AES Symmetric Encryption & Decryption Studio
Cryptographically secure text and file encryption powered by browser-native Web Crypto API. Supports AES-GCM (Authenticated AEAD), AES-CBC, and AES-CTR with PBKDF2 passphrase key derivation. 100% private in-browser.
Plaintext Input
Ciphertext Output
Cryptographic Architecture & Security Standards
Authenticated Encryption (AEAD)
AES-GCM combines Galois counter mode with universal hashing authentication tags (GMAC), ensuring ciphertext cannot be forged, truncated, or modified without immediate detection.
Hardware-Accelerated Web Crypto
Leverages modern CPU instructions (AES-NI) directly through window.crypto.subtle for near instantaneous throughput reaching gigabits per second without thread blocking.
Zero-Knowledge Local Execution
Neither your passphrases, salt, initialization vectors, nor plaintexts leave your browser's private memory space. No telemetry, no logging, 100% offline.
Frequently Asked Questions
What is the JSON Bundle format?
The JSON Bundle packages all cryptographic parameters needed for clean decryption: algorithm, keyLength, iterations, salt (hex), iv (hex), and the ciphertext (base64). This ensures you never lose the IV or salt required to decrypt.
Can I encrypt and decrypt binary files?
Yes. Click "Upload File" to load any document, archive, or media file. The tool encrypts the binary stream in RAM and lets you download a protected encrypted file.
How many PBKDF2 iterations should I use?
OWASP recommends at least 600,000 iterations for PBKDF2-HMAC-SHA256, but for quick interactive web usage, 100,000 to 250,000 iterations provides a strong balance of brute-force resistance and sub-50ms execution.