JavaScript Cryptography

This page has been produced exclusively for educational purposes and for a better understanding of cryptographic algorithms. Here are some libraries regarding encryption in JavaScript.

Why is it important to cryptography in JavaScript?

Example of authentication between client(js) and server(php)

JavaScript + PHP/MySQL encrypted chat

Chat (JS+PHP)

JavaScript Tools

Base64 Encode/Decode

Schemes and protocols

cryp.sr – a minimal host-proof cryptographic textpad. The client-side code is up on github.

Pidder, Clipperz and Passpack are online password managers (and more). They have all released their code (links below). Clipperz also has a community edition of their website, Passpack has a sample application and Pidder just a crypto library.

AjaxPatterns: Host-Proof Hosting

Secure Ajax: SRP Hermetic (based on the Secure Remote Password protocol.)

BeamAuth: Two-Factor Web Authentication with a Bookmark

WebIBC (PDF), Identity Based Cryptography for Client Side Security in Web Applications.

Mozilla exposes a window.crypto object. Services are provided to enable: smart card events, generating certificate requests, importing user certs, generating random numbers, logging out of your tokens, and signing text.

Here's a set of AES test vectors: test vectors

Libraries

Crypto-js - info
Crypto-JS is a growing collection of standard and secure cryptographic algorithms implemented in JavaScript using best practices and patterns. They are fast, and they have a consistent and simple interface.
Algorithms: MD5, SHA-1, SHA-256, AES, DES, Rabbit, MARC4, HMAC (HMAC-MD5, HMAC-SHA1, HMAC-SHA256) PBKDF2.
Stanford - info
The Stanford Javascript Crypto Library
Algorithms: AES algorithm at 128, 192 or 256 bits.
Ohdave - info
ohdave.com
Algorithms: RSA algorithm at 128, 256, 512, 1024 or 2048 bits.
Forge - info
Forge: TLS Client implementation in Javascript
Algorithms: AES (CBC), RSA, MD5, SHA-1, SHA-256 message digests, HMAC support, PKCS#5 password-based key-derivation.
Movable Type - info
Algorithms: AES (js-php), DES, SHA-1, SHA-256.
Student Stanford - info
students stanford - RSA and ECC in JavaScript:
RSA Encryption - simple RSA encryption of a string with a public key
RSA Cryptography - more complete demo of RSA encryption, decryption, and key generation
ECDH Key Agreement - Diffie-Hellman key agreement using elliptic curves
Pajs - info
Algorithms: MD4, MD5, SHA-1, SHA-256, SHA-512.
jCryption - info
Algorithms: AES, SHA-1, SHA-256, RSA(php).
jsSHA - info
jsSHA is a JavaScript implementation of the entire family of SHA hashes as defined in FIPS 180-2 (SHA-1, SHA-224, SHA-256, SHA-384, and SHA-512) as well as HMAC. Despite JavaScript not natively supporting 64-bit operations, SHA-384 and SHA-512 are even implemented! jsSHA is also 100% cross-browser compatible.
pidCrypt - info
pidCrypt is an open source JavaScript library of cryptographical methods combined in a modular class model. This is meant to facilitate a more efficient use of these methods. pidCrypt supports RSA and AES encryption and decryption, MD5 and SHA Hashes, ASN parsing and Base64/UTF8 en-/decoding. The RSA and AES-CBC en-/decryption are compatibility with OpenSSL.
Fourmilab - info
Algorithms: AES, MD5.
ecmaScrypt - info
Algorithms: AES, SHA-256.
OpenPGP Encryption - info
Hanewinkel: First known OpenPGP JavaScript implementation Algorithms: RSA.
Clipperz - info
Algorithms: AES, SHA-256.
Nodejs - info
Algorithms: AES, RSA, MD4, MD5, SHA-1, SHA-256, SHA-512.

Other:

CryptoCat - JavaScript encrypted chat.
OpenPGPJS - OpenPGP library in JavaScript, it can be used on virtually every device.
gpg4browsers - GPG JavaScript implementation as Chrome Browser Extension.
GPGTools - Core Library + Mobile Phone GUI.
Ryan - Zimbra plugin.
Mete0r - Core library.
Prometheus - Google Mail integration.
Qooxdoo Crypto - Integration of crypto into universal JavaScript framework.

Performance:

Mobile:

Chrome Extensions:

JSCrypto