encrize's cipher tool
decrypt and encrypt messages from the blog, right in the browser
This page implements PBKDF2-HMAC-SHA256 (600000 iterations, 16 byte salt), an HMAC-SHA256 CTR keystream, encrypt-then-MAC with constant time verification, and urlsafe base64 output of salt(16) + ciphertext + tag(32).
Everything runs locally in your browser. Nothing is sent anywhere. The password is kept in localStorage, so anyone with access to this browser profile can read it.
Password
No password saved yet.