How Encrypti0n.com Works: A Browser-Based Encryption Platform

Text Encryption Process

Encrypting text securely involves the following precise steps:

1. Retrieve Settings : The app fetches cryptographic settings (rounds, salt length) from encrypted local storage.
2. Encode Inputs : Both your text and password are encoded into binary format (UTF-8).
3. Generate Salt and Key : A random salt is generated. Using Argon2 and the configured number of rounds, a secure 256-bit key is derived from your password.
4. Encrypt with AES-GCM : The binary text data is encrypted using AES-GCM with the derived key and a securely generated 12-byte nonce ( crypto.getRandomValues ).
5. Output Encrypted Data : The encrypted data is encoded in base64 format for easy copying or storage.

Below is a sample code snippet that shows how AES-GCM encryption is performed on text using a javscript-ish pseudo-code:

settings = getEncryptedStorageSettings();
encodedText = utf8Encode(text);
encodedPassword = utf8Encode(password);
salt = crypto.getRandomValues(settings.saltLength);
key = deriveArgon2Key(encodedPassword, salt, settings.rounds);
iv = crypto.getRandomValues(12);
ciphertext = AES_GCM_Encrypt(encodedText, key, iv);
outputBase64(ciphertext);

File Encryption Process

Encrypting files follows a similar core logic with additional file-specific enhancements for improved security and manageability:

If you’re uploading a sensitive PDF, the file-chunking approach makes sure that each chunk is encrypted independently, maximizing security and performance

1. Initial Steps : Retrieve settings and encode the password as above, deriving a 256-bit key.
2. Chunk Splitting : The file is split into 64 KiB chunks, each encrypted individually to ensure efficiency and security.
3. Individual Chunk Encryption : Each chunk receives a newly generated 12-byte nonce for AES-GCM encryption.
4. File Header Creation : Each chunk’s length information and encryption metadata (such as nonce and salt) are included in the file header.
5. Blob Generation and Download : The encrypted chunks are combined into a Blob object, and a secure download link is generated for the user.

Below is a sample code snippet that explains how AES-GCM encryption is performed on files using a javscript-ish pseudo-code:

settings = getEncryptedStorageSettings();
encodedPassword = utf8Encode(password);
salt = crypto.getRandomValues(settings.saltLenght);
key = deriveArgon2Key(encodedPassword, salt, settings.rounds);
chunks = splitFileIntoChunks(file, 65536);
for each chunk:
    iv = crypto.getRandomValues(12);
    encryptedChunk = AES_GCM_Encrypt(chunk, key, iv);
    storeInBlob(encryptedChunk, iv, chunk.length);
createDownloadLink(blob);

Decryption Process

Decryption meticulously reverses the encryption, ensuring data integrity:

1. Header Verification : Check that the file or text header begins with the identifier byte 0x01 to confirm it was encrypted with Encrypti0n.com.
2. Retrieve Encryption Parameters : Extract the salt and the Argon2 round count from the header.
3. Key Derivation : Using extracted parameters, derive the correct 256-bit key.
4. AES-GCM Decryption : Perform decryption using AES-GCM with the derived key and nonce included within each chunk or encrypted text segment.

Below is a sample code snippet that illustrates how AES-GCM decryption is generally performed on this site using a javscript-ish pseudo-code:

header = readFileHeader(encryptedData);
verify(header.startsWith(0x01));
salt, rounds = extractHeaderParameters(header);
key = deriveArgon2Key(encodedPassword, salt, rounds);
decryptedData = AES_GCM_Decrypt(encryptedChunks, key, iv);
outputOriginalData(decryptedData);