Security Engineering
SecureVault
An encrypted notes application implementing client-side zero-knowledge AES-GCM cryptography, JWT authentication, secure cookies, and defense-in-depth architecture. Client Only.
Problem Solved
Storing sensitive notes on remote servers requires zero-knowledge client-side encryption to prevent unauthorized data exposure.
Implementation & Solution
Integrated Web Crypto API AES-GCM encryption client-side combined with JWT cookie authentication.
Architecture & Tech Patterns
Client-side AES-GCM key derivation coupled with Express backend and MongoDB database storage. Client Only Architecture.
Key Features
Client Only AES-GCM Encryption
JWT Cookie Authentication
bcrypt Password Hashing
Zero-Knowledge Architecture
Client OnlyReactAES-GCMNode.jsExpressMongoDB