Cryptographic Architecture
Zero-Knowledge Implementation Details
AES-256-GCM
Galois/Counter Mode (GCM) provides both confidentiality and authenticity verification. Data cannot be tampered with without detection.
PBKDF2 Key Derivation
Uses PBKDF2 with 100,000 SHA-256 iterations and random 16-byte salts to resist brute-force dictionary attacks.
// Client-side Crypto Pipeline
1. Passphrase + Salt → PBKDF2 (100k iterations) → 256-bit Key
2. Plaintext + IV (12-byte) → AES-GCM-256 Encryption → Ciphertext
3. Output = Base64(Salt + IV + Ciphertext)