Crypton (framework)

Last updated
Crypton
Developer(s) David Dahl, Cam Pedersen
Initial releaseMarch 1, 2013 (2013-03-01)
Stable release
0.0.4 [1] / January 7, 2015 (2015-01-07) [2]
Repository OOjs UI icon edit-ltr-progressive.svg
Written in JavaScript
Operating system Cross-platform
Type JavaScript library
License AGPL, GPLv3 [3]
Website crypton.io

Crypton is a JavaScript library that allows one to write web applications where the server knows nothing of the contents a user is storing. This is done by use of cryptography, though the developer of the application does not need any cryptographic knowledge. [4] It is designed to encrypt data inside a JavaScript context (either a browser extension, mobile application, or WebKit-based desktop application). [5]

Contents

Crypton was created by SpiderOak, also known for their encrypted backup product, [6] who were looking for a way for data to be securely encrypted without the need for users to download a separate program. [7]

See also

Related Research Articles

The Invisible Internet Project (I2P) is an anonymous network layer that allows for censorship resistant, peer to peer communication. Anonymous connections are achieved by encrypting the user's traffic, and sending it through a volunteer-run network of roughly 55,000 computers distributed around the world. Given the high number of possible paths the traffic can transit, a third party watching a full connection is unlikely. The software that implements this layer is called an "I2P router", and a computer running I2P is called an "I2P node". I2P is free and open source, and is published under multiple licenses.

Git Free and open-source software (FOSS) for version control

Git is software for tracking changes in any set of files, usually used for coordinating work among programmers collaboratively developing source code during software development. Its goals include speed, data integrity, and support for distributed, non-linear workflows.

Google Developers is Google's site for software development tools and platforms, application programming interfaces (APIs), and technical resources. The site contains documentation on using Google developer tools and APIs—including discussion groups and blogs for developers using Google's developer products.


This is a comparison of notable free and open-source configuration management software, suitable for tasks like server configuration, orchestration and infrastructure as code typically performed by a system administrator.

SpiderOak

SpiderOak is a US-based collaboration tool, online backup and file hosting service that allows users to access, synchronize and share data using a cloud-based server, offered by a company of the same name. Its first offering, its online backup service later branded "SpiderOak ONE", launched in December 2007. SpiderOak is accessible through an app for Windows, Mac and Linux computer platforms, and Android, N900 Maemo and iOS mobile platforms.

TorChat Anonymous instant messaging application

TorChat was a centralized client-server quasi-anonymous instant messenger based on Instantbird, that used Tor onion services as its underlying network. It provides cryptographically secure text messaging and file transfers. The characteristics of Tor's onion services ensure that all traffic between the clients is encrypted and that it is very difficult to tell who is communicating with whom and where a given client is physically located, but suffers from metadata leaks.

Vaadin

Vaadin is an open-source platform for web application development. The Vaadin Platform includes a set of web components, a Java web framework, and a set of tools and application starters. Its flagship product, Vaadin Platform allows the implementation of HTML5 web user interfaces using the Java programming language.

Node.js JavaScript runtime environment

Node.js is an open-source, cross-platform, back-end JavaScript runtime environment that runs on the V8 engine and executes JavaScript code outside a web browser. Node.js lets developers use JavaScript to write command line tools and for server-side scripting—running scripts server-side to produce dynamic web page content before the page is sent to the user's web browser. Consequently, Node.js represents a "JavaScript everywhere" paradigm, unifying web-application development around a single programming language, rather than different languages for server-side and client-side scripts.

U-Prove is a free and open-source technology and accompanying SDK for user-centric identity management. The underlying cryptographic protocols were designed by Dr. Stefan Brands and further developed by Credentica and, subsequently, Microsoft. The technology was developed to allow internet users to disclose only the minimum amount of personal data when making electronic transactions as a way to reduce the likelihood of privacy violations. Security expert Bruce Schneier praised the cryptography behind U-Prove.

npm (software) JavaScript package manager

npm is a package manager for the JavaScript programming language maintained by npm, Inc.

Mailpile

Mailpile is a free and open-source email client with the main focus of privacy and usability. It is a webmail client, albeit one run from the user's computer, as a downloaded program launched as a local website.

TextSecure was a free and open-source encrypted messaging application for Android that was first released in May 2010. It was developed by Open Whisper Systems and used end-to-end encryption to secure the transmission of instant messages, group messages, attachments and media messages to other TextSecure users. In November 2015, TextSecure was merged with an encrypted voice calling application called RedPhone and was renamed as Signal.

Open Whisper Systems Open source software organization

Open Whisper Systems was a software development group that was founded by Moxie Marlinspike in 2013. The group picked up the open source development of TextSecure and RedPhone, and was later responsible for starting the development of the Signal Protocol and the Signal messaging app. In 2018, Signal Messenger was incorporated as an LLC by Moxie Marlinspike and Brian Acton and then rolled under the independent 501c3 non-profit Signal Technology Foundation. Today, the Signal app is developed by Signal Messenger LLC, which is funded by the Signal Technology Foundation.

Atom (text editor) Free and open-source text and source code editor

Atom is a free and open-source text and source code editor for macOS, Linux, and Microsoft Windows with support for plug-ins written in JavaScript, and embedded Git Control, developed by GitHub. Atom is a desktop application built using web technologies. Most of the extending packages have free software licenses and are community-built and maintained. Atom is based on Electron, a framework that enables cross-platform desktop applications using Chromium and Node.js. Atom is written in CoffeeScript and Less, but much of it has been converted to JavaScript.

Threema Instant messaging smartphone app

Threema is a paid open-source end-to-end encrypted instant messaging application for iOS and Android.

The Signal Protocol is a non-federated cryptographic protocol that can be used to provide end-to-end encryption for voice calls, video calls, and instant messaging conversations. The protocol was developed by Open Whisper Systems in 2013 and was first introduced in the open-source TextSecure app, which later became Signal. Several closed-source applications have implemented the protocol, such as WhatsApp, which is said to encrypt the conversations of "more than a billion people worldwide". Facebook Messenger also say they offer the protocol for optional Secret Conversations, as does Skype for its Private Conversations.

Mailvelope

Mailvelope is a free software for end-to-end encryption of email traffic inside of a web browser that integrates itself into existing webmail applications. It can be used to encrypt and sign electronic messages, including attached files, without the use of a separate, native email client using the OpenPGP standard.

Wire is an encrypted communication and collaboration app created by Wire Swiss. It is available for iOS, Android, Windows, macOS, Linux, and web browsers such as Firefox. Wire offers a collaboration suite featuring messenger, voice calls, video calls, conference calls, file-sharing, and external collaboration –all protected by a secure end-to-end-encryption. Wire offers three solutions built on its security technology: Wire Pro –which offers Wire's collaboration feature for businesses, Wire Enterprise –includes Wire Pro capabilities with added features for large-scale or regulated organizations, and Wire Red –the on-demand crisis collaboration suite. They also offer Wire Personal, which is a secure messaging app for personal use.

OpenKeychain

OpenKeychain is a free and open-source mobile app for the Android operating system that provides strong, user-based encryption which is compatible with the OpenPGP standard. This allows users to encrypt, decrypt, sign, and verify signatures for text, emails, and files. The app allows the user to store the public keys of other users with whom they interact, and to encrypt files such that only a specified user can decrypt them. In the same manner, if a file is received from another user and its public keys are saved, the receiver can verify the authenticity of that file and decrypt it if necessary.

References

  1. "crypton_package.json at master · SpiderOak_crypton · GitHub". GitHub . Retrieved August 18, 2015.
  2. "Fixed client version mismatch test and client version · SpiderOak_crypton@f98c40d · GitHub". GitHub . Retrieved August 18, 2015.
  3. "License". GitHub . Retrieved January 15, 2014.
  4. "Open Source Project Prepackages Kim Dotcom's Security", Wired , 3 March 2013
  5. "Developer Guide", Crypton (framework), archived from the original on 2014-07-25
  6. "Encrypt The Web Report", Electronic Frontier Foundation
  7. "Open-source project, Crypton, seeks to make encryption easier", PCWorld , 25 July 2013