SECURECRYPT

How SecureCrypt Works

• Uses AES-256-GCM — a military-grade authenticated encryption algorithm.
• Passphrase-based key derivation uses PBKDF2 with 300,000+ iterations for brute-force resistance.
• If no passphrase or key is provided, a cryptographically random 256-bit key is generated.
• The output is a portable Base64 package containing the ciphertext, IV, salt, and auth tag.
• The authentication tag ensures data integrity — any tampering will cause decryption to fail.
• Supply the same passphrase or Base64 key during decryption to recover the original text.
• Generated keys should be saved securely — they cannot be recovered after the session.
• All operations are performed server-side over a secure, authenticated connection.

Cryptographic Specs