Browse the WebPKI & Advanced Cryptography station →
What does this tool do?
AES-GCM Encrypt & Decrypt: operation mode, key mode, key length, plaintext or encrypted payload, passphrase, raw secret key (hex or base64), initialization vector (12-byte hex, optional), additional authenticated data (aad, optional) → ciphertext (base64), ciphertext (hex), authentication tag (128-bit), initialization vector (iv / nonce), json bundle format, decrypted plaintext. Process locally in your browser. Inputs: Operation Mode, Key Mode, Key Length, Plaintext or Encrypted Payload, Passphrase, Raw Secret Key (Hex or Base64), Initialization Vector (12-byte Hex, Optional), Additional Authenticated Data (AAD, Optional). Outputs: Ciphertext (Base64), Ciphertext (Hex), Authentication Tag (128-bit), Initialization Vector (IV / Nonce), JSON Bundle Format, Decrypted Plaintext.
How to use it?
Provide the listed input and choose Encrypt / Decrypt. Review the result, then copy or download where available. Clear removes inputs and results.
Browser-local processing. No uploads, content logging, persistence or remote resource loading. Generated markup is inert text; files are treated as untrusted data.
100% in-browser cryptographic processing using Web Crypto API. Private keys, passphrases, AES-GCM payloads, and certificate requests are calculated client-side and never sent to any server.