AES-256-GCM with passphrase.
브라우저에서 처리 — 데이터가 기기를 떠나지 않습니다
—
AES-256-GCM + PBKDF2 (100k). In-browser only — not a production KMS.
In-browser, but weak passphrases are unsafe.
No.
Generate RSA/ECDSA PEM keys.
EN/JA word passphrases (CSPRNG).
Generate and verify TOTP codes.
Strip Exif via re-encode.