Skip to content

Use Case

Max Ng edited this page Dec 13, 2019 · 2 revisions

TED application is built upon FileCrypter which essentially uses AESGCM-SIV for crypto function in GO. TED encipher and decipher an input string instead of a file. With this, TED is possible to be used to encipher/decipher text for communications such as email, SMS, Over-The-Top Messaging platform such as WhatsApp, LINE, WeChat, SKYPE. TED can also be used for performing Field Encryption on input data so data remains encrypted at rest and storage.

With TED WASM, the wasm binary file is downloaded in the browser's workload. Any data that needs to be encrypted can be send to the local wasm file to perform the encryption locally within the browser before sending or POSTing the data to the Server. This way it ensures field encryption is started in the user's browser, giving true privacy on user's sensitive data. The encrypted data is transmitted in flight encryption tunnel (HTTPS/TLS) towards the Server which is likely to cross several intermediaries (proxy, gateway, loadbalancer and Frontend Server) before storing or processed by the Application server. Underneath the Internet infrastructure, traffic crosses many ASN and network peering before reaching the intended destination. Field Encrypting allows data at rest to remain encrypted even when HTTPS/TLS session (data in transit) has terminated. Only the end application that needs to process the data will have the keys and algorithm to decipher the data.

TED WASM can be further modified to include a SALT and password/token/secret keys to be used on the data, strengthening the crypto process.

Existing JS does have libraries that perform crypto functions. However, the crypto libraries are not always up to date with the latest cipher suite. WASM allows developer to build crypto programs using the latest cipher suite and the same logic developed and built to be re-used on frontend, the mantra of build once and re-use. TED-WASM showcase this possibilities, with the logic built on top of FileCrypter and then extended for TED CLI, all re-using the AESGCM-SIV cipher.

Clone this wiki locally