Web Crypto API

A native browser interface for high-performance cryptographic operations like hashing, signature verification, and encryption.

The Web Crypto API provides a robust toolkit for executing cryptographic primitives directly in the browser via the window.crypto.subtle interface. It replaces insecure, slow JavaScript libraries with hardware-accelerated implementations of industry standards like AES-GCM for encryption, SHA-256 for hashing, and ECDSA for digital signatures. By utilizing structured clone algorithms to keep private keys within a non-extractable hardware or software sandbox, it mitigates common vulnerabilities such as side-channel attacks and unauthorized key exfiltration. This is the professional standard for building secure client-side applications (e.g., end-to-end encrypted messaging or local-first data storage) without sacrificing performance.

https://developer.mozilla.org/en-US/docs/Web/API/Web_Crypto_API