Enkrypted Chat - Signal-Protocol Based PWA

This is a technical demo of a fairly unique approach using a browser-based, local-first and webrtc approach. it allows to avoid centralized registration.

Enkrypted.Chat

This is intended to introduce a new paradigm in client-side managed secure cryptography. We can avoid registration of any sort.

Features:

  • PWA
  • P2P
  • End to end encryption
  • Signal protocol
  • Post-Quantum cryptography
  • Multimedia
  • File transfer
  • Video calls
  • Local-first
  • No installation

Some open source versions of the core concepts.

Feel free to reach out for clarity instead of diving into the docs. Please use responsibly.

IMPORTANT: Caution should always be used for projects like this. While this is aiming to provide a secure experience, it isnt audited or reviewed. Shared for testing, feedback and demo purposes only. If youre unsure, this isnt for you.

reddit.com
u/Accurate-Screen8774 — 4 days ago

P2P WhatsApp Clone... No install/registration

This is a technical demo of a fairly unique approach using a browser-based, local-first and webrtc approach. it allows to avoid centralized registration.

Enkrypted.Chat

This is intended to introduce a new paradigm in client-side managed secure cryptography. We can avoid registration of any sort.

Features:

  • PWA
  • P2P
  • End to end encryption
  • Signal protocol
  • Post-Quantum cryptography
  • Multimedia
  • File transfer
  • Video calls
  • Local-first
  • No registration
  • No installation
  • No database
  • TURN server

Some open source versions of the core concepts.

Feel free to reach out for clarity instead of diving into the docs. Please use responsibly.

IMPORTANT: Caution should always be used for projects like this. While this is aiming to provide a secure experience, it isnt audited or reviewed. Shared for testing, feedback and demo purposes only. If youre unsure, this isnt for you.

reddit.com
u/Accurate-Screen8774 — 4 days ago

Looking for honest feedback before i market my Project

Im working on a "secure and private workspace" with:

  • File-management
  • Doc-editing
  • P2P-messaging

By using a browser-based, local-first and webrtc approach, we can avoid installation and databases. A fairly unique offering in the cybersecurity space.

Id like to work towards marketing, but before i do that, id like your feedback.

  • Is the landing page clear?
  • Do you understand what the app does?
  • Is the onboarding easy?
  • Is the app intuitive?
  • Is the trial-period fair?
  • Would you trust it for an important job?
  • Is the the "tone" in the documentation too cautious?
  • Anything else?

Feel free to reach out for clarity instead of diving into the docs.

Enkrypted.Chat

reddit.com
u/Accurate-Screen8774 — 5 days ago

Looking for honest feedback before i market my SaaS

Im working on a "secure and private workspace" with:

  • File-management
  • Doc-editing
  • P2P-messaging

By using a browser-based, local-first and webrtc approach, we can avoid installation and databases. A fairly unique offering in the cybersecurity space.

Id like to work towards marketing, but before i do that, id like your feedback.

  • Is the landing page clear?
  • Do you understand what the app does?
  • Is the onboarding easy?
  • Is the app intuitive?
  • Are the tier prices fair?
  • Is the trial-period fair?
  • Would you trust it for an important job?
  • Is the the "tone" in the documentation too cautious?
  • Anything else?

Feel free to reach out for clarity instead of diving into the docs.

Enkrypted.Chat

reddit.com
u/Accurate-Screen8774 — 10 days ago

Looking for honest feedback before i market my SaaS

Im working on a "secure and private workspace" with:

  • File-management
  • Doc-editing
  • P2P-messaging

By using a browser-based, local-first and webrtc approach, we can avoid installation and databases. A fairly unique offering in the cybersecurity space.

Id like to work towards marketing, but before i do that, id like your feedback.

  • Is the landing page clear?
  • Do you understand what the app does?
  • Is the onboarding easy?
  • Is the app intuitive?
  • Are the tier prices fair?
  • Is the trial-period fair?
  • Would you trust it for an important job?
  • Is the the "tone" in the documentation too cautious?
  • Anything else?

Feel free to reach out for clarity instead of diving into the docs.

Enkrypted.Chat

reddit.com
u/Accurate-Screen8774 — 10 days ago

Is this passkey-based encryption secure?

Im working on a webapp and I'd like to be able to store encrypted data.

The data is stored on browser-storage with a custom hook: https://www.reddit.com/r/Frontend/comments/1ucu3ix/i_created_a_webcomponent_hook_for_encrypted

I added the ability to use passkeys to derive a password for the encryption key.

Support for passkeys is still a bit flaky between devices. My phone is fairly modern but passkeys PRF doesn't work. I considered in such a case to simply not offer passkey encryption, instead i decided to fallback to to using the credentialsID+HKDF as the password.

To have mechanism around recovery, I decided to use a crypto-random string as the password which would itself be encrypted by the passkey-derived password.

I was aiming for a seamless passwordless authentication for the user. You can try the demo here: https://enkrypted.chat

Let me know if there are details i might be overlooking. The project isnt completely open source, but feel free to reach out for clarity on the details.

reddit.com
u/Accurate-Screen8774 — 12 days ago

Passkey-Based Encryption

Im working on a webapp and I'd like to be able to encrypt the data at rest. So this is what I'm doing...

I added the ability to use passkeys to derive a password for the encryption key.

Support for passkeys is still a bit flaky between devices. My phone is fairly modern but passkeys psuedo random function doesn't work. I considered in such a case to simply not offer passkey encryption, instead i decided to fallback to to using the credentialsID+HKDF as the password.

To have mechanism around recovery, I decided to use a crypto-random string as the password which would itself be encrypted by using the passkey-derived password.

I was aiming for a seamless passwordless authentication for the use. You can try the demo here: https://enkrypted.chat

reddit.com
u/Accurate-Screen8774 — 12 days ago

Browser-Based Office Suite

This project isnt finished enough to compare to Microsoft/Euro office. This is intended to demonstrate client-side managed functionality. Allowing users to get started without setup.

By leveraging FileSystem API for browser-based file-management, we can create a fairly unique approach for storing files directly on your device from your browser.

Features:

  • PWA
  • Local-first
  • Word
  • Spreadsheet
  • PDF

Coming soon:

  • Support for more filtypes
  • Storage sync
  • Collaborative editing
  • Encryption at rest
  • P2P file-transfer

Long-term goal:

  • NextCloud clone?
  • WhatsApp clone?
  • Instagram clone?
  • WeTransfer clone?

*** The project is experimental and far from finished. It's presented for testing, feedback and demo purposes only (USE RESPONSIBLY!). ***

I have a demo version for testing. It isnt ready to replace any existing app or service, but its a work-in-progress and it would be great to get your feedback on it.

The implementation is based on the functionality described in a previous post.

reddit.com
u/Accurate-Screen8774 — 15 days ago

Local-First Private Office Suite

By leveraging FileSystem API for browser-based file-management, we can create a fairly unique approach for storing files directly on your device from your browser.

Features:

  • PWA
  • Local-first
  • Word
  • Spreadsheet
  • PDF

Coming soon:

  • Support for more filtypes
  • Storage sync
  • Collaborative editing
  • Encryption at rest

*** The project is experimental and far from finished. It's presented for testing, feedback and demo purposes only (USE RESPONSIBLY!). ***

This project isnt finished enough to compare to euro-office. This is intended to demonstrate client-side managed functionality. Allowing users to get started without setup.

I have a demo version for testing. It isnt ready to replace any existing app or service, but its a work-in-progress and it would be great to get your feedback on it.

The implementation is based on the functionality described in a previous post.

I don't know anything about sales and marketing, when I get it to a reasonable state, I'm thinking to slap a paywall on it. Thoughts?

reddit.com
u/Accurate-Screen8774 — 15 days ago

Only-Office Clone

By leveraging FileSystem API for browser-based file-management, we can create a fairly unique approach for storing files directly on your device from your browser.

Features:

  • PWA
  • Local-first
  • Encryption at rest
  • Word
  • Spreadsheet
  • PDF
  • ... more soon

*** The project is experimental and far from finished. It's presented for testing, feedback and demo purposes only (USE RESPONSIBLY!). ***

This project isnt finished enough to compare to only-office. This is intended to demonstrate client-side managed functionality. Allowing users to get started without setup.

I have a demo version for testing. It isnt ready to replace any existing app or service, but its a work-in-progress and it would be great to get your feedback on it.

The implementation is based on the functionality described in a previous post.

reddit.com
u/Accurate-Screen8774 — 15 days ago

Libre-Office Clone

By leveraging FileSystem API for browser-based file-management, we can create a fairly unique approach for storing files directly on your device from your browser.

Features:

  • PWA
  • Local-first
  • Encryption at rest
  • Word
  • Spreadsheet
  • PDF
  • ... more soon

*** The project is experimental and far from finished. It's presented for testing, feedback and demo purposes only (USE RESPONSIBLY!). ***

This project isnt finished enough to compare to libre-office. This is intended to demonstrate client-side managed functionality. Allowing users to get started without setup.

I have a demo version for testing. It isnt ready to replace any existing app or service, but its a work-in-progress and it would be great to get your feedback on it.

The implementation is based on the functionality described in a previous post.

reddit.com
u/Accurate-Screen8774 — 15 days ago

VeraCrypt Clone

By leveraging WebCrypto API and FileSystem API for browser-based encryption, we can create a fairly unique approach for encrypting and storing files directly on your device from your browser.

*** The project is experimental and far from finished. It's presented for testing, feedback and demo purposes only (USE RESPONSIBLY!). ***

This project isnt finished enough to compare to veracrypt. This is intended to demonstrate client-side managed secure cryptography. Allowing users to get started without setup.

i have a demo version for testing. it isnt ready to replace any existing app or service, but its a work-in-progress and it would be great to get your feedback on it.

the implementation is based on the functionality described in a previous post.

reddit.com
u/Accurate-Screen8774 — 15 days ago

Browser-Based File Encryption

By leveraging WebCrypto API and FileSystem API for browser-based encryption, we can create a fairly unique approach for encrypting and storing files directly on your device from your browser.

*** The project is experimental and far from finished. It's presented for testing, feedback and demo purposes only (USE RESPONSIBLY!). ***

This project isnt finished enough to compare to veracrypt. This is intended to demonstrate client-side managed secure cryptography. Allowing users to get started without setup.

i have a demo version for testing. it isnt ready to replace any existing app or service, but its a work-in-progress and it would be great to get your feedback on it.

the implementation is based on the functionality described in my previous post here.

reddit.com
u/Accurate-Screen8774 — 15 days ago

Browser-Based VeraCrypt Clone

By leveraging WebCrypto API and FileSystem API for browser-based encryption, we can create a fairly unique and secure way to encrypt and store files directly on your device from your browser.

*** The project is experimental and far from finished. It's presented for testing, feedback and demo purposes only (USE RESPONSIBLY!). ***

This project isnt finished enough to compare to veracrypt. This is intended to demonstrate client-side managed secure cryptography. Allowing users to get started without setup.

i have a demo version for testing. it isnt ready to replace any existing app or service, but its a work-in-progress and it would be great to get your feedback on it.

the implementation is based on the functionality described in my previous post here.

reddit.com
u/Accurate-Screen8774 — 15 days ago

Browser-Based VeraCrypt Clone

By leveraging WebCrypto API and FileSystem API for browser-based encryption, we can create a fairly unique and secure way to encrypt and store files directly on your device from your browser.

*** The project is experimental and far from finished. It's presented for testing, feedback and demo purposes only (USE RESPONSIBLY!). ***

This project isnt finished enough to compare to veracrypt. This is intended to demonstrate client-side managed secure cryptography. Allowing users to get started without setup.

i have a demo version for testing. it isnt ready to replace any existing app or service, but its a work-in-progress and it would be great to get your feedback on it.

the implementation is based on the functionality described in my previous post here.

reddit.com
u/Accurate-Screen8774 — 15 days ago
▲ 3 r/PWA

VeraCrypt Clone PWA

By leveraging WebCrypto API and FileSystem API for browser-based encryption, we can create a secure way to encrypt and store files directly on your device from your browser.

*** The project is experimental and far from finished. It's presented for testing, feedback and demo purposes only (USE RESPONSIBLY!). ***

This project isnt finished enough to compare to veracrypt. This is intended to demonstrate client-side managed secure cryptography. Allowing users to get started without setup.

i have a demo version for testing. it isnt ready to replace any existing app or service, but its a work-in-progress and it would be great to get your feedback on it.

the implementation is based on the functionality described in my previous post here.

reddit.com
u/Accurate-Screen8774 — 15 days ago
▲ 1 r/webdev

Browser-Based Veracrypt Clone

By leveraging WebCrypto API and FileSystem API for browser-based encryption, we can create a secure way to encrypt and store files directly on your device from your browser.

*** The project is experimental and far from finished. It's presented for testing, feedback and demo purposes only (USE RESPONSIBLY!). ***

This project isnt finished enough to compare to veracrypt. This is intended to demonstrate client-side managed secure cryptography. Allowing users to get started without setup.

i have a demo version for testing. it isnt ready to replace any existing app or service, but its a work-in-progress and it would be great to get your feedback on it.

the implementation is based on the functionality described in a previous post.

reddit.com
u/Accurate-Screen8774 — 16 days ago

Browser-Based Veracrypt Clone

By leveraging WebCrypto API and FileSystem API for browser-based encryption, we can create a secure way to encrypt and store files directly on your device from your browser.

*** The project is experimental and far from finished. It's presented for testing, feedback and demo purposes only (USE RESPONSIBLY!). ***

This project isnt finished enough to compare to veracrypt. This is intended to demonstrate client-side managed secure cryptography. Allowing users to get started without setup.

i have a demo version for testing. it isnt ready to replace any existing app or service, but its a work-in-progress and it would be great to get your feedback on it.

the implementation is based on the functionality described in my previous post here.

reddit.com
u/Accurate-Screen8774 — 16 days ago
▲ 4 r/foss

Looking For Browser-Based Office Suite Without a Backend

there are many browser based office suites out there like collabra, libre-office and more recently euro-office.

i wanted to try something out for a purely client-side implementation in javascript, but those all seems to want to have some kind of selfhosted backend setup like with nextcloud.

from those listed, they seem to have the basic mechanics for creating a file, but i would like it to be able to use browser-storage and the ability to trigger a download of it from browser-storage.

i made an attempt myself with AI. i dont see myself creating anything competative and would be better to use an existing base.

reddit.com
u/Accurate-Screen8774 — 16 days ago
▲ 3 r/VibeCodersNest+1 crossposts

Signal Protocol in Rust for Frontend Javascript

Id like to share the implementation of the signal protocol that i use in my messaging app. The implementation is in rust and compiles to WASM for browser-based usage.

The aim is for it to align with the official implementation (https://github.com/signalapp/libsignal). That version was not used because my use case required client side browser-based functionality and i struggled to achieve that in the official one where javascript is used but is targeting nodejs.

There are other nuances to my approach like using module federation, which led to me moving away from the official version.


IMPORTANT: While this is aiming to provide a secure implementation, it isnt audited or reviewed. Shared for testing, feedback and demo purposes only. Please use responsibly.

Its always worth repeating that its far from finished and i hope with feedback i can make it better. I have put efforts towards directing it towards unit-tests, an audit and formal-proofs. None of that is good-enough, but i hope it can act as a starting point for verifying the implementation is correct.

Im sure people have better things to do with their time than review unstable and unfinished code. The transparency is intended for professionals or anyone that may be curious... Feel free to reach out for clarity instead of reading the code/docs.

FAQ: Has it been audited?

No. The latest on the matter: https://www.reddit.com/r/CyberSecurityAdvice/comments/1su8lir/security_audit_feedback_from_radically_open . I'm waiting for feedback from NLNet.

u/Accurate-Screen8774 — 18 days ago