Show HN: I created a web app to encrypt/decrypt messages using Web Crypto API (webcrypto-private-messages.vercel.app)

35 points by thiagosf 1y ago ↗ HN

10 comments

[ 3.2 ms ] story [ 37.9 ms ] thread

random_kris 1y ago ↗

Very cool wanted to build something similar myself

thiagosf 1y ago ↗

Nice! You can check my source code and create your implementation!

https://github.com/thiagosf/webcrypto-private-messages

[dead] brody_slade_ai 1y ago ↗

[flagged]

Rhapso 1y ago ↗

How are the public and private keys generated and stored?

hesus_ruiz 1y ago ↗

Generation, signature, verification, and some more crypto operations are performed with the standard browser Crypto APIs (https://developer.mozilla.org/en-US/docs/Web/API/SubtleCrypt...).

Storage of the private key is another thing. For a web app it is difficult to acces a hardware-based storage system. So typically it is stored in Localstorage or IndexdedDB, encrypted using a user-provided password. It is possible (but very involved and I have not seen web apps using it) to use WebAuthn for that.

thiagosf 1y ago ↗

I couldn't explain better, thank you !

yfw 1y ago ↗

I did this a while ago as well for rsa vs aes implementations. https://yifeiwu.github.io/subtlecrypto-demo/

thiagosf 1y ago ↗

That's cool, thanks for sharing it.

kristianr4s 1y ago ↗

nice - have you considered using a websocket to push the message to the receiver instead of when the receiver posts a message back?

thiagosf 1y ago ↗

Good one! I added some possible future improvements in the Readme.md, I'll add this one too. Thank you