AES & HMAC

Encrypts and decrypts with AES in GCM, CBC (PKCS#7 padding) or CTR mode through the browser's Web Crypto API, from a passphrase (PBKDF2-SHA-256, 600,000 iterations by default) or a raw 128-, 192- or 256-bit key, and computes and verifies HMAC-SHA-256/384/512; keys are never saved or shared. AES is the Rijndael cipher, standardized as FIPS 197 in 2001; GCM is NIST SP 800-38D; HMAC is RFC 2104 (1997).

• FIPS 197, Advanced Encryption Standard (AES) (NIST, 2001; updated 2023)
• NIST SP 800-38D, Recommendation for Block Cipher Modes of Operation: Galois/Counter Mode (GCM) and GMAC (2007)
• RFC 2104, HMAC: Keyed-Hashing for Message Authentication (1997)