocol;
• SHA-2, hash function.

Clipperz online password manager makes heavy use of the above cryptographic functions.

Browser cryptography is an critical component for building zero-knowledge web applications, but you can also use it to improve the security of specific portion of your code. As an example, you could consider replacing your present user authentication process with SRP.

Acknowledgments

Javascript implementations of cryptographic algorithms have been around for years. Some of the pioneers in this field were: John Walker, Chris Veness, Paul Andrew Johnston and Leemon Baird. They all realized that Javascript could turn the browser into a new and ubiquitous “number crunching” tool that comes pre-installed on every modern computer. Even if they mostly wrote code for educational purposes, their work was an important inspiration to us.

Future developments

Basically we need to make the library more flexible and more powerful. Most functions need parameters for selecting the key length, the encoding options, …

Public-key cryptography is an area that definitely needs to be covered. The code already includes a first attempt to use elliptic curve cryptography (ECC), but it is still very slow and incomplete. We would love to improve it and develop all the components of a robust public-key cryptographic system based on elliptic curves. It’s an ambitious and complex plan. Any volunteer to help?

Contributions

Your contributions to the Javascript Crypto Library are very welcome! In order to avoid jeopardizing the ownership of the code base, we will require every developer to sign the Clipperz Contributor Agreement

This enables a single entity to represent the aggregated code base and gives the community flexibility to act as a whole to changing situations.

The CA establishes a joint copyright assignment in which the contributor retains copyright ownership while also granting those rights to Clipperz Srl. With the CA in place, the aggregated code base within any Clipperz open source project is protected by both the distribution license and copyright law.

Please download and review the Contributor Agreement for a complete understanding of its terms and conditions. You may send your signed and completed CA to Clipperz by scanning your completed form and emailing the image or by fax. Please retain a copy for your records. Thanks!