End-to-end encrypted data in web applications

End-to-end encryption is often considered to be the holy grail of encryption, at this time, however, it is not a common feature of web applications. This research created a software design for a software system that, when implemented, can make end-to-end encryption obtainable for most web applications. Our software design is created to work in a multi-user environment, it outlines how to create a nested authentication system, how to distribute keys, and how to revoke access. We performed benchmarks on three JavaScript crypto libraries to measure the run-time overhead of such a system. These benchmarks showed us that hundreds of encryption operations can be performed without impacting the user experience. Furthermore, this research shows a design for this software system that allows web application developers to extend their applications with very little effort. This all comes together to form a solid basis from which a system can be implemented that will increase the security and privacy of many web application users, while at the same time staying easy for developers to implement.