Skip to content
endec

AES encryption & decryption

AES is the standard symmetric cipher, used everywhere from HTTPS to disk encryption. Choose GCM for new work: it encrypts and also detects tampering. CBC, CTR, CFB, OFB and ECB are here for working with existing data and systems.

Runs 100% in your browser — nothing is uploaded

Everything happens in this browser tab.

recommendedThe standard for symmetric encryption. With GCM it also detects tampering.

Authenticated: decryption fails if anything was changed. Never reuse a nonce with the same key.

openssl enc -pbkdf2. Slow on purpose, which makes guessing the password expensive. The output is OpenSSL's format: "Salted__", an 8-byte random salt, then the ciphertext and the 16-byte tag (openssl enc can't do authenticated modes, so this part is specific to this tool).

Optional. Authenticated but not encrypted, e.g. a user ID or header. The same text is needed to decrypt.

Plaintext

0 chars

Ciphertext

Ctrl+Enter in the text box works too.