e204.store
Launch App

🔒 Vault Net — AES-256 Cryptographic Engine

AES-256-GCM PBKDF2 (100k rounds) Zero-Knowledge

A zero-knowledge, hardware-accelerated text and secret encryptor. Encrypt confidential messages, passwords, and sensitive notes using native browser Web Crypto primitives before sending them over insecure networks.

WebCrypto Encryption Workspace
Hardware Accelerated
Your passphrase is never sent to any server. If you forget it, the ciphertext cannot be recovered.
Cipher Algorithm
AES-GCM 256-bit
Key Derivation
100,000 PBKDF2 Iterations
Authentication Tag
128 Bits (GHASH)
Server Exposure
0% Zero-Knowledge

The Mathematics and Architecture of In-Browser AES-256-GCM

In modern information security, the Advanced Encryption Standard (AES) with a 256-bit key in Galois/Counter Mode (GCM) represents the gold standard for symmetric encryption. Endorsed by the U.S. National Institute of Standards and Technology (NIST) and utilized by global financial systems, AES-256 provides $2^{256}$ potential key combinations—a search space so immense that even all current supercomputers combined could not brute-force it in the lifetime of the known universe.

Historically, online encryption utilities required users to submit their sensitive plaintext to backend servers via HTTP POST requests, creating an immediate interception vulnerability. e204.store Vault Net utilizes the browser's native W3C Web Crypto API (window.crypto.subtle), ensuring that key derivation and cryptographic computations happen directly inside your device's CPU and memory registers.

Cryptographic Pipeline Breakdown

When you secure text through Vault Net, the following four-phase cryptographic lifecycle is executed client-side:

1
CSPRNG Salt & IV Generation
A 16-byte cryptographic salt and a 12-byte initialization vector (IV) are generated via crypto.getRandomValues.
2
PBKDF2 Key Stretching
Your passphrase is transformed into a high-entropy 256-bit symmetric key using PBKDF2 with 100,000 SHA-256 rounds.
3
AES-GCM Authenticated Encryption
Plaintext is encrypted and coupled with a 128-bit GHASH authentication tag to guarantee data integrity.

Why Galois/Counter Mode (GCM) is Essential for Integrity

Traditional encryption modes like CBC (Cipher Block Chaining) or ECB (Electronic Codebook) only provide confidentiality, leaving ciphertexts vulnerable to bit-flipping and padding oracle attacks.

GCM is an Authenticated Encryption with Associated Data (AEAD) scheme. When encrypting, it produces both ciphertext and an authentication tag. If an attacker tampers with even a single bit of the encrypted payload during transit, the decryption algorithm instantly fails and rejects the message, preventing unauthorized modification.

Security Comparison: e204 Vault vs. Cloud Encryptors

Security Feature e204.store Vault Net Traditional Online Encryptors
Cryptographic Execution Client-side browser RAM via WebCrypto Remote cloud server backend
Passphrase Exposure Never transmitted over internet Logged in server access logs
Key Stretching PBKDF2 with 100,000 iterations Weak single-round MD5 / SHA1
Authentication Mode GCM (AEAD tamper protection) Insecure ECB or unauthenticated CBC

Frequently Asked Questions

Can e204.store recover my encrypted data if I forget my password?
No. Because e204.store is a strict zero-knowledge platform, we do not store your master passphrase or your cryptographic keys. Without the exact passphrase used during encryption, AES-256 ciphertext is mathematically impossible to decrypt.
Can I safely send the resulting encrypted text over email or Discord?
Yes. The output generated by Vault Net is Base64 encoded and contains the embedded salt, IV, and ciphertext tag. You can safely paste and transmit this text over public channels, provided your recipient knows the secret passphrase.
How does Vault Net protect against brute-force password cracking?
We employ PBKDF2 (Password-Based Key Derivation Function 2) with 100,000 computation rounds and a unique 16-byte random salt. This makes brute-force dictionary attacks with GPU rigs computationally expensive and impractical.
Does Vault Net work offline without internet?
Yes. Web Crypto API is an offline-capable browser standard supported by Chrome, Safari, Firefox, Edge, and mobile browsers. You can disconnect your Wi-Fi and encrypt/decrypt secrets without any network access.