Skip to content

Instantly share code, notes, and snippets.

JavaScript Crypto Libraries

I start with a list and plan to create a comparison table.

Disclaimer: Javascript Cryptography Considered Harmful

Security recommendations

It should be noted that js crypto apps deployed via regular web hosting (a.k.a. host-based security) provide users with less security than installable apps with auditable static versions. Installable apps can be deployed as a Firefox or Chrome packaged app. These apps are basically signed zip files and their runtimes typically enforce a strict Content Security Policy (CSP) to protect users against XSS. This blogpost explains the trust model of the web quite well.