Web Crypto API

Definitions

1. A browser-native JavaScript API (window.crypto.subtle) that exposes cryptographic primitives — hashing (SHA-256/384/512), HMAC, symmetric encryption (AES-GCM/CBC/CTR), asymmetric key operations (RSA, ECDSA, ECDH), and key derivation (PBKDF2, HKDF) — all running in constant-time native code rather than JavaScript.

   In plain English: A built-in browser tool that lets websites perform encryption, hashing, and digital signatures securely without needing external libraries.

   Example: "We generate the ECDSA key pair with Web Crypto and store the private key as non-extractable so even our own JS can't read it."

Related Terms

• Hashing
• CORS Preflight
• CORS Origin
• Layout Engine
• Password Hashing
• Render Tree
• Salt
• Secure Random
• Web Container
• WebCodecs
• WebXR
• Crypto Library
• Crypto Module