How It Works
- Uses AES-256-GCM via the Web Crypto API
- Key derived with PBKDF2 (600,000 iterations, SHA-256)
- Random 128-bit salt + 96-bit IV per encryption
- Output is base64-encoded (salt + IV + ciphertext)
- Nothing is sent to any server — all processing happens locally