Zero-dependency passphrase encryption (PBKDF2 + AES-256-GCM) that keeps sensitive data local.
Storing plaintext violates confidentiality; server-held keys are a breach vector.
Authenticated encryption, tamper detection, iteration limits, random salt/IV.
Local confidentiality with no trust in a key server.
PBKDF2 key derivation → AES-256-GCM encrypt/decrypt → JSON envelope.
src/encryption.mjs test/
encrypt("secret", passphrase)decrypt(envelope, passphrase) → "secret"
import { encrypt, decrypt } from './src/encryption.mjs'Node.js 20+ / modern browser · v1.0.0
18/18 PASS (incl. crypto security audit)
Proprietary non-exclusive
GENESIS Direct: Active · private · automatic · USDC on Base