Hardware-Accelerated In-Browser Cryptography Without Server Leaks
Calculating cryptographic digests or encrypting payloads on public websites often exposes proprietary keys, database passwords, and private identifiers to server access logs or intermediate proxies.
CipherLab solves this by running all cryptographic algorithms entirely inside your browser sandbox via the native W3C WebCrypto API (window.crypto.subtle). Operations are executed with native C++ CPU acceleration on your device without sending a single byte across the internet.
From generating high-performance time-ordered UUID v7 keys for database schemas to computing HMAC-SHA256 signatures and AES-256-GCM authenticated encryption, CipherLab is the definitive zero-trust cryptographic workbench.
Cryptographic Modules & Capabilities
#️⃣ Cryptographic Hashes
Instant hash digests: SHA-256, SHA-512, SHA-384, SHA-1, MD5, and CRC32 with Hex and Base64 formatted outputs.
🔏 Keyed HMAC Signatures
Generate HMAC-SHA256, HMAC-SHA512, HMAC-SHA384, and HMAC-MD5 signatures with secret key authentication in UTF-8 or Hex.
🛡️ AES-256-GCM & CBC Encryption
Perform symmetric encryption and decryption using PBKDF2 key derivation, secure random IVs, and authenticated GCM tags.
🆔 UUID v7 & v4 Generator
Generate batch time-ordered UUID v7 (for database indexing), UUID v4 (random), ULID, and NanoID with bulk copy.
🔄 Multi-Format Encoder
Bidirectional conversions across Plaintext, Base64, Base64URL, Hexadecimal (0x), Binary (0101), and URL percent-encoding.
🔒 Zero Cloud Telemetry
100% in-browser memory execution. Your keys, passwords, and sensitive plaintexts never leave your local device.
Frequently Asked Questions
Does CipherLab transmit my secret keys or passwords over the network?
No. CipherLab executes 100% locally in your browser's memory using the native W3C WebCrypto API (window.crypto.subtle). Your plaintexts, passwords, hashes, and encryption keys never leave your machine.
What is UUID v7 and why is it superior to UUID v4 for database primary keys?
UUID v7 embeds a millisecond-precision Unix timestamp in its most significant 48 bits, making it naturally time-ordered and sortable. In databases like PostgreSQL and MySQL, this prevents B-tree index page fragmentation and significantly boosts insert throughput compared to random UUID v4.
What is the difference between AES-256-GCM and AES-256-CBC?
AES-256-GCM (Galois/Counter Mode) provides authenticated encryption with associated data (AEAD), ensuring both confidentiality and tamper-proof integrity. AES-256-CBC encrypts data in cipher blocks but requires a separate HMAC to ensure integrity.
Which encoding formats are supported in CipherLab?
CipherLab supports bidirectional conversion between Plaintext (UTF-8), Base64, Base64URL, Hexadecimal (0x), Binary (8-bit bytes), and URL Percent Encoding.