University of Twente Student Theses
End-to-end encrypted data in web applications
Cesar, M. (2021) End-to-end encrypted data in web applications.
PDF
1MB |
Abstract: | End-to-end encryption is often considered to be the holy grail of encryption, at this time, however, it is not a common feature of web applications. This research created a software design for a software system that, when implemented, can make end-to-end encryption obtainable for most web applications. Our software design is created to work in a multi-user environment, it outlines how to create a nested authentication system, how to distribute keys, and how to revoke access. We performed benchmarks on three JavaScript crypto libraries to measure the run-time overhead of such a system. These benchmarks showed us that hundreds of encryption operations can be performed without impacting the user experience. Furthermore, this research shows a design for this software system that allows web application developers to extend their applications with very little effort. This all comes together to form a solid basis from which a system can be implemented that will increase the security and privacy of many web application users, while at the same time staying easy for developers to implement. |
Item Type: | Essay (Master) |
Clients: | RiskChallenger |
Faculty: | EEMCS: Electrical Engineering, Mathematics and Computer Science |
Subject: | 54 computer science |
Programme: | Computer Science MSc (60300) |
Link to this item: | https://purl.utwente.nl/essays/89047 |
Export this item as: | BibTeX EndNote HTML Citation Reference Manager |
Repository Staff Only: item control page