isomorphic-webcrypto VS portable-secret

End to end encryption, if possible: if your use cases allows it, try your best to implement end to end encryption. That means that, if the user uploads a file, it should be encrypted client side (in the browser) before uploading. You can derive the key from the user's password and/or security token (see below). Check here for some resources: https://www.w3.org/TR/WebCryptoAPI/.

https://en.wikipedia.org/wiki/Argon2

> There is no reason not to use Argon2

In this case, the reason for not using Argon2 is that it's not available: https://www.w3.org/TR/WebCryptoAPI/

> Well if this product isn't for mass-market

This is a demo for self-contained HTML encrypted secrets. Do with it what you want.

A TypeScript Hybrid Public Key Encryption (HPKE) implementation build on top of Web Cryptography API This module works on web browsers, Node.js, Deno and Cloudflare Workers

I haven’t used it, but https://github.com/kevlened/isomorphic-webcrypto might be more along the lines of what you’re after

Something like [0] maybe?

[0]: https://mprimi.github.io/portable-secret/

I like portable-secret which uses the built-in browser cryptographic functions, no external software.

https://github.com/mprimi/portable-secret

My own in-browser encryption project/POC: https://mprimi.github.io/portable-secret/

Discussed here: https://news.ycombinator.com/item?id=34083366

I saw someone recommend Portable Secret recently, albeit I’ve not used it but thought I’d throw it into the mix in case someone else has and can comment.

Interesting... on 2022-12-13 the bounty has been claimed! Just a few hours after mprime1 shared the project in a comment on HackerNews, someone managed to drain the BTC.

https://github.com/mprimi/portable-secret/commit/3b22d2b42ba...

I'd love to hear more about this.